{
    "segments": [
        {
            "id": 1,
            "seek": 2952,
            "start": 1.01,
            "end": 3.89,
            "text": " Thank you for listening to our DEF CON Demo Labo.",
            "tokens": [
                50404,
                1044,
                291,
                337,
                4764,
                281,
                527,
                10113,
                37,
                16596,
                4686,
                78,
                10137,
                78,
                13,
                50548
            ],
            "temperature": 0.0,
            "avg_logprob": -0.43610492029360365,
            "compression_ratio": 1.5041322314049588,
            "no_speech_prob": 0.186279296875,
            "words": [
                {
                    "start": 1.01,
                    "end": 1.35,
                    "word": " Thank",
                    "probability": 0.67529296875
                },
                {
                    "start": 1.35,
                    "end": 1.47,
                    "word": " you",
                    "probability": 0.8955078125
                },
                {
                    "start": 1.47,
                    "end": 1.65,
                    "word": " for",
                    "probability": 0.89306640625
                },
                {
                    "start": 1.65,
                    "end": 2.07,
                    "word": " listening",
                    "probability": 0.7275390625
                },
                {
                    "start": 2.07,
                    "end": 2.43,
                    "word": " to",
                    "probability": 0.90087890625
                },
                {
                    "start": 2.43,
                    "end": 2.75,
                    "word": " our",
                    "probability": 0.705078125
                },
                {
                    "start": 2.75,
                    "end": 2.93,
                    "word": " DEF",
                    "probability": 0.62255859375
                },
                {
                    "start": 2.93,
                    "end": 3.07,
                    "word": " CON",
                    "probability": 0.80615234375
                },
                {
                    "start": 3.07,
                    "end": 3.37,
                    "word": " Demo",
                    "probability": 0.6136474609375
                },
                {
                    "start": 3.37,
                    "end": 3.65,
                    "word": " Labo",
                    "probability": 0.48583984375
                },
                {
                    "start": 3.65,
                    "end": 3.89,
                    "word": ".",
                    "probability": 0.89208984375
                }
            ]
        },
        {
            "id": 2,
            "seek": 2952,
            "start": 3.89,
            "end": 6.35,
            "text": " I'm Shusei Tomuraga from JPSAT.",
            "tokens": [
                50548,
                286,
                478,
                1160,
                438,
                72,
                5041,
                2991,
                3680,
                490,
                508,
                6273,
                2218,
                13,
                50680
            ],
            "temperature": 0.0,
            "avg_logprob": -0.43610492029360365,
            "compression_ratio": 1.5041322314049588,
            "no_speech_prob": 0.186279296875,
            "words": [
                {
                    "start": 3.89,
                    "end": 4.27,
                    "word": " I'm",
                    "probability": 0.92431640625
                },
                {
                    "start": 4.27,
                    "end": 4.65,
                    "word": " Shusei",
                    "probability": 0.7867838541666666
                },
                {
                    "start": 4.65,
                    "end": 5.13,
                    "word": " Tomuraga",
                    "probability": 0.7335611979166666
                },
                {
                    "start": 5.13,
                    "end": 5.41,
                    "word": " from",
                    "probability": 0.7822265625
                },
                {
                    "start": 5.41,
                    "end": 6.11,
                    "word": " JPSAT",
                    "probability": 0.482666015625
                },
                {
                    "start": 6.11,
                    "end": 6.35,
                    "word": ".",
                    "probability": 0.96484375
                }
            ]
        },
        {
            "id": 3,
            "seek": 2952,
            "start": 6.35,
            "end": 9.33,
            "text": " Our Demo Labo presentation today is about",
            "tokens": [
                50680,
                2621,
                4686,
                78,
                10137,
                78,
                5860,
                965,
                307,
                466,
                50816
            ],
            "temperature": 0.0,
            "avg_logprob": -0.43610492029360365,
            "compression_ratio": 1.5041322314049588,
            "no_speech_prob": 0.186279296875,
            "words": [
                {
                    "start": 6.35,
                    "end": 6.99,
                    "word": " Our",
                    "probability": 0.90478515625
                },
                {
                    "start": 6.99,
                    "end": 7.35,
                    "word": " Demo",
                    "probability": 0.6800537109375
                },
                {
                    "start": 7.35,
                    "end": 7.59,
                    "word": " Labo",
                    "probability": 0.897216796875
                },
                {
                    "start": 7.59,
                    "end": 8.17,
                    "word": " presentation",
                    "probability": 0.693359375
                },
                {
                    "start": 8.17,
                    "end": 8.59,
                    "word": " today",
                    "probability": 0.78857421875
                },
                {
                    "start": 8.59,
                    "end": 8.83,
                    "word": " is",
                    "probability": 0.892578125
                },
                {
                    "start": 8.83,
                    "end": 9.33,
                    "word": " about",
                    "probability": 0.80126953125
                }
            ]
        },
        {
            "id": 4,
            "seek": 2952,
            "start": 9.33,
            "end": 12.67,
            "text": " MarconScan with KUKU, a tool that automatically",
            "tokens": [
                50816,
                2039,
                1671,
                50,
                7035,
                365,
                591,
                52,
                42,
                52,
                11,
                257,
                2290,
                300,
                6772,
                50986
            ],
            "temperature": 0.0,
            "avg_logprob": -0.43610492029360365,
            "compression_ratio": 1.5041322314049588,
            "no_speech_prob": 0.186279296875,
            "words": [
                {
                    "start": 9.33,
                    "end": 10.03,
                    "word": " MarconScan",
                    "probability": 0.4483642578125
                },
                {
                    "start": 10.03,
                    "end": 10.31,
                    "word": " with",
                    "probability": 0.6943359375
                },
                {
                    "start": 10.31,
                    "end": 10.71,
                    "word": " KUKU",
                    "probability": 0.63165283203125
                },
                {
                    "start": 10.71,
                    "end": 10.97,
                    "word": ",",
                    "probability": 0.80517578125
                },
                {
                    "start": 11.21,
                    "end": 11.53,
                    "word": " a tool",
                    "probability": 0.88134765625
                },
                {
                    "start": 11.53,
                    "end": 12.11,
                    "word": " that",
                    "probability": 0.865234375
                },
                {
                    "start": 12.11,
                    "end": 12.67,
                    "word": " automatically",
                    "probability": 0.87841796875
                }
            ]
        },
        {
            "id": 5,
            "seek": 2952,
            "start": 12.67,
            "end": 15.31,
            "text": " dumps malware configuration data.",
            "tokens": [
                50986,
                11430,
                82,
                40747,
                11694,
                1412,
                13,
                51090
            ],
            "temperature": 0.0,
            "avg_logprob": -0.43610492029360365,
            "compression_ratio": 1.5041322314049588,
            "no_speech_prob": 0.186279296875,
            "words": [
                {
                    "start": 12.67,
                    "end": 13.25,
                    "word": " dumps",
                    "probability": 0.876953125
                },
                {
                    "start": 13.25,
                    "end": 13.45,
                    "word": " malware",
                    "probability": 0.68017578125
                },
                {
                    "start": 13.45,
                    "end": 14.01,
                    "word": " configuration",
                    "probability": 0.779296875
                },
                {
                    "start": 14.01,
                    "end": 14.63,
                    "word": " data",
                    "probability": 0.796875
                },
                {
                    "start": 14.63,
                    "end": 15.31,
                    "word": ".",
                    "probability": 0.986328125
                }
            ]
        },
        {
            "id": 6,
            "seek": 2952,
            "start": 17.47,
            "end": 21.93,
            "text": " First, let's talk about why we want to create such a tool",
            "tokens": [
                51232,
                2386,
                11,
                718,
                311,
                751,
                466,
                983,
                321,
                528,
                281,
                1884,
                1270,
                257,
                2290,
                51450
            ],
            "temperature": 0.0,
            "avg_logprob": -0.43610492029360365,
            "compression_ratio": 1.5041322314049588,
            "no_speech_prob": 0.186279296875,
            "words": [
                {
                    "start": 17.47,
                    "end": 18.15,
                    "word": " First",
                    "probability": 0.880859375
                },
                {
                    "start": 18.15,
                    "end": 18.41,
                    "word": ",",
                    "probability": 0.9384765625
                },
                {
                    "start": 18.41,
                    "end": 18.83,
                    "word": " let's",
                    "probability": 0.946533203125
                },
                {
                    "start": 18.83,
                    "end": 19.11,
                    "word": " talk",
                    "probability": 0.82470703125
                },
                {
                    "start": 19.11,
                    "end": 19.55,
                    "word": " about",
                    "probability": 0.8251953125
                },
                {
                    "start": 19.55,
                    "end": 19.89,
                    "word": " why",
                    "probability": 0.794921875
                },
                {
                    "start": 19.89,
                    "end": 20.11,
                    "word": " we",
                    "probability": 0.90771484375
                },
                {
                    "start": 20.11,
                    "end": 20.47,
                    "word": " want",
                    "probability": 0.7880859375
                },
                {
                    "start": 20.47,
                    "end": 20.69,
                    "word": " to",
                    "probability": 0.9091796875
                },
                {
                    "start": 20.69,
                    "end": 21.09,
                    "word": " create",
                    "probability": 0.83935546875
                },
                {
                    "start": 21.09,
                    "end": 21.45,
                    "word": " such",
                    "probability": 0.89013671875
                },
                {
                    "start": 21.67,
                    "end": 21.93,
                    "word": " a tool",
                    "probability": 0.89111328125
                }
            ]
        },
        {
            "id": 7,
            "seek": 2952,
            "start": 21.93,
            "end": 23.97,
            "text": " and its motivation.",
            "tokens": [
                51450,
                293,
                1080,
                12335,
                13,
                51564
            ],
            "temperature": 0.0,
            "avg_logprob": -0.43610492029360365,
            "compression_ratio": 1.5041322314049588,
            "no_speech_prob": 0.186279296875,
            "words": [
                {
                    "start": 21.93,
                    "end": 22.45,
                    "word": " and",
                    "probability": 0.826171875
                },
                {
                    "start": 22.45,
                    "end": 22.79,
                    "word": " its",
                    "probability": 0.6923828125
                },
                {
                    "start": 22.79,
                    "end": 23.29,
                    "word": " motivation",
                    "probability": 0.77294921875
                },
                {
                    "start": 23.29,
                    "end": 23.97,
                    "word": ".",
                    "probability": 0.97607421875
                }
            ]
        },
        {
            "id": 8,
            "seek": 2952,
            "start": 24.43,
            "end": 27.43,
            "text": " Sandbox is a great tool for malware analysts.",
            "tokens": [
                51564,
                7985,
                4995,
                307,
                257,
                869,
                2290,
                337,
                40747,
                31388,
                13,
                51722
            ],
            "temperature": 0.0,
            "avg_logprob": -0.43610492029360365,
            "compression_ratio": 1.5041322314049588,
            "no_speech_prob": 0.186279296875,
            "words": [
                {
                    "start": 24.43,
                    "end": 24.77,
                    "word": " Sandbox",
                    "probability": 0.563720703125
                },
                {
                    "start": 24.77,
                    "end": 25.07,
                    "word": " is",
                    "probability": 0.9013671875
                },
                {
                    "start": 25.27,
                    "end": 25.55,
                    "word": " a great",
                    "probability": 0.87548828125
                },
                {
                    "start": 25.55,
                    "end": 25.85,
                    "word": " tool",
                    "probability": 0.8642578125
                },
                {
                    "start": 25.85,
                    "end": 26.19,
                    "word": " for",
                    "probability": 0.89013671875
                },
                {
                    "start": 26.19,
                    "end": 26.49,
                    "word": " malware",
                    "probability": 0.833984375
                },
                {
                    "start": 26.49,
                    "end": 26.93,
                    "word": " analysts",
                    "probability": 0.2276611328125
                },
                {
                    "start": 26.93,
                    "end": 27.43,
                    "word": ".",
                    "probability": 0.84423828125
                }
            ]
        },
        {
            "id": 9,
            "seek": 2952,
            "start": 27.43,
            "end": 29.87,
            "text": " However, we, the malware analysts,",
            "tokens": [
                51722,
                2908,
                11,
                321,
                11,
                264,
                40747,
                31388,
                11,
                51842
            ],
            "temperature": 0.0,
            "avg_logprob": -0.43610492029360365,
            "compression_ratio": 1.5041322314049588,
            "no_speech_prob": 0.186279296875,
            "words": [
                {
                    "start": 27.43,
                    "end": 27.85,
                    "word": " However",
                    "probability": 0.83544921875
                },
                {
                    "start": 27.85,
                    "end": 28.45,
                    "word": ",",
                    "probability": 0.974609375
                },
                {
                    "start": 28.45,
                    "end": 28.73,
                    "word": " we",
                    "probability": 0.8916015625
                },
                {
                    "start": 28.73,
                    "end": 28.95,
                    "word": ",",
                    "probability": 0.79150390625
                },
                {
                    "start": 28.95,
                    "end": 29.13,
                    "word": " the",
                    "probability": 0.79638671875
                },
                {
                    "start": 29.13,
                    "end": 29.35,
                    "word": " malware",
                    "probability": 0.8447265625
                },
                {
                    "start": 29.35,
                    "end": 29.75,
                    "word": " analysts",
                    "probability": 0.56494140625
                },
                {
                    "start": 29.75,
                    "end": 29.87,
                    "word": ",",
                    "probability": 0.77587890625
                }
            ]
        },
        {
            "id": 10,
            "seek": 5742,
            "start": 29.87,
            "end": 33.13,
            "text": " cannot get what we want using the sandbox.",
            "tokens": [
                50366,
                2644,
                483,
                437,
                321,
                528,
                1228,
                264,
                42115,
                13,
                50518
            ],
            "temperature": 0.0,
            "avg_logprob": -0.29017857568604605,
            "compression_ratio": 1.84375,
            "no_speech_prob": 0.0034389495849609375,
            "words": [
                {
                    "start": 29.87,
                    "end": 30.19,
                    "word": " cannot",
                    "probability": 0.30908203125
                },
                {
                    "start": 30.19,
                    "end": 30.51,
                    "word": " get",
                    "probability": 0.89404296875
                },
                {
                    "start": 30.51,
                    "end": 30.75,
                    "word": " what",
                    "probability": 0.88671875
                },
                {
                    "start": 30.75,
                    "end": 30.97,
                    "word": " we",
                    "probability": 0.9052734375
                },
                {
                    "start": 30.97,
                    "end": 31.35,
                    "word": " want",
                    "probability": 0.8095703125
                },
                {
                    "start": 31.35,
                    "end": 31.75,
                    "word": " using",
                    "probability": 0.81298828125
                },
                {
                    "start": 31.75,
                    "end": 31.99,
                    "word": " the",
                    "probability": 0.78955078125
                },
                {
                    "start": 31.99,
                    "end": 32.31,
                    "word": " sandbox",
                    "probability": 0.9150390625
                },
                {
                    "start": 32.31,
                    "end": 33.13,
                    "word": ".",
                    "probability": 0.93505859375
                }
            ]
        },
        {
            "id": 11,
            "seek": 5742,
            "start": 35.68,
            "end": 38.05,
            "text": " We want configuration data.",
            "tokens": [
                50664,
                492,
                528,
                11694,
                1412,
                13,
                50782
            ],
            "temperature": 0.0,
            "avg_logprob": -0.29017857568604605,
            "compression_ratio": 1.84375,
            "no_speech_prob": 0.0034389495849609375,
            "words": [
                {
                    "start": 35.68,
                    "end": 36.09,
                    "word": " We",
                    "probability": 0.88623046875
                },
                {
                    "start": 36.09,
                    "end": 36.65,
                    "word": " want",
                    "probability": 0.77685546875
                },
                {
                    "start": 36.65,
                    "end": 37.15,
                    "word": " configuration",
                    "probability": 0.84326171875
                },
                {
                    "start": 37.15,
                    "end": 37.65,
                    "word": " data",
                    "probability": 0.82568359375
                },
                {
                    "start": 37.65,
                    "end": 38.05,
                    "word": ".",
                    "probability": 0.7958984375
                }
            ]
        },
        {
            "id": 12,
            "seek": 5742,
            "start": 38.05,
            "end": 42.27,
            "text": " We need to get configuration data for static analysis.",
            "tokens": [
                50782,
                492,
                643,
                281,
                483,
                11694,
                1412,
                337,
                13437,
                5215,
                13,
                50974
            ],
            "temperature": 0.0,
            "avg_logprob": -0.29017857568604605,
            "compression_ratio": 1.84375,
            "no_speech_prob": 0.0034389495849609375,
            "words": [
                {
                    "start": 38.05,
                    "end": 38.43,
                    "word": " We",
                    "probability": 0.89697265625
                },
                {
                    "start": 38.43,
                    "end": 38.77,
                    "word": " need",
                    "probability": 0.80908203125
                },
                {
                    "start": 38.77,
                    "end": 38.99,
                    "word": " to",
                    "probability": 0.8994140625
                },
                {
                    "start": 38.99,
                    "end": 39.33,
                    "word": " get",
                    "probability": 0.8896484375
                },
                {
                    "start": 39.33,
                    "end": 39.87,
                    "word": " configuration",
                    "probability": 0.84765625
                },
                {
                    "start": 39.87,
                    "end": 40.29,
                    "word": " data",
                    "probability": 0.82666015625
                },
                {
                    "start": 40.29,
                    "end": 40.65,
                    "word": " for",
                    "probability": 0.89697265625
                },
                {
                    "start": 40.65,
                    "end": 41.03,
                    "word": " static",
                    "probability": 0.8408203125
                },
                {
                    "start": 41.03,
                    "end": 41.45,
                    "word": " analysis",
                    "probability": 0.82373046875
                },
                {
                    "start": 41.45,
                    "end": 42.27,
                    "word": ".",
                    "probability": 0.98388671875
                }
            ]
        },
        {
            "id": 13,
            "seek": 5742,
            "start": 44.6,
            "end": 48.03,
            "text": " Why do we need malware configuration data?",
            "tokens": [
                51110,
                1545,
                360,
                321,
                643,
                40747,
                11694,
                1412,
                30,
                51274
            ],
            "temperature": 0.0,
            "avg_logprob": -0.29017857568604605,
            "compression_ratio": 1.84375,
            "no_speech_prob": 0.0034389495849609375,
            "words": [
                {
                    "start": 44.6,
                    "end": 45.01,
                    "word": " Why",
                    "probability": 0.80908203125
                },
                {
                    "start": 45.01,
                    "end": 45.21,
                    "word": " do",
                    "probability": 0.91552734375
                },
                {
                    "start": 45.21,
                    "end": 45.47,
                    "word": " we",
                    "probability": 0.90087890625
                },
                {
                    "start": 45.47,
                    "end": 45.89,
                    "word": " need",
                    "probability": 0.82177734375
                },
                {
                    "start": 45.89,
                    "end": 46.33,
                    "word": " malware",
                    "probability": 0.231201171875
                },
                {
                    "start": 46.33,
                    "end": 46.79,
                    "word": " configuration",
                    "probability": 0.8291015625
                },
                {
                    "start": 46.79,
                    "end": 47.29,
                    "word": " data",
                    "probability": 0.81201171875
                },
                {
                    "start": 47.29,
                    "end": 48.03,
                    "word": "?",
                    "probability": 0.9833984375
                }
            ]
        },
        {
            "id": 14,
            "seek": 5742,
            "start": 48.03,
            "end": 51.61,
            "text": " Many barriers of malware code are almost unchanged",
            "tokens": [
                51274,
                5126,
                13565,
                295,
                40747,
                3089,
                366,
                1920,
                44553,
                51460
            ],
            "temperature": 0.0,
            "avg_logprob": -0.29017857568604605,
            "compression_ratio": 1.84375,
            "no_speech_prob": 0.0034389495849609375,
            "words": [
                {
                    "start": 48.03,
                    "end": 48.43,
                    "word": " Many",
                    "probability": 0.89404296875
                },
                {
                    "start": 48.43,
                    "end": 48.85,
                    "word": " barriers",
                    "probability": 0.55224609375
                },
                {
                    "start": 48.85,
                    "end": 49.11,
                    "word": " of",
                    "probability": 0.88037109375
                },
                {
                    "start": 49.11,
                    "end": 49.57,
                    "word": " malware",
                    "probability": 0.8310546875
                },
                {
                    "start": 49.57,
                    "end": 50.05,
                    "word": " code",
                    "probability": 0.73388671875
                },
                {
                    "start": 50.05,
                    "end": 50.45,
                    "word": " are",
                    "probability": 0.88134765625
                },
                {
                    "start": 50.45,
                    "end": 50.95,
                    "word": " almost",
                    "probability": 0.70751953125
                },
                {
                    "start": 50.95,
                    "end": 51.61,
                    "word": " unchanged",
                    "probability": 0.73583984375
                }
            ]
        },
        {
            "id": 15,
            "seek": 5742,
            "start": 51.61,
            "end": 55.53,
            "text": " and only configuration data is defined.",
            "tokens": [
                51460,
                293,
                787,
                11694,
                1412,
                307,
                7642,
                13,
                51652
            ],
            "temperature": 0.0,
            "avg_logprob": -0.29017857568604605,
            "compression_ratio": 1.84375,
            "no_speech_prob": 0.0034389495849609375,
            "words": [
                {
                    "start": 51.61,
                    "end": 52.13,
                    "word": " and",
                    "probability": 0.5849609375
                },
                {
                    "start": 52.13,
                    "end": 52.61,
                    "word": " only",
                    "probability": 0.82861328125
                },
                {
                    "start": 52.61,
                    "end": 53.13,
                    "word": " configuration",
                    "probability": 0.87109375
                },
                {
                    "start": 53.13,
                    "end": 53.91,
                    "word": " data",
                    "probability": 0.8330078125
                },
                {
                    "start": 53.91,
                    "end": 54.25,
                    "word": " is",
                    "probability": 0.90185546875
                },
                {
                    "start": 54.25,
                    "end": 54.73,
                    "word": " defined",
                    "probability": 0.677734375
                },
                {
                    "start": 54.73,
                    "end": 55.53,
                    "word": ".",
                    "probability": 0.99072265625
                }
            ]
        },
        {
            "id": 16,
            "seek": 5742,
            "start": 55.53,
            "end": 57.77,
            "text": " If the configuration data is known,",
            "tokens": [
                51652,
                759,
                264,
                11694,
                1412,
                307,
                2570,
                11,
                51762
            ],
            "temperature": 0.0,
            "avg_logprob": -0.29017857568604605,
            "compression_ratio": 1.84375,
            "no_speech_prob": 0.0034389495849609375,
            "words": [
                {
                    "start": 55.53,
                    "end": 55.81,
                    "word": " If",
                    "probability": 0.8837890625
                },
                {
                    "start": 55.81,
                    "end": 55.99,
                    "word": " the",
                    "probability": 0.77099609375
                },
                {
                    "start": 55.99,
                    "end": 56.37,
                    "word": " configuration",
                    "probability": 0.84765625
                },
                {
                    "start": 56.37,
                    "end": 56.89,
                    "word": " data",
                    "probability": 0.826171875
                },
                {
                    "start": 56.89,
                    "end": 57.17,
                    "word": " is",
                    "probability": 0.90576171875
                },
                {
                    "start": 57.17,
                    "end": 57.53,
                    "word": " known",
                    "probability": 0.65283203125
                },
                {
                    "start": 57.53,
                    "end": 57.77,
                    "word": ",",
                    "probability": 0.8720703125
                }
            ]
        },
        {
            "id": 17,
            "seek": 8742,
            "start": 57.77,
            "end": 60.57,
            "text": " there is no need for static analysis.",
            "tokens": [
                50364,
                456,
                307,
                572,
                643,
                337,
                13437,
                5215,
                13,
                50530
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2606907761410663,
            "compression_ratio": 1.5144230769230769,
            "no_speech_prob": 0.001178741455078125,
            "words": [
                {
                    "start": 57.77,
                    "end": 58.01,
                    "word": " there",
                    "probability": 0.2763671875
                },
                {
                    "start": 58.01,
                    "end": 58.17,
                    "word": " is",
                    "probability": 0.75439453125
                },
                {
                    "start": 58.17,
                    "end": 58.41,
                    "word": " no",
                    "probability": 0.90185546875
                },
                {
                    "start": 58.41,
                    "end": 58.77,
                    "word": " need",
                    "probability": 0.78662109375
                },
                {
                    "start": 58.77,
                    "end": 59.09,
                    "word": " for",
                    "probability": 0.90234375
                },
                {
                    "start": 59.09,
                    "end": 59.39,
                    "word": " static",
                    "probability": 0.72998046875
                },
                {
                    "start": 59.39,
                    "end": 59.77,
                    "word": " analysis",
                    "probability": 0.78271484375
                },
                {
                    "start": 59.77,
                    "end": 60.57,
                    "word": ".",
                    "probability": 0.95361328125
                }
            ]
        },
        {
            "id": 18,
            "seek": 8742,
            "start": 61.13,
            "end": 64.13,
            "text": " Configuration data contains important information",
            "tokens": [
                50530,
                44151,
                8167,
                1412,
                8306,
                1021,
                1589,
                50698
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2606907761410663,
            "compression_ratio": 1.5144230769230769,
            "no_speech_prob": 0.001178741455078125,
            "words": [
                {
                    "start": 61.13,
                    "end": 61.71,
                    "word": " Configuration",
                    "probability": 0.9345703125
                },
                {
                    "start": 61.71,
                    "end": 62.13,
                    "word": " data",
                    "probability": 0.81005859375
                },
                {
                    "start": 62.13,
                    "end": 62.83,
                    "word": " contains",
                    "probability": 0.8388671875
                },
                {
                    "start": 62.83,
                    "end": 63.37,
                    "word": " important",
                    "probability": 0.69189453125
                },
                {
                    "start": 63.37,
                    "end": 64.13,
                    "word": " information",
                    "probability": 0.71728515625
                }
            ]
        },
        {
            "id": 19,
            "seek": 8742,
            "start": 64.13,
            "end": 68.83,
            "text": " that cannot be obtained by sandbox analysis,",
            "tokens": [
                50698,
                300,
                2644,
                312,
                14879,
                538,
                42115,
                5215,
                11,
                50920
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2606907761410663,
            "compression_ratio": 1.5144230769230769,
            "no_speech_prob": 0.001178741455078125,
            "words": [
                {
                    "start": 64.13,
                    "end": 64.75,
                    "word": " that",
                    "probability": 0.86083984375
                },
                {
                    "start": 64.75,
                    "end": 65.65,
                    "word": " cannot",
                    "probability": 0.75927734375
                },
                {
                    "start": 65.65,
                    "end": 66.03,
                    "word": " be",
                    "probability": 0.91162109375
                },
                {
                    "start": 66.03,
                    "end": 66.75,
                    "word": " obtained",
                    "probability": 0.8935546875
                },
                {
                    "start": 66.75,
                    "end": 67.15,
                    "word": " by",
                    "probability": 0.91357421875
                },
                {
                    "start": 67.15,
                    "end": 67.63,
                    "word": " sandbox",
                    "probability": 0.81787109375
                },
                {
                    "start": 67.63,
                    "end": 68.23,
                    "word": " analysis",
                    "probability": 0.77490234375
                },
                {
                    "start": 68.23,
                    "end": 68.83,
                    "word": ",",
                    "probability": 0.57177734375
                }
            ]
        },
        {
            "id": 20,
            "seek": 8742,
            "start": 68.83,
            "end": 71.99,
            "text": " such as campaign ID, encryption key,",
            "tokens": [
                50920,
                1270,
                382,
                5129,
                7348,
                11,
                29575,
                2141,
                11,
                51070
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2606907761410663,
            "compression_ratio": 1.5144230769230769,
            "no_speech_prob": 0.001178741455078125,
            "words": [
                {
                    "start": 68.83,
                    "end": 69.17,
                    "word": " such",
                    "probability": 0.87890625
                },
                {
                    "start": 69.17,
                    "end": 69.41,
                    "word": " as",
                    "probability": 0.9111328125
                },
                {
                    "start": 69.41,
                    "end": 69.95,
                    "word": " campaign",
                    "probability": 0.5458984375
                },
                {
                    "start": 69.95,
                    "end": 70.33,
                    "word": " ID",
                    "probability": 0.87109375
                },
                {
                    "start": 70.33,
                    "end": 71.05,
                    "word": ",",
                    "probability": 0.966796875
                },
                {
                    "start": 71.05,
                    "end": 71.39,
                    "word": " encryption",
                    "probability": 0.802734375
                },
                {
                    "start": 71.39,
                    "end": 71.79,
                    "word": " key",
                    "probability": 0.841796875
                },
                {
                    "start": 71.79,
                    "end": 71.99,
                    "word": ",",
                    "probability": 0.98828125
                }
            ]
        },
        {
            "id": 21,
            "seek": 8742,
            "start": 71.99,
            "end": 73.99,
            "text": " C2 server, and so on.",
            "tokens": [
                51070,
                383,
                17,
                7154,
                11,
                293,
                370,
                322,
                13,
                51166
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2606907761410663,
            "compression_ratio": 1.5144230769230769,
            "no_speech_prob": 0.001178741455078125,
            "words": [
                {
                    "start": 71.99,
                    "end": 72.31,
                    "word": " C2",
                    "probability": 0.909423828125
                },
                {
                    "start": 72.31,
                    "end": 72.67,
                    "word": " server",
                    "probability": 0.796875
                },
                {
                    "start": 72.67,
                    "end": 72.97,
                    "word": ",",
                    "probability": 0.69287109375
                },
                {
                    "start": 72.97,
                    "end": 73.07,
                    "word": " and",
                    "probability": 0.89111328125
                },
                {
                    "start": 73.07,
                    "end": 73.35,
                    "word": " so",
                    "probability": 0.90625
                },
                {
                    "start": 73.35,
                    "end": 73.59,
                    "word": " on",
                    "probability": 0.90234375
                },
                {
                    "start": 73.59,
                    "end": 73.99,
                    "word": ".",
                    "probability": 0.998046875
                }
            ]
        },
        {
            "id": 22,
            "seek": 8742,
            "start": 76.17,
            "end": 78.57,
            "text": " Let me introduce how malware analysts",
            "tokens": [
                51288,
                961,
                385,
                5366,
                577,
                40747,
                31388,
                51418
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2606907761410663,
            "compression_ratio": 1.5144230769230769,
            "no_speech_prob": 0.001178741455078125,
            "words": [
                {
                    "start": 76.17,
                    "end": 76.43,
                    "word": " Let",
                    "probability": 0.87255859375
                },
                {
                    "start": 76.43,
                    "end": 76.61,
                    "word": " me",
                    "probability": 0.896484375
                },
                {
                    "start": 76.61,
                    "end": 77.25,
                    "word": " introduce",
                    "probability": 0.68017578125
                },
                {
                    "start": 77.25,
                    "end": 77.67,
                    "word": " how",
                    "probability": 0.8779296875
                },
                {
                    "start": 77.67,
                    "end": 78.15,
                    "word": " malware",
                    "probability": 0.04547119140625
                },
                {
                    "start": 78.15,
                    "end": 78.57,
                    "word": " analysts",
                    "probability": 0.01617431640625
                }
            ]
        },
        {
            "id": 23,
            "seek": 8742,
            "start": 78.57,
            "end": 81.35,
            "text": " extract malware configuration.",
            "tokens": [
                51418,
                8947,
                40747,
                11694,
                13,
                51530
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2606907761410663,
            "compression_ratio": 1.5144230769230769,
            "no_speech_prob": 0.001178741455078125,
            "words": [
                {
                    "start": 78.57,
                    "end": 79.35,
                    "word": " extract",
                    "probability": 0.83349609375
                },
                {
                    "start": 79.35,
                    "end": 79.83,
                    "word": " malware",
                    "probability": 0.689453125
                },
                {
                    "start": 79.83,
                    "end": 80.55,
                    "word": " configuration",
                    "probability": 0.85791015625
                },
                {
                    "start": 80.55,
                    "end": 81.35,
                    "word": ".",
                    "probability": 0.9931640625
                }
            ]
        },
        {
            "id": 24,
            "seek": 8742,
            "start": 83.09,
            "end": 87.51,
            "text": " This is very simple, so everyone should remember this.",
            "tokens": [
                51640,
                639,
                307,
                588,
                2199,
                11,
                370,
                1518,
                820,
                1604,
                341,
                13,
                51848
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2606907761410663,
            "compression_ratio": 1.5144230769230769,
            "no_speech_prob": 0.001178741455078125,
            "words": [
                {
                    "start": 83.09,
                    "end": 83.49,
                    "word": " This",
                    "probability": 0.81689453125
                },
                {
                    "start": 83.49,
                    "end": 83.65,
                    "word": " is",
                    "probability": 0.9111328125
                },
                {
                    "start": 83.65,
                    "end": 83.91,
                    "word": " very",
                    "probability": 0.7314453125
                },
                {
                    "start": 83.91,
                    "end": 84.29,
                    "word": " simple",
                    "probability": 0.908203125
                },
                {
                    "start": 84.29,
                    "end": 84.53,
                    "word": ",",
                    "probability": 0.67724609375
                },
                {
                    "start": 84.53,
                    "end": 85.09,
                    "word": " so",
                    "probability": 0.90576171875
                },
                {
                    "start": 85.09,
                    "end": 85.83,
                    "word": " everyone",
                    "probability": 0.8681640625
                },
                {
                    "start": 85.83,
                    "end": 86.15,
                    "word": " should",
                    "probability": 0.91748046875
                },
                {
                    "start": 86.15,
                    "end": 86.55,
                    "word": " remember",
                    "probability": 0.76171875
                },
                {
                    "start": 86.55,
                    "end": 86.99,
                    "word": " this",
                    "probability": 0.8779296875
                },
                {
                    "start": 86.99,
                    "end": 87.51,
                    "word": ".",
                    "probability": 0.99267578125
                }
            ]
        },
        {
            "id": 25,
            "seek": 11538,
            "start": 90.31,
            "end": 92.89,
            "text": " First step, we analyze the malware",
            "tokens": [
                50414,
                2386,
                1823,
                11,
                321,
                12477,
                264,
                40747,
                50544
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3236908783783784,
            "compression_ratio": 1.6686746987951808,
            "no_speech_prob": 0.0007610321044921875,
            "words": [
                {
                    "start": 90.31,
                    "end": 90.75,
                    "word": " First",
                    "probability": 0.611328125
                },
                {
                    "start": 90.75,
                    "end": 91.11,
                    "word": " step",
                    "probability": 0.814453125
                },
                {
                    "start": 91.11,
                    "end": 91.45,
                    "word": ",",
                    "probability": 0.8701171875
                },
                {
                    "start": 91.45,
                    "end": 91.65,
                    "word": " we",
                    "probability": 0.8857421875
                },
                {
                    "start": 91.65,
                    "end": 92.13,
                    "word": " analyze",
                    "probability": 0.55078125
                },
                {
                    "start": 92.13,
                    "end": 92.67,
                    "word": " the",
                    "probability": 0.472412109375
                },
                {
                    "start": 92.67,
                    "end": 92.89,
                    "word": " malware",
                    "probability": 0.1170654296875
                }
            ]
        },
        {
            "id": 26,
            "seek": 11538,
            "start": 92.89,
            "end": 97.77,
            "text": " to understand how to encrypt the configuration data.",
            "tokens": [
                50544,
                281,
                1223,
                577,
                281,
                17972,
                662,
                264,
                11694,
                1412,
                13,
                50778
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3236908783783784,
            "compression_ratio": 1.6686746987951808,
            "no_speech_prob": 0.0007610321044921875,
            "words": [
                {
                    "start": 92.89,
                    "end": 93.41,
                    "word": " to",
                    "probability": 0.8896484375
                },
                {
                    "start": 93.41,
                    "end": 94.43,
                    "word": " understand",
                    "probability": 0.75244140625
                },
                {
                    "start": 94.43,
                    "end": 94.97,
                    "word": " how",
                    "probability": 0.88427734375
                },
                {
                    "start": 94.97,
                    "end": 95.23,
                    "word": " to",
                    "probability": 0.91015625
                },
                {
                    "start": 95.23,
                    "end": 95.75,
                    "word": " encrypt",
                    "probability": 0.78564453125
                },
                {
                    "start": 95.75,
                    "end": 96.01,
                    "word": " the",
                    "probability": 0.7548828125
                },
                {
                    "start": 96.01,
                    "end": 96.45,
                    "word": " configuration",
                    "probability": 0.779296875
                },
                {
                    "start": 96.45,
                    "end": 97.03,
                    "word": " data",
                    "probability": 0.8095703125
                },
                {
                    "start": 97.03,
                    "end": 97.77,
                    "word": ".",
                    "probability": 0.83935546875
                }
            ]
        },
        {
            "id": 27,
            "seek": 11538,
            "start": 97.77,
            "end": 101.85,
            "text": " Then we understand the structure of the configuration data.",
            "tokens": [
                50778,
                1396,
                321,
                1223,
                264,
                3877,
                295,
                264,
                11694,
                1412,
                13,
                50970
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3236908783783784,
            "compression_ratio": 1.6686746987951808,
            "no_speech_prob": 0.0007610321044921875,
            "words": [
                {
                    "start": 97.77,
                    "end": 98.21,
                    "word": " Then",
                    "probability": 0.794921875
                },
                {
                    "start": 98.21,
                    "end": 98.65,
                    "word": " we",
                    "probability": 0.67333984375
                },
                {
                    "start": 98.65,
                    "end": 99.23,
                    "word": " understand",
                    "probability": 0.748046875
                },
                {
                    "start": 99.23,
                    "end": 99.59,
                    "word": " the",
                    "probability": 0.798828125
                },
                {
                    "start": 99.59,
                    "end": 100.01,
                    "word": " structure",
                    "probability": 0.7392578125
                },
                {
                    "start": 100.01,
                    "end": 100.25,
                    "word": " of",
                    "probability": 0.87548828125
                },
                {
                    "start": 100.25,
                    "end": 100.39,
                    "word": " the",
                    "probability": 0.80810546875
                },
                {
                    "start": 100.39,
                    "end": 100.91,
                    "word": " configuration",
                    "probability": 0.85302734375
                },
                {
                    "start": 100.91,
                    "end": 101.41,
                    "word": " data",
                    "probability": 0.81640625
                },
                {
                    "start": 101.41,
                    "end": 101.85,
                    "word": ".",
                    "probability": 0.98486328125
                }
            ]
        },
        {
            "id": 28,
            "seek": 11538,
            "start": 105.06,
            "end": 108.58,
            "text": " Step two, we create our tools",
            "tokens": [
                51046,
                5470,
                732,
                11,
                321,
                1884,
                527,
                3873,
                51204
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3236908783783784,
            "compression_ratio": 1.6686746987951808,
            "no_speech_prob": 0.0007610321044921875,
            "words": [
                {
                    "start": 105.06,
                    "end": 105.74,
                    "word": " Step",
                    "probability": 0.92431640625
                },
                {
                    "start": 105.74,
                    "end": 106.06,
                    "word": " two",
                    "probability": 0.7392578125
                },
                {
                    "start": 106.06,
                    "end": 106.62,
                    "word": ",",
                    "probability": 0.96142578125
                },
                {
                    "start": 106.62,
                    "end": 106.84,
                    "word": " we",
                    "probability": 0.904296875
                },
                {
                    "start": 106.84,
                    "end": 107.26,
                    "word": " create",
                    "probability": 0.79541015625
                },
                {
                    "start": 107.26,
                    "end": 107.6,
                    "word": " our",
                    "probability": 0.410888671875
                },
                {
                    "start": 107.6,
                    "end": 108.58,
                    "word": " tools",
                    "probability": 0.74853515625
                }
            ]
        },
        {
            "id": 29,
            "seek": 11538,
            "start": 108.58,
            "end": 111.88,
            "text": " for extracting configuration data.",
            "tokens": [
                51204,
                337,
                49844,
                11694,
                1412,
                13,
                51358
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3236908783783784,
            "compression_ratio": 1.6686746987951808,
            "no_speech_prob": 0.0007610321044921875,
            "words": [
                {
                    "start": 108.58,
                    "end": 109.0,
                    "word": " for",
                    "probability": 0.89892578125
                },
                {
                    "start": 109.0,
                    "end": 110.28,
                    "word": " extracting",
                    "probability": 0.654296875
                },
                {
                    "start": 110.28,
                    "end": 110.9,
                    "word": " configuration",
                    "probability": 0.85693359375
                },
                {
                    "start": 110.9,
                    "end": 111.44,
                    "word": " data",
                    "probability": 0.8193359375
                },
                {
                    "start": 111.44,
                    "end": 111.88,
                    "word": ".",
                    "probability": 0.97509765625
                }
            ]
        },
        {
            "id": 30,
            "seek": 11538,
            "start": 112.6,
            "end": 115.0,
            "text": " That's all, it's very simple.",
            "tokens": [
                51410,
                663,
                311,
                439,
                11,
                309,
                311,
                588,
                2199,
                13,
                51518
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3236908783783784,
            "compression_ratio": 1.6686746987951808,
            "no_speech_prob": 0.0007610321044921875,
            "words": [
                {
                    "start": 112.6,
                    "end": 113.1,
                    "word": " That's",
                    "probability": 0.896728515625
                },
                {
                    "start": 113.1,
                    "end": 113.36,
                    "word": " all",
                    "probability": 0.896484375
                },
                {
                    "start": 113.36,
                    "end": 113.78,
                    "word": ",",
                    "probability": 0.3681640625
                },
                {
                    "start": 113.78,
                    "end": 114.06,
                    "word": " it's",
                    "probability": 0.941650390625
                },
                {
                    "start": 114.06,
                    "end": 114.26,
                    "word": " very",
                    "probability": 0.7060546875
                },
                {
                    "start": 114.26,
                    "end": 114.56,
                    "word": " simple",
                    "probability": 0.904296875
                },
                {
                    "start": 114.56,
                    "end": 115.0,
                    "word": ".",
                    "probability": 0.99169921875
                }
            ]
        },
        {
            "id": 31,
            "seek": 11538,
            "start": 117.6,
            "end": 121.18,
            "text": " For example, in the case of PlugX,",
            "tokens": [
                51594,
                1171,
                1365,
                11,
                294,
                264,
                1389,
                295,
                40740,
                55,
                11,
                51762
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3236908783783784,
            "compression_ratio": 1.6686746987951808,
            "no_speech_prob": 0.0007610321044921875,
            "words": [
                {
                    "start": 117.6,
                    "end": 118.24,
                    "word": " For",
                    "probability": 0.90234375
                },
                {
                    "start": 118.24,
                    "end": 118.68,
                    "word": " example",
                    "probability": 0.9384765625
                },
                {
                    "start": 118.68,
                    "end": 119.24,
                    "word": ",",
                    "probability": 0.974609375
                },
                {
                    "start": 119.24,
                    "end": 119.46,
                    "word": " in",
                    "probability": 0.9052734375
                },
                {
                    "start": 119.46,
                    "end": 119.6,
                    "word": " the",
                    "probability": 0.81884765625
                },
                {
                    "start": 119.6,
                    "end": 119.96,
                    "word": " case",
                    "probability": 0.82861328125
                },
                {
                    "start": 119.96,
                    "end": 120.2,
                    "word": " of",
                    "probability": 0.90966796875
                },
                {
                    "start": 120.2,
                    "end": 120.72,
                    "word": " PlugX",
                    "probability": 0.57684326171875
                },
                {
                    "start": 120.72,
                    "end": 121.18,
                    "word": ",",
                    "probability": 0.85986328125
                }
            ]
        },
        {
            "id": 32,
            "seek": 14304,
            "start": 121.18,
            "end": 125.2,
            "text": " in PlugX data, PlugX main module and configuration",
            "tokens": [
                50374,
                294,
                40740,
                55,
                1412,
                11,
                40740,
                55,
                2135,
                10088,
                293,
                11694,
                50580
            ],
            "temperature": 0.0,
            "avg_logprob": -0.395359859773607,
            "compression_ratio": 1.5822784810126582,
            "no_speech_prob": 0.004726409912109375,
            "words": [
                {
                    "start": 121.18,
                    "end": 121.6,
                    "word": " in",
                    "probability": 0.021575927734375
                },
                {
                    "start": 121.6,
                    "end": 122.06,
                    "word": " PlugX",
                    "probability": 0.5140380859375
                },
                {
                    "start": 122.06,
                    "end": 122.52,
                    "word": " data",
                    "probability": 0.75634765625
                },
                {
                    "start": 122.52,
                    "end": 122.86,
                    "word": ",",
                    "probability": 0.72265625
                },
                {
                    "start": 122.86,
                    "end": 123.22,
                    "word": " PlugX",
                    "probability": 0.868896484375
                },
                {
                    "start": 123.22,
                    "end": 123.56,
                    "word": " main",
                    "probability": 0.6806640625
                },
                {
                    "start": 123.56,
                    "end": 123.98,
                    "word": " module",
                    "probability": 0.8408203125
                },
                {
                    "start": 123.98,
                    "end": 124.48,
                    "word": " and",
                    "probability": 0.8681640625
                },
                {
                    "start": 124.48,
                    "end": 125.2,
                    "word": " configuration",
                    "probability": 0.876953125
                }
            ]
        },
        {
            "id": 33,
            "seek": 14304,
            "start": 125.2,
            "end": 130.24,
            "text": " are encoded for original algorithm and LZNT1.",
            "tokens": [
                50580,
                366,
                2058,
                12340,
                337,
                3380,
                9284,
                293,
                441,
                57,
                45,
                51,
                16,
                13,
                50804
            ],
            "temperature": 0.0,
            "avg_logprob": -0.395359859773607,
            "compression_ratio": 1.5822784810126582,
            "no_speech_prob": 0.004726409912109375,
            "words": [
                {
                    "start": 125.2,
                    "end": 126.18,
                    "word": " are",
                    "probability": 0.72900390625
                },
                {
                    "start": 126.18,
                    "end": 126.64,
                    "word": " encoded",
                    "probability": 0.934814453125
                },
                {
                    "start": 126.64,
                    "end": 127.14,
                    "word": " for",
                    "probability": 0.8662109375
                },
                {
                    "start": 127.14,
                    "end": 127.5,
                    "word": " original",
                    "probability": 0.43310546875
                },
                {
                    "start": 127.5,
                    "end": 128.08,
                    "word": " algorithm",
                    "probability": 0.6513671875
                },
                {
                    "start": 128.08,
                    "end": 128.64,
                    "word": " and",
                    "probability": 0.79931640625
                },
                {
                    "start": 128.64,
                    "end": 129.74,
                    "word": " LZNT1",
                    "probability": 0.65419921875
                },
                {
                    "start": 129.74,
                    "end": 130.24,
                    "word": ".",
                    "probability": 0.51904296875
                }
            ]
        },
        {
            "id": 34,
            "seek": 14304,
            "start": 131.12,
            "end": 139.08,
            "text": " All decoded data is injected into one process and running.",
            "tokens": [
                50862,
                1057,
                979,
                12340,
                1412,
                307,
                36967,
                666,
                472,
                1399,
                293,
                2614,
                13,
                51112
            ],
            "temperature": 0.0,
            "avg_logprob": -0.395359859773607,
            "compression_ratio": 1.5822784810126582,
            "no_speech_prob": 0.004726409912109375,
            "words": [
                {
                    "start": 131.12,
                    "end": 131.42,
                    "word": " All",
                    "probability": 0.79931640625
                },
                {
                    "start": 131.42,
                    "end": 131.96,
                    "word": " decoded",
                    "probability": 0.9140625
                },
                {
                    "start": 131.96,
                    "end": 133.96,
                    "word": " data",
                    "probability": 0.7294921875
                },
                {
                    "start": 133.96,
                    "end": 134.56,
                    "word": " is",
                    "probability": 0.89013671875
                },
                {
                    "start": 134.56,
                    "end": 135.08,
                    "word": " injected",
                    "probability": 0.71484375
                },
                {
                    "start": 135.08,
                    "end": 135.9,
                    "word": " into",
                    "probability": 0.70361328125
                },
                {
                    "start": 135.9,
                    "end": 136.72,
                    "word": " one",
                    "probability": 0.70361328125
                },
                {
                    "start": 136.72,
                    "end": 137.18,
                    "word": " process",
                    "probability": 0.84619140625
                },
                {
                    "start": 137.18,
                    "end": 137.62,
                    "word": " and",
                    "probability": 0.88330078125
                },
                {
                    "start": 137.62,
                    "end": 138.08,
                    "word": " running",
                    "probability": 0.53759765625
                },
                {
                    "start": 138.08,
                    "end": 139.08,
                    "word": ".",
                    "probability": 0.84326171875
                }
            ]
        },
        {
            "id": 35,
            "seek": 14304,
            "start": 140.06,
            "end": 143.32,
            "text": " PlugX custom encoding algorithm",
            "tokens": [
                51326,
                40740,
                55,
                2375,
                43430,
                9284,
                51480
            ],
            "temperature": 0.0,
            "avg_logprob": -0.395359859773607,
            "compression_ratio": 1.5822784810126582,
            "no_speech_prob": 0.004726409912109375,
            "words": [
                {
                    "start": 140.06,
                    "end": 141.0,
                    "word": " PlugX",
                    "probability": 0.89794921875
                },
                {
                    "start": 141.0,
                    "end": 141.94,
                    "word": " custom",
                    "probability": 0.74267578125
                },
                {
                    "start": 141.94,
                    "end": 142.56,
                    "word": " encoding",
                    "probability": 0.8564453125
                },
                {
                    "start": 142.56,
                    "end": 143.32,
                    "word": " algorithm",
                    "probability": 0.791015625
                }
            ]
        },
        {
            "id": 36,
            "seek": 14304,
            "start": 143.32,
            "end": 146.0,
            "text": " depending on the version of it.",
            "tokens": [
                51480,
                5413,
                322,
                264,
                3037,
                295,
                309,
                13,
                51592
            ],
            "temperature": 0.0,
            "avg_logprob": -0.395359859773607,
            "compression_ratio": 1.5822784810126582,
            "no_speech_prob": 0.004726409912109375,
            "words": [
                {
                    "start": 143.32,
                    "end": 143.88,
                    "word": " depending",
                    "probability": 0.69482421875
                },
                {
                    "start": 143.88,
                    "end": 144.36,
                    "word": " on",
                    "probability": 0.90771484375
                },
                {
                    "start": 144.36,
                    "end": 144.52,
                    "word": " the",
                    "probability": 0.77783203125
                },
                {
                    "start": 144.52,
                    "end": 144.86,
                    "word": " version",
                    "probability": 0.71240234375
                },
                {
                    "start": 144.86,
                    "end": 145.22,
                    "word": " of",
                    "probability": 0.90234375
                },
                {
                    "start": 145.22,
                    "end": 145.5,
                    "word": " it",
                    "probability": 0.89697265625
                },
                {
                    "start": 145.5,
                    "end": 146.0,
                    "word": ".",
                    "probability": 0.91162109375
                }
            ]
        },
        {
            "id": 37,
            "seek": 14304,
            "start": 147.14,
            "end": 148.84,
            "text": " This custom encoding algorithm",
            "tokens": [
                51666,
                639,
                2375,
                43430,
                9284,
                51754
            ],
            "temperature": 0.0,
            "avg_logprob": -0.395359859773607,
            "compression_ratio": 1.5822784810126582,
            "no_speech_prob": 0.004726409912109375,
            "words": [
                {
                    "start": 147.14,
                    "end": 147.46,
                    "word": " This",
                    "probability": 0.80078125
                },
                {
                    "start": 147.46,
                    "end": 147.86,
                    "word": " custom",
                    "probability": 0.673828125
                },
                {
                    "start": 147.86,
                    "end": 148.32,
                    "word": " encoding",
                    "probability": 0.861328125
                },
                {
                    "start": 148.32,
                    "end": 148.84,
                    "word": " algorithm",
                    "probability": 0.7666015625
                }
            ]
        },
        {
            "id": 38,
            "seek": 17228,
            "start": 148.84,
            "end": 152.84,
            "text": " is used to encode key log file modules",
            "tokens": [
                50370,
                307,
                1143,
                281,
                2058,
                1429,
                2141,
                3565,
                3991,
                16679,
                50580
            ],
            "temperature": 0.0,
            "avg_logprob": -0.363516565546932,
            "compression_ratio": 1.554945054945055,
            "no_speech_prob": 0.002132415771484375,
            "words": [
                {
                    "start": 148.84,
                    "end": 149.3,
                    "word": " is",
                    "probability": 0.20068359375
                },
                {
                    "start": 149.3,
                    "end": 149.82,
                    "word": " used",
                    "probability": 0.79052734375
                },
                {
                    "start": 149.82,
                    "end": 150.3,
                    "word": " to",
                    "probability": 0.91357421875
                },
                {
                    "start": 150.3,
                    "end": 151.02,
                    "word": " encode",
                    "probability": 0.857666015625
                },
                {
                    "start": 151.02,
                    "end": 151.44,
                    "word": " key",
                    "probability": 0.37744140625
                },
                {
                    "start": 151.44,
                    "end": 151.64,
                    "word": " log",
                    "probability": 0.58349609375
                },
                {
                    "start": 151.64,
                    "end": 152.08,
                    "word": " file",
                    "probability": 0.70166015625
                },
                {
                    "start": 152.08,
                    "end": 152.84,
                    "word": " modules",
                    "probability": 0.461181640625
                }
            ]
        },
        {
            "id": 39,
            "seek": 17228,
            "start": 152.84,
            "end": 155.19,
            "text": " and configuration data.",
            "tokens": [
                50580,
                293,
                11694,
                1412,
                13,
                50670
            ],
            "temperature": 0.0,
            "avg_logprob": -0.363516565546932,
            "compression_ratio": 1.554945054945055,
            "no_speech_prob": 0.002132415771484375,
            "words": [
                {
                    "start": 152.84,
                    "end": 153.58,
                    "word": " and",
                    "probability": 0.84814453125
                },
                {
                    "start": 153.58,
                    "end": 154.2,
                    "word": " configuration",
                    "probability": 0.77197265625
                },
                {
                    "start": 154.2,
                    "end": 154.72,
                    "word": " data",
                    "probability": 0.8134765625
                },
                {
                    "start": 154.72,
                    "end": 155.19,
                    "word": ".",
                    "probability": 0.95556640625
                }
            ]
        },
        {
            "id": 40,
            "seek": 17228,
            "start": 157.7,
            "end": 160.88,
            "text": " Configuration structure also differs",
            "tokens": [
                50748,
                44151,
                8167,
                3877,
                611,
                37761,
                50896
            ],
            "temperature": 0.0,
            "avg_logprob": -0.363516565546932,
            "compression_ratio": 1.554945054945055,
            "no_speech_prob": 0.002132415771484375,
            "words": [
                {
                    "start": 157.7,
                    "end": 158.64,
                    "word": " Configuration",
                    "probability": 0.906494140625
                },
                {
                    "start": 158.64,
                    "end": 159.22,
                    "word": " structure",
                    "probability": 0.6884765625
                },
                {
                    "start": 159.22,
                    "end": 159.92,
                    "word": " also",
                    "probability": 0.80712890625
                },
                {
                    "start": 159.92,
                    "end": 160.88,
                    "word": " differs",
                    "probability": 0.55029296875
                }
            ]
        },
        {
            "id": 41,
            "seek": 17228,
            "start": 160.88,
            "end": 163.18,
            "text": " depending on the version.",
            "tokens": [
                50896,
                5413,
                322,
                264,
                3037,
                13,
                51000
            ],
            "temperature": 0.0,
            "avg_logprob": -0.363516565546932,
            "compression_ratio": 1.554945054945055,
            "no_speech_prob": 0.002132415771484375,
            "words": [
                {
                    "start": 160.88,
                    "end": 161.5,
                    "word": " depending",
                    "probability": 0.7939453125
                },
                {
                    "start": 161.5,
                    "end": 161.92,
                    "word": " on",
                    "probability": 0.91015625
                },
                {
                    "start": 161.92,
                    "end": 162.06,
                    "word": " the",
                    "probability": 0.80322265625
                },
                {
                    "start": 162.06,
                    "end": 162.42,
                    "word": " version",
                    "probability": 0.6435546875
                },
                {
                    "start": 162.42,
                    "end": 163.18,
                    "word": ".",
                    "probability": 0.916015625
                }
            ]
        },
        {
            "id": 42,
            "seek": 17228,
            "start": 163.18,
            "end": 165.82,
            "text": " PlugX has a maximum configuration data",
            "tokens": [
                51000,
                40740,
                55,
                575,
                257,
                6674,
                11694,
                1412,
                51142
            ],
            "temperature": 0.0,
            "avg_logprob": -0.363516565546932,
            "compression_ratio": 1.554945054945055,
            "no_speech_prob": 0.002132415771484375,
            "words": [
                {
                    "start": 163.18,
                    "end": 163.54,
                    "word": " PlugX",
                    "probability": 0.3417510986328125
                },
                {
                    "start": 163.54,
                    "end": 163.88,
                    "word": " has",
                    "probability": 0.88720703125
                },
                {
                    "start": 164.08,
                    "end": 164.44,
                    "word": " a maximum",
                    "probability": 0.59375
                },
                {
                    "start": 164.44,
                    "end": 165.02,
                    "word": " configuration",
                    "probability": 0.8583984375
                },
                {
                    "start": 165.02,
                    "end": 165.82,
                    "word": " data",
                    "probability": 0.80517578125
                }
            ]
        },
        {
            "id": 43,
            "seek": 17228,
            "start": 165.82,
            "end": 169.39,
            "text": " of 0x36A4 size.",
            "tokens": [
                51142,
                295,
                1958,
                87,
                11309,
                32,
                19,
                2744,
                13,
                51302
            ],
            "temperature": 0.0,
            "avg_logprob": -0.363516565546932,
            "compression_ratio": 1.554945054945055,
            "no_speech_prob": 0.002132415771484375,
            "words": [
                {
                    "start": 165.82,
                    "end": 166.48,
                    "word": " of",
                    "probability": 0.88818359375
                },
                {
                    "start": 166.48,
                    "end": 168.46,
                    "word": " 0x36A4",
                    "probability": 0.88505859375
                },
                {
                    "start": 168.46,
                    "end": 168.92,
                    "word": " size",
                    "probability": 0.74072265625
                },
                {
                    "start": 168.92,
                    "end": 169.39,
                    "word": ".",
                    "probability": 0.8935546875
                }
            ]
        },
        {
            "id": 44,
            "seek": 17228,
            "start": 170.14,
            "end": 174.05,
            "text": " It has such large configuration data is running.",
            "tokens": [
                51352,
                467,
                575,
                1270,
                2416,
                11694,
                1412,
                307,
                2614,
                13,
                51538
            ],
            "temperature": 0.0,
            "avg_logprob": -0.363516565546932,
            "compression_ratio": 1.554945054945055,
            "no_speech_prob": 0.002132415771484375,
            "words": [
                {
                    "start": 170.14,
                    "end": 170.36,
                    "word": " It",
                    "probability": 0.87890625
                },
                {
                    "start": 170.36,
                    "end": 170.6,
                    "word": " has",
                    "probability": 0.88330078125
                },
                {
                    "start": 170.6,
                    "end": 170.98,
                    "word": " such",
                    "probability": 0.84912109375
                },
                {
                    "start": 170.98,
                    "end": 171.4,
                    "word": " large",
                    "probability": 0.810546875
                },
                {
                    "start": 171.4,
                    "end": 172.04,
                    "word": " configuration",
                    "probability": 0.873046875
                },
                {
                    "start": 172.04,
                    "end": 172.74,
                    "word": " data",
                    "probability": 0.81396484375
                },
                {
                    "start": 172.74,
                    "end": 173.24,
                    "word": " is",
                    "probability": 0.49267578125
                },
                {
                    "start": 173.24,
                    "end": 173.58,
                    "word": " running",
                    "probability": 0.04656982421875
                },
                {
                    "start": 173.58,
                    "end": 174.05,
                    "word": ".",
                    "probability": 0.99267578125
                }
            ]
        },
        {
            "id": 45,
            "seek": 17228,
            "start": 176.9,
            "end": 179.82,
            "text": " Other example is ts-cookie.",
            "tokens": [
                51616,
                5358,
                1365,
                307,
                35492,
                12,
                66,
                39611,
                13,
                51738
            ],
            "temperature": 0.0,
            "avg_logprob": -0.363516565546932,
            "compression_ratio": 1.554945054945055,
            "no_speech_prob": 0.002132415771484375,
            "words": [
                {
                    "start": 176.9,
                    "end": 177.58,
                    "word": " Other",
                    "probability": 0.46826171875
                },
                {
                    "start": 177.58,
                    "end": 178.1,
                    "word": " example",
                    "probability": 0.9296875
                },
                {
                    "start": 178.1,
                    "end": 178.56,
                    "word": " is",
                    "probability": 0.90185546875
                },
                {
                    "start": 178.56,
                    "end": 178.88,
                    "word": " ts",
                    "probability": 0.251953125
                },
                {
                    "start": 178.88,
                    "end": 179.18,
                    "word": "-cookie",
                    "probability": 0.7745768229166666
                },
                {
                    "start": 179.18,
                    "end": 179.82,
                    "word": ".",
                    "probability": 0.92578125
                }
            ]
        },
        {
            "id": 46,
            "seek": 17228,
            "start": 179.82,
            "end": 181.58,
            "text": " ts-cookie is very simple,",
            "tokens": [
                51738,
                35492,
                12,
                66,
                39611,
                307,
                588,
                2199,
                11,
                51818
            ],
            "temperature": 0.0,
            "avg_logprob": -0.363516565546932,
            "compression_ratio": 1.554945054945055,
            "no_speech_prob": 0.002132415771484375,
            "words": [
                {
                    "start": 179.82,
                    "end": 180.08,
                    "word": " ts",
                    "probability": 0.7900390625
                },
                {
                    "start": 180.08,
                    "end": 180.3,
                    "word": "-cookie",
                    "probability": 0.88818359375
                },
                {
                    "start": 180.3,
                    "end": 180.56,
                    "word": " is",
                    "probability": 0.90234375
                },
                {
                    "start": 180.56,
                    "end": 180.84,
                    "word": " very",
                    "probability": 0.7333984375
                },
                {
                    "start": 180.84,
                    "end": 181.26,
                    "word": " simple",
                    "probability": 0.91064453125
                },
                {
                    "start": 181.26,
                    "end": 181.58,
                    "word": ",",
                    "probability": 0.5615234375
                }
            ]
        },
        {
            "id": 47,
            "seek": 20060,
            "start": 181.58,
            "end": 184.96,
            "text": " use only RC4 for encryption.",
            "tokens": [
                50364,
                764,
                787,
                28987,
                19,
                337,
                29575,
                13,
                50546
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3068181880108722,
            "compression_ratio": 1.391304347826087,
            "no_speech_prob": 0.004444122314453125,
            "words": [
                {
                    "start": 181.58,
                    "end": 181.88,
                    "word": " use",
                    "probability": 0.1112060546875
                },
                {
                    "start": 181.88,
                    "end": 182.42,
                    "word": " only",
                    "probability": 0.83203125
                },
                {
                    "start": 182.42,
                    "end": 183.26,
                    "word": " RC4",
                    "probability": 0.6751708984375
                },
                {
                    "start": 183.26,
                    "end": 183.66,
                    "word": " for",
                    "probability": 0.8447265625
                },
                {
                    "start": 183.66,
                    "end": 184.22,
                    "word": " encryption",
                    "probability": 0.71484375
                },
                {
                    "start": 184.22,
                    "end": 184.96,
                    "word": ".",
                    "probability": 0.5009765625
                }
            ]
        },
        {
            "id": 48,
            "seek": 20060,
            "start": 185.08,
            "end": 189.18,
            "text": " This pattern has not changed for about five years.",
            "tokens": [
                50546,
                639,
                5102,
                575,
                406,
                3105,
                337,
                466,
                1732,
                924,
                13,
                50726
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3068181880108722,
            "compression_ratio": 1.391304347826087,
            "no_speech_prob": 0.004444122314453125,
            "words": [
                {
                    "start": 185.08,
                    "end": 185.48,
                    "word": " This",
                    "probability": 0.80224609375
                },
                {
                    "start": 185.48,
                    "end": 185.84,
                    "word": " pattern",
                    "probability": 0.76953125
                },
                {
                    "start": 185.84,
                    "end": 186.22,
                    "word": " has",
                    "probability": 0.890625
                },
                {
                    "start": 186.22,
                    "end": 186.54,
                    "word": " not",
                    "probability": 0.89501953125
                },
                {
                    "start": 186.54,
                    "end": 186.9,
                    "word": " changed",
                    "probability": 0.79638671875
                },
                {
                    "start": 186.9,
                    "end": 187.26,
                    "word": " for",
                    "probability": 0.8896484375
                },
                {
                    "start": 187.26,
                    "end": 187.7,
                    "word": " about",
                    "probability": 0.8017578125
                },
                {
                    "start": 187.7,
                    "end": 188.04,
                    "word": " five",
                    "probability": 0.5751953125
                },
                {
                    "start": 188.04,
                    "end": 188.44,
                    "word": " years",
                    "probability": 0.87158203125
                },
                {
                    "start": 188.44,
                    "end": 189.18,
                    "word": ".",
                    "probability": 0.97509765625
                }
            ]
        },
        {
            "id": 49,
            "seek": 20060,
            "start": 191.28,
            "end": 197.4,
            "text": " The size of ts-cookie configuration data is 0x8D0,",
            "tokens": [
                50856,
                440,
                2744,
                295,
                35492,
                12,
                66,
                39611,
                11694,
                1412,
                307,
                1958,
                87,
                23,
                35,
                15,
                11,
                51106
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3068181880108722,
            "compression_ratio": 1.391304347826087,
            "no_speech_prob": 0.004444122314453125,
            "words": [
                {
                    "start": 191.28,
                    "end": 191.54,
                    "word": " The",
                    "probability": 0.798828125
                },
                {
                    "start": 191.54,
                    "end": 191.88,
                    "word": " size",
                    "probability": 0.8193359375
                },
                {
                    "start": 191.88,
                    "end": 192.1,
                    "word": " of",
                    "probability": 0.89404296875
                },
                {
                    "start": 192.1,
                    "end": 193.02,
                    "word": " ts",
                    "probability": 0.0265045166015625
                },
                {
                    "start": 193.02,
                    "end": 193.3,
                    "word": "-cookie",
                    "probability": 0.6292317708333334
                },
                {
                    "start": 193.3,
                    "end": 194.08,
                    "word": " configuration",
                    "probability": 0.79833984375
                },
                {
                    "start": 194.08,
                    "end": 194.54,
                    "word": " data",
                    "probability": 0.81201171875
                },
                {
                    "start": 194.54,
                    "end": 195.12,
                    "word": " is",
                    "probability": 0.8994140625
                },
                {
                    "start": 195.12,
                    "end": 197.22,
                    "word": " 0x8D0",
                    "probability": 0.8326171875
                },
                {
                    "start": 197.22,
                    "end": 197.4,
                    "word": ",",
                    "probability": 0.7119140625
                }
            ]
        },
        {
            "id": 50,
            "seek": 20060,
            "start": 197.4,
            "end": 200.78,
            "text": " which is the same as another normal malware.",
            "tokens": [
                51160,
                597,
                307,
                264,
                912,
                382,
                1071,
                2710,
                40747,
                13,
                51310
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3068181880108722,
            "compression_ratio": 1.391304347826087,
            "no_speech_prob": 0.004444122314453125,
            "words": [
                {
                    "start": 197.4,
                    "end": 197.7,
                    "word": " which",
                    "probability": 0.91064453125
                },
                {
                    "start": 197.7,
                    "end": 197.96,
                    "word": " is",
                    "probability": 0.90673828125
                },
                {
                    "start": 197.96,
                    "end": 198.2,
                    "word": " the",
                    "probability": 0.5869140625
                },
                {
                    "start": 198.2,
                    "end": 198.6,
                    "word": " same",
                    "probability": 0.798828125
                },
                {
                    "start": 198.6,
                    "end": 198.84,
                    "word": " as",
                    "probability": 0.8779296875
                },
                {
                    "start": 198.84,
                    "end": 199.14,
                    "word": " another",
                    "probability": 0.2357177734375
                },
                {
                    "start": 199.14,
                    "end": 199.7,
                    "word": " normal",
                    "probability": 0.83154296875
                },
                {
                    "start": 199.7,
                    "end": 200.04,
                    "word": " malware",
                    "probability": 0.873046875
                },
                {
                    "start": 200.04,
                    "end": 200.78,
                    "word": ".",
                    "probability": 0.98876953125
                }
            ]
        },
        {
            "id": 51,
            "seek": 20060,
            "start": 202.28,
            "end": 206.34,
            "text": " So it is difficult to analyze a lot of malware",
            "tokens": [
                51422,
                407,
                309,
                307,
                2252,
                281,
                12477,
                257,
                688,
                295,
                40747,
                51614
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3068181880108722,
            "compression_ratio": 1.391304347826087,
            "no_speech_prob": 0.004444122314453125,
            "words": [
                {
                    "start": 202.28,
                    "end": 203.02,
                    "word": " So",
                    "probability": 0.8515625
                },
                {
                    "start": 203.02,
                    "end": 203.76,
                    "word": " it",
                    "probability": 0.6650390625
                },
                {
                    "start": 203.76,
                    "end": 203.96,
                    "word": " is",
                    "probability": 0.90185546875
                },
                {
                    "start": 203.96,
                    "end": 204.34,
                    "word": " difficult",
                    "probability": 0.79052734375
                },
                {
                    "start": 204.34,
                    "end": 204.82,
                    "word": " to",
                    "probability": 0.90673828125
                },
                {
                    "start": 204.82,
                    "end": 205.36,
                    "word": " analyze",
                    "probability": 0.677734375
                },
                {
                    "start": 205.54,
                    "end": 205.72,
                    "word": " a lot",
                    "probability": 0.8916015625
                },
                {
                    "start": 205.72,
                    "end": 205.92,
                    "word": " of",
                    "probability": 0.89111328125
                },
                {
                    "start": 205.92,
                    "end": 206.34,
                    "word": " malware",
                    "probability": 0.70751953125
                }
            ]
        },
        {
            "id": 52,
            "seek": 20060,
            "start": 206.34,
            "end": 208.1,
            "text": " in the same way.",
            "tokens": [
                51614,
                294,
                264,
                912,
                636,
                13,
                51698
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3068181880108722,
            "compression_ratio": 1.391304347826087,
            "no_speech_prob": 0.004444122314453125,
            "words": [
                {
                    "start": 206.34,
                    "end": 206.72,
                    "word": " in",
                    "probability": 0.8916015625
                },
                {
                    "start": 206.72,
                    "end": 206.88,
                    "word": " the",
                    "probability": 0.81103515625
                },
                {
                    "start": 206.88,
                    "end": 207.14,
                    "word": " same",
                    "probability": 0.80908203125
                },
                {
                    "start": 207.14,
                    "end": 207.4,
                    "word": " way",
                    "probability": 0.89501953125
                },
                {
                    "start": 207.4,
                    "end": 208.1,
                    "word": ".",
                    "probability": 0.9658203125
                }
            ]
        },
        {
            "id": 53,
            "seek": 20060,
            "start": 208.1,
            "end": 209.9,
            "text": " From this slide,",
            "tokens": [
                51698,
                3358,
                341,
                4137,
                11,
                51786
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3068181880108722,
            "compression_ratio": 1.391304347826087,
            "no_speech_prob": 0.004444122314453125,
            "words": [
                {
                    "start": 208.1,
                    "end": 208.46,
                    "word": " From",
                    "probability": 0.69921875
                },
                {
                    "start": 208.46,
                    "end": 208.74,
                    "word": " this",
                    "probability": 0.8701171875
                },
                {
                    "start": 208.74,
                    "end": 209.08,
                    "word": " slide",
                    "probability": 0.91162109375
                },
                {
                    "start": 209.08,
                    "end": 209.9,
                    "word": ",",
                    "probability": 0.90625
                }
            ]
        },
        {
            "id": 54,
            "seek": 22804,
            "start": 209.9,
            "end": 214.8,
            "text": " I will introduce a tool we created named MarukonScan.",
            "tokens": [
                50368,
                286,
                486,
                5366,
                257,
                2290,
                321,
                2942,
                4926,
                2039,
                2034,
                266,
                50,
                7035,
                13,
                50584
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3389945781749228,
            "compression_ratio": 1.6798029556650247,
            "no_speech_prob": 0.003993988037109375,
            "words": [
                {
                    "start": 209.9,
                    "end": 210.12,
                    "word": " I",
                    "probability": 0.9775390625
                },
                {
                    "start": 210.12,
                    "end": 210.32,
                    "word": " will",
                    "probability": 0.8037109375
                },
                {
                    "start": 210.32,
                    "end": 210.7,
                    "word": " introduce",
                    "probability": 0.716796875
                },
                {
                    "start": 211.08,
                    "end": 211.42,
                    "word": " a tool",
                    "probability": 0.90576171875
                },
                {
                    "start": 211.42,
                    "end": 211.82,
                    "word": " we",
                    "probability": 0.88720703125
                },
                {
                    "start": 211.82,
                    "end": 212.28,
                    "word": " created",
                    "probability": 0.728515625
                },
                {
                    "start": 212.28,
                    "end": 213.2,
                    "word": " named",
                    "probability": 0.61767578125
                },
                {
                    "start": 213.2,
                    "end": 213.98,
                    "word": " MarukonScan",
                    "probability": 0.606591796875
                },
                {
                    "start": 213.98,
                    "end": 214.8,
                    "word": ".",
                    "probability": 0.94287109375
                }
            ]
        },
        {
            "id": 55,
            "seek": 22804,
            "start": 215.22,
            "end": 217.2,
            "text": " MarukonScan is a ValTT plugin",
            "tokens": [
                50630,
                2039,
                2034,
                266,
                50,
                7035,
                307,
                257,
                7188,
                28178,
                23407,
                50744
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3389945781749228,
            "compression_ratio": 1.6798029556650247,
            "no_speech_prob": 0.003993988037109375,
            "words": [
                {
                    "start": 215.22,
                    "end": 215.72,
                    "word": " MarukonScan",
                    "probability": 0.9662109375
                },
                {
                    "start": 215.72,
                    "end": 216.1,
                    "word": " is",
                    "probability": 0.90283203125
                },
                {
                    "start": 216.34,
                    "end": 216.7,
                    "word": " a ValTT",
                    "probability": 0.19073486328125
                },
                {
                    "start": 216.7,
                    "end": 217.2,
                    "word": " plugin",
                    "probability": 0.7216796875
                }
            ]
        },
        {
            "id": 56,
            "seek": 22804,
            "start": 217.2,
            "end": 220.76,
            "text": " that extracts the configuration data of known malware.",
            "tokens": [
                50744,
                300,
                8947,
                82,
                264,
                11694,
                1412,
                295,
                2570,
                40747,
                13,
                50928
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3389945781749228,
            "compression_ratio": 1.6798029556650247,
            "no_speech_prob": 0.003993988037109375,
            "words": [
                {
                    "start": 217.2,
                    "end": 217.72,
                    "word": " that",
                    "probability": 0.87451171875
                },
                {
                    "start": 217.72,
                    "end": 218.36,
                    "word": " extracts",
                    "probability": 0.861328125
                },
                {
                    "start": 218.36,
                    "end": 218.42,
                    "word": " the",
                    "probability": 0.47509765625
                },
                {
                    "start": 218.42,
                    "end": 218.8,
                    "word": " configuration",
                    "probability": 0.55078125
                },
                {
                    "start": 218.8,
                    "end": 219.34,
                    "word": " data",
                    "probability": 0.80322265625
                },
                {
                    "start": 219.34,
                    "end": 219.62,
                    "word": " of",
                    "probability": 0.896484375
                },
                {
                    "start": 219.62,
                    "end": 219.98,
                    "word": " known",
                    "probability": 0.41455078125
                },
                {
                    "start": 219.98,
                    "end": 220.28,
                    "word": " malware",
                    "probability": 0.366943359375
                },
                {
                    "start": 220.28,
                    "end": 220.76,
                    "word": ".",
                    "probability": 0.98291015625
                }
            ]
        },
        {
            "id": 57,
            "seek": 22804,
            "start": 220.76,
            "end": 224.08,
            "text": " ValTT is an open source memory forensic framework",
            "tokens": [
                50928,
                7188,
                28178,
                307,
                364,
                1269,
                4009,
                4675,
                39084,
                8388,
                51078
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3389945781749228,
            "compression_ratio": 1.6798029556650247,
            "no_speech_prob": 0.003993988037109375,
            "words": [
                {
                    "start": 220.76,
                    "end": 221.56,
                    "word": " ValTT",
                    "probability": 0.960205078125
                },
                {
                    "start": 221.56,
                    "end": 221.96,
                    "word": " is",
                    "probability": 0.90380859375
                },
                {
                    "start": 221.96,
                    "end": 222.22,
                    "word": " an",
                    "probability": 0.875
                },
                {
                    "start": 222.22,
                    "end": 222.5,
                    "word": " open",
                    "probability": 0.75927734375
                },
                {
                    "start": 222.5,
                    "end": 222.74,
                    "word": " source",
                    "probability": 0.3701171875
                },
                {
                    "start": 222.74,
                    "end": 223.12,
                    "word": " memory",
                    "probability": 0.8076171875
                },
                {
                    "start": 223.12,
                    "end": 223.54,
                    "word": " forensic",
                    "probability": 0.58642578125
                },
                {
                    "start": 223.54,
                    "end": 224.08,
                    "word": " framework",
                    "probability": 0.8037109375
                }
            ]
        },
        {
            "id": 58,
            "seek": 22804,
            "start": 224.08,
            "end": 227.64,
            "text": " for incident response and malware analysis.",
            "tokens": [
                51078,
                337,
                9348,
                4134,
                293,
                40747,
                5215,
                13,
                51270
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3389945781749228,
            "compression_ratio": 1.6798029556650247,
            "no_speech_prob": 0.003993988037109375,
            "words": [
                {
                    "start": 224.08,
                    "end": 224.5,
                    "word": " for",
                    "probability": 0.89404296875
                },
                {
                    "start": 224.5,
                    "end": 224.92,
                    "word": " incident",
                    "probability": 0.77294921875
                },
                {
                    "start": 224.92,
                    "end": 225.52,
                    "word": " response",
                    "probability": 0.86865234375
                },
                {
                    "start": 225.52,
                    "end": 225.96,
                    "word": " and",
                    "probability": 0.890625
                },
                {
                    "start": 225.96,
                    "end": 226.4,
                    "word": " malware",
                    "probability": 0.783203125
                },
                {
                    "start": 226.4,
                    "end": 226.82,
                    "word": " analysis",
                    "probability": 0.81298828125
                },
                {
                    "start": 226.82,
                    "end": 227.64,
                    "word": ".",
                    "probability": 0.986328125
                }
            ]
        },
        {
            "id": 59,
            "seek": 22804,
            "start": 228.04,
            "end": 230.98,
            "text": " This tool search for malware in memory image",
            "tokens": [
                51270,
                639,
                2290,
                3164,
                337,
                40747,
                294,
                4675,
                3256,
                51424
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3389945781749228,
            "compression_ratio": 1.6798029556650247,
            "no_speech_prob": 0.003993988037109375,
            "words": [
                {
                    "start": 228.04,
                    "end": 228.34,
                    "word": " This",
                    "probability": 0.7626953125
                },
                {
                    "start": 228.34,
                    "end": 228.7,
                    "word": " tool",
                    "probability": 0.80859375
                },
                {
                    "start": 228.7,
                    "end": 229.1,
                    "word": " search",
                    "probability": 0.299560546875
                },
                {
                    "start": 229.1,
                    "end": 229.36,
                    "word": " for",
                    "probability": 0.88037109375
                },
                {
                    "start": 229.36,
                    "end": 229.72,
                    "word": " malware",
                    "probability": 0.7548828125
                },
                {
                    "start": 229.72,
                    "end": 230.24,
                    "word": " in",
                    "probability": 0.89501953125
                },
                {
                    "start": 230.24,
                    "end": 230.58,
                    "word": " memory",
                    "probability": 0.7705078125
                },
                {
                    "start": 230.58,
                    "end": 230.98,
                    "word": " image",
                    "probability": 0.498291015625
                }
            ]
        },
        {
            "id": 60,
            "seek": 22804,
            "start": 230.98,
            "end": 233.37,
            "text": " and dumps configuration data.",
            "tokens": [
                51424,
                293,
                11430,
                82,
                11694,
                1412,
                13,
                51532
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3389945781749228,
            "compression_ratio": 1.6798029556650247,
            "no_speech_prob": 0.003993988037109375,
            "words": [
                {
                    "start": 230.98,
                    "end": 231.42,
                    "word": " and",
                    "probability": 0.87060546875
                },
                {
                    "start": 231.42,
                    "end": 231.92,
                    "word": " dumps",
                    "probability": 0.88134765625
                },
                {
                    "start": 231.92,
                    "end": 232.36,
                    "word": " configuration",
                    "probability": 0.81494140625
                },
                {
                    "start": 232.36,
                    "end": 232.96,
                    "word": " data",
                    "probability": 0.8212890625
                },
                {
                    "start": 232.96,
                    "end": 233.37,
                    "word": ".",
                    "probability": 0.9765625
                }
            ]
        },
        {
            "id": 61,
            "seek": 22804,
            "start": 234.99,
            "end": 237.34,
            "text": " This is an example of MarukonScan",
            "tokens": [
                51624,
                639,
                307,
                364,
                1365,
                295,
                2039,
                2034,
                266,
                50,
                7035,
                51742
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3389945781749228,
            "compression_ratio": 1.6798029556650247,
            "no_speech_prob": 0.003993988037109375,
            "words": [
                {
                    "start": 234.99,
                    "end": 235.4,
                    "word": " This",
                    "probability": 0.8173828125
                },
                {
                    "start": 235.4,
                    "end": 235.62,
                    "word": " is",
                    "probability": 0.90966796875
                },
                {
                    "start": 235.62,
                    "end": 235.82,
                    "word": " an",
                    "probability": 0.9033203125
                },
                {
                    "start": 235.82,
                    "end": 236.22,
                    "word": " example",
                    "probability": 0.9267578125
                },
                {
                    "start": 236.22,
                    "end": 236.64,
                    "word": " of",
                    "probability": 0.90234375
                },
                {
                    "start": 236.64,
                    "end": 237.34,
                    "word": " MarukonScan",
                    "probability": 0.95888671875
                }
            ]
        },
        {
            "id": 62,
            "seek": 25666,
            "start": 237.34,
            "end": 240.26,
            "text": " dumping RedRibs malware configuration.",
            "tokens": [
                50366,
                42224,
                4477,
                49,
                897,
                82,
                40747,
                11694,
                13,
                50516
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4216954118904026,
            "compression_ratio": 1.5487179487179488,
            "no_speech_prob": 0.013580322265625,
            "words": [
                {
                    "start": 237.34,
                    "end": 237.86,
                    "word": " dumping",
                    "probability": 0.1456298828125
                },
                {
                    "start": 237.86,
                    "end": 238.6,
                    "word": " RedRibs",
                    "probability": 0.48468017578125
                },
                {
                    "start": 238.6,
                    "end": 238.82,
                    "word": " malware",
                    "probability": 0.72412109375
                },
                {
                    "start": 238.82,
                    "end": 239.56,
                    "word": " configuration",
                    "probability": 0.77734375
                },
                {
                    "start": 239.56,
                    "end": 240.26,
                    "word": ".",
                    "probability": 0.8828125
                }
            ]
        },
        {
            "id": 63,
            "seek": 25666,
            "start": 240.26,
            "end": 243.36,
            "text": " You can see C2 server, encryption key,",
            "tokens": [
                50516,
                509,
                393,
                536,
                383,
                17,
                7154,
                11,
                29575,
                2141,
                11,
                50656
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4216954118904026,
            "compression_ratio": 1.5487179487179488,
            "no_speech_prob": 0.013580322265625,
            "words": [
                {
                    "start": 240.26,
                    "end": 240.56,
                    "word": " You",
                    "probability": 0.87646484375
                },
                {
                    "start": 240.56,
                    "end": 240.76,
                    "word": " can",
                    "probability": 0.89599609375
                },
                {
                    "start": 240.76,
                    "end": 241.06,
                    "word": " see",
                    "probability": 0.79833984375
                },
                {
                    "start": 241.06,
                    "end": 241.46,
                    "word": " C2",
                    "probability": 0.522369384765625
                },
                {
                    "start": 241.46,
                    "end": 241.9,
                    "word": " server",
                    "probability": 0.5986328125
                },
                {
                    "start": 241.9,
                    "end": 242.26,
                    "word": ",",
                    "probability": 0.8330078125
                },
                {
                    "start": 242.26,
                    "end": 242.68,
                    "word": " encryption",
                    "probability": 0.77587890625
                },
                {
                    "start": 242.68,
                    "end": 243.12,
                    "word": " key",
                    "probability": 0.8291015625
                },
                {
                    "start": 243.12,
                    "end": 243.36,
                    "word": ",",
                    "probability": 0.982421875
                }
            ]
        },
        {
            "id": 64,
            "seek": 25666,
            "start": 243.36,
            "end": 245.62,
            "text": " mutex, and user agent.",
            "tokens": [
                50656,
                24523,
                87,
                11,
                293,
                4195,
                9461,
                13,
                50766
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4216954118904026,
            "compression_ratio": 1.5487179487179488,
            "no_speech_prob": 0.013580322265625,
            "words": [
                {
                    "start": 243.36,
                    "end": 243.84,
                    "word": " mutex",
                    "probability": 0.791259765625
                },
                {
                    "start": 243.84,
                    "end": 244.14,
                    "word": ",",
                    "probability": 0.56201171875
                },
                {
                    "start": 244.14,
                    "end": 244.34,
                    "word": " and",
                    "probability": 0.8837890625
                },
                {
                    "start": 244.34,
                    "end": 244.74,
                    "word": " user",
                    "probability": 0.75927734375
                },
                {
                    "start": 244.74,
                    "end": 245.18,
                    "word": " agent",
                    "probability": 0.74560546875
                },
                {
                    "start": 245.18,
                    "end": 245.62,
                    "word": ".",
                    "probability": 0.9716796875
                }
            ]
        },
        {
            "id": 65,
            "seek": 25666,
            "start": 246.42,
            "end": 250.06,
            "text": " This tool dumps different configuration data",
            "tokens": [
                50818,
                639,
                2290,
                11430,
                82,
                819,
                11694,
                1412,
                51004
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4216954118904026,
            "compression_ratio": 1.5487179487179488,
            "no_speech_prob": 0.013580322265625,
            "words": [
                {
                    "start": 246.42,
                    "end": 246.76,
                    "word": " This",
                    "probability": 0.79638671875
                },
                {
                    "start": 246.76,
                    "end": 247.04,
                    "word": " tool",
                    "probability": 0.62158203125
                },
                {
                    "start": 247.04,
                    "end": 247.54,
                    "word": " dumps",
                    "probability": 0.9013671875
                },
                {
                    "start": 247.54,
                    "end": 248.14,
                    "word": " different",
                    "probability": 0.72412109375
                },
                {
                    "start": 248.14,
                    "end": 249.52,
                    "word": " configuration",
                    "probability": 0.7705078125
                },
                {
                    "start": 249.52,
                    "end": 250.06,
                    "word": " data",
                    "probability": 0.77978515625
                }
            ]
        },
        {
            "id": 66,
            "seek": 25666,
            "start": 250.06,
            "end": 251.98,
            "text": " depending on malware.",
            "tokens": [
                51004,
                5413,
                322,
                40747,
                13,
                51092
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4216954118904026,
            "compression_ratio": 1.5487179487179488,
            "no_speech_prob": 0.013580322265625,
            "words": [
                {
                    "start": 250.06,
                    "end": 250.6,
                    "word": " depending",
                    "probability": 0.7099609375
                },
                {
                    "start": 250.6,
                    "end": 251.1,
                    "word": " on",
                    "probability": 0.89794921875
                },
                {
                    "start": 251.1,
                    "end": 251.54,
                    "word": " malware",
                    "probability": 0.7900390625
                },
                {
                    "start": 251.54,
                    "end": 251.98,
                    "word": ".",
                    "probability": 0.9765625
                }
            ]
        },
        {
            "id": 67,
            "seek": 25666,
            "start": 254.94,
            "end": 259.2,
            "text": " Now, MarukonScan support over 28 malware.",
            "tokens": [
                51170,
                823,
                11,
                2039,
                2034,
                266,
                50,
                7035,
                1406,
                670,
                7562,
                40747,
                13,
                51360
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4216954118904026,
            "compression_ratio": 1.5487179487179488,
            "no_speech_prob": 0.013580322265625,
            "words": [
                {
                    "start": 254.94,
                    "end": 255.38,
                    "word": " Now",
                    "probability": 0.80126953125
                },
                {
                    "start": 255.38,
                    "end": 255.72,
                    "word": ",",
                    "probability": 0.66162109375
                },
                {
                    "start": 255.72,
                    "end": 256.14,
                    "word": " MarukonScan",
                    "probability": 0.220037841796875
                },
                {
                    "start": 256.14,
                    "end": 256.64,
                    "word": " support",
                    "probability": 0.50244140625
                },
                {
                    "start": 256.64,
                    "end": 257.14,
                    "word": " over",
                    "probability": 0.86376953125
                },
                {
                    "start": 257.14,
                    "end": 257.86,
                    "word": " 28",
                    "probability": 0.8818359375
                },
                {
                    "start": 257.86,
                    "end": 258.32,
                    "word": " malware",
                    "probability": 0.76806640625
                },
                {
                    "start": 258.32,
                    "end": 259.2,
                    "word": ".",
                    "probability": 0.94140625
                }
            ]
        },
        {
            "id": 68,
            "seek": 25666,
            "start": 260.84,
            "end": 263.88,
            "text": " MarukonScan support most of the malware families",
            "tokens": [
                51472,
                2039,
                2034,
                266,
                50,
                7035,
                1406,
                881,
                295,
                264,
                40747,
                4466,
                51620
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4216954118904026,
            "compression_ratio": 1.5487179487179488,
            "no_speech_prob": 0.013580322265625,
            "words": [
                {
                    "start": 260.84,
                    "end": 261.5,
                    "word": " MarukonScan",
                    "probability": 0.95693359375
                },
                {
                    "start": 261.5,
                    "end": 262.16,
                    "word": " support",
                    "probability": 0.84423828125
                },
                {
                    "start": 262.16,
                    "end": 262.58,
                    "word": " most",
                    "probability": 0.78173828125
                },
                {
                    "start": 262.58,
                    "end": 262.78,
                    "word": " of",
                    "probability": 0.904296875
                },
                {
                    "start": 262.78,
                    "end": 262.92,
                    "word": " the",
                    "probability": 0.80517578125
                },
                {
                    "start": 262.92,
                    "end": 263.22,
                    "word": " malware",
                    "probability": 0.630859375
                },
                {
                    "start": 263.22,
                    "end": 263.88,
                    "word": " families",
                    "probability": 0.81640625
                }
            ]
        },
        {
            "id": 69,
            "seek": 25666,
            "start": 263.88,
            "end": 267.42,
            "text": " reported in any run's top 10 threat report.",
            "tokens": [
                51620,
                7055,
                294,
                604,
                1190,
                311,
                1192,
                1266,
                4734,
                2275,
                13,
                51782
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4216954118904026,
            "compression_ratio": 1.5487179487179488,
            "no_speech_prob": 0.013580322265625,
            "words": [
                {
                    "start": 263.88,
                    "end": 264.38,
                    "word": " reported",
                    "probability": 0.8232421875
                },
                {
                    "start": 264.38,
                    "end": 264.98,
                    "word": " in",
                    "probability": 0.89599609375
                },
                {
                    "start": 264.98,
                    "end": 265.38,
                    "word": " any",
                    "probability": 0.720703125
                },
                {
                    "start": 265.38,
                    "end": 265.74,
                    "word": " run's",
                    "probability": 0.4647064208984375
                },
                {
                    "start": 265.74,
                    "end": 265.96,
                    "word": " top",
                    "probability": 0.71435546875
                },
                {
                    "start": 265.96,
                    "end": 266.22,
                    "word": " 10",
                    "probability": 0.61474609375
                },
                {
                    "start": 266.22,
                    "end": 266.48,
                    "word": " threat",
                    "probability": 0.301025390625
                },
                {
                    "start": 266.48,
                    "end": 266.98,
                    "word": " report",
                    "probability": 0.82421875
                },
                {
                    "start": 266.98,
                    "end": 267.42,
                    "word": ".",
                    "probability": 0.98681640625
                }
            ]
        },
        {
            "id": 70,
            "seek": 28516,
            "start": 271.04,
            "end": 275.68,
            "text": " So, I think you have a question here.",
            "tokens": [
                50414,
                407,
                11,
                286,
                519,
                291,
                362,
                257,
                1168,
                510,
                13,
                50626
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2964984982846731,
            "compression_ratio": 1.5026455026455026,
            "no_speech_prob": 0.0025501251220703125,
            "words": [
                {
                    "start": 271.04,
                    "end": 271.54,
                    "word": " So",
                    "probability": 0.63427734375
                },
                {
                    "start": 271.54,
                    "end": 272.0,
                    "word": ",",
                    "probability": 0.36279296875
                },
                {
                    "start": 272.0,
                    "end": 272.16,
                    "word": " I",
                    "probability": 0.9794921875
                },
                {
                    "start": 272.16,
                    "end": 272.46,
                    "word": " think",
                    "probability": 0.80712890625
                },
                {
                    "start": 272.46,
                    "end": 273.0,
                    "word": " you",
                    "probability": 0.87109375
                },
                {
                    "start": 273.0,
                    "end": 273.36,
                    "word": " have",
                    "probability": 0.86279296875
                },
                {
                    "start": 273.64,
                    "end": 274.46,
                    "word": " a question",
                    "probability": 0.77734375
                },
                {
                    "start": 274.46,
                    "end": 274.92,
                    "word": " here",
                    "probability": 0.80615234375
                },
                {
                    "start": 274.92,
                    "end": 275.68,
                    "word": ".",
                    "probability": 0.541015625
                }
            ]
        },
        {
            "id": 71,
            "seek": 28516,
            "start": 275.68,
            "end": 277.14,
            "text": " Why use ValTT?",
            "tokens": [
                50626,
                1545,
                764,
                7188,
                28178,
                30,
                50708
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2964984982846731,
            "compression_ratio": 1.5026455026455026,
            "no_speech_prob": 0.0025501251220703125,
            "words": [
                {
                    "start": 275.68,
                    "end": 275.88,
                    "word": " Why",
                    "probability": 0.70166015625
                },
                {
                    "start": 275.88,
                    "end": 276.28,
                    "word": " use",
                    "probability": 0.77880859375
                },
                {
                    "start": 276.28,
                    "end": 276.7,
                    "word": " ValTT",
                    "probability": 0.026352137327194214
                },
                {
                    "start": 276.7,
                    "end": 277.14,
                    "word": "?",
                    "probability": 0.93212890625
                }
            ]
        },
        {
            "id": 72,
            "seek": 28516,
            "start": 280.62,
            "end": 284.06,
            "text": " It is effective to analyze the memory dump.",
            "tokens": [
                50790,
                467,
                307,
                31482,
                1836,
                488,
                281,
                12477,
                264,
                4675,
                11430,
                13,
                50954
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2964984982846731,
            "compression_ratio": 1.5026455026455026,
            "no_speech_prob": 0.0025501251220703125,
            "words": [
                {
                    "start": 280.62,
                    "end": 280.98,
                    "word": " It",
                    "probability": 0.79541015625
                },
                {
                    "start": 280.98,
                    "end": 281.18,
                    "word": " is",
                    "probability": 0.8759765625
                },
                {
                    "start": 281.18,
                    "end": 281.78,
                    "word": " effective",
                    "probability": 0.4743245442708333
                },
                {
                    "start": 281.78,
                    "end": 281.88,
                    "word": " to",
                    "probability": 0.8935546875
                },
                {
                    "start": 281.88,
                    "end": 282.32,
                    "word": " analyze",
                    "probability": 0.70556640625
                },
                {
                    "start": 282.32,
                    "end": 282.56,
                    "word": " the",
                    "probability": 0.5869140625
                },
                {
                    "start": 282.56,
                    "end": 282.84,
                    "word": " memory",
                    "probability": 0.86181640625
                },
                {
                    "start": 282.84,
                    "end": 283.18,
                    "word": " dump",
                    "probability": 0.85009765625
                },
                {
                    "start": 283.18,
                    "end": 284.06,
                    "word": ".",
                    "probability": 0.861328125
                }
            ]
        },
        {
            "id": 73,
            "seek": 28516,
            "start": 284.06,
            "end": 286.44,
            "text": " There are two advantages.",
            "tokens": [
                50954,
                821,
                366,
                732,
                14906,
                13,
                51078
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2964984982846731,
            "compression_ratio": 1.5026455026455026,
            "no_speech_prob": 0.0025501251220703125,
            "words": [
                {
                    "start": 284.06,
                    "end": 284.28,
                    "word": " There",
                    "probability": 0.78564453125
                },
                {
                    "start": 284.28,
                    "end": 284.54,
                    "word": " are",
                    "probability": 0.89208984375
                },
                {
                    "start": 284.54,
                    "end": 284.8,
                    "word": " two",
                    "probability": 0.81494140625
                },
                {
                    "start": 284.8,
                    "end": 285.56,
                    "word": " advantages",
                    "probability": 0.84033203125
                },
                {
                    "start": 285.56,
                    "end": 286.44,
                    "word": ".",
                    "probability": 0.94140625
                }
            ]
        },
        {
            "id": 74,
            "seek": 28516,
            "start": 286.5,
            "end": 289.38,
            "text": " First, no need to unpack.",
            "tokens": [
                51078,
                2386,
                11,
                572,
                643,
                281,
                26699,
                13,
                51222
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2964984982846731,
            "compression_ratio": 1.5026455026455026,
            "no_speech_prob": 0.0025501251220703125,
            "words": [
                {
                    "start": 286.5,
                    "end": 286.98,
                    "word": " First",
                    "probability": 0.888671875
                },
                {
                    "start": 286.98,
                    "end": 287.52,
                    "word": ",",
                    "probability": 0.96875
                },
                {
                    "start": 287.52,
                    "end": 287.8,
                    "word": " no",
                    "probability": 0.88232421875
                },
                {
                    "start": 287.8,
                    "end": 288.08,
                    "word": " need",
                    "probability": 0.76611328125
                },
                {
                    "start": 288.08,
                    "end": 288.32,
                    "word": " to",
                    "probability": 0.91064453125
                },
                {
                    "start": 288.32,
                    "end": 288.78,
                    "word": " unpack",
                    "probability": 0.802734375
                },
                {
                    "start": 288.78,
                    "end": 289.38,
                    "word": ".",
                    "probability": 0.93994140625
                }
            ]
        },
        {
            "id": 75,
            "seek": 28516,
            "start": 289.38,
            "end": 291.76,
            "text": " When extracting configuration data,",
            "tokens": [
                51222,
                1133,
                49844,
                11694,
                1412,
                11,
                51342
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2964984982846731,
            "compression_ratio": 1.5026455026455026,
            "no_speech_prob": 0.0025501251220703125,
            "words": [
                {
                    "start": 289.38,
                    "end": 289.7,
                    "word": " When",
                    "probability": 0.7412109375
                },
                {
                    "start": 289.7,
                    "end": 290.34,
                    "word": " extracting",
                    "probability": 0.65576171875
                },
                {
                    "start": 290.34,
                    "end": 290.92,
                    "word": " configuration",
                    "probability": 0.310791015625
                },
                {
                    "start": 290.92,
                    "end": 291.52,
                    "word": " data",
                    "probability": 0.82275390625
                },
                {
                    "start": 291.52,
                    "end": 291.76,
                    "word": ",",
                    "probability": 0.87353515625
                }
            ]
        },
        {
            "id": 76,
            "seek": 28516,
            "start": 291.76,
            "end": 294.8,
            "text": " it is not necessary to unpack malware.",
            "tokens": [
                51342,
                309,
                307,
                406,
                4818,
                281,
                26699,
                40747,
                13,
                51508
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2964984982846731,
            "compression_ratio": 1.5026455026455026,
            "no_speech_prob": 0.0025501251220703125,
            "words": [
                {
                    "start": 291.76,
                    "end": 292.02,
                    "word": " it",
                    "probability": 0.89697265625
                },
                {
                    "start": 292.02,
                    "end": 292.2,
                    "word": " is",
                    "probability": 0.90625
                },
                {
                    "start": 292.2,
                    "end": 292.48,
                    "word": " not",
                    "probability": 0.8955078125
                },
                {
                    "start": 292.48,
                    "end": 292.92,
                    "word": " necessary",
                    "probability": 0.9091796875
                },
                {
                    "start": 292.92,
                    "end": 293.34,
                    "word": " to",
                    "probability": 0.91845703125
                },
                {
                    "start": 293.34,
                    "end": 293.84,
                    "word": " unpack",
                    "probability": 0.7978515625
                },
                {
                    "start": 293.84,
                    "end": 294.22,
                    "word": " malware",
                    "probability": 0.2744140625
                },
                {
                    "start": 294.22,
                    "end": 294.8,
                    "word": ".",
                    "probability": 0.99169921875
                }
            ]
        },
        {
            "id": 77,
            "seek": 28516,
            "start": 294.8,
            "end": 297.38,
            "text": " Second, no need to decode",
            "tokens": [
                51508,
                5736,
                11,
                572,
                643,
                281,
                979,
                1429,
                51656
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2964984982846731,
            "compression_ratio": 1.5026455026455026,
            "no_speech_prob": 0.0025501251220703125,
            "words": [
                {
                    "start": 294.8,
                    "end": 295.4,
                    "word": " Second",
                    "probability": 0.7333984375
                },
                {
                    "start": 295.4,
                    "end": 295.9,
                    "word": ",",
                    "probability": 0.99365234375
                },
                {
                    "start": 295.9,
                    "end": 296.36,
                    "word": " no",
                    "probability": 0.89892578125
                },
                {
                    "start": 296.36,
                    "end": 296.64,
                    "word": " need",
                    "probability": 0.79150390625
                },
                {
                    "start": 296.64,
                    "end": 296.88,
                    "word": " to",
                    "probability": 0.9111328125
                },
                {
                    "start": 296.88,
                    "end": 297.38,
                    "word": " decode",
                    "probability": 0.934326171875
                }
            ]
        },
        {
            "id": 78,
            "seek": 28516,
            "start": 297.38,
            "end": 300.48,
            "text": " because encoded configuration data",
            "tokens": [
                51656,
                570,
                2058,
                12340,
                11694,
                1412,
                51778
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2964984982846731,
            "compression_ratio": 1.5026455026455026,
            "no_speech_prob": 0.0025501251220703125,
            "words": [
                {
                    "start": 297.38,
                    "end": 298.72,
                    "word": " because",
                    "probability": 0.400634765625
                },
                {
                    "start": 298.72,
                    "end": 299.34,
                    "word": " encoded",
                    "probability": 0.901611328125
                },
                {
                    "start": 299.34,
                    "end": 299.88,
                    "word": " configuration",
                    "probability": 0.8125
                },
                {
                    "start": 299.88,
                    "end": 300.48,
                    "word": " data",
                    "probability": 0.80322265625
                }
            ]
        },
        {
            "id": 79,
            "seek": 31326,
            "start": 300.48,
            "end": 303.99,
            "text": " may be already decoded on memory.",
            "tokens": [
                50370,
                815,
                312,
                1217,
                979,
                12340,
                322,
                4675,
                13,
                50532
            ],
            "temperature": 0.0,
            "avg_logprob": -0.283697276230318,
            "compression_ratio": 1.601123595505618,
            "no_speech_prob": 0.00299072265625,
            "words": [
                {
                    "start": 300.48,
                    "end": 300.8,
                    "word": " may",
                    "probability": 0.47607421875
                },
                {
                    "start": 300.8,
                    "end": 301.08,
                    "word": " be",
                    "probability": 0.822265625
                },
                {
                    "start": 301.08,
                    "end": 302.04,
                    "word": " already",
                    "probability": 0.82470703125
                },
                {
                    "start": 302.04,
                    "end": 302.74,
                    "word": " decoded",
                    "probability": 0.882080078125
                },
                {
                    "start": 302.74,
                    "end": 303.18,
                    "word": " on",
                    "probability": 0.83203125
                },
                {
                    "start": 303.18,
                    "end": 303.58,
                    "word": " memory",
                    "probability": 0.79833984375
                },
                {
                    "start": 303.58,
                    "end": 303.99,
                    "word": ".",
                    "probability": 0.822265625
                }
            ]
        },
        {
            "id": 80,
            "seek": 31326,
            "start": 304.72,
            "end": 306.68,
            "text": " You may be able to skip running",
            "tokens": [
                50580,
                509,
                815,
                312,
                1075,
                281,
                10023,
                2614,
                50686
            ],
            "temperature": 0.0,
            "avg_logprob": -0.283697276230318,
            "compression_ratio": 1.601123595505618,
            "no_speech_prob": 0.00299072265625,
            "words": [
                {
                    "start": 304.72,
                    "end": 305.0,
                    "word": " You",
                    "probability": 0.8896484375
                },
                {
                    "start": 305.0,
                    "end": 305.32,
                    "word": " may",
                    "probability": 0.89404296875
                },
                {
                    "start": 305.32,
                    "end": 305.46,
                    "word": " be",
                    "probability": 0.89990234375
                },
                {
                    "start": 305.46,
                    "end": 305.7,
                    "word": " able",
                    "probability": 0.8984375
                },
                {
                    "start": 305.7,
                    "end": 305.96,
                    "word": " to",
                    "probability": 0.90869140625
                },
                {
                    "start": 305.96,
                    "end": 306.26,
                    "word": " skip",
                    "probability": 0.8583984375
                },
                {
                    "start": 306.26,
                    "end": 306.68,
                    "word": " running",
                    "probability": 0.398193359375
                }
            ]
        },
        {
            "id": 81,
            "seek": 31326,
            "start": 306.68,
            "end": 309.17,
            "text": " how to decrypt configuration data.",
            "tokens": [
                50686,
                577,
                281,
                979,
                627,
                662,
                11694,
                1412,
                13,
                50790
            ],
            "temperature": 0.0,
            "avg_logprob": -0.283697276230318,
            "compression_ratio": 1.601123595505618,
            "no_speech_prob": 0.00299072265625,
            "words": [
                {
                    "start": 306.68,
                    "end": 307.1,
                    "word": " how",
                    "probability": 0.6640625
                },
                {
                    "start": 307.1,
                    "end": 307.34,
                    "word": " to",
                    "probability": 0.89404296875
                },
                {
                    "start": 307.34,
                    "end": 307.8,
                    "word": " decrypt",
                    "probability": 0.96728515625
                },
                {
                    "start": 307.8,
                    "end": 308.44,
                    "word": " configuration",
                    "probability": 0.75634765625
                },
                {
                    "start": 308.44,
                    "end": 308.76,
                    "word": " data",
                    "probability": 0.779296875
                },
                {
                    "start": 308.76,
                    "end": 309.17,
                    "word": ".",
                    "probability": 0.97802734375
                }
            ]
        },
        {
            "id": 82,
            "seek": 31326,
            "start": 312.18,
            "end": 315.4,
            "text": " In addition, this tool also dumps",
            "tokens": [
                50868,
                682,
                4500,
                11,
                341,
                2290,
                611,
                11430,
                82,
                51030
            ],
            "temperature": 0.0,
            "avg_logprob": -0.283697276230318,
            "compression_ratio": 1.601123595505618,
            "no_speech_prob": 0.00299072265625,
            "words": [
                {
                    "start": 312.18,
                    "end": 312.36,
                    "word": " In",
                    "probability": 0.83349609375
                },
                {
                    "start": 312.36,
                    "end": 312.68,
                    "word": " addition",
                    "probability": 0.8642578125
                },
                {
                    "start": 312.68,
                    "end": 313.52,
                    "word": ",",
                    "probability": 0.9541015625
                },
                {
                    "start": 313.52,
                    "end": 313.92,
                    "word": " this",
                    "probability": 0.8525390625
                },
                {
                    "start": 313.92,
                    "end": 314.22,
                    "word": " tool",
                    "probability": 0.7431640625
                },
                {
                    "start": 314.22,
                    "end": 314.86,
                    "word": " also",
                    "probability": 0.84423828125
                },
                {
                    "start": 314.86,
                    "end": 315.4,
                    "word": " dumps",
                    "probability": 0.877685546875
                }
            ]
        },
        {
            "id": 83,
            "seek": 31326,
            "start": 315.4,
            "end": 318.56,
            "text": " more than configuration data if needed.",
            "tokens": [
                51030,
                544,
                813,
                11694,
                1412,
                498,
                2978,
                13,
                51160
            ],
            "temperature": 0.0,
            "avg_logprob": -0.283697276230318,
            "compression_ratio": 1.601123595505618,
            "no_speech_prob": 0.00299072265625,
            "words": [
                {
                    "start": 315.4,
                    "end": 315.74,
                    "word": " more",
                    "probability": 0.8896484375
                },
                {
                    "start": 315.74,
                    "end": 315.98,
                    "word": " than",
                    "probability": 0.84375
                },
                {
                    "start": 315.98,
                    "end": 316.58,
                    "word": " configuration",
                    "probability": 0.83447265625
                },
                {
                    "start": 316.58,
                    "end": 317.06,
                    "word": " data",
                    "probability": 0.81591796875
                },
                {
                    "start": 317.06,
                    "end": 317.4,
                    "word": " if",
                    "probability": 0.75634765625
                },
                {
                    "start": 317.4,
                    "end": 317.74,
                    "word": " needed",
                    "probability": 0.70703125
                },
                {
                    "start": 317.74,
                    "end": 318.56,
                    "word": ".",
                    "probability": 0.974609375
                }
            ]
        },
        {
            "id": 84,
            "seek": 31326,
            "start": 318.88,
            "end": 321.16,
            "text": " In addition to configuration data,",
            "tokens": [
                51204,
                682,
                4500,
                281,
                11694,
                1412,
                11,
                51314
            ],
            "temperature": 0.0,
            "avg_logprob": -0.283697276230318,
            "compression_ratio": 1.601123595505618,
            "no_speech_prob": 0.00299072265625,
            "words": [
                {
                    "start": 318.88,
                    "end": 319.14,
                    "word": " In",
                    "probability": 0.900390625
                },
                {
                    "start": 319.14,
                    "end": 319.4,
                    "word": " addition",
                    "probability": 0.861328125
                },
                {
                    "start": 319.4,
                    "end": 319.72,
                    "word": " to",
                    "probability": 0.90380859375
                },
                {
                    "start": 319.72,
                    "end": 320.28,
                    "word": " configuration",
                    "probability": 0.8134765625
                },
                {
                    "start": 320.28,
                    "end": 320.84,
                    "word": " data",
                    "probability": 0.81982421875
                },
                {
                    "start": 320.84,
                    "end": 321.16,
                    "word": ",",
                    "probability": 0.91259765625
                }
            ]
        },
        {
            "id": 85,
            "seek": 31326,
            "start": 321.16,
            "end": 325.64,
            "text": " it dumps decoded strings and DGA domains.",
            "tokens": [
                51314,
                309,
                11430,
                82,
                979,
                12340,
                13985,
                293,
                413,
                12570,
                25514,
                13,
                51520
            ],
            "temperature": 0.0,
            "avg_logprob": -0.283697276230318,
            "compression_ratio": 1.601123595505618,
            "no_speech_prob": 0.00299072265625,
            "words": [
                {
                    "start": 321.16,
                    "end": 321.34,
                    "word": " it",
                    "probability": 0.88671875
                },
                {
                    "start": 321.34,
                    "end": 321.78,
                    "word": " dumps",
                    "probability": 0.871337890625
                },
                {
                    "start": 321.78,
                    "end": 322.38,
                    "word": " decoded",
                    "probability": 0.88427734375
                },
                {
                    "start": 322.38,
                    "end": 323.22,
                    "word": " strings",
                    "probability": 0.72021484375
                },
                {
                    "start": 323.22,
                    "end": 323.98,
                    "word": " and",
                    "probability": 0.8662109375
                },
                {
                    "start": 323.98,
                    "end": 324.42,
                    "word": " DGA",
                    "probability": 0.42333984375
                },
                {
                    "start": 324.42,
                    "end": 324.82,
                    "word": " domains",
                    "probability": 0.77880859375
                },
                {
                    "start": 324.82,
                    "end": 325.64,
                    "word": ".",
                    "probability": 0.9931640625
                }
            ]
        },
        {
            "id": 86,
            "seek": 31326,
            "start": 327.85,
            "end": 330.24,
            "text": " This is an example of MarukonScan",
            "tokens": [
                51660,
                639,
                307,
                364,
                1365,
                295,
                2039,
                2034,
                266,
                50,
                7035,
                51778
            ],
            "temperature": 0.0,
            "avg_logprob": -0.283697276230318,
            "compression_ratio": 1.601123595505618,
            "no_speech_prob": 0.00299072265625,
            "words": [
                {
                    "start": 327.85,
                    "end": 328.26,
                    "word": " This",
                    "probability": 0.810546875
                },
                {
                    "start": 328.26,
                    "end": 328.46,
                    "word": " is",
                    "probability": 0.90576171875
                },
                {
                    "start": 328.46,
                    "end": 328.66,
                    "word": " an",
                    "probability": 0.84619140625
                },
                {
                    "start": 328.66,
                    "end": 329.1,
                    "word": " example",
                    "probability": 0.9189453125
                },
                {
                    "start": 329.1,
                    "end": 329.54,
                    "word": " of",
                    "probability": 0.7529296875
                },
                {
                    "start": 329.54,
                    "end": 330.24,
                    "word": " MarukonScan",
                    "probability": 0.40621185302734375
                }
            ]
        },
        {
            "id": 87,
            "seek": 34110,
            "start": 331.01,
            "end": 333.82,
            "text": " dumping web of malware configuration.",
            "tokens": [
                50414,
                42224,
                3670,
                295,
                40747,
                11694,
                13,
                50546
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4134457264291613,
            "compression_ratio": 1.5232558139534884,
            "no_speech_prob": 0.005535125732421875,
            "words": [
                {
                    "start": 331.01,
                    "end": 331.52,
                    "word": " dumping",
                    "probability": 0.04705810546875
                },
                {
                    "start": 331.52,
                    "end": 331.96,
                    "word": " web",
                    "probability": 0.020172119140625
                },
                {
                    "start": 331.96,
                    "end": 332.12,
                    "word": " of",
                    "probability": 0.0242156982421875
                },
                {
                    "start": 332.12,
                    "end": 332.36,
                    "word": " malware",
                    "probability": 0.6142578125
                },
                {
                    "start": 332.36,
                    "end": 333.12,
                    "word": " configuration",
                    "probability": 0.701171875
                },
                {
                    "start": 333.12,
                    "end": 333.82,
                    "word": ".",
                    "probability": 0.4169921875
                }
            ]
        },
        {
            "id": 88,
            "seek": 34110,
            "start": 333.82,
            "end": 338.37,
            "text": " You can see RSA key, bot ID, and DGA domains.",
            "tokens": [
                50546,
                509,
                393,
                536,
                497,
                8886,
                2141,
                11,
                10592,
                7348,
                11,
                293,
                413,
                12570,
                25514,
                13,
                50760
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4134457264291613,
            "compression_ratio": 1.5232558139534884,
            "no_speech_prob": 0.005535125732421875,
            "words": [
                {
                    "start": 333.82,
                    "end": 334.02,
                    "word": " You",
                    "probability": 0.861328125
                },
                {
                    "start": 334.02,
                    "end": 334.2,
                    "word": " can",
                    "probability": 0.89013671875
                },
                {
                    "start": 334.2,
                    "end": 334.52,
                    "word": " see",
                    "probability": 0.77685546875
                },
                {
                    "start": 334.52,
                    "end": 335.02,
                    "word": " RSA",
                    "probability": 0.726806640625
                },
                {
                    "start": 335.02,
                    "end": 335.4,
                    "word": " key",
                    "probability": 0.77197265625
                },
                {
                    "start": 335.4,
                    "end": 335.72,
                    "word": ",",
                    "probability": 0.9033203125
                },
                {
                    "start": 335.72,
                    "end": 335.88,
                    "word": " bot",
                    "probability": 0.63623046875
                },
                {
                    "start": 335.88,
                    "end": 336.24,
                    "word": " ID",
                    "probability": 0.7666015625
                },
                {
                    "start": 336.24,
                    "end": 336.78,
                    "word": ",",
                    "probability": 0.42431640625
                },
                {
                    "start": 336.78,
                    "end": 336.82,
                    "word": " and",
                    "probability": 0.8857421875
                },
                {
                    "start": 336.82,
                    "end": 337.34,
                    "word": " DGA",
                    "probability": 0.6396484375
                },
                {
                    "start": 337.34,
                    "end": 337.86,
                    "word": " domains",
                    "probability": 0.52392578125
                },
                {
                    "start": 337.86,
                    "end": 338.37,
                    "word": ".",
                    "probability": 0.9853515625
                }
            ]
        },
        {
            "id": 89,
            "seek": 34110,
            "start": 341.0,
            "end": 343.66,
            "text": " Here is another example of MarukonScan",
            "tokens": [
                50840,
                1692,
                307,
                1071,
                1365,
                295,
                2039,
                2034,
                266,
                50,
                7035,
                50976
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4134457264291613,
            "compression_ratio": 1.5232558139534884,
            "no_speech_prob": 0.005535125732421875,
            "words": [
                {
                    "start": 341.0,
                    "end": 341.46,
                    "word": " Here",
                    "probability": 0.82275390625
                },
                {
                    "start": 341.46,
                    "end": 341.64,
                    "word": " is",
                    "probability": 0.859375
                },
                {
                    "start": 341.64,
                    "end": 341.88,
                    "word": " another",
                    "probability": 0.751953125
                },
                {
                    "start": 341.88,
                    "end": 342.46,
                    "word": " example",
                    "probability": 0.93212890625
                },
                {
                    "start": 342.46,
                    "end": 343.08,
                    "word": " of",
                    "probability": 0.8974609375
                },
                {
                    "start": 343.08,
                    "end": 343.66,
                    "word": " MarukonScan",
                    "probability": 0.24653186798095703
                }
            ]
        },
        {
            "id": 90,
            "seek": 34110,
            "start": 343.66,
            "end": 347.16,
            "text": " dumping phone book malware configuration.",
            "tokens": [
                50976,
                42224,
                2593,
                1446,
                40747,
                11694,
                13,
                51140
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4134457264291613,
            "compression_ratio": 1.5232558139534884,
            "no_speech_prob": 0.005535125732421875,
            "words": [
                {
                    "start": 343.66,
                    "end": 344.32,
                    "word": " dumping",
                    "probability": 0.5693359375
                },
                {
                    "start": 344.32,
                    "end": 344.98,
                    "word": " phone",
                    "probability": 0.460693359375
                },
                {
                    "start": 344.98,
                    "end": 345.2,
                    "word": " book",
                    "probability": 0.427490234375
                },
                {
                    "start": 345.2,
                    "end": 345.56,
                    "word": " malware",
                    "probability": 0.703125
                },
                {
                    "start": 345.56,
                    "end": 346.4,
                    "word": " configuration",
                    "probability": 0.79736328125
                },
                {
                    "start": 346.4,
                    "end": 347.16,
                    "word": ".",
                    "probability": 0.9609375
                }
            ]
        },
        {
            "id": 91,
            "seek": 34110,
            "start": 347.16,
            "end": 352.33,
            "text": " You can see C2 server and decoded strings.",
            "tokens": [
                51140,
                509,
                393,
                536,
                383,
                17,
                7154,
                293,
                979,
                12340,
                13985,
                13,
                51388
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4134457264291613,
            "compression_ratio": 1.5232558139534884,
            "no_speech_prob": 0.005535125732421875,
            "words": [
                {
                    "start": 347.16,
                    "end": 347.34,
                    "word": " You",
                    "probability": 0.87939453125
                },
                {
                    "start": 347.34,
                    "end": 347.56,
                    "word": " can",
                    "probability": 0.89453125
                },
                {
                    "start": 347.56,
                    "end": 347.96,
                    "word": " see",
                    "probability": 0.8017578125
                },
                {
                    "start": 347.96,
                    "end": 348.76,
                    "word": " C2",
                    "probability": 0.691162109375
                },
                {
                    "start": 348.76,
                    "end": 349.24,
                    "word": " server",
                    "probability": 0.69384765625
                },
                {
                    "start": 349.24,
                    "end": 350.0,
                    "word": " and",
                    "probability": 0.7783203125
                },
                {
                    "start": 350.0,
                    "end": 351.12,
                    "word": " decoded",
                    "probability": 0.819580078125
                },
                {
                    "start": 351.12,
                    "end": 351.82,
                    "word": " strings",
                    "probability": 0.75634765625
                },
                {
                    "start": 351.82,
                    "end": 352.33,
                    "word": ".",
                    "probability": 0.9775390625
                }
            ]
        },
        {
            "id": 92,
            "seek": 34110,
            "start": 354.68,
            "end": 359.54,
            "text": " MarukonScan have another feature called MariaSTL scan.",
            "tokens": [
                51514,
                2039,
                2034,
                266,
                50,
                7035,
                362,
                1071,
                4111,
                1219,
                12734,
                6840,
                43,
                11049,
                13,
                51742
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4134457264291613,
            "compression_ratio": 1.5232558139534884,
            "no_speech_prob": 0.005535125732421875,
            "words": [
                {
                    "start": 354.68,
                    "end": 355.16,
                    "word": " MarukonScan",
                    "probability": 0.94013671875
                },
                {
                    "start": 355.16,
                    "end": 355.92,
                    "word": " have",
                    "probability": 0.6318359375
                },
                {
                    "start": 355.92,
                    "end": 356.48,
                    "word": " another",
                    "probability": 0.71923828125
                },
                {
                    "start": 356.48,
                    "end": 356.86,
                    "word": " feature",
                    "probability": 0.814453125
                },
                {
                    "start": 356.86,
                    "end": 357.42,
                    "word": " called",
                    "probability": 0.7734375
                },
                {
                    "start": 357.42,
                    "end": 358.16,
                    "word": " MariaSTL",
                    "probability": 0.3958333333333333
                },
                {
                    "start": 358.16,
                    "end": 358.52,
                    "word": " scan",
                    "probability": 0.47900390625
                },
                {
                    "start": 358.52,
                    "end": 359.54,
                    "word": ".",
                    "probability": 0.67236328125
                }
            ]
        },
        {
            "id": 93,
            "seek": 36928,
            "start": 359.54,
            "end": 362.06,
            "text": " MariaSTL scan function can list the strings",
            "tokens": [
                50364,
                12734,
                6840,
                43,
                11049,
                2445,
                393,
                1329,
                264,
                13985,
                50498
            ],
            "temperature": 0.0,
            "avg_logprob": -0.32775298399584635,
            "compression_ratio": 1.7373737373737375,
            "no_speech_prob": 0.01629638671875,
            "words": [
                {
                    "start": 359.54,
                    "end": 359.94,
                    "word": " MariaSTL",
                    "probability": 0.17790599664052328
                },
                {
                    "start": 359.94,
                    "end": 360.24,
                    "word": " scan",
                    "probability": 0.39892578125
                },
                {
                    "start": 360.24,
                    "end": 360.74,
                    "word": " function",
                    "probability": 0.84130859375
                },
                {
                    "start": 360.74,
                    "end": 361.22,
                    "word": " can",
                    "probability": 0.89306640625
                },
                {
                    "start": 361.22,
                    "end": 361.58,
                    "word": " list",
                    "probability": 0.8544921875
                },
                {
                    "start": 361.58,
                    "end": 361.72,
                    "word": " the",
                    "probability": 0.059234619140625
                },
                {
                    "start": 361.72,
                    "end": 362.06,
                    "word": " strings",
                    "probability": 0.81640625
                }
            ]
        },
        {
            "id": 94,
            "seek": 36928,
            "start": 362.06,
            "end": 364.48,
            "text": " the following process refers.",
            "tokens": [
                50498,
                264,
                3480,
                1399,
                14942,
                13,
                50624
            ],
            "temperature": 0.0,
            "avg_logprob": -0.32775298399584635,
            "compression_ratio": 1.7373737373737375,
            "no_speech_prob": 0.01629638671875,
            "words": [
                {
                    "start": 362.06,
                    "end": 362.38,
                    "word": " the",
                    "probability": 0.69970703125
                },
                {
                    "start": 362.38,
                    "end": 362.74,
                    "word": " following",
                    "probability": 0.865234375
                },
                {
                    "start": 362.74,
                    "end": 363.22,
                    "word": " process",
                    "probability": 0.79736328125
                },
                {
                    "start": 363.22,
                    "end": 363.6,
                    "word": " refers",
                    "probability": 0.7236328125
                },
                {
                    "start": 363.6,
                    "end": 364.48,
                    "word": ".",
                    "probability": 0.88427734375
                }
            ]
        },
        {
            "id": 95,
            "seek": 36928,
            "start": 364.82,
            "end": 368.52,
            "text": " Configuration data is usually encoded by malware.",
            "tokens": [
                50624,
                44151,
                8167,
                1412,
                307,
                2673,
                2058,
                12340,
                538,
                40747,
                13,
                50814
            ],
            "temperature": 0.0,
            "avg_logprob": -0.32775298399584635,
            "compression_ratio": 1.7373737373737375,
            "no_speech_prob": 0.01629638671875,
            "words": [
                {
                    "start": 364.82,
                    "end": 365.32,
                    "word": " Configuration",
                    "probability": 0.9033203125
                },
                {
                    "start": 365.32,
                    "end": 365.64,
                    "word": " data",
                    "probability": 0.8212890625
                },
                {
                    "start": 365.64,
                    "end": 366.04,
                    "word": " is",
                    "probability": 0.8994140625
                },
                {
                    "start": 366.04,
                    "end": 366.58,
                    "word": " usually",
                    "probability": 0.84228515625
                },
                {
                    "start": 366.58,
                    "end": 367.1,
                    "word": " encoded",
                    "probability": 0.938720703125
                },
                {
                    "start": 367.1,
                    "end": 367.5,
                    "word": " by",
                    "probability": 0.91064453125
                },
                {
                    "start": 367.5,
                    "end": 367.9,
                    "word": " malware",
                    "probability": 0.00030040740966796875
                },
                {
                    "start": 367.9,
                    "end": 368.52,
                    "word": ".",
                    "probability": 0.78125
                }
            ]
        },
        {
            "id": 96,
            "seek": 36928,
            "start": 368.52,
            "end": 370.74,
            "text": " However, most of malware writes",
            "tokens": [
                50814,
                2908,
                11,
                881,
                295,
                40747,
                13657,
                50928
            ],
            "temperature": 0.0,
            "avg_logprob": -0.32775298399584635,
            "compression_ratio": 1.7373737373737375,
            "no_speech_prob": 0.01629638671875,
            "words": [
                {
                    "start": 368.52,
                    "end": 368.96,
                    "word": " However",
                    "probability": 0.8408203125
                },
                {
                    "start": 368.96,
                    "end": 369.28,
                    "word": ",",
                    "probability": 0.9228515625
                },
                {
                    "start": 369.28,
                    "end": 369.58,
                    "word": " most",
                    "probability": 0.7978515625
                },
                {
                    "start": 369.58,
                    "end": 369.84,
                    "word": " of",
                    "probability": 0.7265625
                },
                {
                    "start": 369.84,
                    "end": 370.18,
                    "word": " malware",
                    "probability": 0.7001953125
                },
                {
                    "start": 370.18,
                    "end": 370.74,
                    "word": " writes",
                    "probability": 0.7060546875
                }
            ]
        },
        {
            "id": 97,
            "seek": 36928,
            "start": 370.74,
            "end": 373.8,
            "text": " decoded configuration data on memory.",
            "tokens": [
                50928,
                979,
                12340,
                11694,
                1412,
                322,
                4675,
                13,
                51074
            ],
            "temperature": 0.0,
            "avg_logprob": -0.32775298399584635,
            "compression_ratio": 1.7373737373737375,
            "no_speech_prob": 0.01629638671875,
            "words": [
                {
                    "start": 370.74,
                    "end": 371.3,
                    "word": " decoded",
                    "probability": 0.898681640625
                },
                {
                    "start": 371.3,
                    "end": 371.86,
                    "word": " configuration",
                    "probability": 0.82421875
                },
                {
                    "start": 371.86,
                    "end": 372.38,
                    "word": " data",
                    "probability": 0.8193359375
                },
                {
                    "start": 372.38,
                    "end": 372.68,
                    "word": " on",
                    "probability": 0.888671875
                },
                {
                    "start": 372.68,
                    "end": 373.04,
                    "word": " memory",
                    "probability": 0.79052734375
                },
                {
                    "start": 373.04,
                    "end": 373.8,
                    "word": ".",
                    "probability": 0.9755859375
                }
            ]
        },
        {
            "id": 98,
            "seek": 36928,
            "start": 373.8,
            "end": 376.98,
            "text": " This function lists decoded configuration data",
            "tokens": [
                51074,
                639,
                2445,
                14511,
                979,
                12340,
                11694,
                1412,
                51242
            ],
            "temperature": 0.0,
            "avg_logprob": -0.32775298399584635,
            "compression_ratio": 1.7373737373737375,
            "no_speech_prob": 0.01629638671875,
            "words": [
                {
                    "start": 373.8,
                    "end": 374.0,
                    "word": " This",
                    "probability": 0.80712890625
                },
                {
                    "start": 374.0,
                    "end": 374.54,
                    "word": " function",
                    "probability": 0.86376953125
                },
                {
                    "start": 374.54,
                    "end": 375.12,
                    "word": " lists",
                    "probability": 0.7724609375
                },
                {
                    "start": 375.12,
                    "end": 375.72,
                    "word": " decoded",
                    "probability": 0.843994140625
                },
                {
                    "start": 375.72,
                    "end": 376.34,
                    "word": " configuration",
                    "probability": 0.84521484375
                },
                {
                    "start": 376.34,
                    "end": 376.98,
                    "word": " data",
                    "probability": 0.80810546875
                }
            ]
        },
        {
            "id": 99,
            "seek": 36928,
            "start": 376.98,
            "end": 378.18,
            "text": " when possible.",
            "tokens": [
                51242,
                562,
                1944,
                13,
                51284
            ],
            "temperature": 0.0,
            "avg_logprob": -0.32775298399584635,
            "compression_ratio": 1.7373737373737375,
            "no_speech_prob": 0.01629638671875,
            "words": [
                {
                    "start": 376.98,
                    "end": 377.3,
                    "word": " when",
                    "probability": 0.83984375
                },
                {
                    "start": 377.3,
                    "end": 377.74,
                    "word": " possible",
                    "probability": 0.83154296875
                },
                {
                    "start": 377.74,
                    "end": 378.18,
                    "word": ".",
                    "probability": 0.9775390625
                }
            ]
        },
        {
            "id": 100,
            "seek": 36928,
            "start": 380.1,
            "end": 384.26,
            "text": " The strings command may list unreferred strings,",
            "tokens": [
                51392,
                440,
                13985,
                5622,
                815,
                1329,
                20584,
                612,
                986,
                13985,
                11,
                51594
            ],
            "temperature": 0.0,
            "avg_logprob": -0.32775298399584635,
            "compression_ratio": 1.7373737373737375,
            "no_speech_prob": 0.01629638671875,
            "words": [
                {
                    "start": 380.1,
                    "end": 380.38,
                    "word": " The",
                    "probability": 0.78857421875
                },
                {
                    "start": 380.38,
                    "end": 380.8,
                    "word": " strings",
                    "probability": 0.6279296875
                },
                {
                    "start": 380.8,
                    "end": 381.2,
                    "word": " command",
                    "probability": 0.7470703125
                },
                {
                    "start": 381.2,
                    "end": 381.64,
                    "word": " may",
                    "probability": 0.89306640625
                },
                {
                    "start": 381.64,
                    "end": 382.22,
                    "word": " list",
                    "probability": 0.84814453125
                },
                {
                    "start": 382.22,
                    "end": 383.2,
                    "word": " unreferred",
                    "probability": 0.8209635416666666
                },
                {
                    "start": 383.2,
                    "end": 383.92,
                    "word": " strings",
                    "probability": 0.73291015625
                },
                {
                    "start": 383.92,
                    "end": 384.26,
                    "word": ",",
                    "probability": 0.720703125
                }
            ]
        },
        {
            "id": 101,
            "seek": 36928,
            "start": 384.26,
            "end": 387.72,
            "text": " but this tool only displays the strings",
            "tokens": [
                51594,
                457,
                341,
                2290,
                787,
                20119,
                264,
                13985,
                51782
            ],
            "temperature": 0.0,
            "avg_logprob": -0.32775298399584635,
            "compression_ratio": 1.7373737373737375,
            "no_speech_prob": 0.01629638671875,
            "words": [
                {
                    "start": 384.26,
                    "end": 384.48,
                    "word": " but",
                    "probability": 0.89599609375
                },
                {
                    "start": 384.48,
                    "end": 384.94,
                    "word": " this",
                    "probability": 0.87548828125
                },
                {
                    "start": 384.94,
                    "end": 385.38,
                    "word": " tool",
                    "probability": 0.87255859375
                },
                {
                    "start": 385.38,
                    "end": 386.04,
                    "word": " only",
                    "probability": 0.83251953125
                },
                {
                    "start": 386.04,
                    "end": 386.78,
                    "word": " displays",
                    "probability": 0.83056640625
                },
                {
                    "start": 386.78,
                    "end": 387.06,
                    "word": " the",
                    "probability": 0.67724609375
                },
                {
                    "start": 387.06,
                    "end": 387.72,
                    "word": " strings",
                    "probability": 0.7626953125
                }
            ]
        },
        {
            "id": 102,
            "seek": 39758,
            "start": 387.72,
            "end": 390.2,
            "text": " referred to in the code.",
            "tokens": [
                50374,
                10839,
                281,
                294,
                264,
                3089,
                13,
                50474
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3409598196546237,
            "compression_ratio": 1.4973262032085561,
            "no_speech_prob": 0.005290985107421875,
            "words": [
                {
                    "start": 387.72,
                    "end": 388.22,
                    "word": " referred",
                    "probability": 0.0121612548828125
                },
                {
                    "start": 388.22,
                    "end": 388.56,
                    "word": " to",
                    "probability": 0.71044921875
                },
                {
                    "start": 388.56,
                    "end": 388.76,
                    "word": " in",
                    "probability": 0.892578125
                },
                {
                    "start": 388.76,
                    "end": 388.92,
                    "word": " the",
                    "probability": 0.80419921875
                },
                {
                    "start": 388.92,
                    "end": 389.36,
                    "word": " code",
                    "probability": 0.82861328125
                },
                {
                    "start": 389.36,
                    "end": 390.2,
                    "word": ".",
                    "probability": 0.427490234375
                }
            ]
        },
        {
            "id": 103,
            "seek": 39758,
            "start": 390.2,
            "end": 394.18,
            "text": " And this function can also display the heap area.",
            "tokens": [
                50474,
                400,
                341,
                2445,
                393,
                611,
                4674,
                264,
                33591,
                1859,
                13,
                50694
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3409598196546237,
            "compression_ratio": 1.4973262032085561,
            "no_speech_prob": 0.005290985107421875,
            "words": [
                {
                    "start": 390.2,
                    "end": 390.3,
                    "word": " And",
                    "probability": 0.201416015625
                },
                {
                    "start": 390.3,
                    "end": 390.68,
                    "word": " this",
                    "probability": 0.80322265625
                },
                {
                    "start": 390.68,
                    "end": 391.02,
                    "word": " function",
                    "probability": 0.8681640625
                },
                {
                    "start": 391.02,
                    "end": 391.46,
                    "word": " can",
                    "probability": 0.89306640625
                },
                {
                    "start": 391.46,
                    "end": 391.94,
                    "word": " also",
                    "probability": 0.81201171875
                },
                {
                    "start": 391.94,
                    "end": 392.46,
                    "word": " display",
                    "probability": 0.86767578125
                },
                {
                    "start": 392.46,
                    "end": 392.7,
                    "word": " the",
                    "probability": 0.79345703125
                },
                {
                    "start": 392.7,
                    "end": 392.92,
                    "word": " heap",
                    "probability": 0.92041015625
                },
                {
                    "start": 392.92,
                    "end": 393.34,
                    "word": " area",
                    "probability": 0.79443359375
                },
                {
                    "start": 393.34,
                    "end": 394.18,
                    "word": ".",
                    "probability": 0.85009765625
                }
            ]
        },
        {
            "id": 104,
            "seek": 39758,
            "start": 394.26,
            "end": 398.84,
            "text": " If decoded configuration data is in the heap area,",
            "tokens": [
                50694,
                759,
                979,
                12340,
                11694,
                1412,
                307,
                294,
                264,
                33591,
                1859,
                11,
                50924
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3409598196546237,
            "compression_ratio": 1.4973262032085561,
            "no_speech_prob": 0.005290985107421875,
            "words": [
                {
                    "start": 394.26,
                    "end": 394.52,
                    "word": " If",
                    "probability": 0.888671875
                },
                {
                    "start": 394.52,
                    "end": 394.94,
                    "word": " decoded",
                    "probability": 0.75048828125
                },
                {
                    "start": 394.94,
                    "end": 395.54,
                    "word": " configuration",
                    "probability": 0.82568359375
                },
                {
                    "start": 395.54,
                    "end": 396.04,
                    "word": " data",
                    "probability": 0.8251953125
                },
                {
                    "start": 396.04,
                    "end": 396.64,
                    "word": " is",
                    "probability": 0.9013671875
                },
                {
                    "start": 396.64,
                    "end": 396.92,
                    "word": " in",
                    "probability": 0.90380859375
                },
                {
                    "start": 396.92,
                    "end": 397.08,
                    "word": " the",
                    "probability": 0.7734375
                },
                {
                    "start": 397.08,
                    "end": 397.32,
                    "word": " heap",
                    "probability": 0.9296875
                },
                {
                    "start": 397.32,
                    "end": 397.82,
                    "word": " area",
                    "probability": 0.78857421875
                },
                {
                    "start": 397.82,
                    "end": 398.84,
                    "word": ",",
                    "probability": 0.89892578125
                }
            ]
        },
        {
            "id": 105,
            "seek": 39758,
            "start": 398.84,
            "end": 400.42,
            "text": " it will be displayed.",
            "tokens": [
                50924,
                309,
                486,
                312,
                16372,
                13,
                50992
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3409598196546237,
            "compression_ratio": 1.4973262032085561,
            "no_speech_prob": 0.005290985107421875,
            "words": [
                {
                    "start": 398.84,
                    "end": 399.1,
                    "word": " it",
                    "probability": 0.89990234375
                },
                {
                    "start": 399.1,
                    "end": 399.3,
                    "word": " will",
                    "probability": 0.80712890625
                },
                {
                    "start": 399.3,
                    "end": 399.48,
                    "word": " be",
                    "probability": 0.85205078125
                },
                {
                    "start": 399.48,
                    "end": 400.0,
                    "word": " displayed",
                    "probability": 0.81103515625
                },
                {
                    "start": 400.0,
                    "end": 400.42,
                    "word": ".",
                    "probability": 0.98193359375
                }
            ]
        },
        {
            "id": 106,
            "seek": 39758,
            "start": 402.62,
            "end": 406.7,
            "text": " MarukonScan also support Linux-based memory image.",
            "tokens": [
                51108,
                2039,
                2034,
                266,
                50,
                7035,
                611,
                1406,
                18734,
                12,
                6032,
                4675,
                3256,
                13,
                51314
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3409598196546237,
            "compression_ratio": 1.4973262032085561,
            "no_speech_prob": 0.005290985107421875,
            "words": [
                {
                    "start": 402.62,
                    "end": 403.12,
                    "word": " MarukonScan",
                    "probability": 0.23494987487792968
                },
                {
                    "start": 403.12,
                    "end": 403.72,
                    "word": " also",
                    "probability": 0.76318359375
                },
                {
                    "start": 403.72,
                    "end": 404.46,
                    "word": " support",
                    "probability": 0.380126953125
                },
                {
                    "start": 404.46,
                    "end": 404.92,
                    "word": " Linux",
                    "probability": 0.76806640625
                },
                {
                    "start": 404.92,
                    "end": 405.3,
                    "word": "-based",
                    "probability": 0.79443359375
                },
                {
                    "start": 405.3,
                    "end": 405.7,
                    "word": " memory",
                    "probability": 0.80078125
                },
                {
                    "start": 405.7,
                    "end": 406.24,
                    "word": " image",
                    "probability": 0.50390625
                },
                {
                    "start": 406.24,
                    "end": 406.7,
                    "word": ".",
                    "probability": 0.7783203125
                }
            ]
        },
        {
            "id": 107,
            "seek": 39758,
            "start": 406.7,
            "end": 409.5,
            "text": " However, there are still few Linux malware",
            "tokens": [
                51314,
                2908,
                11,
                456,
                366,
                920,
                1326,
                18734,
                463,
                75,
                3039,
                51470
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3409598196546237,
            "compression_ratio": 1.4973262032085561,
            "no_speech_prob": 0.005290985107421875,
            "words": [
                {
                    "start": 406.7,
                    "end": 407.1,
                    "word": " However",
                    "probability": 0.84375
                },
                {
                    "start": 407.1,
                    "end": 407.38,
                    "word": ",",
                    "probability": 0.94775390625
                },
                {
                    "start": 407.38,
                    "end": 407.62,
                    "word": " there",
                    "probability": 0.85205078125
                },
                {
                    "start": 407.62,
                    "end": 407.8,
                    "word": " are",
                    "probability": 0.87548828125
                },
                {
                    "start": 407.8,
                    "end": 408.2,
                    "word": " still",
                    "probability": 0.927734375
                },
                {
                    "start": 408.2,
                    "end": 408.64,
                    "word": " few",
                    "probability": 0.6533203125
                },
                {
                    "start": 408.64,
                    "end": 409.06,
                    "word": " Linux",
                    "probability": 0.89501953125
                },
                {
                    "start": 409.06,
                    "end": 409.5,
                    "word": " malware",
                    "probability": 0.3105672200520833
                }
            ]
        },
        {
            "id": 108,
            "seek": 39758,
            "start": 409.5,
            "end": 411.52,
            "text": " that can be scanned.",
            "tokens": [
                51470,
                300,
                393,
                312,
                45089,
                13,
                51548
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3409598196546237,
            "compression_ratio": 1.4973262032085561,
            "no_speech_prob": 0.005290985107421875,
            "words": [
                {
                    "start": 409.5,
                    "end": 410.16,
                    "word": " that",
                    "probability": 0.85302734375
                },
                {
                    "start": 410.16,
                    "end": 410.44,
                    "word": " can",
                    "probability": 0.900390625
                },
                {
                    "start": 410.44,
                    "end": 410.66,
                    "word": " be",
                    "probability": 0.87841796875
                },
                {
                    "start": 410.66,
                    "end": 411.1,
                    "word": " scanned",
                    "probability": 0.77294921875
                },
                {
                    "start": 411.1,
                    "end": 411.52,
                    "word": ".",
                    "probability": 0.96875
                }
            ]
        },
        {
            "id": 109,
            "seek": 39758,
            "start": 413.92,
            "end": 416.02,
            "text": " So it's the time.",
            "tokens": [
                51676,
                407,
                309,
                311,
                264,
                565,
                13,
                51754
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3409598196546237,
            "compression_ratio": 1.4973262032085561,
            "no_speech_prob": 0.005290985107421875,
            "words": [
                {
                    "start": 413.92,
                    "end": 414.24,
                    "word": " So",
                    "probability": 0.59912109375
                },
                {
                    "start": 414.24,
                    "end": 414.64,
                    "word": " it's",
                    "probability": 0.750244140625
                },
                {
                    "start": 414.64,
                    "end": 414.76,
                    "word": " the",
                    "probability": 0.145751953125
                },
                {
                    "start": 414.76,
                    "end": 415.18,
                    "word": " time",
                    "probability": 0.7763671875
                },
                {
                    "start": 415.18,
                    "end": 416.02,
                    "word": ".",
                    "probability": 0.86328125
                }
            ]
        },
        {
            "id": 110,
            "seek": 42436,
            "start": 424.32,
            "end": 428.34,
            "text": " You can use MarukonScan from command line.",
            "tokens": [
                50414,
                509,
                393,
                764,
                2039,
                2034,
                266,
                50,
                7035,
                490,
                5622,
                1622,
                13,
                50602
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3985416579246521,
            "compression_ratio": 1.4023668639053255,
            "no_speech_prob": 0.002681732177734375,
            "words": [
                {
                    "start": 424.32,
                    "end": 424.74,
                    "word": " You",
                    "probability": 0.67138671875
                },
                {
                    "start": 424.74,
                    "end": 424.94,
                    "word": " can",
                    "probability": 0.8984375
                },
                {
                    "start": 424.94,
                    "end": 425.26,
                    "word": " use",
                    "probability": 0.82470703125
                },
                {
                    "start": 425.26,
                    "end": 426.26,
                    "word": " MarukonScan",
                    "probability": 0.3885978698730469
                },
                {
                    "start": 426.26,
                    "end": 426.84,
                    "word": " from",
                    "probability": 0.779296875
                },
                {
                    "start": 426.84,
                    "end": 427.28,
                    "word": " command",
                    "probability": 0.58447265625
                },
                {
                    "start": 427.28,
                    "end": 427.68,
                    "word": " line",
                    "probability": 0.826171875
                },
                {
                    "start": 427.68,
                    "end": 428.34,
                    "word": ".",
                    "probability": 0.40673828125
                }
            ]
        },
        {
            "id": 111,
            "seek": 42436,
            "start": 428.34,
            "end": 431.86,
            "text": " Set primary name and pass to memory dump file",
            "tokens": [
                50602,
                8928,
                6194,
                1315,
                293,
                1320,
                281,
                4675,
                11430,
                3991,
                50788
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3985416579246521,
            "compression_ratio": 1.4023668639053255,
            "no_speech_prob": 0.002681732177734375,
            "words": [
                {
                    "start": 428.34,
                    "end": 428.6,
                    "word": " Set",
                    "probability": 0.89892578125
                },
                {
                    "start": 428.6,
                    "end": 428.98,
                    "word": " primary",
                    "probability": 0.0870361328125
                },
                {
                    "start": 428.98,
                    "end": 429.44,
                    "word": " name",
                    "probability": 0.8125
                },
                {
                    "start": 429.44,
                    "end": 429.92,
                    "word": " and",
                    "probability": 0.7138671875
                },
                {
                    "start": 429.92,
                    "end": 430.38,
                    "word": " pass",
                    "probability": 0.385009765625
                },
                {
                    "start": 430.38,
                    "end": 430.76,
                    "word": " to",
                    "probability": 0.75634765625
                },
                {
                    "start": 430.76,
                    "end": 431.18,
                    "word": " memory",
                    "probability": 0.74560546875
                },
                {
                    "start": 431.18,
                    "end": 431.44,
                    "word": " dump",
                    "probability": 0.80712890625
                },
                {
                    "start": 431.44,
                    "end": 431.86,
                    "word": " file",
                    "probability": 0.74072265625
                }
            ]
        },
        {
            "id": 112,
            "seek": 42436,
            "start": 431.86,
            "end": 435.38,
            "text": " and OS profile of memory dump.",
            "tokens": [
                50788,
                293,
                12731,
                7964,
                295,
                4675,
                11430,
                13,
                50950
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3985416579246521,
            "compression_ratio": 1.4023668639053255,
            "no_speech_prob": 0.002681732177734375,
            "words": [
                {
                    "start": 431.86,
                    "end": 432.58,
                    "word": " and",
                    "probability": 0.607421875
                },
                {
                    "start": 432.58,
                    "end": 433.34,
                    "word": " OS",
                    "probability": 0.8310546875
                },
                {
                    "start": 433.34,
                    "end": 433.9,
                    "word": " profile",
                    "probability": 0.8076171875
                },
                {
                    "start": 433.9,
                    "end": 434.28,
                    "word": " of",
                    "probability": 0.841796875
                },
                {
                    "start": 434.28,
                    "end": 434.56,
                    "word": " memory",
                    "probability": 0.833984375
                },
                {
                    "start": 434.56,
                    "end": 434.96,
                    "word": " dump",
                    "probability": 0.8251953125
                },
                {
                    "start": 434.96,
                    "end": 435.38,
                    "word": ".",
                    "probability": 0.98388671875
                }
            ]
        },
        {
            "id": 113,
            "seek": 42436,
            "start": 442.27,
            "end": 447.07,
            "text": " Here is a sample of Red Ribs Maria used by FPT10.",
            "tokens": [
                51010,
                1692,
                307,
                257,
                6889,
                295,
                4477,
                38554,
                82,
                12734,
                1143,
                538,
                36655,
                51,
                3279,
                13,
                51236
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3985416579246521,
            "compression_ratio": 1.4023668639053255,
            "no_speech_prob": 0.002681732177734375,
            "words": [
                {
                    "start": 442.27,
                    "end": 442.79,
                    "word": " Here",
                    "probability": 0.81201171875
                },
                {
                    "start": 442.79,
                    "end": 442.93,
                    "word": " is",
                    "probability": 0.72021484375
                },
                {
                    "start": 443.03,
                    "end": 443.31,
                    "word": " a sample",
                    "probability": 0.82275390625
                },
                {
                    "start": 443.31,
                    "end": 443.61,
                    "word": " of",
                    "probability": 0.86572265625
                },
                {
                    "start": 443.61,
                    "end": 443.85,
                    "word": " Red",
                    "probability": 0.388671875
                },
                {
                    "start": 443.85,
                    "end": 444.41,
                    "word": " Ribs",
                    "probability": 0.6280517578125
                },
                {
                    "start": 444.41,
                    "end": 444.79,
                    "word": " Maria",
                    "probability": 0.7783203125
                },
                {
                    "start": 444.79,
                    "end": 445.17,
                    "word": " used",
                    "probability": 0.6005859375
                },
                {
                    "start": 445.17,
                    "end": 445.59,
                    "word": " by",
                    "probability": 0.90869140625
                },
                {
                    "start": 445.59,
                    "end": 446.51,
                    "word": " FPT10",
                    "probability": 0.656005859375
                },
                {
                    "start": 446.51,
                    "end": 447.07,
                    "word": ".",
                    "probability": 0.93896484375
                }
            ]
        },
        {
            "id": 114,
            "seek": 42436,
            "start": 447.07,
            "end": 454.19,
            "text": " You can find C2 server address, campaign ID, user agent,",
            "tokens": [
                51236,
                509,
                393,
                915,
                383,
                17,
                7154,
                2985,
                11,
                5129,
                7348,
                11,
                4195,
                9461,
                11,
                51486
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3985416579246521,
            "compression_ratio": 1.4023668639053255,
            "no_speech_prob": 0.002681732177734375,
            "words": [
                {
                    "start": 447.07,
                    "end": 447.27,
                    "word": " You",
                    "probability": 0.88818359375
                },
                {
                    "start": 447.27,
                    "end": 447.45,
                    "word": " can",
                    "probability": 0.423095703125
                },
                {
                    "start": 447.45,
                    "end": 448.23,
                    "word": " find",
                    "probability": 0.689453125
                },
                {
                    "start": 448.23,
                    "end": 448.91,
                    "word": " C2",
                    "probability": 0.822509765625
                },
                {
                    "start": 448.91,
                    "end": 449.21,
                    "word": " server",
                    "probability": 0.63623046875
                },
                {
                    "start": 449.21,
                    "end": 449.73,
                    "word": " address",
                    "probability": 0.82373046875
                },
                {
                    "start": 449.73,
                    "end": 450.23,
                    "word": ",",
                    "probability": 0.96142578125
                },
                {
                    "start": 450.23,
                    "end": 450.49,
                    "word": " campaign",
                    "probability": 0.7255859375
                },
                {
                    "start": 450.49,
                    "end": 450.91,
                    "word": " ID",
                    "probability": 0.85009765625
                },
                {
                    "start": 450.91,
                    "end": 451.27,
                    "word": ",",
                    "probability": 0.978515625
                },
                {
                    "start": 451.27,
                    "end": 451.55,
                    "word": " user",
                    "probability": 0.7998046875
                },
                {
                    "start": 451.55,
                    "end": 452.05,
                    "word": " agent",
                    "probability": 0.53466796875
                },
                {
                    "start": 452.05,
                    "end": 454.19,
                    "word": ",",
                    "probability": 0.5419921875
                }
            ]
        },
        {
            "id": 115,
            "seek": 42436,
            "start": 455.01,
            "end": 456.39,
            "text": " and so on.",
            "tokens": [
                51644,
                293,
                370,
                322,
                13,
                51686
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3985416579246521,
            "compression_ratio": 1.4023668639053255,
            "no_speech_prob": 0.002681732177734375,
            "words": [
                {
                    "start": 455.01,
                    "end": 455.43,
                    "word": " and",
                    "probability": 0.87939453125
                },
                {
                    "start": 455.43,
                    "end": 455.67,
                    "word": " so",
                    "probability": 0.90576171875
                },
                {
                    "start": 455.67,
                    "end": 455.97,
                    "word": " on",
                    "probability": 0.88330078125
                },
                {
                    "start": 455.97,
                    "end": 456.39,
                    "word": ".",
                    "probability": 0.99462890625
                }
            ]
        },
        {
            "id": 116,
            "seek": 45322,
            "start": 465.72,
            "end": 468.92,
            "text": " So let's move on the next sample.",
            "tokens": [
                50414,
                407,
                718,
                311,
                1286,
                322,
                264,
                958,
                6889,
                13,
                50554
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3611111052242326,
            "compression_ratio": 1.3544973544973544,
            "no_speech_prob": 0.0019741058349609375,
            "words": [
                {
                    "start": 465.72,
                    "end": 466.42,
                    "word": " So",
                    "probability": 0.134033203125
                },
                {
                    "start": 466.42,
                    "end": 466.98,
                    "word": " let's",
                    "probability": 0.78271484375
                },
                {
                    "start": 466.98,
                    "end": 467.18,
                    "word": " move",
                    "probability": 0.880859375
                },
                {
                    "start": 467.18,
                    "end": 467.36,
                    "word": " on",
                    "probability": 0.88916015625
                },
                {
                    "start": 467.36,
                    "end": 467.5,
                    "word": " the",
                    "probability": 0.443359375
                },
                {
                    "start": 467.5,
                    "end": 467.78,
                    "word": " next",
                    "probability": 0.81689453125
                },
                {
                    "start": 467.78,
                    "end": 468.26,
                    "word": " sample",
                    "probability": 0.7470703125
                },
                {
                    "start": 468.26,
                    "end": 468.92,
                    "word": ".",
                    "probability": 0.82275390625
                }
            ]
        },
        {
            "id": 117,
            "seek": 45322,
            "start": 468.92,
            "end": 473.43,
            "text": " This sample is TS cookie, Maria used by BlackTek.",
            "tokens": [
                50554,
                639,
                6889,
                307,
                37645,
                14417,
                11,
                12734,
                1143,
                538,
                4076,
                51,
                916,
                13,
                50774
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3611111052242326,
            "compression_ratio": 1.3544973544973544,
            "no_speech_prob": 0.0019741058349609375,
            "words": [
                {
                    "start": 468.92,
                    "end": 469.2,
                    "word": " This",
                    "probability": 0.80517578125
                },
                {
                    "start": 469.2,
                    "end": 469.46,
                    "word": " sample",
                    "probability": 0.76171875
                },
                {
                    "start": 469.46,
                    "end": 469.72,
                    "word": " is",
                    "probability": 0.8896484375
                },
                {
                    "start": 469.72,
                    "end": 470.1,
                    "word": " TS",
                    "probability": 0.2685546875
                },
                {
                    "start": 470.1,
                    "end": 470.48,
                    "word": " cookie",
                    "probability": 0.5546875
                },
                {
                    "start": 470.48,
                    "end": 470.82,
                    "word": ",",
                    "probability": 0.2861328125
                },
                {
                    "start": 470.82,
                    "end": 471.18,
                    "word": " Maria",
                    "probability": 0.6884765625
                },
                {
                    "start": 471.18,
                    "end": 471.66,
                    "word": " used",
                    "probability": 0.76904296875
                },
                {
                    "start": 471.66,
                    "end": 472.2,
                    "word": " by",
                    "probability": 0.88232421875
                },
                {
                    "start": 472.2,
                    "end": 473.08,
                    "word": " BlackTek",
                    "probability": 0.4244791666666667
                },
                {
                    "start": 473.08,
                    "end": 473.43,
                    "word": ".",
                    "probability": 0.89013671875
                }
            ]
        },
        {
            "id": 118,
            "seek": 45322,
            "start": 479.96,
            "end": 482.87,
            "text": " You can find the C2 server address,",
            "tokens": [
                50848,
                509,
                393,
                915,
                264,
                383,
                17,
                7154,
                2985,
                11,
                50996
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3611111052242326,
            "compression_ratio": 1.3544973544973544,
            "no_speech_prob": 0.0019741058349609375,
            "words": [
                {
                    "start": 479.96,
                    "end": 480.2,
                    "word": " You",
                    "probability": 0.79150390625
                },
                {
                    "start": 480.2,
                    "end": 480.34,
                    "word": " can",
                    "probability": 0.442138671875
                },
                {
                    "start": 480.34,
                    "end": 481.0,
                    "word": " find",
                    "probability": 0.7822265625
                },
                {
                    "start": 481.0,
                    "end": 481.24,
                    "word": " the",
                    "probability": 0.499267578125
                },
                {
                    "start": 481.24,
                    "end": 481.6,
                    "word": " C2",
                    "probability": 0.623291015625
                },
                {
                    "start": 481.6,
                    "end": 481.86,
                    "word": " server",
                    "probability": 0.362060546875
                },
                {
                    "start": 481.86,
                    "end": 482.52,
                    "word": " address",
                    "probability": 0.806640625
                },
                {
                    "start": 482.52,
                    "end": 482.87,
                    "word": ",",
                    "probability": 0.35498046875
                }
            ]
        },
        {
            "id": 119,
            "seek": 45322,
            "start": 487.15,
            "end": 493.39,
            "text": " and encryption key, campaign ID, and so on.",
            "tokens": [
                51064,
                293,
                29575,
                2141,
                11,
                5129,
                7348,
                11,
                293,
                370,
                322,
                13,
                51314
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3611111052242326,
            "compression_ratio": 1.3544973544973544,
            "no_speech_prob": 0.0019741058349609375,
            "words": [
                {
                    "start": 487.15,
                    "end": 487.85,
                    "word": " and",
                    "probability": 0.6435546875
                },
                {
                    "start": 487.85,
                    "end": 488.55,
                    "word": " encryption",
                    "probability": 0.54248046875
                },
                {
                    "start": 488.55,
                    "end": 489.13,
                    "word": " key",
                    "probability": 0.85986328125
                },
                {
                    "start": 489.13,
                    "end": 489.87,
                    "word": ",",
                    "probability": 0.95068359375
                },
                {
                    "start": 489.87,
                    "end": 490.15,
                    "word": " campaign",
                    "probability": 0.72216796875
                },
                {
                    "start": 490.15,
                    "end": 490.57,
                    "word": " ID",
                    "probability": 0.8798828125
                },
                {
                    "start": 490.57,
                    "end": 491.83,
                    "word": ",",
                    "probability": 0.7705078125
                },
                {
                    "start": 491.83,
                    "end": 492.09,
                    "word": " and",
                    "probability": 0.88720703125
                },
                {
                    "start": 492.09,
                    "end": 492.35,
                    "word": " so",
                    "probability": 0.8974609375
                },
                {
                    "start": 492.35,
                    "end": 492.69,
                    "word": " on",
                    "probability": 0.90087890625
                },
                {
                    "start": 492.69,
                    "end": 493.39,
                    "word": ".",
                    "probability": 0.99365234375
                }
            ]
        },
        {
            "id": 120,
            "seek": 45322,
            "start": 507.65,
            "end": 511.57,
            "text": " If you want to know more detail about the MarukonScan,",
            "tokens": [
                51472,
                759,
                291,
                528,
                281,
                458,
                544,
                2607,
                466,
                264,
                2039,
                2034,
                266,
                50,
                7035,
                11,
                51658
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3611111052242326,
            "compression_ratio": 1.3544973544973544,
            "no_speech_prob": 0.0019741058349609375,
            "words": [
                {
                    "start": 507.65,
                    "end": 508.21,
                    "word": " If",
                    "probability": 0.8935546875
                },
                {
                    "start": 508.21,
                    "end": 508.31,
                    "word": " you",
                    "probability": 0.422607421875
                },
                {
                    "start": 508.31,
                    "end": 508.57,
                    "word": " want",
                    "probability": 0.8017578125
                },
                {
                    "start": 508.57,
                    "end": 508.71,
                    "word": " to",
                    "probability": 0.90283203125
                },
                {
                    "start": 508.71,
                    "end": 508.99,
                    "word": " know",
                    "probability": 0.810546875
                },
                {
                    "start": 508.99,
                    "end": 509.37,
                    "word": " more",
                    "probability": 0.8857421875
                },
                {
                    "start": 509.37,
                    "end": 509.79,
                    "word": " detail",
                    "probability": 0.8056640625
                },
                {
                    "start": 509.79,
                    "end": 510.25,
                    "word": " about",
                    "probability": 0.81494140625
                },
                {
                    "start": 510.25,
                    "end": 510.43,
                    "word": " the",
                    "probability": 0.71923828125
                },
                {
                    "start": 510.43,
                    "end": 511.03,
                    "word": " MarukonScan",
                    "probability": 0.35773468017578125
                },
                {
                    "start": 511.03,
                    "end": 511.57,
                    "word": ",",
                    "probability": 0.908203125
                }
            ]
        },
        {
            "id": 121,
            "seek": 45322,
            "start": 511.57,
            "end": 514.53,
            "text": " you can check out our wiki on GitHub.",
            "tokens": [
                51658,
                291,
                393,
                1520,
                484,
                527,
                261,
                9850,
                322,
                23331,
                13,
                51808
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3611111052242326,
            "compression_ratio": 1.3544973544973544,
            "no_speech_prob": 0.0019741058349609375,
            "words": [
                {
                    "start": 511.57,
                    "end": 511.89,
                    "word": " you",
                    "probability": 0.849609375
                },
                {
                    "start": 511.89,
                    "end": 512.07,
                    "word": " can",
                    "probability": 0.9013671875
                },
                {
                    "start": 512.07,
                    "end": 512.31,
                    "word": " check",
                    "probability": 0.85107421875
                },
                {
                    "start": 512.31,
                    "end": 512.51,
                    "word": " out",
                    "probability": 0.7939453125
                },
                {
                    "start": 512.51,
                    "end": 512.89,
                    "word": " our",
                    "probability": 0.80859375
                },
                {
                    "start": 512.89,
                    "end": 513.19,
                    "word": " wiki",
                    "probability": 0.8037109375
                },
                {
                    "start": 513.19,
                    "end": 513.51,
                    "word": " on",
                    "probability": 0.8955078125
                },
                {
                    "start": 513.51,
                    "end": 513.83,
                    "word": " GitHub",
                    "probability": 0.78466796875
                },
                {
                    "start": 513.83,
                    "end": 514.53,
                    "word": ".",
                    "probability": 0.9462890625
                }
            ]
        },
        {
            "id": 122,
            "seek": 48168,
            "start": 514.53,
            "end": 517.51,
            "text": " In this wiki, you can learn how to install",
            "tokens": [
                50378,
                682,
                341,
                261,
                9850,
                11,
                291,
                393,
                1466,
                577,
                281,
                3625,
                50524
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23190104539195697,
            "compression_ratio": 1.7889908256880733,
            "no_speech_prob": 0.005558013916015625,
            "words": [
                {
                    "start": 514.53,
                    "end": 514.91,
                    "word": " In",
                    "probability": 0.85595703125
                },
                {
                    "start": 514.91,
                    "end": 515.11,
                    "word": " this",
                    "probability": 0.88330078125
                },
                {
                    "start": 515.11,
                    "end": 515.39,
                    "word": " wiki",
                    "probability": 0.853515625
                },
                {
                    "start": 515.39,
                    "end": 515.63,
                    "word": ",",
                    "probability": 0.79638671875
                },
                {
                    "start": 515.63,
                    "end": 515.81,
                    "word": " you",
                    "probability": 0.8857421875
                },
                {
                    "start": 515.81,
                    "end": 515.97,
                    "word": " can",
                    "probability": 0.8955078125
                },
                {
                    "start": 515.97,
                    "end": 516.33,
                    "word": " learn",
                    "probability": 0.91064453125
                },
                {
                    "start": 516.33,
                    "end": 516.65,
                    "word": " how",
                    "probability": 0.89404296875
                },
                {
                    "start": 516.65,
                    "end": 516.93,
                    "word": " to",
                    "probability": 0.90576171875
                },
                {
                    "start": 516.93,
                    "end": 517.51,
                    "word": " install",
                    "probability": 0.86083984375
                }
            ]
        },
        {
            "id": 123,
            "seek": 48168,
            "start": 517.51,
            "end": 519.74,
            "text": " and use MarukonScan.",
            "tokens": [
                50524,
                293,
                764,
                2039,
                2034,
                266,
                50,
                7035,
                13,
                50608
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23190104539195697,
            "compression_ratio": 1.7889908256880733,
            "no_speech_prob": 0.005558013916015625,
            "words": [
                {
                    "start": 517.51,
                    "end": 518.13,
                    "word": " and",
                    "probability": 0.880859375
                },
                {
                    "start": 518.13,
                    "end": 518.65,
                    "word": " use",
                    "probability": 0.8173828125
                },
                {
                    "start": 518.65,
                    "end": 519.37,
                    "word": " MarukonScan",
                    "probability": 0.502490234375
                },
                {
                    "start": 519.37,
                    "end": 519.74,
                    "word": ".",
                    "probability": 0.92919921875
                }
            ]
        },
        {
            "id": 124,
            "seek": 48168,
            "start": 525.15,
            "end": 527.14,
            "text": " Hello guys, I'm Tomoki Tani,",
            "tokens": [
                50696,
                2425,
                1074,
                11,
                286,
                478,
                5041,
                17056,
                314,
                3782,
                11,
                50784
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23190104539195697,
            "compression_ratio": 1.7889908256880733,
            "no_speech_prob": 0.005558013916015625,
            "words": [
                {
                    "start": 525.15,
                    "end": 525.52,
                    "word": " Hello",
                    "probability": 0.488037109375
                },
                {
                    "start": 525.52,
                    "end": 525.88,
                    "word": " guys",
                    "probability": 0.59033203125
                },
                {
                    "start": 525.88,
                    "end": 526.24,
                    "word": ",",
                    "probability": 0.5791015625
                },
                {
                    "start": 526.24,
                    "end": 526.44,
                    "word": " I'm",
                    "probability": 0.90380859375
                },
                {
                    "start": 526.44,
                    "end": 526.74,
                    "word": " Tomoki",
                    "probability": 0.5616455078125
                },
                {
                    "start": 526.74,
                    "end": 527.04,
                    "word": " Tani",
                    "probability": 0.744140625
                },
                {
                    "start": 527.04,
                    "end": 527.14,
                    "word": ",",
                    "probability": 0.861328125
                }
            ]
        },
        {
            "id": 125,
            "seek": 48168,
            "start": 527.14,
            "end": 530.62,
            "text": " the developer of MarukonScan and MarukonScan with Google.",
            "tokens": [
                50784,
                264,
                10754,
                295,
                2039,
                2034,
                266,
                50,
                7035,
                293,
                2039,
                2034,
                266,
                50,
                7035,
                365,
                3329,
                13,
                50970
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23190104539195697,
            "compression_ratio": 1.7889908256880733,
            "no_speech_prob": 0.005558013916015625,
            "words": [
                {
                    "start": 527.14,
                    "end": 527.26,
                    "word": " the",
                    "probability": 0.76708984375
                },
                {
                    "start": 527.26,
                    "end": 527.56,
                    "word": " developer",
                    "probability": 0.61767578125
                },
                {
                    "start": 527.56,
                    "end": 527.96,
                    "word": " of",
                    "probability": 0.90234375
                },
                {
                    "start": 527.96,
                    "end": 528.62,
                    "word": " MarukonScan",
                    "probability": 0.96806640625
                },
                {
                    "start": 528.62,
                    "end": 529.08,
                    "word": " and",
                    "probability": 0.8037109375
                },
                {
                    "start": 529.08,
                    "end": 529.62,
                    "word": " MarukonScan",
                    "probability": 0.9650390625
                },
                {
                    "start": 529.62,
                    "end": 529.78,
                    "word": " with",
                    "probability": 0.76318359375
                },
                {
                    "start": 529.78,
                    "end": 530.0,
                    "word": " Google",
                    "probability": 0.24658203125
                },
                {
                    "start": 530.0,
                    "end": 530.62,
                    "word": ".",
                    "probability": 0.9716796875
                }
            ]
        },
        {
            "id": 126,
            "seek": 48168,
            "start": 530.62,
            "end": 532.36,
            "text": " From here, I would like to show",
            "tokens": [
                50970,
                3358,
                510,
                11,
                286,
                576,
                411,
                281,
                855,
                51048
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23190104539195697,
            "compression_ratio": 1.7889908256880733,
            "no_speech_prob": 0.005558013916015625,
            "words": [
                {
                    "start": 530.62,
                    "end": 531.02,
                    "word": " From",
                    "probability": 0.72998046875
                },
                {
                    "start": 531.02,
                    "end": 531.32,
                    "word": " here",
                    "probability": 0.81689453125
                },
                {
                    "start": 531.32,
                    "end": 531.56,
                    "word": ",",
                    "probability": 0.87451171875
                },
                {
                    "start": 531.56,
                    "end": 531.74,
                    "word": " I",
                    "probability": 0.9970703125
                },
                {
                    "start": 531.74,
                    "end": 531.86,
                    "word": " would",
                    "probability": 0.73095703125
                },
                {
                    "start": 531.86,
                    "end": 532.06,
                    "word": " like",
                    "probability": 0.87451171875
                },
                {
                    "start": 532.06,
                    "end": 532.18,
                    "word": " to",
                    "probability": 0.9072265625
                },
                {
                    "start": 532.18,
                    "end": 532.36,
                    "word": " show",
                    "probability": 0.8759765625
                }
            ]
        },
        {
            "id": 127,
            "seek": 48168,
            "start": 532.36,
            "end": 535.38,
            "text": " how to automate the MarukonScan analysis.",
            "tokens": [
                51048,
                577,
                281,
                31605,
                264,
                2039,
                2034,
                266,
                50,
                7035,
                5215,
                13,
                51180
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23190104539195697,
            "compression_ratio": 1.7889908256880733,
            "no_speech_prob": 0.005558013916015625,
            "words": [
                {
                    "start": 532.36,
                    "end": 532.7,
                    "word": " how",
                    "probability": 0.8212890625
                },
                {
                    "start": 532.7,
                    "end": 532.96,
                    "word": " to",
                    "probability": 0.900390625
                },
                {
                    "start": 532.96,
                    "end": 533.4,
                    "word": " automate",
                    "probability": 0.8203125
                },
                {
                    "start": 533.4,
                    "end": 533.58,
                    "word": " the",
                    "probability": 0.75
                },
                {
                    "start": 533.58,
                    "end": 534.08,
                    "word": " MarukonScan",
                    "probability": 0.97158203125
                },
                {
                    "start": 534.08,
                    "end": 534.64,
                    "word": " analysis",
                    "probability": 0.7490234375
                },
                {
                    "start": 534.64,
                    "end": 535.38,
                    "word": ".",
                    "probability": 0.9775390625
                }
            ]
        },
        {
            "id": 128,
            "seek": 48168,
            "start": 535.94,
            "end": 537.96,
            "text": " MarukonScan alone cannot dump",
            "tokens": [
                51224,
                2039,
                2034,
                266,
                50,
                7035,
                3312,
                2644,
                11430,
                51328
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23190104539195697,
            "compression_ratio": 1.7889908256880733,
            "no_speech_prob": 0.005558013916015625,
            "words": [
                {
                    "start": 535.94,
                    "end": 536.48,
                    "word": " MarukonScan",
                    "probability": 0.965625
                },
                {
                    "start": 536.48,
                    "end": 536.96,
                    "word": " alone",
                    "probability": 0.89111328125
                },
                {
                    "start": 536.96,
                    "end": 537.44,
                    "word": " cannot",
                    "probability": 0.75048828125
                },
                {
                    "start": 537.44,
                    "end": 537.96,
                    "word": " dump",
                    "probability": 0.84423828125
                }
            ]
        },
        {
            "id": 129,
            "seek": 48168,
            "start": 537.96,
            "end": 540.26,
            "text": " configuration data automatically.",
            "tokens": [
                51328,
                11694,
                1412,
                6772,
                13,
                51448
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23190104539195697,
            "compression_ratio": 1.7889908256880733,
            "no_speech_prob": 0.005558013916015625,
            "words": [
                {
                    "start": 537.96,
                    "end": 538.54,
                    "word": " configuration",
                    "probability": 0.8505859375
                },
                {
                    "start": 538.54,
                    "end": 538.94,
                    "word": " data",
                    "probability": 0.7998046875
                },
                {
                    "start": 538.94,
                    "end": 539.52,
                    "word": " automatically",
                    "probability": 0.84814453125
                },
                {
                    "start": 539.52,
                    "end": 540.26,
                    "word": ".",
                    "probability": 0.97412109375
                }
            ]
        },
        {
            "id": 130,
            "seek": 48168,
            "start": 540.26,
            "end": 543.78,
            "text": " To automate the extraction of malware configuration,",
            "tokens": [
                51448,
                1407,
                31605,
                264,
                30197,
                295,
                40747,
                11694,
                11,
                51620
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23190104539195697,
            "compression_ratio": 1.7889908256880733,
            "no_speech_prob": 0.005558013916015625,
            "words": [
                {
                    "start": 540.26,
                    "end": 540.58,
                    "word": " To",
                    "probability": 0.90771484375
                },
                {
                    "start": 540.58,
                    "end": 541.0,
                    "word": " automate",
                    "probability": 0.89013671875
                },
                {
                    "start": 541.0,
                    "end": 541.26,
                    "word": " the",
                    "probability": 0.806640625
                },
                {
                    "start": 541.26,
                    "end": 541.68,
                    "word": " extraction",
                    "probability": 0.728515625
                },
                {
                    "start": 541.68,
                    "end": 542.1,
                    "word": " of",
                    "probability": 0.908203125
                },
                {
                    "start": 542.1,
                    "end": 542.36,
                    "word": " malware",
                    "probability": 0.84716796875
                },
                {
                    "start": 542.36,
                    "end": 543.08,
                    "word": " configuration",
                    "probability": 0.85546875
                },
                {
                    "start": 543.08,
                    "end": 543.78,
                    "word": ",",
                    "probability": 0.9326171875
                }
            ]
        },
        {
            "id": 131,
            "seek": 48168,
            "start": 543.78,
            "end": 547.24,
            "text": " we've developed a tool that executes MarukonScan",
            "tokens": [
                51620,
                321,
                600,
                4743,
                257,
                2290,
                300,
                4454,
                1819,
                2039,
                2034,
                266,
                50,
                7035,
                51794
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23190104539195697,
            "compression_ratio": 1.7889908256880733,
            "no_speech_prob": 0.005558013916015625,
            "words": [
                {
                    "start": 543.78,
                    "end": 544.14,
                    "word": " we've",
                    "probability": 0.876953125
                },
                {
                    "start": 544.14,
                    "end": 544.5,
                    "word": " developed",
                    "probability": 0.669921875
                },
                {
                    "start": 544.88,
                    "end": 545.14,
                    "word": " a tool",
                    "probability": 0.8662109375
                },
                {
                    "start": 545.14,
                    "end": 545.68,
                    "word": " that",
                    "probability": 0.8603515625
                },
                {
                    "start": 545.68,
                    "end": 546.32,
                    "word": " executes",
                    "probability": 0.94384765625
                },
                {
                    "start": 546.32,
                    "end": 547.24,
                    "word": " MarukonScan",
                    "probability": 0.93603515625
                }
            ]
        },
        {
            "id": 132,
            "seek": 51168,
            "start": 547.24,
            "end": 549.12,
            "text": " in Cuckoo Sandbox.",
            "tokens": [
                50370,
                294,
                383,
                1134,
                1986,
                7985,
                4995,
                13,
                50438
            ],
            "temperature": 0.0,
            "avg_logprob": -0.24730113473805515,
            "compression_ratio": 1.945945945945946,
            "no_speech_prob": 0.004619598388671875,
            "words": [
                {
                    "start": 547.24,
                    "end": 547.56,
                    "word": " in",
                    "probability": 0.810546875
                },
                {
                    "start": 547.56,
                    "end": 547.8,
                    "word": " Cuckoo",
                    "probability": 0.7311197916666666
                },
                {
                    "start": 547.8,
                    "end": 548.28,
                    "word": " Sandbox",
                    "probability": 0.695556640625
                },
                {
                    "start": 548.28,
                    "end": 549.12,
                    "word": ".",
                    "probability": 0.96826171875
                }
            ]
        },
        {
            "id": 133,
            "seek": 51168,
            "start": 551.92,
            "end": 554.94,
            "text": " MarukonScan with Cuckoo is Cuckoo Sandbox plugin",
            "tokens": [
                50500,
                2039,
                2034,
                266,
                50,
                7035,
                365,
                383,
                1134,
                1986,
                307,
                383,
                1134,
                1986,
                7985,
                4995,
                23407,
                50666
            ],
            "temperature": 0.0,
            "avg_logprob": -0.24730113473805515,
            "compression_ratio": 1.945945945945946,
            "no_speech_prob": 0.004619598388671875,
            "words": [
                {
                    "start": 551.92,
                    "end": 552.54,
                    "word": " MarukonScan",
                    "probability": 0.2583247184753418
                },
                {
                    "start": 552.54,
                    "end": 552.78,
                    "word": " with",
                    "probability": 0.74365234375
                },
                {
                    "start": 552.78,
                    "end": 553.2,
                    "word": " Cuckoo",
                    "probability": 0.9280598958333334
                },
                {
                    "start": 553.2,
                    "end": 553.68,
                    "word": " is",
                    "probability": 0.8876953125
                },
                {
                    "start": 553.68,
                    "end": 554.02,
                    "word": " Cuckoo",
                    "probability": 0.9431966145833334
                },
                {
                    "start": 554.02,
                    "end": 554.56,
                    "word": " Sandbox",
                    "probability": 0.8349609375
                },
                {
                    "start": 554.56,
                    "end": 554.94,
                    "word": " plugin",
                    "probability": 0.5380859375
                }
            ]
        },
        {
            "id": 134,
            "seek": 51168,
            "start": 554.94,
            "end": 556.98,
            "text": " for MarukonScan.",
            "tokens": [
                50666,
                337,
                2039,
                2034,
                266,
                50,
                7035,
                13,
                50768
            ],
            "temperature": 0.0,
            "avg_logprob": -0.24730113473805515,
            "compression_ratio": 1.945945945945946,
            "no_speech_prob": 0.004619598388671875,
            "words": [
                {
                    "start": 554.94,
                    "end": 555.46,
                    "word": " for",
                    "probability": 0.8857421875
                },
                {
                    "start": 555.46,
                    "end": 556.18,
                    "word": " MarukonScan",
                    "probability": 0.97490234375
                },
                {
                    "start": 556.18,
                    "end": 556.98,
                    "word": ".",
                    "probability": 0.982421875
                }
            ]
        },
        {
            "id": 135,
            "seek": 51168,
            "start": 556.98,
            "end": 560.0,
            "text": " The plugin adds the function to extract",
            "tokens": [
                50768,
                440,
                23407,
                10860,
                264,
                2445,
                281,
                8947,
                50908
            ],
            "temperature": 0.0,
            "avg_logprob": -0.24730113473805515,
            "compression_ratio": 1.945945945945946,
            "no_speech_prob": 0.004619598388671875,
            "words": [
                {
                    "start": 556.98,
                    "end": 557.38,
                    "word": " The",
                    "probability": 0.822265625
                },
                {
                    "start": 557.38,
                    "end": 557.7,
                    "word": " plugin",
                    "probability": 0.71533203125
                },
                {
                    "start": 557.7,
                    "end": 558.3,
                    "word": " adds",
                    "probability": 0.71337890625
                },
                {
                    "start": 558.3,
                    "end": 558.78,
                    "word": " the",
                    "probability": 0.79638671875
                },
                {
                    "start": 558.78,
                    "end": 559.14,
                    "word": " function",
                    "probability": 0.8681640625
                },
                {
                    "start": 559.14,
                    "end": 559.42,
                    "word": " to",
                    "probability": 0.904296875
                },
                {
                    "start": 559.42,
                    "end": 560.0,
                    "word": " extract",
                    "probability": 0.7734375
                }
            ]
        },
        {
            "id": 136,
            "seek": 51168,
            "start": 560.0,
            "end": 563.44,
            "text": " novel malware's configuration data from memory dump,",
            "tokens": [
                50908,
                7613,
                40747,
                311,
                11694,
                1412,
                490,
                4675,
                11430,
                11,
                51082
            ],
            "temperature": 0.0,
            "avg_logprob": -0.24730113473805515,
            "compression_ratio": 1.945945945945946,
            "no_speech_prob": 0.004619598388671875,
            "words": [
                {
                    "start": 560.0,
                    "end": 560.42,
                    "word": " novel",
                    "probability": 0.6513671875
                },
                {
                    "start": 560.42,
                    "end": 561.04,
                    "word": " malware's",
                    "probability": 0.775390625
                },
                {
                    "start": 561.04,
                    "end": 561.44,
                    "word": " configuration",
                    "probability": 0.87060546875
                },
                {
                    "start": 561.44,
                    "end": 562.04,
                    "word": " data",
                    "probability": 0.8095703125
                },
                {
                    "start": 562.04,
                    "end": 562.58,
                    "word": " from",
                    "probability": 0.8193359375
                },
                {
                    "start": 562.58,
                    "end": 562.86,
                    "word": " memory",
                    "probability": 0.76123046875
                },
                {
                    "start": 562.86,
                    "end": 563.16,
                    "word": " dump",
                    "probability": 0.88916015625
                },
                {
                    "start": 563.16,
                    "end": 563.44,
                    "word": ",",
                    "probability": 0.3203125
                }
            ]
        },
        {
            "id": 137,
            "seek": 51168,
            "start": 563.44,
            "end": 567.98,
            "text": " and then add MarukonScan report to Cuckoo Sandbox.",
            "tokens": [
                51082,
                293,
                550,
                909,
                2039,
                2034,
                266,
                50,
                7035,
                2275,
                281,
                383,
                1134,
                1986,
                7985,
                4995,
                13,
                51280
            ],
            "temperature": 0.0,
            "avg_logprob": -0.24730113473805515,
            "compression_ratio": 1.945945945945946,
            "no_speech_prob": 0.004619598388671875,
            "words": [
                {
                    "start": 563.44,
                    "end": 563.76,
                    "word": " and",
                    "probability": 0.8857421875
                },
                {
                    "start": 563.76,
                    "end": 564.08,
                    "word": " then",
                    "probability": 0.72998046875
                },
                {
                    "start": 564.08,
                    "end": 564.8,
                    "word": " add",
                    "probability": 0.74267578125
                },
                {
                    "start": 564.8,
                    "end": 565.6,
                    "word": " MarukonScan",
                    "probability": 0.97041015625
                },
                {
                    "start": 565.6,
                    "end": 565.98,
                    "word": " report",
                    "probability": 0.7138671875
                },
                {
                    "start": 565.98,
                    "end": 566.28,
                    "word": " to",
                    "probability": 0.896484375
                },
                {
                    "start": 566.28,
                    "end": 566.56,
                    "word": " Cuckoo",
                    "probability": 0.95947265625
                },
                {
                    "start": 566.56,
                    "end": 567.14,
                    "word": " Sandbox",
                    "probability": 0.8916015625
                },
                {
                    "start": 567.14,
                    "end": 567.98,
                    "word": ".",
                    "probability": 0.98291015625
                }
            ]
        },
        {
            "id": 138,
            "seek": 51168,
            "start": 570.47,
            "end": 572.57,
            "text": " And how it works.",
            "tokens": [
                51352,
                400,
                577,
                309,
                1985,
                13,
                51444
            ],
            "temperature": 0.0,
            "avg_logprob": -0.24730113473805515,
            "compression_ratio": 1.945945945945946,
            "no_speech_prob": 0.004619598388671875,
            "words": [
                {
                    "start": 570.47,
                    "end": 570.97,
                    "word": " And",
                    "probability": 0.1966552734375
                },
                {
                    "start": 570.97,
                    "end": 571.25,
                    "word": " how",
                    "probability": 0.84375
                },
                {
                    "start": 571.25,
                    "end": 571.41,
                    "word": " it",
                    "probability": 0.90087890625
                },
                {
                    "start": 571.41,
                    "end": 571.73,
                    "word": " works",
                    "probability": 0.7412109375
                },
                {
                    "start": 571.73,
                    "end": 572.57,
                    "word": ".",
                    "probability": 0.69482421875
                }
            ]
        },
        {
            "id": 139,
            "seek": 51168,
            "start": 572.61,
            "end": 576.03,
            "text": " This tool uses Cuckoo's memory dump function",
            "tokens": [
                51444,
                639,
                2290,
                4960,
                383,
                1134,
                1986,
                311,
                4675,
                11430,
                2445,
                51626
            ],
            "temperature": 0.0,
            "avg_logprob": -0.24730113473805515,
            "compression_ratio": 1.945945945945946,
            "no_speech_prob": 0.004619598388671875,
            "words": [
                {
                    "start": 572.61,
                    "end": 572.83,
                    "word": " This",
                    "probability": 0.79345703125
                },
                {
                    "start": 572.83,
                    "end": 573.09,
                    "word": " tool",
                    "probability": 0.86767578125
                },
                {
                    "start": 573.09,
                    "end": 573.53,
                    "word": " uses",
                    "probability": 0.8056640625
                },
                {
                    "start": 573.53,
                    "end": 574.99,
                    "word": " Cuckoo's",
                    "probability": 0.9373779296875
                },
                {
                    "start": 574.99,
                    "end": 575.29,
                    "word": " memory",
                    "probability": 0.73583984375
                },
                {
                    "start": 575.29,
                    "end": 575.59,
                    "word": " dump",
                    "probability": 0.8583984375
                },
                {
                    "start": 575.59,
                    "end": 576.03,
                    "word": " function",
                    "probability": 0.88818359375
                }
            ]
        },
        {
            "id": 140,
            "seek": 51168,
            "start": 576.03,
            "end": 579.39,
            "text": " to extract configuration data of executed malware",
            "tokens": [
                51626,
                281,
                8947,
                11694,
                1412,
                295,
                17577,
                40747,
                51796
            ],
            "temperature": 0.0,
            "avg_logprob": -0.24730113473805515,
            "compression_ratio": 1.945945945945946,
            "no_speech_prob": 0.004619598388671875,
            "words": [
                {
                    "start": 576.03,
                    "end": 576.37,
                    "word": " to",
                    "probability": 0.8994140625
                },
                {
                    "start": 576.37,
                    "end": 576.87,
                    "word": " extract",
                    "probability": 0.81982421875
                },
                {
                    "start": 576.87,
                    "end": 577.39,
                    "word": " configuration",
                    "probability": 0.830078125
                },
                {
                    "start": 577.39,
                    "end": 577.95,
                    "word": " data",
                    "probability": 0.82080078125
                },
                {
                    "start": 577.95,
                    "end": 578.33,
                    "word": " of",
                    "probability": 0.89599609375
                },
                {
                    "start": 578.33,
                    "end": 578.91,
                    "word": " executed",
                    "probability": 0.86767578125
                },
                {
                    "start": 578.91,
                    "end": 579.39,
                    "word": " malware",
                    "probability": 0.8544921875
                }
            ]
        },
        {
            "id": 141,
            "seek": 51168,
            "start": 579.39,
            "end": 580.69,
            "text": " from memory dumps.",
            "tokens": [
                51796,
                490,
                4675,
                11430,
                82,
                13,
                51852
            ],
            "temperature": 0.0,
            "avg_logprob": -0.24730113473805515,
            "compression_ratio": 1.945945945945946,
            "no_speech_prob": 0.004619598388671875,
            "words": [
                {
                    "start": 579.39,
                    "end": 579.89,
                    "word": " from",
                    "probability": 0.81298828125
                },
                {
                    "start": 579.89,
                    "end": 580.17,
                    "word": " memory",
                    "probability": 0.82177734375
                },
                {
                    "start": 580.17,
                    "end": 580.67,
                    "word": " dumps",
                    "probability": 0.88916015625
                },
                {
                    "start": 580.67,
                    "end": 580.69,
                    "word": ".",
                    "probability": 0.97607421875
                }
            ]
        },
        {
            "id": 142,
            "seek": 53860,
            "start": 584.5,
            "end": 587.62,
            "text": " Here's a video we make to give you an idea",
            "tokens": [
                50414,
                1692,
                311,
                257,
                960,
                321,
                652,
                281,
                976,
                291,
                364,
                1558,
                50562
            ],
            "temperature": 0.0,
            "avg_logprob": -0.18124999772934686,
            "compression_ratio": 1.8263473053892216,
            "no_speech_prob": 0.0007009506225585938,
            "words": [
                {
                    "start": 584.5,
                    "end": 585.26,
                    "word": " Here's",
                    "probability": 0.744384765625
                },
                {
                    "start": 585.36,
                    "end": 585.6,
                    "word": " a video",
                    "probability": 0.77294921875
                },
                {
                    "start": 585.6,
                    "end": 585.82,
                    "word": " we",
                    "probability": 0.89111328125
                },
                {
                    "start": 585.82,
                    "end": 586.16,
                    "word": " make",
                    "probability": 0.59423828125
                },
                {
                    "start": 586.16,
                    "end": 586.34,
                    "word": " to",
                    "probability": 0.89501953125
                },
                {
                    "start": 586.34,
                    "end": 586.56,
                    "word": " give",
                    "probability": 0.82568359375
                },
                {
                    "start": 586.56,
                    "end": 586.86,
                    "word": " you",
                    "probability": 0.89208984375
                },
                {
                    "start": 586.86,
                    "end": 587.16,
                    "word": " an",
                    "probability": 0.8984375
                },
                {
                    "start": 587.16,
                    "end": 587.62,
                    "word": " idea",
                    "probability": 0.779296875
                }
            ]
        },
        {
            "id": 143,
            "seek": 53860,
            "start": 587.62,
            "end": 590.4,
            "text": " how MarukonScan with Cuckoo works.",
            "tokens": [
                50562,
                577,
                2039,
                2034,
                266,
                50,
                7035,
                365,
                383,
                1134,
                1986,
                1985,
                13,
                50682
            ],
            "temperature": 0.0,
            "avg_logprob": -0.18124999772934686,
            "compression_ratio": 1.8263473053892216,
            "no_speech_prob": 0.0007009506225585938,
            "words": [
                {
                    "start": 587.62,
                    "end": 588.36,
                    "word": " how",
                    "probability": 0.76611328125
                },
                {
                    "start": 588.36,
                    "end": 589.02,
                    "word": " MarukonScan",
                    "probability": 0.3865348815917969
                },
                {
                    "start": 589.02,
                    "end": 589.24,
                    "word": " with",
                    "probability": 0.72314453125
                },
                {
                    "start": 589.24,
                    "end": 589.5,
                    "word": " Cuckoo",
                    "probability": 0.759765625
                },
                {
                    "start": 589.5,
                    "end": 590.02,
                    "word": " works",
                    "probability": 0.736328125
                },
                {
                    "start": 590.02,
                    "end": 590.4,
                    "word": ".",
                    "probability": 0.9423828125
                }
            ]
        },
        {
            "id": 144,
            "seek": 53860,
            "start": 602.6,
            "end": 605.52,
            "text": " MarukonScan with Cuckoo integrates MarukonScan",
            "tokens": [
                50750,
                2039,
                2034,
                266,
                50,
                7035,
                365,
                383,
                1134,
                1986,
                3572,
                1024,
                2039,
                2034,
                266,
                50,
                7035,
                50894
            ],
            "temperature": 0.0,
            "avg_logprob": -0.18124999772934686,
            "compression_ratio": 1.8263473053892216,
            "no_speech_prob": 0.0007009506225585938,
            "words": [
                {
                    "start": 602.6,
                    "end": 603.36,
                    "word": " MarukonScan",
                    "probability": 0.96171875
                },
                {
                    "start": 603.36,
                    "end": 603.62,
                    "word": " with",
                    "probability": 0.8291015625
                },
                {
                    "start": 603.62,
                    "end": 603.92,
                    "word": " Cuckoo",
                    "probability": 0.9513346354166666
                },
                {
                    "start": 603.92,
                    "end": 604.76,
                    "word": " integrates",
                    "probability": 0.869384765625
                },
                {
                    "start": 604.76,
                    "end": 605.52,
                    "word": " MarukonScan",
                    "probability": 0.97744140625
                }
            ]
        },
        {
            "id": 145,
            "seek": 53860,
            "start": 605.52,
            "end": 607.5,
            "text": " into Cuckoo Sandbox.",
            "tokens": [
                50894,
                666,
                383,
                1134,
                1986,
                7985,
                4995,
                13,
                51008
            ],
            "temperature": 0.0,
            "avg_logprob": -0.18124999772934686,
            "compression_ratio": 1.8263473053892216,
            "no_speech_prob": 0.0007009506225585938,
            "words": [
                {
                    "start": 605.52,
                    "end": 605.86,
                    "word": " into",
                    "probability": 0.73974609375
                },
                {
                    "start": 605.86,
                    "end": 606.22,
                    "word": " Cuckoo",
                    "probability": 0.9405924479166666
                },
                {
                    "start": 606.22,
                    "end": 606.74,
                    "word": " Sandbox",
                    "probability": 0.552001953125
                },
                {
                    "start": 606.74,
                    "end": 607.5,
                    "word": ".",
                    "probability": 0.958984375
                }
            ]
        },
        {
            "id": 146,
            "seek": 53860,
            "start": 607.64,
            "end": 610.5,
            "text": " It enables extracting malware configuration",
            "tokens": [
                51008,
                467,
                17077,
                49844,
                40747,
                11694,
                51152
            ],
            "temperature": 0.0,
            "avg_logprob": -0.18124999772934686,
            "compression_ratio": 1.8263473053892216,
            "no_speech_prob": 0.0007009506225585938,
            "words": [
                {
                    "start": 607.64,
                    "end": 608.1,
                    "word": " It",
                    "probability": 0.9052734375
                },
                {
                    "start": 608.1,
                    "end": 608.66,
                    "word": " enables",
                    "probability": 0.7236328125
                },
                {
                    "start": 608.66,
                    "end": 609.4,
                    "word": " extracting",
                    "probability": 0.64306640625
                },
                {
                    "start": 609.4,
                    "end": 609.8,
                    "word": " malware",
                    "probability": 0.8173828125
                },
                {
                    "start": 609.8,
                    "end": 610.5,
                    "word": " configuration",
                    "probability": 0.83740234375
                }
            ]
        },
        {
            "id": 147,
            "seek": 53860,
            "start": 610.5,
            "end": 612.38,
            "text": " in Cuckoo Sandbox.",
            "tokens": [
                51152,
                294,
                383,
                1134,
                1986,
                7985,
                4995,
                13,
                51232
            ],
            "temperature": 0.0,
            "avg_logprob": -0.18124999772934686,
            "compression_ratio": 1.8263473053892216,
            "no_speech_prob": 0.0007009506225585938,
            "words": [
                {
                    "start": 610.5,
                    "end": 611.04,
                    "word": " in",
                    "probability": 0.8984375
                },
                {
                    "start": 611.04,
                    "end": 611.34,
                    "word": " Cuckoo",
                    "probability": 0.9524739583333334
                },
                {
                    "start": 611.34,
                    "end": 612.0,
                    "word": " Sandbox",
                    "probability": 0.87890625
                },
                {
                    "start": 612.0,
                    "end": 612.38,
                    "word": ".",
                    "probability": 0.96533203125
                }
            ]
        },
        {
            "id": 148,
            "seek": 53860,
            "start": 614.24,
            "end": 617.18,
            "text": " And let's see how MarukonScan with Cuckoo works.",
            "tokens": [
                51328,
                400,
                718,
                311,
                536,
                577,
                2039,
                2034,
                266,
                50,
                7035,
                365,
                383,
                1134,
                1986,
                1985,
                13,
                51470
            ],
            "temperature": 0.0,
            "avg_logprob": -0.18124999772934686,
            "compression_ratio": 1.8263473053892216,
            "no_speech_prob": 0.0007009506225585938,
            "words": [
                {
                    "start": 614.24,
                    "end": 614.46,
                    "word": " And",
                    "probability": 0.408447265625
                },
                {
                    "start": 614.46,
                    "end": 614.7,
                    "word": " let's",
                    "probability": 0.939208984375
                },
                {
                    "start": 614.7,
                    "end": 614.9,
                    "word": " see",
                    "probability": 0.810546875
                },
                {
                    "start": 614.9,
                    "end": 615.3,
                    "word": " how",
                    "probability": 0.89794921875
                },
                {
                    "start": 615.3,
                    "end": 615.9,
                    "word": " MarukonScan",
                    "probability": 0.976953125
                },
                {
                    "start": 615.9,
                    "end": 616.14,
                    "word": " with",
                    "probability": 0.81884765625
                },
                {
                    "start": 616.14,
                    "end": 616.34,
                    "word": " Cuckoo",
                    "probability": 0.9576822916666666
                },
                {
                    "start": 616.34,
                    "end": 616.8,
                    "word": " works",
                    "probability": 0.7529296875
                },
                {
                    "start": 616.8,
                    "end": 617.18,
                    "word": ".",
                    "probability": 0.99072265625
                }
            ]
        },
        {
            "id": 149,
            "seek": 53860,
            "start": 621.66,
            "end": 625.3,
            "text": " All you need to do is upload malware to Cuckoo.",
            "tokens": [
                51544,
                1057,
                291,
                643,
                281,
                360,
                307,
                6580,
                40747,
                281,
                383,
                1134,
                1986,
                13,
                51692
            ],
            "temperature": 0.0,
            "avg_logprob": -0.18124999772934686,
            "compression_ratio": 1.8263473053892216,
            "no_speech_prob": 0.0007009506225585938,
            "words": [
                {
                    "start": 621.66,
                    "end": 622.42,
                    "word": " All",
                    "probability": 0.8935546875
                },
                {
                    "start": 622.42,
                    "end": 622.58,
                    "word": " you",
                    "probability": 0.896484375
                },
                {
                    "start": 622.58,
                    "end": 622.74,
                    "word": " need",
                    "probability": 0.80810546875
                },
                {
                    "start": 622.74,
                    "end": 622.86,
                    "word": " to",
                    "probability": 0.90380859375
                },
                {
                    "start": 622.86,
                    "end": 623.14,
                    "word": " do",
                    "probability": 0.91650390625
                },
                {
                    "start": 623.14,
                    "end": 623.46,
                    "word": " is",
                    "probability": 0.8955078125
                },
                {
                    "start": 623.46,
                    "end": 623.9,
                    "word": " upload",
                    "probability": 0.798828125
                },
                {
                    "start": 623.9,
                    "end": 624.3,
                    "word": " malware",
                    "probability": 0.85205078125
                },
                {
                    "start": 624.3,
                    "end": 624.6,
                    "word": " to",
                    "probability": 0.8974609375
                },
                {
                    "start": 624.6,
                    "end": 624.92,
                    "word": " Cuckoo",
                    "probability": 0.9578450520833334
                },
                {
                    "start": 624.92,
                    "end": 625.3,
                    "word": ".",
                    "probability": 0.97705078125
                }
            ]
        },
        {
            "id": 150,
            "seek": 56724,
            "start": 627.14,
            "end": 630.12,
            "text": " Cuckoo sends the malware into the virtual machine",
            "tokens": [
                50414,
                383,
                1134,
                1986,
                14790,
                264,
                40747,
                666,
                264,
                6374,
                3479,
                50564
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4389367699623108,
            "compression_ratio": 1.7393939393939395,
            "no_speech_prob": 0.0003337860107421875,
            "words": [
                {
                    "start": 627.14,
                    "end": 627.86,
                    "word": " Cuckoo",
                    "probability": 0.73046875
                },
                {
                    "start": 627.86,
                    "end": 628.3,
                    "word": " sends",
                    "probability": 0.7294921875
                },
                {
                    "start": 628.3,
                    "end": 628.58,
                    "word": " the",
                    "probability": 0.5859375
                },
                {
                    "start": 628.58,
                    "end": 628.78,
                    "word": " malware",
                    "probability": 0.8427734375
                },
                {
                    "start": 628.78,
                    "end": 629.24,
                    "word": " into",
                    "probability": 0.72802734375
                },
                {
                    "start": 629.24,
                    "end": 629.52,
                    "word": " the",
                    "probability": 0.79638671875
                },
                {
                    "start": 629.52,
                    "end": 629.72,
                    "word": " virtual",
                    "probability": 0.57568359375
                },
                {
                    "start": 629.72,
                    "end": 630.12,
                    "word": " machine",
                    "probability": 0.75439453125
                }
            ]
        },
        {
            "id": 151,
            "seek": 56724,
            "start": 632.5,
            "end": 635.48,
            "text": " and executes it on the host.",
            "tokens": [
                50688,
                293,
                4454,
                1819,
                309,
                322,
                264,
                3975,
                13,
                50792
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4389367699623108,
            "compression_ratio": 1.7393939393939395,
            "no_speech_prob": 0.0003337860107421875,
            "words": [
                {
                    "start": 632.5,
                    "end": 633.22,
                    "word": " and",
                    "probability": 0.59423828125
                },
                {
                    "start": 633.22,
                    "end": 633.74,
                    "word": " executes",
                    "probability": 0.6451416015625
                },
                {
                    "start": 633.74,
                    "end": 633.98,
                    "word": " it",
                    "probability": 0.8828125
                },
                {
                    "start": 633.98,
                    "end": 634.28,
                    "word": " on",
                    "probability": 0.9033203125
                },
                {
                    "start": 634.28,
                    "end": 634.44,
                    "word": " the",
                    "probability": 0.8125
                },
                {
                    "start": 634.44,
                    "end": 634.76,
                    "word": " host",
                    "probability": 0.79296875
                },
                {
                    "start": 634.76,
                    "end": 635.48,
                    "word": ".",
                    "probability": 0.98388671875
                }
            ]
        },
        {
            "id": 152,
            "seek": 56724,
            "start": 638.72,
            "end": 640.34,
            "text": " Cuckoo acquires the memory dump",
            "tokens": [
                50866,
                383,
                1134,
                1986,
                6667,
                3145,
                264,
                4675,
                11430,
                50952
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4389367699623108,
            "compression_ratio": 1.7393939393939395,
            "no_speech_prob": 0.0003337860107421875,
            "words": [
                {
                    "start": 638.72,
                    "end": 638.96,
                    "word": " Cuckoo",
                    "probability": 0.962890625
                },
                {
                    "start": 638.96,
                    "end": 639.56,
                    "word": " acquires",
                    "probability": 0.87060546875
                },
                {
                    "start": 639.56,
                    "end": 639.76,
                    "word": " the",
                    "probability": 0.81201171875
                },
                {
                    "start": 639.76,
                    "end": 640.02,
                    "word": " memory",
                    "probability": 0.78759765625
                },
                {
                    "start": 640.02,
                    "end": 640.34,
                    "word": " dump",
                    "probability": 0.88623046875
                }
            ]
        },
        {
            "id": 153,
            "seek": 56724,
            "start": 640.34,
            "end": 643.32,
            "text": " and send it to MarukonScan.",
            "tokens": [
                50952,
                293,
                2845,
                309,
                281,
                2039,
                2034,
                266,
                50,
                7035,
                13,
                51074
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4389367699623108,
            "compression_ratio": 1.7393939393939395,
            "no_speech_prob": 0.0003337860107421875,
            "words": [
                {
                    "start": 640.34,
                    "end": 640.66,
                    "word": " and",
                    "probability": 0.876953125
                },
                {
                    "start": 640.66,
                    "end": 640.88,
                    "word": " send",
                    "probability": 0.24609375
                },
                {
                    "start": 640.88,
                    "end": 641.08,
                    "word": " it",
                    "probability": 0.7197265625
                },
                {
                    "start": 641.08,
                    "end": 641.44,
                    "word": " to",
                    "probability": 0.89208984375
                },
                {
                    "start": 641.44,
                    "end": 642.6,
                    "word": " MarukonScan",
                    "probability": 0.3188179016113281
                },
                {
                    "start": 642.6,
                    "end": 643.32,
                    "word": ".",
                    "probability": 0.98583984375
                }
            ]
        },
        {
            "id": 154,
            "seek": 56724,
            "start": 645.3,
            "end": 647.6,
            "text": " MarukonScan analyzes the memory dump",
            "tokens": [
                51194,
                2039,
                2034,
                266,
                50,
                7035,
                6459,
                12214,
                264,
                4675,
                11430,
                51318
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4389367699623108,
            "compression_ratio": 1.7393939393939395,
            "no_speech_prob": 0.0003337860107421875,
            "words": [
                {
                    "start": 645.3,
                    "end": 646.02,
                    "word": " MarukonScan",
                    "probability": 0.96201171875
                },
                {
                    "start": 646.02,
                    "end": 646.74,
                    "word": " analyzes",
                    "probability": 0.664794921875
                },
                {
                    "start": 646.74,
                    "end": 646.96,
                    "word": " the",
                    "probability": 0.7861328125
                },
                {
                    "start": 646.96,
                    "end": 647.24,
                    "word": " memory",
                    "probability": 0.81591796875
                },
                {
                    "start": 647.24,
                    "end": 647.6,
                    "word": " dump",
                    "probability": 0.81787109375
                }
            ]
        },
        {
            "id": 155,
            "seek": 56724,
            "start": 647.6,
            "end": 650.82,
            "text": " and extracts the malware's configuration data.",
            "tokens": [
                51318,
                293,
                8947,
                82,
                264,
                40747,
                311,
                11694,
                1412,
                13,
                51450
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4389367699623108,
            "compression_ratio": 1.7393939393939395,
            "no_speech_prob": 0.0003337860107421875,
            "words": [
                {
                    "start": 647.6,
                    "end": 647.92,
                    "word": " and",
                    "probability": 0.88134765625
                },
                {
                    "start": 647.92,
                    "end": 648.62,
                    "word": " extracts",
                    "probability": 0.88525390625
                },
                {
                    "start": 648.62,
                    "end": 648.74,
                    "word": " the",
                    "probability": 0.78173828125
                },
                {
                    "start": 648.74,
                    "end": 649.22,
                    "word": " malware's",
                    "probability": 0.88623046875
                },
                {
                    "start": 649.22,
                    "end": 649.64,
                    "word": " configuration",
                    "probability": 0.8662109375
                },
                {
                    "start": 649.64,
                    "end": 650.1,
                    "word": " data",
                    "probability": 0.81005859375
                },
                {
                    "start": 650.1,
                    "end": 650.82,
                    "word": ".",
                    "probability": 0.99560546875
                }
            ]
        },
        {
            "id": 156,
            "seek": 56724,
            "start": 651.84,
            "end": 653.86,
            "text": " Finally, the malware's configuration",
            "tokens": [
                51534,
                6288,
                11,
                264,
                40747,
                311,
                11694,
                51636
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4389367699623108,
            "compression_ratio": 1.7393939393939395,
            "no_speech_prob": 0.0003337860107421875,
            "words": [
                {
                    "start": 651.84,
                    "end": 652.56,
                    "word": " Finally",
                    "probability": 0.705078125
                },
                {
                    "start": 652.56,
                    "end": 652.84,
                    "word": ",",
                    "probability": 0.95263671875
                },
                {
                    "start": 652.84,
                    "end": 652.98,
                    "word": " the",
                    "probability": 0.7998046875
                },
                {
                    "start": 652.98,
                    "end": 653.38,
                    "word": " malware's",
                    "probability": 0.905517578125
                },
                {
                    "start": 653.38,
                    "end": 653.86,
                    "word": " configuration",
                    "probability": 0.8662109375
                }
            ]
        },
        {
            "id": 157,
            "seek": 56724,
            "start": 653.86,
            "end": 656.08,
            "text": " will be reported to Cuckoo.",
            "tokens": [
                51636,
                486,
                312,
                7055,
                281,
                383,
                1134,
                1986,
                13,
                51710
            ],
            "temperature": 0.0,
            "avg_logprob": -0.4389367699623108,
            "compression_ratio": 1.7393939393939395,
            "no_speech_prob": 0.0003337860107421875,
            "words": [
                {
                    "start": 653.86,
                    "end": 654.26,
                    "word": " will",
                    "probability": 0.806640625
                },
                {
                    "start": 654.26,
                    "end": 654.42,
                    "word": " be",
                    "probability": 0.90625
                },
                {
                    "start": 654.42,
                    "end": 654.78,
                    "word": " reported",
                    "probability": 0.79833984375
                },
                {
                    "start": 654.78,
                    "end": 655.08,
                    "word": " to",
                    "probability": 0.90625
                },
                {
                    "start": 655.08,
                    "end": 655.36,
                    "word": " Cuckoo",
                    "probability": 0.9630533854166666
                },
                {
                    "start": 655.36,
                    "end": 656.08,
                    "word": ".",
                    "probability": 0.998046875
                }
            ]
        },
        {
            "id": 158,
            "seek": 59500,
            "start": 662.47,
            "end": 666.57,
            "text": " This UI shows the Cuckoo's report of MarukonScan.",
            "tokens": [
                50414,
                639,
                15682,
                3110,
                264,
                383,
                1134,
                1986,
                311,
                2275,
                295,
                2039,
                2034,
                266,
                50,
                7035,
                13,
                50616
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23422181124196334,
            "compression_ratio": 1.5141509433962264,
            "no_speech_prob": 0.0006227493286132812,
            "words": [
                {
                    "start": 662.47,
                    "end": 662.81,
                    "word": " This",
                    "probability": 0.689453125
                },
                {
                    "start": 662.81,
                    "end": 663.15,
                    "word": " UI",
                    "probability": 0.1817626953125
                },
                {
                    "start": 663.15,
                    "end": 663.75,
                    "word": " shows",
                    "probability": 0.6904296875
                },
                {
                    "start": 663.75,
                    "end": 663.99,
                    "word": " the",
                    "probability": 0.736328125
                },
                {
                    "start": 663.99,
                    "end": 664.53,
                    "word": " Cuckoo's",
                    "probability": 0.629608154296875
                },
                {
                    "start": 664.53,
                    "end": 664.99,
                    "word": " report",
                    "probability": 0.74951171875
                },
                {
                    "start": 664.99,
                    "end": 665.35,
                    "word": " of",
                    "probability": 0.8935546875
                },
                {
                    "start": 665.35,
                    "end": 665.89,
                    "word": " MarukonScan",
                    "probability": 0.24577682018280028
                },
                {
                    "start": 665.89,
                    "end": 666.57,
                    "word": ".",
                    "probability": 0.89013671875
                }
            ]
        },
        {
            "id": 159,
            "seek": 59500,
            "start": 666.59,
            "end": 668.77,
            "text": " In here, you can find the same result",
            "tokens": [
                50616,
                682,
                510,
                11,
                291,
                393,
                915,
                264,
                912,
                1874,
                50726
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23422181124196334,
            "compression_ratio": 1.5141509433962264,
            "no_speech_prob": 0.0006227493286132812,
            "words": [
                {
                    "start": 666.59,
                    "end": 666.81,
                    "word": " In",
                    "probability": 0.798828125
                },
                {
                    "start": 666.81,
                    "end": 667.15,
                    "word": " here",
                    "probability": 0.80615234375
                },
                {
                    "start": 667.15,
                    "end": 667.33,
                    "word": ",",
                    "probability": 0.74365234375
                },
                {
                    "start": 667.33,
                    "end": 667.57,
                    "word": " you",
                    "probability": 0.89111328125
                },
                {
                    "start": 667.57,
                    "end": 667.71,
                    "word": " can",
                    "probability": 0.87451171875
                },
                {
                    "start": 667.71,
                    "end": 668.01,
                    "word": " find",
                    "probability": 0.8154296875
                },
                {
                    "start": 668.01,
                    "end": 668.19,
                    "word": " the",
                    "probability": 0.80517578125
                },
                {
                    "start": 668.19,
                    "end": 668.39,
                    "word": " same",
                    "probability": 0.82373046875
                },
                {
                    "start": 668.39,
                    "end": 668.77,
                    "word": " result",
                    "probability": 0.5771484375
                }
            ]
        },
        {
            "id": 160,
            "seek": 59500,
            "start": 668.77,
            "end": 672.15,
            "text": " as we saw in the MarukonScan CLI interface.",
            "tokens": [
                50726,
                382,
                321,
                1866,
                294,
                264,
                2039,
                2034,
                266,
                50,
                7035,
                12855,
                40,
                9226,
                13,
                50868
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23422181124196334,
            "compression_ratio": 1.5141509433962264,
            "no_speech_prob": 0.0006227493286132812,
            "words": [
                {
                    "start": 668.77,
                    "end": 669.07,
                    "word": " as",
                    "probability": 0.88525390625
                },
                {
                    "start": 669.07,
                    "end": 669.29,
                    "word": " we",
                    "probability": 0.89794921875
                },
                {
                    "start": 669.29,
                    "end": 669.63,
                    "word": " saw",
                    "probability": 0.806640625
                },
                {
                    "start": 669.63,
                    "end": 669.87,
                    "word": " in",
                    "probability": 0.9130859375
                },
                {
                    "start": 669.87,
                    "end": 669.99,
                    "word": " the",
                    "probability": 0.8095703125
                },
                {
                    "start": 669.99,
                    "end": 670.53,
                    "word": " MarukonScan",
                    "probability": 0.96435546875
                },
                {
                    "start": 670.53,
                    "end": 671.13,
                    "word": " CLI",
                    "probability": 0.86962890625
                },
                {
                    "start": 671.13,
                    "end": 671.47,
                    "word": " interface",
                    "probability": 0.77978515625
                },
                {
                    "start": 671.47,
                    "end": 672.15,
                    "word": ".",
                    "probability": 0.966796875
                }
            ]
        },
        {
            "id": 161,
            "seek": 59500,
            "start": 673.03,
            "end": 677.07,
            "text": " This case shows the report of Red Leaves,",
            "tokens": [
                50952,
                639,
                1389,
                3110,
                264,
                2275,
                295,
                4477,
                1456,
                5423,
                11,
                51138
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23422181124196334,
            "compression_ratio": 1.5141509433962264,
            "no_speech_prob": 0.0006227493286132812,
            "words": [
                {
                    "start": 673.03,
                    "end": 673.71,
                    "word": " This",
                    "probability": 0.7998046875
                },
                {
                    "start": 673.71,
                    "end": 674.23,
                    "word": " case",
                    "probability": 0.78369140625
                },
                {
                    "start": 674.23,
                    "end": 674.67,
                    "word": " shows",
                    "probability": 0.75
                },
                {
                    "start": 674.67,
                    "end": 674.83,
                    "word": " the",
                    "probability": 0.5
                },
                {
                    "start": 674.83,
                    "end": 675.35,
                    "word": " report",
                    "probability": 0.83349609375
                },
                {
                    "start": 675.35,
                    "end": 675.69,
                    "word": " of",
                    "probability": 0.89111328125
                },
                {
                    "start": 675.69,
                    "end": 676.19,
                    "word": " Red",
                    "probability": 0.376708984375
                },
                {
                    "start": 676.19,
                    "end": 676.55,
                    "word": " Leaves",
                    "probability": 0.602294921875
                },
                {
                    "start": 676.55,
                    "end": 677.07,
                    "word": ",",
                    "probability": 0.8955078125
                }
            ]
        },
        {
            "id": 162,
            "seek": 59500,
            "start": 677.07,
            "end": 679.65,
            "text": " the malware used by APT10.",
            "tokens": [
                51138,
                264,
                40747,
                1143,
                538,
                5372,
                51,
                3279,
                13,
                51284
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23422181124196334,
            "compression_ratio": 1.5141509433962264,
            "no_speech_prob": 0.0006227493286132812,
            "words": [
                {
                    "start": 677.07,
                    "end": 677.25,
                    "word": " the",
                    "probability": 0.79296875
                },
                {
                    "start": 677.25,
                    "end": 677.49,
                    "word": " malware",
                    "probability": 0.76220703125
                },
                {
                    "start": 677.49,
                    "end": 677.97,
                    "word": " used",
                    "probability": 0.76806640625
                },
                {
                    "start": 677.97,
                    "end": 678.29,
                    "word": " by",
                    "probability": 0.91552734375
                },
                {
                    "start": 678.29,
                    "end": 678.97,
                    "word": " APT10",
                    "probability": 0.7057291666666666
                },
                {
                    "start": 678.97,
                    "end": 679.65,
                    "word": ".",
                    "probability": 0.98779296875
                }
            ]
        },
        {
            "id": 163,
            "seek": 59500,
            "start": 679.79,
            "end": 682.73,
            "text": " You can find the C2 address, campaign ID,",
            "tokens": [
                51284,
                509,
                393,
                915,
                264,
                383,
                17,
                2985,
                11,
                5129,
                7348,
                11,
                51422
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23422181124196334,
            "compression_ratio": 1.5141509433962264,
            "no_speech_prob": 0.0006227493286132812,
            "words": [
                {
                    "start": 679.79,
                    "end": 680.15,
                    "word": " You",
                    "probability": 0.8955078125
                },
                {
                    "start": 680.15,
                    "end": 680.29,
                    "word": " can",
                    "probability": 0.8876953125
                },
                {
                    "start": 680.29,
                    "end": 680.53,
                    "word": " find",
                    "probability": 0.80322265625
                },
                {
                    "start": 680.53,
                    "end": 680.67,
                    "word": " the",
                    "probability": 0.73681640625
                },
                {
                    "start": 680.67,
                    "end": 680.97,
                    "word": " C2",
                    "probability": 0.9140625
                },
                {
                    "start": 680.97,
                    "end": 681.45,
                    "word": " address",
                    "probability": 0.81689453125
                },
                {
                    "start": 681.45,
                    "end": 681.73,
                    "word": ",",
                    "probability": 0.98291015625
                },
                {
                    "start": 681.73,
                    "end": 682.01,
                    "word": " campaign",
                    "probability": 0.74658203125
                },
                {
                    "start": 682.01,
                    "end": 682.37,
                    "word": " ID",
                    "probability": 0.86181640625
                },
                {
                    "start": 682.37,
                    "end": 682.73,
                    "word": ",",
                    "probability": 0.779296875
                }
            ]
        },
        {
            "id": 164,
            "seek": 59500,
            "start": 682.73,
            "end": 684.83,
            "text": " and traffic encryption key.",
            "tokens": [
                51422,
                293,
                6419,
                29575,
                2141,
                13,
                51502
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23422181124196334,
            "compression_ratio": 1.5141509433962264,
            "no_speech_prob": 0.0006227493286132812,
            "words": [
                {
                    "start": 682.73,
                    "end": 683.01,
                    "word": " and",
                    "probability": 0.88720703125
                },
                {
                    "start": 683.01,
                    "end": 683.35,
                    "word": " traffic",
                    "probability": 0.80322265625
                },
                {
                    "start": 683.35,
                    "end": 683.81,
                    "word": " encryption",
                    "probability": 0.779296875
                },
                {
                    "start": 683.81,
                    "end": 684.15,
                    "word": " key",
                    "probability": 0.84228515625
                },
                {
                    "start": 684.15,
                    "end": 684.83,
                    "word": ".",
                    "probability": 0.99658203125
                }
            ]
        },
        {
            "id": 165,
            "seek": 59500,
            "start": 684.97,
            "end": 689.33,
            "text": " Of course, this report is saved into the database.",
            "tokens": [
                51544,
                2720,
                1164,
                11,
                341,
                2275,
                307,
                6624,
                666,
                264,
                8149,
                13,
                51752
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23422181124196334,
            "compression_ratio": 1.5141509433962264,
            "no_speech_prob": 0.0006227493286132812,
            "words": [
                {
                    "start": 684.97,
                    "end": 685.45,
                    "word": " Of",
                    "probability": 0.91015625
                },
                {
                    "start": 685.45,
                    "end": 685.73,
                    "word": " course",
                    "probability": 0.86962890625
                },
                {
                    "start": 685.73,
                    "end": 685.93,
                    "word": ",",
                    "probability": 0.92041015625
                },
                {
                    "start": 685.93,
                    "end": 686.15,
                    "word": " this",
                    "probability": 0.8681640625
                },
                {
                    "start": 686.15,
                    "end": 686.59,
                    "word": " report",
                    "probability": 0.86962890625
                },
                {
                    "start": 686.59,
                    "end": 686.89,
                    "word": " is",
                    "probability": 0.90234375
                },
                {
                    "start": 686.89,
                    "end": 687.21,
                    "word": " saved",
                    "probability": 0.703125
                },
                {
                    "start": 687.21,
                    "end": 687.65,
                    "word": " into",
                    "probability": 0.71240234375
                },
                {
                    "start": 687.65,
                    "end": 687.99,
                    "word": " the",
                    "probability": 0.80419921875
                },
                {
                    "start": 687.99,
                    "end": 688.69,
                    "word": " database",
                    "probability": 0.80029296875
                },
                {
                    "start": 688.69,
                    "end": 689.33,
                    "word": ".",
                    "probability": 0.87841796875
                }
            ]
        },
        {
            "id": 166,
            "seek": 62434,
            "start": 689.33,
            "end": 693.65,
            "text": " You could search and do some statistic analysis with it.",
            "tokens": [
                50366,
                509,
                727,
                3164,
                293,
                360,
                512,
                29588,
                5215,
                365,
                309,
                13,
                50540
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2629717045797492,
            "compression_ratio": 1.6596638655462186,
            "no_speech_prob": 0.0010309219360351562,
            "words": [
                {
                    "start": 689.33,
                    "end": 689.47,
                    "word": " You",
                    "probability": 0.181884765625
                },
                {
                    "start": 689.47,
                    "end": 689.69,
                    "word": " could",
                    "probability": 0.791015625
                },
                {
                    "start": 689.69,
                    "end": 690.03,
                    "word": " search",
                    "probability": 0.90966796875
                },
                {
                    "start": 690.03,
                    "end": 690.33,
                    "word": " and",
                    "probability": 0.875
                },
                {
                    "start": 690.33,
                    "end": 690.47,
                    "word": " do",
                    "probability": 0.90380859375
                },
                {
                    "start": 690.47,
                    "end": 690.71,
                    "word": " some",
                    "probability": 0.80908203125
                },
                {
                    "start": 690.71,
                    "end": 691.11,
                    "word": " statistic",
                    "probability": 0.4736328125
                },
                {
                    "start": 691.11,
                    "end": 692.25,
                    "word": " analysis",
                    "probability": 0.76123046875
                },
                {
                    "start": 692.25,
                    "end": 692.57,
                    "word": " with",
                    "probability": 0.79345703125
                },
                {
                    "start": 692.57,
                    "end": 693.01,
                    "word": " it",
                    "probability": 0.89501953125
                },
                {
                    "start": 693.01,
                    "end": 693.65,
                    "word": ".",
                    "probability": 0.91943359375
                }
            ]
        },
        {
            "id": 167,
            "seek": 62434,
            "start": 696.5,
            "end": 699.42,
            "text": " However, we have to overcome some obstacles",
            "tokens": [
                50614,
                2908,
                11,
                321,
                362,
                281,
                10473,
                512,
                17735,
                50756
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2629717045797492,
            "compression_ratio": 1.6596638655462186,
            "no_speech_prob": 0.0010309219360351562,
            "words": [
                {
                    "start": 696.5,
                    "end": 697.14,
                    "word": " However",
                    "probability": 0.84765625
                },
                {
                    "start": 697.14,
                    "end": 697.42,
                    "word": ",",
                    "probability": 0.93701171875
                },
                {
                    "start": 697.42,
                    "end": 697.78,
                    "word": " we",
                    "probability": 0.908203125
                },
                {
                    "start": 697.78,
                    "end": 698.02,
                    "word": " have",
                    "probability": 0.875
                },
                {
                    "start": 698.02,
                    "end": 698.2,
                    "word": " to",
                    "probability": 0.90283203125
                },
                {
                    "start": 698.2,
                    "end": 698.52,
                    "word": " overcome",
                    "probability": 0.88525390625
                },
                {
                    "start": 698.52,
                    "end": 698.84,
                    "word": " some",
                    "probability": 0.81201171875
                },
                {
                    "start": 698.84,
                    "end": 699.42,
                    "word": " obstacles",
                    "probability": 0.7080078125
                }
            ]
        },
        {
            "id": 168,
            "seek": 62434,
            "start": 699.42,
            "end": 702.52,
            "text": " in order to make a better auto-analysis system.",
            "tokens": [
                50756,
                294,
                1668,
                281,
                652,
                257,
                1101,
                8399,
                12,
                29702,
                4642,
                1185,
                13,
                50884
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2629717045797492,
            "compression_ratio": 1.6596638655462186,
            "no_speech_prob": 0.0010309219360351562,
            "words": [
                {
                    "start": 699.42,
                    "end": 699.72,
                    "word": " in",
                    "probability": 0.8857421875
                },
                {
                    "start": 699.72,
                    "end": 699.92,
                    "word": " order",
                    "probability": 0.8359375
                },
                {
                    "start": 699.92,
                    "end": 700.12,
                    "word": " to",
                    "probability": 0.90625
                },
                {
                    "start": 700.12,
                    "end": 700.34,
                    "word": " make",
                    "probability": 0.87890625
                },
                {
                    "start": 700.48,
                    "end": 700.74,
                    "word": " a better",
                    "probability": 0.81982421875
                },
                {
                    "start": 700.74,
                    "end": 700.98,
                    "word": " auto",
                    "probability": 0.73486328125
                },
                {
                    "start": 700.98,
                    "end": 701.4,
                    "word": "-analysis",
                    "probability": 0.7412109375
                },
                {
                    "start": 701.4,
                    "end": 701.88,
                    "word": " system",
                    "probability": 0.85693359375
                },
                {
                    "start": 701.88,
                    "end": 702.52,
                    "word": ".",
                    "probability": 0.9736328125
                }
            ]
        },
        {
            "id": 169,
            "seek": 62434,
            "start": 702.74,
            "end": 705.74,
            "text": " I think most of malware reversers have struggled",
            "tokens": [
                50928,
                286,
                519,
                881,
                295,
                40747,
                3698,
                433,
                433,
                362,
                19023,
                51068
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2629717045797492,
            "compression_ratio": 1.6596638655462186,
            "no_speech_prob": 0.0010309219360351562,
            "words": [
                {
                    "start": 702.74,
                    "end": 703.2,
                    "word": " I",
                    "probability": 0.9951171875
                },
                {
                    "start": 703.2,
                    "end": 703.48,
                    "word": " think",
                    "probability": 0.80517578125
                },
                {
                    "start": 703.48,
                    "end": 703.94,
                    "word": " most",
                    "probability": 0.7626953125
                },
                {
                    "start": 703.94,
                    "end": 704.16,
                    "word": " of",
                    "probability": 0.83349609375
                },
                {
                    "start": 704.16,
                    "end": 704.44,
                    "word": " malware",
                    "probability": 0.6298828125
                },
                {
                    "start": 704.44,
                    "end": 705.02,
                    "word": " reversers",
                    "probability": 0.540771484375
                },
                {
                    "start": 705.02,
                    "end": 705.3,
                    "word": " have",
                    "probability": 0.873046875
                },
                {
                    "start": 705.3,
                    "end": 705.74,
                    "word": " struggled",
                    "probability": 0.73828125
                }
            ]
        },
        {
            "id": 170,
            "seek": 62434,
            "start": 705.74,
            "end": 707.78,
            "text": " with the anti-analysis techniques",
            "tokens": [
                51068,
                365,
                264,
                6061,
                12,
                29702,
                4642,
                7512,
                51212
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2629717045797492,
            "compression_ratio": 1.6596638655462186,
            "no_speech_prob": 0.0010309219360351562,
            "words": [
                {
                    "start": 705.74,
                    "end": 706.1,
                    "word": " with",
                    "probability": 0.81640625
                },
                {
                    "start": 706.1,
                    "end": 706.34,
                    "word": " the",
                    "probability": 0.70458984375
                },
                {
                    "start": 706.34,
                    "end": 706.74,
                    "word": " anti",
                    "probability": 0.68115234375
                },
                {
                    "start": 706.74,
                    "end": 707.24,
                    "word": "-analysis",
                    "probability": 0.9064127604166666
                },
                {
                    "start": 707.24,
                    "end": 707.78,
                    "word": " techniques",
                    "probability": 0.86572265625
                }
            ]
        },
        {
            "id": 171,
            "seek": 62434,
            "start": 708.54,
            "end": 711.2,
            "text": " implemented by the malware author.",
            "tokens": [
                51212,
                12270,
                538,
                264,
                40747,
                3793,
                13,
                51318
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2629717045797492,
            "compression_ratio": 1.6596638655462186,
            "no_speech_prob": 0.0010309219360351562,
            "words": [
                {
                    "start": 708.54,
                    "end": 709.18,
                    "word": " implemented",
                    "probability": 0.658203125
                },
                {
                    "start": 709.18,
                    "end": 709.66,
                    "word": " by",
                    "probability": 0.90576171875
                },
                {
                    "start": 709.66,
                    "end": 709.82,
                    "word": " the",
                    "probability": 0.7890625
                },
                {
                    "start": 709.82,
                    "end": 710.12,
                    "word": " malware",
                    "probability": 0.814453125
                },
                {
                    "start": 710.12,
                    "end": 710.56,
                    "word": " author",
                    "probability": 0.7197265625
                },
                {
                    "start": 710.56,
                    "end": 711.2,
                    "word": ".",
                    "probability": 0.9814453125
                }
            ]
        },
        {
            "id": 172,
            "seek": 62434,
            "start": 711.56,
            "end": 714.54,
            "text": " This is same for auto-analysis system.",
            "tokens": [
                51366,
                639,
                307,
                912,
                337,
                8399,
                12,
                29702,
                4642,
                1185,
                13,
                51482
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2629717045797492,
            "compression_ratio": 1.6596638655462186,
            "no_speech_prob": 0.0010309219360351562,
            "words": [
                {
                    "start": 711.56,
                    "end": 712.0,
                    "word": " This",
                    "probability": 0.82568359375
                },
                {
                    "start": 712.0,
                    "end": 712.16,
                    "word": " is",
                    "probability": 0.9052734375
                },
                {
                    "start": 712.16,
                    "end": 712.42,
                    "word": " same",
                    "probability": 0.63720703125
                },
                {
                    "start": 712.42,
                    "end": 712.66,
                    "word": " for",
                    "probability": 0.89306640625
                },
                {
                    "start": 712.66,
                    "end": 712.98,
                    "word": " auto",
                    "probability": 0.77392578125
                },
                {
                    "start": 712.98,
                    "end": 713.38,
                    "word": "-analysis",
                    "probability": 0.91357421875
                },
                {
                    "start": 713.38,
                    "end": 713.9,
                    "word": " system",
                    "probability": 0.7666015625
                },
                {
                    "start": 713.9,
                    "end": 714.54,
                    "word": ".",
                    "probability": 0.97900390625
                }
            ]
        },
        {
            "id": 173,
            "seek": 62434,
            "start": 715.08,
            "end": 718.38,
            "text": " For example, Earthsniff, used to attack Japan,",
            "tokens": [
                51530,
                1171,
                1365,
                11,
                4755,
                18860,
                3661,
                11,
                1143,
                281,
                2690,
                3367,
                11,
                51694
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2629717045797492,
            "compression_ratio": 1.6596638655462186,
            "no_speech_prob": 0.0010309219360351562,
            "words": [
                {
                    "start": 715.08,
                    "end": 715.24,
                    "word": " For",
                    "probability": 0.90087890625
                },
                {
                    "start": 715.24,
                    "end": 715.72,
                    "word": " example",
                    "probability": 0.93115234375
                },
                {
                    "start": 715.72,
                    "end": 716.48,
                    "word": ",",
                    "probability": 0.96728515625
                },
                {
                    "start": 716.48,
                    "end": 716.9,
                    "word": " Earthsniff",
                    "probability": 0.3535970052083333
                },
                {
                    "start": 716.9,
                    "end": 717.1,
                    "word": ",",
                    "probability": 0.287109375
                },
                {
                    "start": 717.1,
                    "end": 717.4,
                    "word": " used",
                    "probability": 0.8037109375
                },
                {
                    "start": 717.4,
                    "end": 717.6,
                    "word": " to",
                    "probability": 0.904296875
                },
                {
                    "start": 717.6,
                    "end": 717.9,
                    "word": " attack",
                    "probability": 0.8369140625
                },
                {
                    "start": 717.9,
                    "end": 718.3,
                    "word": " Japan",
                    "probability": 0.8173828125
                },
                {
                    "start": 718.3,
                    "end": 718.38,
                    "word": ",",
                    "probability": 0.66650390625
                }
            ]
        },
        {
            "id": 174,
            "seek": 62434,
            "start": 718.38,
            "end": 721.1,
            "text": " has many kinds of anti-analysis functions.",
            "tokens": [
                51694,
                575,
                867,
                3685,
                295,
                6061,
                12,
                29702,
                4642,
                6828,
                13,
                51848
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2629717045797492,
            "compression_ratio": 1.6596638655462186,
            "no_speech_prob": 0.0010309219360351562,
            "words": [
                {
                    "start": 718.38,
                    "end": 718.56,
                    "word": " has",
                    "probability": 0.8916015625
                },
                {
                    "start": 718.56,
                    "end": 718.8,
                    "word": " many",
                    "probability": 0.82470703125
                },
                {
                    "start": 718.8,
                    "end": 719.08,
                    "word": " kinds",
                    "probability": 0.485107421875
                },
                {
                    "start": 719.08,
                    "end": 719.2,
                    "word": " of",
                    "probability": 0.91064453125
                },
                {
                    "start": 719.2,
                    "end": 719.58,
                    "word": " anti",
                    "probability": 0.70703125
                },
                {
                    "start": 719.58,
                    "end": 719.96,
                    "word": "-analysis",
                    "probability": 0.9283854166666666
                },
                {
                    "start": 719.96,
                    "end": 720.46,
                    "word": " functions",
                    "probability": 0.8134765625
                },
                {
                    "start": 720.46,
                    "end": 721.1,
                    "word": ".",
                    "probability": 0.990234375
                }
            ]
        },
        {
            "id": 175,
            "seek": 65112,
            "start": 721.1,
            "end": 723.8,
            "text": " If you have experience to analyze it,",
            "tokens": [
                50384,
                759,
                291,
                362,
                1752,
                281,
                12477,
                309,
                11,
                50500
            ],
            "temperature": 0.0,
            "avg_logprob": -0.24111842732680472,
            "compression_ratio": 1.591743119266055,
            "no_speech_prob": 0.0004458427429199219,
            "words": [
                {
                    "start": 721.1,
                    "end": 721.64,
                    "word": " If",
                    "probability": 0.8203125
                },
                {
                    "start": 721.64,
                    "end": 721.74,
                    "word": " you",
                    "probability": 0.89453125
                },
                {
                    "start": 721.74,
                    "end": 721.9,
                    "word": " have",
                    "probability": 0.865234375
                },
                {
                    "start": 721.9,
                    "end": 722.58,
                    "word": " experience",
                    "probability": 0.6923828125
                },
                {
                    "start": 722.58,
                    "end": 722.82,
                    "word": " to",
                    "probability": 0.89599609375
                },
                {
                    "start": 722.82,
                    "end": 723.24,
                    "word": " analyze",
                    "probability": 0.65087890625
                },
                {
                    "start": 723.24,
                    "end": 723.52,
                    "word": " it",
                    "probability": 0.8935546875
                },
                {
                    "start": 723.52,
                    "end": 723.8,
                    "word": ",",
                    "probability": 0.8828125
                }
            ]
        },
        {
            "id": 176,
            "seek": 65112,
            "start": 723.8,
            "end": 726.74,
            "text": " you have seen this pop-up.",
            "tokens": [
                50500,
                291,
                362,
                1612,
                341,
                1665,
                12,
                1010,
                13,
                50598
            ],
            "temperature": 0.0,
            "avg_logprob": -0.24111842732680472,
            "compression_ratio": 1.591743119266055,
            "no_speech_prob": 0.0004458427429199219,
            "words": [
                {
                    "start": 723.8,
                    "end": 723.92,
                    "word": " you",
                    "probability": 0.8896484375
                },
                {
                    "start": 723.92,
                    "end": 724.1,
                    "word": " have",
                    "probability": 0.85205078125
                },
                {
                    "start": 724.1,
                    "end": 724.42,
                    "word": " seen",
                    "probability": 0.8759765625
                },
                {
                    "start": 724.42,
                    "end": 724.78,
                    "word": " this",
                    "probability": 0.8798828125
                },
                {
                    "start": 724.78,
                    "end": 725.3,
                    "word": " pop",
                    "probability": 0.86474609375
                },
                {
                    "start": 725.3,
                    "end": 726.14,
                    "word": "-up",
                    "probability": 0.7333984375
                },
                {
                    "start": 726.14,
                    "end": 726.74,
                    "word": ".",
                    "probability": 0.92724609375
                }
            ]
        },
        {
            "id": 177,
            "seek": 65112,
            "start": 730.34,
            "end": 732.44,
            "text": " As you know, there are several types",
            "tokens": [
                50702,
                1018,
                291,
                458,
                11,
                456,
                366,
                2940,
                3467,
                50788
            ],
            "temperature": 0.0,
            "avg_logprob": -0.24111842732680472,
            "compression_ratio": 1.591743119266055,
            "no_speech_prob": 0.0004458427429199219,
            "words": [
                {
                    "start": 730.34,
                    "end": 730.94,
                    "word": " As",
                    "probability": 0.845703125
                },
                {
                    "start": 730.94,
                    "end": 731.08,
                    "word": " you",
                    "probability": 0.8623046875
                },
                {
                    "start": 731.08,
                    "end": 731.34,
                    "word": " know",
                    "probability": 0.8134765625
                },
                {
                    "start": 731.34,
                    "end": 731.48,
                    "word": ",",
                    "probability": 0.91259765625
                },
                {
                    "start": 731.48,
                    "end": 731.62,
                    "word": " there",
                    "probability": 0.85498046875
                },
                {
                    "start": 731.62,
                    "end": 731.74,
                    "word": " are",
                    "probability": 0.892578125
                },
                {
                    "start": 731.74,
                    "end": 731.98,
                    "word": " several",
                    "probability": 0.791015625
                },
                {
                    "start": 731.98,
                    "end": 732.44,
                    "word": " types",
                    "probability": 0.75439453125
                }
            ]
        },
        {
            "id": 178,
            "seek": 65112,
            "start": 732.44,
            "end": 734.28,
            "text": " of anti-analysis techniques,",
            "tokens": [
                50788,
                295,
                6061,
                12,
                29702,
                4642,
                7512,
                11,
                50880
            ],
            "temperature": 0.0,
            "avg_logprob": -0.24111842732680472,
            "compression_ratio": 1.591743119266055,
            "no_speech_prob": 0.0004458427429199219,
            "words": [
                {
                    "start": 732.44,
                    "end": 732.66,
                    "word": " of",
                    "probability": 0.90869140625
                },
                {
                    "start": 732.66,
                    "end": 732.98,
                    "word": " anti",
                    "probability": 0.65625
                },
                {
                    "start": 732.98,
                    "end": 733.42,
                    "word": "-analysis",
                    "probability": 0.90771484375
                },
                {
                    "start": 733.42,
                    "end": 733.88,
                    "word": " techniques",
                    "probability": 0.83251953125
                },
                {
                    "start": 733.88,
                    "end": 734.28,
                    "word": ",",
                    "probability": 0.5078125
                }
            ]
        },
        {
            "id": 179,
            "seek": 65112,
            "start": 734.28,
            "end": 737.04,
            "text": " and it is not easy to bypass all of them.",
            "tokens": [
                50880,
                293,
                309,
                307,
                406,
                1858,
                281,
                24996,
                439,
                295,
                552,
                13,
                50996
            ],
            "temperature": 0.0,
            "avg_logprob": -0.24111842732680472,
            "compression_ratio": 1.591743119266055,
            "no_speech_prob": 0.0004458427429199219,
            "words": [
                {
                    "start": 734.28,
                    "end": 734.5,
                    "word": " and",
                    "probability": 0.89111328125
                },
                {
                    "start": 734.5,
                    "end": 734.62,
                    "word": " it",
                    "probability": 0.90185546875
                },
                {
                    "start": 734.62,
                    "end": 734.74,
                    "word": " is",
                    "probability": 0.880859375
                },
                {
                    "start": 734.74,
                    "end": 734.94,
                    "word": " not",
                    "probability": 0.89794921875
                },
                {
                    "start": 734.94,
                    "end": 735.24,
                    "word": " easy",
                    "probability": 0.80908203125
                },
                {
                    "start": 735.24,
                    "end": 735.48,
                    "word": " to",
                    "probability": 0.90087890625
                },
                {
                    "start": 735.48,
                    "end": 735.7,
                    "word": " bypass",
                    "probability": 0.919921875
                },
                {
                    "start": 735.7,
                    "end": 736.06,
                    "word": " all",
                    "probability": 0.90185546875
                },
                {
                    "start": 736.06,
                    "end": 736.2,
                    "word": " of",
                    "probability": 0.9052734375
                },
                {
                    "start": 736.2,
                    "end": 736.44,
                    "word": " them",
                    "probability": 0.7451171875
                },
                {
                    "start": 736.44,
                    "end": 737.04,
                    "word": ".",
                    "probability": 0.98388671875
                }
            ]
        },
        {
            "id": 180,
            "seek": 65112,
            "start": 737.6,
            "end": 741.96,
            "text": " Checking language systems, system running time,",
            "tokens": [
                51042,
                6881,
                278,
                2856,
                3652,
                11,
                1185,
                2614,
                565,
                11,
                51262
            ],
            "temperature": 0.0,
            "avg_logprob": -0.24111842732680472,
            "compression_ratio": 1.591743119266055,
            "no_speech_prob": 0.0004458427429199219,
            "words": [
                {
                    "start": 737.6,
                    "end": 737.92,
                    "word": " Checking",
                    "probability": 0.894287109375
                },
                {
                    "start": 737.92,
                    "end": 738.26,
                    "word": " language",
                    "probability": 0.67138671875
                },
                {
                    "start": 738.26,
                    "end": 738.82,
                    "word": " systems",
                    "probability": 0.765625
                },
                {
                    "start": 738.82,
                    "end": 739.52,
                    "word": ",",
                    "probability": 0.92724609375
                },
                {
                    "start": 739.52,
                    "end": 740.18,
                    "word": " system",
                    "probability": 0.81103515625
                },
                {
                    "start": 740.18,
                    "end": 740.48,
                    "word": " running",
                    "probability": 0.837890625
                },
                {
                    "start": 740.48,
                    "end": 740.88,
                    "word": " time",
                    "probability": 0.7998046875
                },
                {
                    "start": 740.88,
                    "end": 741.96,
                    "word": ",",
                    "probability": 0.9794921875
                }
            ]
        },
        {
            "id": 181,
            "seek": 65112,
            "start": 741.96,
            "end": 744.14,
            "text": " total size of physical memory,",
            "tokens": [
                51262,
                3217,
                2744,
                295,
                4001,
                4675,
                11,
                51374
            ],
            "temperature": 0.0,
            "avg_logprob": -0.24111842732680472,
            "compression_ratio": 1.591743119266055,
            "no_speech_prob": 0.0004458427429199219,
            "words": [
                {
                    "start": 741.96,
                    "end": 742.28,
                    "word": " total",
                    "probability": 0.73291015625
                },
                {
                    "start": 742.28,
                    "end": 742.94,
                    "word": " size",
                    "probability": 0.81787109375
                },
                {
                    "start": 742.94,
                    "end": 743.1,
                    "word": " of",
                    "probability": 0.90283203125
                },
                {
                    "start": 743.1,
                    "end": 743.38,
                    "word": " physical",
                    "probability": 0.822265625
                },
                {
                    "start": 743.38,
                    "end": 743.8,
                    "word": " memory",
                    "probability": 0.81884765625
                },
                {
                    "start": 743.8,
                    "end": 744.14,
                    "word": ",",
                    "probability": 0.42333984375
                }
            ]
        },
        {
            "id": 182,
            "seek": 65112,
            "start": 744.14,
            "end": 746.7,
            "text": " is generally used for these techniques.",
            "tokens": [
                51374,
                307,
                5101,
                1143,
                337,
                613,
                7512,
                13,
                51488
            ],
            "temperature": 0.0,
            "avg_logprob": -0.24111842732680472,
            "compression_ratio": 1.591743119266055,
            "no_speech_prob": 0.0004458427429199219,
            "words": [
                {
                    "start": 744.14,
                    "end": 744.38,
                    "word": " is",
                    "probability": 0.7958984375
                },
                {
                    "start": 744.38,
                    "end": 744.64,
                    "word": " generally",
                    "probability": 0.81005859375
                },
                {
                    "start": 744.64,
                    "end": 745.12,
                    "word": " used",
                    "probability": 0.8056640625
                },
                {
                    "start": 745.12,
                    "end": 745.4,
                    "word": " for",
                    "probability": 0.89453125
                },
                {
                    "start": 745.4,
                    "end": 745.68,
                    "word": " these",
                    "probability": 0.69873046875
                },
                {
                    "start": 745.68,
                    "end": 746.1,
                    "word": " techniques",
                    "probability": 0.83642578125
                },
                {
                    "start": 746.1,
                    "end": 746.7,
                    "word": ".",
                    "probability": 0.9931640625
                }
            ]
        },
        {
            "id": 183,
            "seek": 65112,
            "start": 747.12,
            "end": 750.78,
            "text": " Also, checking virtualization is well-known techniques.",
            "tokens": [
                51534,
                2743,
                11,
                8568,
                6374,
                2144,
                307,
                731,
                12,
                6861,
                7512,
                13,
                51722
            ],
            "temperature": 0.0,
            "avg_logprob": -0.24111842732680472,
            "compression_ratio": 1.591743119266055,
            "no_speech_prob": 0.0004458427429199219,
            "words": [
                {
                    "start": 747.12,
                    "end": 747.68,
                    "word": " Also",
                    "probability": 0.9287109375
                },
                {
                    "start": 747.68,
                    "end": 747.78,
                    "word": ",",
                    "probability": 0.478271484375
                },
                {
                    "start": 747.78,
                    "end": 748.06,
                    "word": " checking",
                    "probability": 0.81201171875
                },
                {
                    "start": 748.06,
                    "end": 748.8,
                    "word": " virtualization",
                    "probability": 0.892333984375
                },
                {
                    "start": 748.8,
                    "end": 749.06,
                    "word": " is",
                    "probability": 0.88525390625
                },
                {
                    "start": 749.06,
                    "end": 749.28,
                    "word": " well",
                    "probability": 0.462158203125
                },
                {
                    "start": 749.28,
                    "end": 749.56,
                    "word": "-known",
                    "probability": 0.7587890625
                },
                {
                    "start": 749.56,
                    "end": 750.18,
                    "word": " techniques",
                    "probability": 0.5048828125
                },
                {
                    "start": 750.18,
                    "end": 750.78,
                    "word": ".",
                    "probability": 0.37841796875
                }
            ]
        },
        {
            "id": 184,
            "seek": 68058,
            "start": 750.78,
            "end": 754.2,
            "text": " In these techniques, malware calls CPU ID instruction",
            "tokens": [
                50384,
                682,
                613,
                7512,
                11,
                40747,
                5498,
                13199,
                7348,
                10951,
                50562
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3447580670797697,
            "compression_ratio": 1.4419642857142858,
            "no_speech_prob": 0.0010576248168945312,
            "words": [
                {
                    "start": 750.78,
                    "end": 751.3,
                    "word": " In",
                    "probability": 0.658203125
                },
                {
                    "start": 751.3,
                    "end": 751.52,
                    "word": " these",
                    "probability": 0.64794921875
                },
                {
                    "start": 751.52,
                    "end": 751.94,
                    "word": " techniques",
                    "probability": 0.7841796875
                },
                {
                    "start": 751.94,
                    "end": 752.22,
                    "word": ",",
                    "probability": 0.9384765625
                },
                {
                    "start": 752.22,
                    "end": 752.44,
                    "word": " malware",
                    "probability": 0.326904296875
                },
                {
                    "start": 752.44,
                    "end": 752.9,
                    "word": " calls",
                    "probability": 0.66650390625
                },
                {
                    "start": 752.9,
                    "end": 753.34,
                    "word": " CPU",
                    "probability": 0.78466796875
                },
                {
                    "start": 753.34,
                    "end": 753.62,
                    "word": " ID",
                    "probability": 0.58935546875
                },
                {
                    "start": 753.62,
                    "end": 754.2,
                    "word": " instruction",
                    "probability": 0.759765625
                }
            ]
        },
        {
            "id": 185,
            "seek": 68058,
            "start": 754.6,
            "end": 757.54,
            "text": " and checks the specific return value,",
            "tokens": [
                50562,
                293,
                13834,
                264,
                2685,
                2736,
                2158,
                11,
                50700
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3447580670797697,
            "compression_ratio": 1.4419642857142858,
            "no_speech_prob": 0.0010576248168945312,
            "words": [
                {
                    "start": 754.6,
                    "end": 754.94,
                    "word": " and",
                    "probability": 0.75830078125
                },
                {
                    "start": 754.94,
                    "end": 755.2,
                    "word": " checks",
                    "probability": 0.6796875
                },
                {
                    "start": 755.2,
                    "end": 755.32,
                    "word": " the",
                    "probability": 0.50732421875
                },
                {
                    "start": 755.32,
                    "end": 755.66,
                    "word": " specific",
                    "probability": 0.74169921875
                },
                {
                    "start": 755.66,
                    "end": 756.06,
                    "word": " return",
                    "probability": 0.7451171875
                },
                {
                    "start": 756.06,
                    "end": 756.48,
                    "word": " value",
                    "probability": 0.91064453125
                },
                {
                    "start": 756.48,
                    "end": 757.54,
                    "word": ",",
                    "probability": 0.322509765625
                }
            ]
        },
        {
            "id": 186,
            "seek": 68058,
            "start": 757.54,
            "end": 762.66,
            "text": " or checks registry keys, which hypervisor set up.",
            "tokens": [
                50700,
                420,
                13834,
                36468,
                9317,
                11,
                597,
                9848,
                16457,
                992,
                493,
                13,
                50936
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3447580670797697,
            "compression_ratio": 1.4419642857142858,
            "no_speech_prob": 0.0010576248168945312,
            "words": [
                {
                    "start": 757.54,
                    "end": 757.74,
                    "word": " or",
                    "probability": 0.8828125
                },
                {
                    "start": 757.74,
                    "end": 758.26,
                    "word": " checks",
                    "probability": 0.6318359375
                },
                {
                    "start": 758.26,
                    "end": 759.4,
                    "word": " registry",
                    "probability": 0.433837890625
                },
                {
                    "start": 759.4,
                    "end": 760.02,
                    "word": " keys",
                    "probability": 0.8369140625
                },
                {
                    "start": 760.02,
                    "end": 760.24,
                    "word": ",",
                    "probability": 0.226318359375
                },
                {
                    "start": 760.24,
                    "end": 760.5,
                    "word": " which",
                    "probability": 0.85693359375
                },
                {
                    "start": 760.5,
                    "end": 761.5,
                    "word": " hypervisor",
                    "probability": 0.63671875
                },
                {
                    "start": 761.5,
                    "end": 761.78,
                    "word": " set",
                    "probability": 0.279541015625
                },
                {
                    "start": 761.78,
                    "end": 761.98,
                    "word": " up",
                    "probability": 0.82275390625
                },
                {
                    "start": 761.98,
                    "end": 762.66,
                    "word": ".",
                    "probability": 0.92138671875
                }
            ]
        },
        {
            "id": 187,
            "seek": 68058,
            "start": 763.6,
            "end": 766.24,
            "text": " And some malware checks the process names,",
            "tokens": [
                51002,
                400,
                512,
                40747,
                13834,
                264,
                1399,
                5288,
                11,
                51134
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3447580670797697,
            "compression_ratio": 1.4419642857142858,
            "no_speech_prob": 0.0010576248168945312,
            "words": [
                {
                    "start": 763.6,
                    "end": 763.92,
                    "word": " And",
                    "probability": 0.58740234375
                },
                {
                    "start": 763.92,
                    "end": 764.22,
                    "word": " some",
                    "probability": 0.77001953125
                },
                {
                    "start": 764.22,
                    "end": 764.52,
                    "word": " malware",
                    "probability": 0.81201171875
                },
                {
                    "start": 764.52,
                    "end": 764.94,
                    "word": " checks",
                    "probability": 0.7275390625
                },
                {
                    "start": 764.94,
                    "end": 765.16,
                    "word": " the",
                    "probability": 0.76806640625
                },
                {
                    "start": 765.16,
                    "end": 765.54,
                    "word": " process",
                    "probability": 0.775390625
                },
                {
                    "start": 765.54,
                    "end": 766.06,
                    "word": " names",
                    "probability": 0.499755859375
                },
                {
                    "start": 766.06,
                    "end": 766.24,
                    "word": ",",
                    "probability": 0.403076171875
                }
            ]
        },
        {
            "id": 188,
            "seek": 68058,
            "start": 766.24,
            "end": 770.26,
            "text": " like Wireshark, or ODDebug, or ProcMon.",
            "tokens": [
                51134,
                411,
                343,
                3145,
                71,
                809,
                11,
                420,
                48447,
                11089,
                44455,
                11,
                420,
                1705,
                66,
                32498,
                13,
                51358
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3447580670797697,
            "compression_ratio": 1.4419642857142858,
            "no_speech_prob": 0.0010576248168945312,
            "words": [
                {
                    "start": 766.24,
                    "end": 766.56,
                    "word": " like",
                    "probability": 0.865234375
                },
                {
                    "start": 766.56,
                    "end": 767.2,
                    "word": " Wireshark",
                    "probability": 0.85498046875
                },
                {
                    "start": 767.2,
                    "end": 767.54,
                    "word": ",",
                    "probability": 0.471923828125
                },
                {
                    "start": 767.54,
                    "end": 767.68,
                    "word": " or",
                    "probability": 0.8798828125
                },
                {
                    "start": 767.68,
                    "end": 768.58,
                    "word": " ODDebug",
                    "probability": 0.5537109375
                },
                {
                    "start": 768.58,
                    "end": 768.72,
                    "word": ",",
                    "probability": 0.9091796875
                },
                {
                    "start": 768.72,
                    "end": 769.06,
                    "word": " or",
                    "probability": 0.8955078125
                },
                {
                    "start": 769.06,
                    "end": 769.58,
                    "word": " ProcMon",
                    "probability": 0.7438151041666666
                },
                {
                    "start": 769.58,
                    "end": 770.26,
                    "word": ".",
                    "probability": 0.9873046875
                }
            ]
        },
        {
            "id": 189,
            "seek": 68058,
            "start": 770.52,
            "end": 772.86,
            "text": " So, how can we bypass them?",
            "tokens": [
                51358,
                407,
                11,
                577,
                393,
                321,
                24996,
                552,
                30,
                51472
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3447580670797697,
            "compression_ratio": 1.4419642857142858,
            "no_speech_prob": 0.0010576248168945312,
            "words": [
                {
                    "start": 770.52,
                    "end": 771.06,
                    "word": " So",
                    "probability": 0.83447265625
                },
                {
                    "start": 771.06,
                    "end": 771.24,
                    "word": ",",
                    "probability": 0.45654296875
                },
                {
                    "start": 771.24,
                    "end": 771.42,
                    "word": " how",
                    "probability": 0.8984375
                },
                {
                    "start": 771.42,
                    "end": 771.6,
                    "word": " can",
                    "probability": 0.88916015625
                },
                {
                    "start": 771.6,
                    "end": 771.74,
                    "word": " we",
                    "probability": 0.904296875
                },
                {
                    "start": 771.74,
                    "end": 772.02,
                    "word": " bypass",
                    "probability": 0.88671875
                },
                {
                    "start": 772.02,
                    "end": 772.28,
                    "word": " them",
                    "probability": 0.60009765625
                },
                {
                    "start": 772.28,
                    "end": 772.86,
                    "word": "?",
                    "probability": 0.9921875
                }
            ]
        },
        {
            "id": 190,
            "seek": 68058,
            "start": 772.86,
            "end": 777.4,
            "text": " Do we need to use physical Windows host for sandbox?",
            "tokens": [
                51472,
                1144,
                321,
                643,
                281,
                764,
                4001,
                8591,
                3975,
                337,
                42115,
                30,
                51690
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3447580670797697,
            "compression_ratio": 1.4419642857142858,
            "no_speech_prob": 0.0010576248168945312,
            "words": [
                {
                    "start": 772.86,
                    "end": 773.04,
                    "word": " Do",
                    "probability": 0.89794921875
                },
                {
                    "start": 773.04,
                    "end": 773.18,
                    "word": " we",
                    "probability": 0.90234375
                },
                {
                    "start": 773.18,
                    "end": 773.34,
                    "word": " need",
                    "probability": 0.8232421875
                },
                {
                    "start": 773.34,
                    "end": 773.46,
                    "word": " to",
                    "probability": 0.8974609375
                },
                {
                    "start": 773.46,
                    "end": 773.68,
                    "word": " use",
                    "probability": 0.81298828125
                },
                {
                    "start": 773.68,
                    "end": 774.04,
                    "word": " physical",
                    "probability": 0.7568359375
                },
                {
                    "start": 774.04,
                    "end": 774.46,
                    "word": " Windows",
                    "probability": 0.67431640625
                },
                {
                    "start": 774.46,
                    "end": 775.96,
                    "word": " host",
                    "probability": 0.45556640625
                },
                {
                    "start": 775.96,
                    "end": 776.32,
                    "word": " for",
                    "probability": 0.87451171875
                },
                {
                    "start": 776.32,
                    "end": 776.72,
                    "word": " sandbox",
                    "probability": 0.61279296875
                },
                {
                    "start": 776.72,
                    "end": 777.4,
                    "word": "?",
                    "probability": 0.97607421875
                }
            ]
        },
        {
            "id": 191,
            "seek": 68058,
            "start": 780.09,
            "end": 782.09,
            "text": " The answer is no.",
            "tokens": [
                51762,
                440,
                1867,
                307,
                572,
                13,
                51842
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3447580670797697,
            "compression_ratio": 1.4419642857142858,
            "no_speech_prob": 0.0010576248168945312,
            "words": [
                {
                    "start": 780.09,
                    "end": 780.77,
                    "word": " The",
                    "probability": 0.474609375
                },
                {
                    "start": 780.77,
                    "end": 781.05,
                    "word": " answer",
                    "probability": 0.90771484375
                },
                {
                    "start": 781.05,
                    "end": 781.27,
                    "word": " is",
                    "probability": 0.904296875
                },
                {
                    "start": 781.27,
                    "end": 781.47,
                    "word": " no",
                    "probability": 0.84228515625
                },
                {
                    "start": 781.47,
                    "end": 782.09,
                    "word": ".",
                    "probability": 0.9599609375
                }
            ]
        },
        {
            "id": 192,
            "seek": 71000,
            "start": 782.09,
            "end": 785.03,
            "text": " Let's bypass them by configuring our virtual machine.",
            "tokens": [
                50370,
                961,
                311,
                24996,
                552,
                538,
                6662,
                1345,
                527,
                6374,
                3479,
                13,
                50514
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2542613590305502,
            "compression_ratio": 1.6244897959183673,
            "no_speech_prob": 0.0002505779266357422,
            "words": [
                {
                    "start": 782.09,
                    "end": 782.41,
                    "word": " Let's",
                    "probability": 0.864990234375
                },
                {
                    "start": 782.41,
                    "end": 782.65,
                    "word": " bypass",
                    "probability": 0.90283203125
                },
                {
                    "start": 782.65,
                    "end": 782.89,
                    "word": " them",
                    "probability": 0.72412109375
                },
                {
                    "start": 782.89,
                    "end": 783.07,
                    "word": " by",
                    "probability": 0.89111328125
                },
                {
                    "start": 783.07,
                    "end": 783.53,
                    "word": " configuring",
                    "probability": 0.9462890625
                },
                {
                    "start": 783.53,
                    "end": 783.83,
                    "word": " our",
                    "probability": 0.6748046875
                },
                {
                    "start": 783.83,
                    "end": 784.19,
                    "word": " virtual",
                    "probability": 0.9033203125
                },
                {
                    "start": 784.19,
                    "end": 784.49,
                    "word": " machine",
                    "probability": 0.7373046875
                },
                {
                    "start": 784.49,
                    "end": 785.03,
                    "word": ".",
                    "probability": 0.95263671875
                }
            ]
        },
        {
            "id": 193,
            "seek": 71000,
            "start": 785.03,
            "end": 789.21,
            "text": " It's much more easier than preparing a physical machine.",
            "tokens": [
                50514,
                467,
                311,
                709,
                544,
                3571,
                813,
                10075,
                257,
                4001,
                3479,
                13,
                50700
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2542613590305502,
            "compression_ratio": 1.6244897959183673,
            "no_speech_prob": 0.0002505779266357422,
            "words": [
                {
                    "start": 785.03,
                    "end": 785.25,
                    "word": " It's",
                    "probability": 0.93017578125
                },
                {
                    "start": 785.25,
                    "end": 785.43,
                    "word": " much",
                    "probability": 0.7822265625
                },
                {
                    "start": 785.43,
                    "end": 785.63,
                    "word": " more",
                    "probability": 0.611328125
                },
                {
                    "start": 785.63,
                    "end": 786.03,
                    "word": " easier",
                    "probability": 0.90283203125
                },
                {
                    "start": 786.03,
                    "end": 787.01,
                    "word": " than",
                    "probability": 0.87109375
                },
                {
                    "start": 787.01,
                    "end": 787.45,
                    "word": " preparing",
                    "probability": 0.828125
                },
                {
                    "start": 787.97,
                    "end": 788.23,
                    "word": " a physical",
                    "probability": 0.81103515625
                },
                {
                    "start": 788.23,
                    "end": 788.57,
                    "word": " machine",
                    "probability": 0.7626953125
                },
                {
                    "start": 788.57,
                    "end": 789.21,
                    "word": ".",
                    "probability": 0.9873046875
                }
            ]
        },
        {
            "id": 194,
            "seek": 71000,
            "start": 792.37,
            "end": 794.69,
            "text": " Okay, let's check some samples.",
            "tokens": [
                50778,
                1033,
                11,
                718,
                311,
                1520,
                512,
                10938,
                13,
                50882
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2542613590305502,
            "compression_ratio": 1.6244897959183673,
            "no_speech_prob": 0.0002505779266357422,
            "words": [
                {
                    "start": 792.37,
                    "end": 793.01,
                    "word": " Okay",
                    "probability": 0.3974609375
                },
                {
                    "start": 793.01,
                    "end": 793.09,
                    "word": ",",
                    "probability": 0.76611328125
                },
                {
                    "start": 793.09,
                    "end": 793.31,
                    "word": " let's",
                    "probability": 0.948974609375
                },
                {
                    "start": 793.31,
                    "end": 793.45,
                    "word": " check",
                    "probability": 0.79833984375
                },
                {
                    "start": 793.45,
                    "end": 793.65,
                    "word": " some",
                    "probability": 0.8212890625
                },
                {
                    "start": 793.65,
                    "end": 794.05,
                    "word": " samples",
                    "probability": 0.7041015625
                },
                {
                    "start": 794.05,
                    "end": 794.69,
                    "word": ".",
                    "probability": 0.9873046875
                }
            ]
        },
        {
            "id": 195,
            "seek": 71000,
            "start": 794.81,
            "end": 796.85,
            "text": " This control flow graph shows",
            "tokens": [
                50882,
                639,
                1969,
                3095,
                4295,
                3110,
                50986
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2542613590305502,
            "compression_ratio": 1.6244897959183673,
            "no_speech_prob": 0.0002505779266357422,
            "words": [
                {
                    "start": 794.81,
                    "end": 795.07,
                    "word": " This",
                    "probability": 0.80078125
                },
                {
                    "start": 795.07,
                    "end": 795.39,
                    "word": " control",
                    "probability": 0.640625
                },
                {
                    "start": 795.39,
                    "end": 795.93,
                    "word": " flow",
                    "probability": 0.822265625
                },
                {
                    "start": 795.93,
                    "end": 796.35,
                    "word": " graph",
                    "probability": 0.748046875
                },
                {
                    "start": 796.35,
                    "end": 796.85,
                    "word": " shows",
                    "probability": 0.75439453125
                }
            ]
        },
        {
            "id": 196,
            "seek": 71000,
            "start": 796.85,
            "end": 800.43,
            "text": " an anti-analysis function embedded in EarthNift backer.",
            "tokens": [
                50986,
                364,
                6061,
                12,
                29702,
                4642,
                2445,
                16741,
                294,
                4755,
                45,
                2008,
                646,
                260,
                13,
                51174
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2542613590305502,
            "compression_ratio": 1.6244897959183673,
            "no_speech_prob": 0.0002505779266357422,
            "words": [
                {
                    "start": 796.85,
                    "end": 797.13,
                    "word": " an",
                    "probability": 0.3115234375
                },
                {
                    "start": 797.13,
                    "end": 797.39,
                    "word": " anti",
                    "probability": 0.5498046875
                },
                {
                    "start": 797.39,
                    "end": 797.77,
                    "word": "-analysis",
                    "probability": 0.7146809895833334
                },
                {
                    "start": 797.77,
                    "end": 798.25,
                    "word": " function",
                    "probability": 0.88525390625
                },
                {
                    "start": 798.25,
                    "end": 798.67,
                    "word": " embedded",
                    "probability": 0.7275390625
                },
                {
                    "start": 798.67,
                    "end": 798.99,
                    "word": " in",
                    "probability": 0.8984375
                },
                {
                    "start": 798.99,
                    "end": 799.37,
                    "word": " EarthNift",
                    "probability": 0.3260904947916667
                },
                {
                    "start": 799.37,
                    "end": 799.79,
                    "word": " backer",
                    "probability": 0.740966796875
                },
                {
                    "start": 799.79,
                    "end": 800.43,
                    "word": ".",
                    "probability": 0.9931640625
                }
            ]
        },
        {
            "id": 197,
            "seek": 71000,
            "start": 800.67,
            "end": 804.19,
            "text": " Here, you can find four anti-analysis techniques.",
            "tokens": [
                51174,
                1692,
                11,
                291,
                393,
                915,
                1451,
                6061,
                12,
                29702,
                4642,
                7512,
                13,
                51354
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2542613590305502,
            "compression_ratio": 1.6244897959183673,
            "no_speech_prob": 0.0002505779266357422,
            "words": [
                {
                    "start": 800.67,
                    "end": 800.97,
                    "word": " Here",
                    "probability": 0.82470703125
                },
                {
                    "start": 800.97,
                    "end": 801.23,
                    "word": ",",
                    "probability": 0.59423828125
                },
                {
                    "start": 801.23,
                    "end": 801.39,
                    "word": " you",
                    "probability": 0.890625
                },
                {
                    "start": 801.39,
                    "end": 801.53,
                    "word": " can",
                    "probability": 0.88330078125
                },
                {
                    "start": 801.53,
                    "end": 801.83,
                    "word": " find",
                    "probability": 0.80859375
                },
                {
                    "start": 801.83,
                    "end": 802.33,
                    "word": " four",
                    "probability": 0.79052734375
                },
                {
                    "start": 802.33,
                    "end": 802.73,
                    "word": " anti",
                    "probability": 0.67578125
                },
                {
                    "start": 802.73,
                    "end": 803.09,
                    "word": "-analysis",
                    "probability": 0.904296875
                },
                {
                    "start": 803.09,
                    "end": 803.55,
                    "word": " techniques",
                    "probability": 0.8515625
                },
                {
                    "start": 803.55,
                    "end": 804.19,
                    "word": ".",
                    "probability": 0.96923828125
                }
            ]
        },
        {
            "id": 198,
            "seek": 71000,
            "start": 804.33,
            "end": 806.63,
            "text": " It checks CPU brand name,",
            "tokens": [
                51354,
                467,
                13834,
                13199,
                3360,
                1315,
                11,
                51468
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2542613590305502,
            "compression_ratio": 1.6244897959183673,
            "no_speech_prob": 0.0002505779266357422,
            "words": [
                {
                    "start": 804.33,
                    "end": 804.51,
                    "word": " It",
                    "probability": 0.892578125
                },
                {
                    "start": 804.51,
                    "end": 804.79,
                    "word": " checks",
                    "probability": 0.7294921875
                },
                {
                    "start": 804.79,
                    "end": 805.21,
                    "word": " CPU",
                    "probability": 0.896484375
                },
                {
                    "start": 805.21,
                    "end": 805.55,
                    "word": " brand",
                    "probability": 0.64306640625
                },
                {
                    "start": 805.55,
                    "end": 805.87,
                    "word": " name",
                    "probability": 0.8173828125
                },
                {
                    "start": 805.87,
                    "end": 806.63,
                    "word": ",",
                    "probability": 0.9912109375
                }
            ]
        },
        {
            "id": 199,
            "seek": 71000,
            "start": 806.63,
            "end": 810.29,
            "text": " SCSI device name, boot time, and debugger.",
            "tokens": [
                51468,
                9028,
                20262,
                4302,
                1315,
                11,
                11450,
                565,
                11,
                293,
                24083,
                1321,
                13,
                51634
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2542613590305502,
            "compression_ratio": 1.6244897959183673,
            "no_speech_prob": 0.0002505779266357422,
            "words": [
                {
                    "start": 806.63,
                    "end": 806.85,
                    "word": " SCSI",
                    "probability": 0.69287109375
                },
                {
                    "start": 806.85,
                    "end": 807.27,
                    "word": " device",
                    "probability": 0.89208984375
                },
                {
                    "start": 807.27,
                    "end": 807.57,
                    "word": " name",
                    "probability": 0.80322265625
                },
                {
                    "start": 807.57,
                    "end": 808.25,
                    "word": ",",
                    "probability": 0.98974609375
                },
                {
                    "start": 808.25,
                    "end": 808.45,
                    "word": " boot",
                    "probability": 0.880859375
                },
                {
                    "start": 808.45,
                    "end": 808.71,
                    "word": " time",
                    "probability": 0.7998046875
                },
                {
                    "start": 808.71,
                    "end": 809.03,
                    "word": ",",
                    "probability": 0.8291015625
                },
                {
                    "start": 809.03,
                    "end": 809.25,
                    "word": " and",
                    "probability": 0.90185546875
                },
                {
                    "start": 809.25,
                    "end": 809.65,
                    "word": " debugger",
                    "probability": 0.91943359375
                },
                {
                    "start": 809.65,
                    "end": 810.29,
                    "word": ".",
                    "probability": 0.998046875
                }
            ]
        },
        {
            "id": 200,
            "seek": 71000,
            "start": 810.87,
            "end": 813.93,
            "text": " Let's check some of these anti-analysis techniques",
            "tokens": [
                51686,
                961,
                311,
                1520,
                512,
                295,
                613,
                6061,
                12,
                29702,
                4642,
                7512,
                51850
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2542613590305502,
            "compression_ratio": 1.6244897959183673,
            "no_speech_prob": 0.0002505779266357422,
            "words": [
                {
                    "start": 810.87,
                    "end": 811.19,
                    "word": " Let's",
                    "probability": 0.946533203125
                },
                {
                    "start": 811.19,
                    "end": 811.39,
                    "word": " check",
                    "probability": 0.82373046875
                },
                {
                    "start": 811.39,
                    "end": 811.67,
                    "word": " some",
                    "probability": 0.82421875
                },
                {
                    "start": 811.67,
                    "end": 811.87,
                    "word": " of",
                    "probability": 0.91162109375
                },
                {
                    "start": 811.87,
                    "end": 812.13,
                    "word": " these",
                    "probability": 0.7177734375
                },
                {
                    "start": 812.13,
                    "end": 812.99,
                    "word": " anti",
                    "probability": 0.708984375
                },
                {
                    "start": 812.99,
                    "end": 813.43,
                    "word": "-analysis",
                    "probability": 0.9021809895833334
                },
                {
                    "start": 813.43,
                    "end": 813.93,
                    "word": " techniques",
                    "probability": 0.8525390625
                }
            ]
        },
        {
            "id": 201,
            "seek": 74000,
            "start": 813.93,
            "end": 816.77,
            "text": " and how to bypass them.",
            "tokens": [
                50378,
                293,
                577,
                281,
                24996,
                552,
                13,
                50484
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2245879189653711,
            "compression_ratio": 1.625,
            "no_speech_prob": 0.0001819133758544922,
            "words": [
                {
                    "start": 813.93,
                    "end": 814.39,
                    "word": " and",
                    "probability": 0.8603515625
                },
                {
                    "start": 814.39,
                    "end": 814.63,
                    "word": " how",
                    "probability": 0.9013671875
                },
                {
                    "start": 814.63,
                    "end": 814.81,
                    "word": " to",
                    "probability": 0.90185546875
                },
                {
                    "start": 814.81,
                    "end": 815.77,
                    "word": " bypass",
                    "probability": 0.82958984375
                },
                {
                    "start": 815.77,
                    "end": 816.13,
                    "word": " them",
                    "probability": 0.7431640625
                },
                {
                    "start": 816.13,
                    "end": 816.77,
                    "word": ".",
                    "probability": 0.98779296875
                }
            ]
        },
        {
            "id": 202,
            "seek": 74000,
            "start": 818.87,
            "end": 821.07,
            "text": " CPU brand name detection.",
            "tokens": [
                50624,
                13199,
                3360,
                1315,
                17784,
                13,
                50706
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2245879189653711,
            "compression_ratio": 1.625,
            "no_speech_prob": 0.0001819133758544922,
            "words": [
                {
                    "start": 818.87,
                    "end": 819.51,
                    "word": " CPU",
                    "probability": 0.89013671875
                },
                {
                    "start": 819.51,
                    "end": 819.81,
                    "word": " brand",
                    "probability": 0.5908203125
                },
                {
                    "start": 819.81,
                    "end": 820.01,
                    "word": " name",
                    "probability": 0.767578125
                },
                {
                    "start": 820.01,
                    "end": 820.43,
                    "word": " detection",
                    "probability": 0.7431640625
                },
                {
                    "start": 820.43,
                    "end": 821.07,
                    "word": ".",
                    "probability": 0.91845703125
                }
            ]
        },
        {
            "id": 203,
            "seek": 74000,
            "start": 821.69,
            "end": 824.03,
            "text": " Malware calls the CPU ID instruction",
            "tokens": [
                50752,
                5746,
                3039,
                5498,
                264,
                13199,
                7348,
                10951,
                50878
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2245879189653711,
            "compression_ratio": 1.625,
            "no_speech_prob": 0.0001819133758544922,
            "words": [
                {
                    "start": 821.69,
                    "end": 821.97,
                    "word": " Malware",
                    "probability": 0.727294921875
                },
                {
                    "start": 821.97,
                    "end": 822.39,
                    "word": " calls",
                    "probability": 0.67333984375
                },
                {
                    "start": 822.39,
                    "end": 822.55,
                    "word": " the",
                    "probability": 0.6181640625
                },
                {
                    "start": 822.55,
                    "end": 822.89,
                    "word": " CPU",
                    "probability": 0.90869140625
                },
                {
                    "start": 822.89,
                    "end": 823.23,
                    "word": " ID",
                    "probability": 0.6220703125
                },
                {
                    "start": 823.23,
                    "end": 824.03,
                    "word": " instruction",
                    "probability": 0.6103515625
                }
            ]
        },
        {
            "id": 204,
            "seek": 74000,
            "start": 824.03,
            "end": 826.53,
            "text": " with specified value on EAX register",
            "tokens": [
                50878,
                365,
                22206,
                2158,
                322,
                35747,
                55,
                7280,
                51038
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2245879189653711,
            "compression_ratio": 1.625,
            "no_speech_prob": 0.0001819133758544922,
            "words": [
                {
                    "start": 824.03,
                    "end": 824.39,
                    "word": " with",
                    "probability": 0.794921875
                },
                {
                    "start": 824.39,
                    "end": 824.75,
                    "word": " specified",
                    "probability": 0.77587890625
                },
                {
                    "start": 824.75,
                    "end": 825.27,
                    "word": " value",
                    "probability": 0.923828125
                },
                {
                    "start": 825.27,
                    "end": 825.57,
                    "word": " on",
                    "probability": 0.8837890625
                },
                {
                    "start": 825.57,
                    "end": 826.09,
                    "word": " EAX",
                    "probability": 0.771484375
                },
                {
                    "start": 826.09,
                    "end": 826.53,
                    "word": " register",
                    "probability": 0.8046875
                }
            ]
        },
        {
            "id": 205,
            "seek": 74000,
            "start": 827.29,
            "end": 830.49,
            "text": " and get the CPU brand name as a return value.",
            "tokens": [
                51038,
                293,
                483,
                264,
                13199,
                3360,
                1315,
                382,
                257,
                2736,
                2158,
                13,
                51172
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2245879189653711,
            "compression_ratio": 1.625,
            "no_speech_prob": 0.0001819133758544922,
            "words": [
                {
                    "start": 827.29,
                    "end": 827.61,
                    "word": " and",
                    "probability": 0.59130859375
                },
                {
                    "start": 827.61,
                    "end": 827.89,
                    "word": " get",
                    "probability": 0.6572265625
                },
                {
                    "start": 827.89,
                    "end": 828.03,
                    "word": " the",
                    "probability": 0.765625
                },
                {
                    "start": 828.03,
                    "end": 828.29,
                    "word": " CPU",
                    "probability": 0.9189453125
                },
                {
                    "start": 828.29,
                    "end": 828.59,
                    "word": " brand",
                    "probability": 0.76416015625
                },
                {
                    "start": 828.59,
                    "end": 828.87,
                    "word": " name",
                    "probability": 0.83203125
                },
                {
                    "start": 828.87,
                    "end": 829.23,
                    "word": " as",
                    "probability": 0.9091796875
                },
                {
                    "start": 829.35,
                    "end": 829.55,
                    "word": " a return",
                    "probability": 0.7861328125
                },
                {
                    "start": 829.55,
                    "end": 829.85,
                    "word": " value",
                    "probability": 0.9208984375
                },
                {
                    "start": 829.85,
                    "end": 830.49,
                    "word": ".",
                    "probability": 0.99609375
                }
            ]
        },
        {
            "id": 206,
            "seek": 74000,
            "start": 830.89,
            "end": 834.45,
            "text": " In this case, it is checking if Xeon",
            "tokens": [
                51218,
                682,
                341,
                1389,
                11,
                309,
                307,
                8568,
                498,
                1783,
                27015,
                51406
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2245879189653711,
            "compression_ratio": 1.625,
            "no_speech_prob": 0.0001819133758544922,
            "words": [
                {
                    "start": 830.89,
                    "end": 831.15,
                    "word": " In",
                    "probability": 0.90380859375
                },
                {
                    "start": 831.15,
                    "end": 831.39,
                    "word": " this",
                    "probability": 0.87646484375
                },
                {
                    "start": 831.39,
                    "end": 831.75,
                    "word": " case",
                    "probability": 0.8193359375
                },
                {
                    "start": 831.75,
                    "end": 832.43,
                    "word": ",",
                    "probability": 0.9248046875
                },
                {
                    "start": 832.43,
                    "end": 832.61,
                    "word": " it",
                    "probability": 0.908203125
                },
                {
                    "start": 832.61,
                    "end": 832.79,
                    "word": " is",
                    "probability": 0.8984375
                },
                {
                    "start": 832.79,
                    "end": 833.07,
                    "word": " checking",
                    "probability": 0.76953125
                },
                {
                    "start": 833.07,
                    "end": 833.81,
                    "word": " if",
                    "probability": 0.8935546875
                },
                {
                    "start": 833.81,
                    "end": 834.45,
                    "word": " Xeon",
                    "probability": 0.79052734375
                }
            ]
        },
        {
            "id": 207,
            "seek": 74000,
            "start": 834.45,
            "end": 837.87,
            "text": " is included in the CPU brand name.",
            "tokens": [
                51406,
                307,
                5556,
                294,
                264,
                13199,
                3360,
                1315,
                13,
                51572
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2245879189653711,
            "compression_ratio": 1.625,
            "no_speech_prob": 0.0001819133758544922,
            "words": [
                {
                    "start": 834.45,
                    "end": 835.01,
                    "word": " is",
                    "probability": 0.89501953125
                },
                {
                    "start": 835.01,
                    "end": 835.57,
                    "word": " included",
                    "probability": 0.7783203125
                },
                {
                    "start": 835.57,
                    "end": 836.23,
                    "word": " in",
                    "probability": 0.9052734375
                },
                {
                    "start": 836.23,
                    "end": 836.39,
                    "word": " the",
                    "probability": 0.80908203125
                },
                {
                    "start": 836.39,
                    "end": 836.65,
                    "word": " CPU",
                    "probability": 0.90771484375
                },
                {
                    "start": 836.65,
                    "end": 836.95,
                    "word": " brand",
                    "probability": 0.75439453125
                },
                {
                    "start": 836.95,
                    "end": 837.23,
                    "word": " name",
                    "probability": 0.822265625
                },
                {
                    "start": 837.23,
                    "end": 837.87,
                    "word": ".",
                    "probability": 0.98828125
                }
            ]
        },
        {
            "id": 208,
            "seek": 74000,
            "start": 838.09,
            "end": 841.17,
            "text": " In many cases, sandbox is running on the server",
            "tokens": [
                51572,
                682,
                867,
                3331,
                11,
                42115,
                307,
                2614,
                322,
                264,
                7154,
                51754
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2245879189653711,
            "compression_ratio": 1.625,
            "no_speech_prob": 0.0001819133758544922,
            "words": [
                {
                    "start": 838.09,
                    "end": 838.23,
                    "word": " In",
                    "probability": 0.8662109375
                },
                {
                    "start": 838.23,
                    "end": 838.43,
                    "word": " many",
                    "probability": 0.791015625
                },
                {
                    "start": 838.43,
                    "end": 838.75,
                    "word": " cases",
                    "probability": 0.4501953125
                },
                {
                    "start": 838.75,
                    "end": 838.89,
                    "word": ",",
                    "probability": 0.869140625
                },
                {
                    "start": 838.89,
                    "end": 839.15,
                    "word": " sandbox",
                    "probability": 0.388671875
                },
                {
                    "start": 839.15,
                    "end": 839.49,
                    "word": " is",
                    "probability": 0.87353515625
                },
                {
                    "start": 839.49,
                    "end": 840.39,
                    "word": " running",
                    "probability": 0.83837890625
                },
                {
                    "start": 840.39,
                    "end": 840.71,
                    "word": " on",
                    "probability": 0.87939453125
                },
                {
                    "start": 840.71,
                    "end": 840.89,
                    "word": " the",
                    "probability": 0.810546875
                },
                {
                    "start": 840.89,
                    "end": 841.17,
                    "word": " server",
                    "probability": 0.828125
                }
            ]
        },
        {
            "id": 209,
            "seek": 74000,
            "start": 841.67,
            "end": 843.87,
            "text": " and the server uses Xeon processor.",
            "tokens": [
                51754,
                293,
                264,
                7154,
                4960,
                1783,
                27015,
                15321,
                13,
                51858
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2245879189653711,
            "compression_ratio": 1.625,
            "no_speech_prob": 0.0001819133758544922,
            "words": [
                {
                    "start": 841.67,
                    "end": 841.99,
                    "word": " and",
                    "probability": 0.64453125
                },
                {
                    "start": 841.99,
                    "end": 842.15,
                    "word": " the",
                    "probability": 0.80517578125
                },
                {
                    "start": 842.15,
                    "end": 842.37,
                    "word": " server",
                    "probability": 0.845703125
                },
                {
                    "start": 842.37,
                    "end": 842.69,
                    "word": " uses",
                    "probability": 0.81640625
                },
                {
                    "start": 842.69,
                    "end": 842.99,
                    "word": " Xeon",
                    "probability": 0.941650390625
                },
                {
                    "start": 842.99,
                    "end": 843.45,
                    "word": " processor",
                    "probability": 0.78173828125
                },
                {
                    "start": 843.45,
                    "end": 843.87,
                    "word": ".",
                    "probability": 0.98779296875
                }
            ]
        },
        {
            "id": 210,
            "seek": 76846,
            "start": 846.32,
            "end": 849.1,
            "text": " It is calling CPU instruction direct",
            "tokens": [
                50414,
                467,
                307,
                5141,
                13199,
                10951,
                2047,
                50546
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2911458412806193,
            "compression_ratio": 1.673170731707317,
            "no_speech_prob": 0.00013327598571777344,
            "words": [
                {
                    "start": 846.32,
                    "end": 846.92,
                    "word": " It",
                    "probability": 0.76171875
                },
                {
                    "start": 846.92,
                    "end": 847.08,
                    "word": " is",
                    "probability": 0.88427734375
                },
                {
                    "start": 847.08,
                    "end": 847.42,
                    "word": " calling",
                    "probability": 0.720703125
                },
                {
                    "start": 847.42,
                    "end": 847.78,
                    "word": " CPU",
                    "probability": 0.76171875
                },
                {
                    "start": 847.78,
                    "end": 848.58,
                    "word": " instruction",
                    "probability": 0.8994140625
                },
                {
                    "start": 848.58,
                    "end": 849.1,
                    "word": " direct",
                    "probability": 0.7373046875
                }
            ]
        },
        {
            "id": 211,
            "seek": 76846,
            "start": 849.1,
            "end": 851.94,
            "text": " and it is not easy to hook this call.",
            "tokens": [
                50546,
                293,
                309,
                307,
                406,
                1858,
                281,
                6328,
                341,
                818,
                13,
                50682
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2911458412806193,
            "compression_ratio": 1.673170731707317,
            "no_speech_prob": 0.00013327598571777344,
            "words": [
                {
                    "start": 849.1,
                    "end": 849.82,
                    "word": " and",
                    "probability": 0.599609375
                },
                {
                    "start": 849.82,
                    "end": 849.96,
                    "word": " it",
                    "probability": 0.44287109375
                },
                {
                    "start": 849.96,
                    "end": 850.04,
                    "word": " is",
                    "probability": 0.634765625
                },
                {
                    "start": 850.04,
                    "end": 850.24,
                    "word": " not",
                    "probability": 0.89501953125
                },
                {
                    "start": 850.24,
                    "end": 850.5,
                    "word": " easy",
                    "probability": 0.8271484375
                },
                {
                    "start": 850.5,
                    "end": 850.66,
                    "word": " to",
                    "probability": 0.90087890625
                },
                {
                    "start": 850.66,
                    "end": 850.84,
                    "word": " hook",
                    "probability": 0.845703125
                },
                {
                    "start": 850.84,
                    "end": 851.06,
                    "word": " this",
                    "probability": 0.87744140625
                },
                {
                    "start": 851.06,
                    "end": 851.34,
                    "word": " call",
                    "probability": 0.83837890625
                },
                {
                    "start": 851.34,
                    "end": 851.94,
                    "word": ".",
                    "probability": 0.8984375
                }
            ]
        },
        {
            "id": 212,
            "seek": 76846,
            "start": 852.04,
            "end": 854.26,
            "text": " So how can we bypass it?",
            "tokens": [
                50682,
                407,
                577,
                393,
                321,
                24996,
                309,
                30,
                50764
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2911458412806193,
            "compression_ratio": 1.673170731707317,
            "no_speech_prob": 0.00013327598571777344,
            "words": [
                {
                    "start": 852.04,
                    "end": 852.52,
                    "word": " So",
                    "probability": 0.8701171875
                },
                {
                    "start": 852.52,
                    "end": 852.8,
                    "word": " how",
                    "probability": 0.68408203125
                },
                {
                    "start": 852.8,
                    "end": 852.92,
                    "word": " can",
                    "probability": 0.88623046875
                },
                {
                    "start": 852.92,
                    "end": 853.08,
                    "word": " we",
                    "probability": 0.91552734375
                },
                {
                    "start": 853.08,
                    "end": 853.4,
                    "word": " bypass",
                    "probability": 0.880859375
                },
                {
                    "start": 853.4,
                    "end": 853.66,
                    "word": " it",
                    "probability": 0.89013671875
                },
                {
                    "start": 853.66,
                    "end": 854.26,
                    "word": "?",
                    "probability": 0.98583984375
                }
            ]
        },
        {
            "id": 213,
            "seek": 76846,
            "start": 854.4,
            "end": 858.04,
            "text": " The answer is modify the virtual machine configuration.",
            "tokens": [
                50806,
                440,
                1867,
                307,
                16927,
                264,
                6374,
                3479,
                11694,
                13,
                50964
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2911458412806193,
            "compression_ratio": 1.673170731707317,
            "no_speech_prob": 0.00013327598571777344,
            "words": [
                {
                    "start": 854.4,
                    "end": 854.84,
                    "word": " The",
                    "probability": 0.82275390625
                },
                {
                    "start": 854.84,
                    "end": 855.14,
                    "word": " answer",
                    "probability": 0.90380859375
                },
                {
                    "start": 855.14,
                    "end": 855.46,
                    "word": " is",
                    "probability": 0.90869140625
                },
                {
                    "start": 855.46,
                    "end": 855.9,
                    "word": " modify",
                    "probability": 0.6162109375
                },
                {
                    "start": 855.9,
                    "end": 856.22,
                    "word": " the",
                    "probability": 0.7958984375
                },
                {
                    "start": 856.22,
                    "end": 856.48,
                    "word": " virtual",
                    "probability": 0.82958984375
                },
                {
                    "start": 856.48,
                    "end": 856.82,
                    "word": " machine",
                    "probability": 0.7421875
                },
                {
                    "start": 856.82,
                    "end": 857.44,
                    "word": " configuration",
                    "probability": 0.85400390625
                },
                {
                    "start": 857.44,
                    "end": 858.04,
                    "word": ".",
                    "probability": 0.98876953125
                }
            ]
        },
        {
            "id": 214,
            "seek": 76846,
            "start": 860.26,
            "end": 863.16,
            "text": " Here is a sample virtual machine configuration.",
            "tokens": [
                51102,
                1692,
                307,
                257,
                6889,
                6374,
                3479,
                11694,
                13,
                51236
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2911458412806193,
            "compression_ratio": 1.673170731707317,
            "no_speech_prob": 0.00013327598571777344,
            "words": [
                {
                    "start": 860.26,
                    "end": 860.86,
                    "word": " Here",
                    "probability": 0.8271484375
                },
                {
                    "start": 860.86,
                    "end": 860.96,
                    "word": " is",
                    "probability": 0.488037109375
                },
                {
                    "start": 861.06,
                    "end": 861.36,
                    "word": " a sample",
                    "probability": 0.80078125
                },
                {
                    "start": 861.36,
                    "end": 861.66,
                    "word": " virtual",
                    "probability": 0.4765625
                },
                {
                    "start": 861.66,
                    "end": 861.96,
                    "word": " machine",
                    "probability": 0.73779296875
                },
                {
                    "start": 861.96,
                    "end": 862.56,
                    "word": " configuration",
                    "probability": 0.85693359375
                },
                {
                    "start": 862.56,
                    "end": 863.16,
                    "word": ".",
                    "probability": 0.92236328125
                }
            ]
        },
        {
            "id": 215,
            "seek": 76846,
            "start": 863.28,
            "end": 864.68,
            "text": " In this slide, it is showing",
            "tokens": [
                51236,
                682,
                341,
                4137,
                11,
                309,
                307,
                4099,
                51308
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2911458412806193,
            "compression_ratio": 1.673170731707317,
            "no_speech_prob": 0.00013327598571777344,
            "words": [
                {
                    "start": 863.28,
                    "end": 863.46,
                    "word": " In",
                    "probability": 0.88818359375
                },
                {
                    "start": 863.46,
                    "end": 863.64,
                    "word": " this",
                    "probability": 0.88427734375
                },
                {
                    "start": 863.64,
                    "end": 863.96,
                    "word": " slide",
                    "probability": 0.83642578125
                },
                {
                    "start": 863.96,
                    "end": 864.06,
                    "word": ",",
                    "probability": 0.7392578125
                },
                {
                    "start": 864.06,
                    "end": 864.22,
                    "word": " it",
                    "probability": 0.904296875
                },
                {
                    "start": 864.22,
                    "end": 864.36,
                    "word": " is",
                    "probability": 0.90478515625
                },
                {
                    "start": 864.36,
                    "end": 864.68,
                    "word": " showing",
                    "probability": 0.7802734375
                }
            ]
        },
        {
            "id": 216,
            "seek": 76846,
            "start": 864.68,
            "end": 867.12,
            "text": " the sample configuration of VMware.",
            "tokens": [
                51308,
                264,
                6889,
                11694,
                295,
                40146,
                13,
                51438
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2911458412806193,
            "compression_ratio": 1.673170731707317,
            "no_speech_prob": 0.00013327598571777344,
            "words": [
                {
                    "start": 864.68,
                    "end": 864.88,
                    "word": " the",
                    "probability": 0.80078125
                },
                {
                    "start": 864.88,
                    "end": 865.16,
                    "word": " sample",
                    "probability": 0.7392578125
                },
                {
                    "start": 865.16,
                    "end": 865.78,
                    "word": " configuration",
                    "probability": 0.703125
                },
                {
                    "start": 865.78,
                    "end": 866.32,
                    "word": " of",
                    "probability": 0.88330078125
                },
                {
                    "start": 866.32,
                    "end": 866.82,
                    "word": " VMware",
                    "probability": 0.6650390625
                },
                {
                    "start": 866.82,
                    "end": 867.12,
                    "word": ".",
                    "probability": 0.9892578125
                }
            ]
        },
        {
            "id": 217,
            "seek": 76846,
            "start": 867.98,
            "end": 869.66,
            "text": " It is not well known,",
            "tokens": [
                51482,
                467,
                307,
                406,
                731,
                2570,
                11,
                51548
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2911458412806193,
            "compression_ratio": 1.673170731707317,
            "no_speech_prob": 0.00013327598571777344,
            "words": [
                {
                    "start": 867.98,
                    "end": 868.34,
                    "word": " It",
                    "probability": 0.90625
                },
                {
                    "start": 868.34,
                    "end": 868.46,
                    "word": " is",
                    "probability": 0.9052734375
                },
                {
                    "start": 868.46,
                    "end": 868.68,
                    "word": " not",
                    "probability": 0.89453125
                },
                {
                    "start": 868.68,
                    "end": 868.92,
                    "word": " well",
                    "probability": 0.8759765625
                },
                {
                    "start": 868.92,
                    "end": 869.26,
                    "word": " known",
                    "probability": 0.53271484375
                },
                {
                    "start": 869.26,
                    "end": 869.66,
                    "word": ",",
                    "probability": 0.76953125
                }
            ]
        },
        {
            "id": 218,
            "seek": 76846,
            "start": 869.66,
            "end": 873.86,
            "text": " but VMware allows you to modify the CPU ID response.",
            "tokens": [
                51548,
                457,
                40146,
                4045,
                291,
                281,
                16927,
                264,
                13199,
                7348,
                4134,
                13,
                51750
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2911458412806193,
            "compression_ratio": 1.673170731707317,
            "no_speech_prob": 0.00013327598571777344,
            "words": [
                {
                    "start": 869.66,
                    "end": 869.86,
                    "word": " but",
                    "probability": 0.8955078125
                },
                {
                    "start": 869.86,
                    "end": 870.38,
                    "word": " VMware",
                    "probability": 0.91845703125
                },
                {
                    "start": 870.38,
                    "end": 871.1,
                    "word": " allows",
                    "probability": 0.7841796875
                },
                {
                    "start": 871.1,
                    "end": 871.34,
                    "word": " you",
                    "probability": 0.89306640625
                },
                {
                    "start": 871.34,
                    "end": 871.6,
                    "word": " to",
                    "probability": 0.908203125
                },
                {
                    "start": 871.6,
                    "end": 871.9,
                    "word": " modify",
                    "probability": 0.88330078125
                },
                {
                    "start": 871.9,
                    "end": 872.12,
                    "word": " the",
                    "probability": 0.8115234375
                },
                {
                    "start": 872.12,
                    "end": 872.46,
                    "word": " CPU",
                    "probability": 0.857421875
                },
                {
                    "start": 872.46,
                    "end": 872.7,
                    "word": " ID",
                    "probability": 0.515625
                },
                {
                    "start": 872.7,
                    "end": 873.26,
                    "word": " response",
                    "probability": 0.87841796875
                },
                {
                    "start": 873.26,
                    "end": 873.86,
                    "word": ".",
                    "probability": 0.97314453125
                }
            ]
        },
        {
            "id": 219,
            "seek": 79706,
            "start": 874.78,
            "end": 878.08,
            "text": " Also, VirtualBox allows you to modify it.",
            "tokens": [
                50414,
                2743,
                11,
                23887,
                34980,
                4045,
                291,
                281,
                16927,
                309,
                13,
                50562
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2443181753835895,
            "compression_ratio": 1.5377358490566038,
            "no_speech_prob": 0.00014352798461914062,
            "words": [
                {
                    "start": 874.78,
                    "end": 875.16,
                    "word": " Also",
                    "probability": 0.79736328125
                },
                {
                    "start": 875.16,
                    "end": 875.28,
                    "word": ",",
                    "probability": 0.517578125
                },
                {
                    "start": 875.28,
                    "end": 876.1,
                    "word": " VirtualBox",
                    "probability": 0.681884765625
                },
                {
                    "start": 876.1,
                    "end": 876.68,
                    "word": " allows",
                    "probability": 0.7744140625
                },
                {
                    "start": 876.68,
                    "end": 876.92,
                    "word": " you",
                    "probability": 0.89599609375
                },
                {
                    "start": 876.92,
                    "end": 877.12,
                    "word": " to",
                    "probability": 0.90869140625
                },
                {
                    "start": 877.12,
                    "end": 877.38,
                    "word": " modify",
                    "probability": 0.849609375
                },
                {
                    "start": 877.38,
                    "end": 877.7,
                    "word": " it",
                    "probability": 0.90576171875
                },
                {
                    "start": 877.7,
                    "end": 878.08,
                    "word": ".",
                    "probability": 0.9931640625
                }
            ]
        },
        {
            "id": 220,
            "seek": 79706,
            "start": 882.2,
            "end": 884.62,
            "text": " After setting this configuration,",
            "tokens": [
                50640,
                2381,
                3287,
                341,
                11694,
                11,
                50756
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2443181753835895,
            "compression_ratio": 1.5377358490566038,
            "no_speech_prob": 0.00014352798461914062,
            "words": [
                {
                    "start": 882.2,
                    "end": 882.58,
                    "word": " After",
                    "probability": 0.80712890625
                },
                {
                    "start": 882.58,
                    "end": 883.34,
                    "word": " setting",
                    "probability": 0.7939453125
                },
                {
                    "start": 883.34,
                    "end": 883.66,
                    "word": " this",
                    "probability": 0.8642578125
                },
                {
                    "start": 883.66,
                    "end": 884.26,
                    "word": " configuration",
                    "probability": 0.85595703125
                },
                {
                    "start": 884.26,
                    "end": 884.62,
                    "word": ",",
                    "probability": 0.94482421875
                }
            ]
        },
        {
            "id": 221,
            "seek": 79706,
            "start": 884.62,
            "end": 887.28,
            "text": " you can find that the OS is showing",
            "tokens": [
                50756,
                291,
                393,
                915,
                300,
                264,
                12731,
                307,
                4099,
                50892
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2443181753835895,
            "compression_ratio": 1.5377358490566038,
            "no_speech_prob": 0.00014352798461914062,
            "words": [
                {
                    "start": 884.62,
                    "end": 884.74,
                    "word": " you",
                    "probability": 0.88818359375
                },
                {
                    "start": 884.74,
                    "end": 884.9,
                    "word": " can",
                    "probability": 0.89404296875
                },
                {
                    "start": 884.9,
                    "end": 885.2,
                    "word": " find",
                    "probability": 0.818359375
                },
                {
                    "start": 885.2,
                    "end": 885.48,
                    "word": " that",
                    "probability": 0.8779296875
                },
                {
                    "start": 885.48,
                    "end": 885.86,
                    "word": " the",
                    "probability": 0.81103515625
                },
                {
                    "start": 885.86,
                    "end": 886.54,
                    "word": " OS",
                    "probability": 0.9091796875
                },
                {
                    "start": 886.54,
                    "end": 886.92,
                    "word": " is",
                    "probability": 0.880859375
                },
                {
                    "start": 886.92,
                    "end": 887.28,
                    "word": " showing",
                    "probability": 0.75
                }
            ]
        },
        {
            "id": 222,
            "seek": 79706,
            "start": 887.28,
            "end": 889.1,
            "text": " the different CPU brand name.",
            "tokens": [
                50892,
                264,
                819,
                13199,
                3360,
                1315,
                13,
                50972
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2443181753835895,
            "compression_ratio": 1.5377358490566038,
            "no_speech_prob": 0.00014352798461914062,
            "words": [
                {
                    "start": 887.28,
                    "end": 887.5,
                    "word": " the",
                    "probability": 0.52001953125
                },
                {
                    "start": 887.5,
                    "end": 887.78,
                    "word": " different",
                    "probability": 0.60791015625
                },
                {
                    "start": 887.78,
                    "end": 888.16,
                    "word": " CPU",
                    "probability": 0.921875
                },
                {
                    "start": 888.16,
                    "end": 888.46,
                    "word": " brand",
                    "probability": 0.64794921875
                },
                {
                    "start": 888.46,
                    "end": 888.72,
                    "word": " name",
                    "probability": 0.82763671875
                },
                {
                    "start": 888.72,
                    "end": 889.1,
                    "word": ".",
                    "probability": 0.99609375
                }
            ]
        },
        {
            "id": 223,
            "seek": 79706,
            "start": 890.8,
            "end": 892.42,
            "text": " With this technique,",
            "tokens": [
                51088,
                2022,
                341,
                6532,
                11,
                51162
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2443181753835895,
            "compression_ratio": 1.5377358490566038,
            "no_speech_prob": 0.00014352798461914062,
            "words": [
                {
                    "start": 890.8,
                    "end": 891.46,
                    "word": " With",
                    "probability": 0.8857421875
                },
                {
                    "start": 891.46,
                    "end": 891.68,
                    "word": " this",
                    "probability": 0.88427734375
                },
                {
                    "start": 891.68,
                    "end": 892.06,
                    "word": " technique",
                    "probability": 0.8720703125
                },
                {
                    "start": 892.06,
                    "end": 892.42,
                    "word": ",",
                    "probability": 0.95849609375
                }
            ]
        },
        {
            "id": 224,
            "seek": 79706,
            "start": 892.42,
            "end": 895.06,
            "text": " you can bypass most of the anti-analysis techniques",
            "tokens": [
                51162,
                291,
                393,
                24996,
                881,
                295,
                264,
                6061,
                12,
                29702,
                4642,
                7512,
                51290
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2443181753835895,
            "compression_ratio": 1.5377358490566038,
            "no_speech_prob": 0.00014352798461914062,
            "words": [
                {
                    "start": 892.42,
                    "end": 892.86,
                    "word": " you",
                    "probability": 0.888671875
                },
                {
                    "start": 892.86,
                    "end": 893.0,
                    "word": " can",
                    "probability": 0.68994140625
                },
                {
                    "start": 893.0,
                    "end": 893.22,
                    "word": " bypass",
                    "probability": 0.88916015625
                },
                {
                    "start": 893.22,
                    "end": 893.58,
                    "word": " most",
                    "probability": 0.71484375
                },
                {
                    "start": 893.58,
                    "end": 893.74,
                    "word": " of",
                    "probability": 0.8818359375
                },
                {
                    "start": 893.74,
                    "end": 893.88,
                    "word": " the",
                    "probability": 0.76025390625
                },
                {
                    "start": 893.88,
                    "end": 894.2,
                    "word": " anti",
                    "probability": 0.6015625
                },
                {
                    "start": 894.2,
                    "end": 894.58,
                    "word": "-analysis",
                    "probability": 0.9212239583333334
                },
                {
                    "start": 894.58,
                    "end": 895.06,
                    "word": " techniques",
                    "probability": 0.87353515625
                }
            ]
        },
        {
            "id": 225,
            "seek": 79706,
            "start": 895.06,
            "end": 897.9,
            "text": " using CPU ID instruction.",
            "tokens": [
                51290,
                1228,
                13199,
                7348,
                10951,
                13,
                51402
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2443181753835895,
            "compression_ratio": 1.5377358490566038,
            "no_speech_prob": 0.00014352798461914062,
            "words": [
                {
                    "start": 895.06,
                    "end": 895.66,
                    "word": " using",
                    "probability": 0.79931640625
                },
                {
                    "start": 895.66,
                    "end": 896.16,
                    "word": " CPU",
                    "probability": 0.80810546875
                },
                {
                    "start": 896.16,
                    "end": 896.5,
                    "word": " ID",
                    "probability": 0.69189453125
                },
                {
                    "start": 896.5,
                    "end": 897.14,
                    "word": " instruction",
                    "probability": 0.91259765625
                },
                {
                    "start": 897.14,
                    "end": 897.9,
                    "word": ".",
                    "probability": 0.9951171875
                }
            ]
        },
        {
            "id": 226,
            "seek": 79706,
            "start": 901.85,
            "end": 905.33,
            "text": " Let's check another anti-analysis techniques.",
            "tokens": [
                51474,
                961,
                311,
                1520,
                1071,
                6061,
                12,
                29702,
                4642,
                7512,
                13,
                51632
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2443181753835895,
            "compression_ratio": 1.5377358490566038,
            "no_speech_prob": 0.00014352798461914062,
            "words": [
                {
                    "start": 901.85,
                    "end": 902.53,
                    "word": " Let's",
                    "probability": 0.942626953125
                },
                {
                    "start": 902.53,
                    "end": 902.75,
                    "word": " check",
                    "probability": 0.79541015625
                },
                {
                    "start": 902.75,
                    "end": 903.15,
                    "word": " another",
                    "probability": 0.80908203125
                },
                {
                    "start": 903.15,
                    "end": 903.63,
                    "word": " anti",
                    "probability": 0.6923828125
                },
                {
                    "start": 903.63,
                    "end": 904.01,
                    "word": "-analysis",
                    "probability": 0.9166666666666666
                },
                {
                    "start": 904.01,
                    "end": 904.57,
                    "word": " techniques",
                    "probability": 0.60400390625
                },
                {
                    "start": 904.57,
                    "end": 905.33,
                    "word": ".",
                    "probability": 0.9599609375
                }
            ]
        },
        {
            "id": 227,
            "seek": 79706,
            "start": 905.47,
            "end": 908.65,
            "text": " In here, Malware is calling Windows API",
            "tokens": [
                51632,
                682,
                510,
                11,
                5746,
                3039,
                307,
                5141,
                8591,
                9362,
                51798
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2443181753835895,
            "compression_ratio": 1.5377358490566038,
            "no_speech_prob": 0.00014352798461914062,
            "words": [
                {
                    "start": 905.47,
                    "end": 905.57,
                    "word": " In",
                    "probability": 0.6923828125
                },
                {
                    "start": 905.57,
                    "end": 905.99,
                    "word": " here",
                    "probability": 0.80517578125
                },
                {
                    "start": 905.99,
                    "end": 906.51,
                    "word": ",",
                    "probability": 0.9716796875
                },
                {
                    "start": 906.51,
                    "end": 906.75,
                    "word": " Malware",
                    "probability": 0.50653076171875
                },
                {
                    "start": 906.75,
                    "end": 907.09,
                    "word": " is",
                    "probability": 0.90283203125
                },
                {
                    "start": 907.09,
                    "end": 907.67,
                    "word": " calling",
                    "probability": 0.6943359375
                },
                {
                    "start": 907.67,
                    "end": 908.21,
                    "word": " Windows",
                    "probability": 0.78271484375
                },
                {
                    "start": 908.21,
                    "end": 908.65,
                    "word": " API",
                    "probability": 0.82763671875
                }
            ]
        },
        {
            "id": 228,
            "seek": 82536,
            "start": 908.65,
            "end": 910.47,
            "text": " to check the device name.",
            "tokens": [
                50372,
                281,
                1520,
                264,
                4302,
                1315,
                13,
                50438
            ],
            "temperature": 0.0,
            "avg_logprob": -0.25035510246049275,
            "compression_ratio": 1.5492957746478873,
            "no_speech_prob": 0.003299713134765625,
            "words": [
                {
                    "start": 908.65,
                    "end": 908.87,
                    "word": " to",
                    "probability": 0.493408203125
                },
                {
                    "start": 908.87,
                    "end": 909.09,
                    "word": " check",
                    "probability": 0.80712890625
                },
                {
                    "start": 909.09,
                    "end": 909.23,
                    "word": " the",
                    "probability": 0.79736328125
                },
                {
                    "start": 909.23,
                    "end": 909.53,
                    "word": " device",
                    "probability": 0.908203125
                },
                {
                    "start": 909.53,
                    "end": 909.83,
                    "word": " name",
                    "probability": 0.8076171875
                },
                {
                    "start": 909.83,
                    "end": 910.47,
                    "word": ".",
                    "probability": 0.9638671875
                }
            ]
        },
        {
            "id": 229,
            "seek": 82536,
            "start": 911.17,
            "end": 916.59,
            "text": " If device name includes VBox or VMware,",
            "tokens": [
                50504,
                759,
                4302,
                1315,
                5974,
                691,
                34980,
                420,
                40146,
                11,
                50754
            ],
            "temperature": 0.0,
            "avg_logprob": -0.25035510246049275,
            "compression_ratio": 1.5492957746478873,
            "no_speech_prob": 0.003299713134765625,
            "words": [
                {
                    "start": 911.17,
                    "end": 911.57,
                    "word": " If",
                    "probability": 0.8720703125
                },
                {
                    "start": 911.57,
                    "end": 911.95,
                    "word": " device",
                    "probability": 0.583984375
                },
                {
                    "start": 911.95,
                    "end": 912.23,
                    "word": " name",
                    "probability": 0.8408203125
                },
                {
                    "start": 912.23,
                    "end": 912.87,
                    "word": " includes",
                    "probability": 0.82861328125
                },
                {
                    "start": 912.87,
                    "end": 913.65,
                    "word": " VBox",
                    "probability": 0.671875
                },
                {
                    "start": 913.65,
                    "end": 914.67,
                    "word": " or",
                    "probability": 0.84033203125
                },
                {
                    "start": 914.67,
                    "end": 915.73,
                    "word": " VMware",
                    "probability": 0.5546875
                },
                {
                    "start": 915.73,
                    "end": 916.59,
                    "word": ",",
                    "probability": 0.92138671875
                }
            ]
        },
        {
            "id": 230,
            "seek": 82536,
            "start": 916.59,
            "end": 919.09,
            "text": " Malware will kill itself.",
            "tokens": [
                50762,
                5746,
                3039,
                486,
                1961,
                2564,
                13,
                50870
            ],
            "temperature": 0.0,
            "avg_logprob": -0.25035510246049275,
            "compression_ratio": 1.5492957746478873,
            "no_speech_prob": 0.003299713134765625,
            "words": [
                {
                    "start": 916.59,
                    "end": 916.91,
                    "word": " Malware",
                    "probability": 0.4168548583984375
                },
                {
                    "start": 916.91,
                    "end": 917.25,
                    "word": " will",
                    "probability": 0.81884765625
                },
                {
                    "start": 917.25,
                    "end": 917.67,
                    "word": " kill",
                    "probability": 0.8203125
                },
                {
                    "start": 917.67,
                    "end": 918.45,
                    "word": " itself",
                    "probability": 0.7802734375
                },
                {
                    "start": 918.45,
                    "end": 919.09,
                    "word": ".",
                    "probability": 0.98779296875
                }
            ]
        },
        {
            "id": 231,
            "seek": 82536,
            "start": 919.75,
            "end": 923.17,
            "text": " It is possible to bypass with Hooks API,",
            "tokens": [
                50938,
                467,
                307,
                1944,
                281,
                24996,
                365,
                33132,
                82,
                9362,
                11,
                51110
            ],
            "temperature": 0.0,
            "avg_logprob": -0.25035510246049275,
            "compression_ratio": 1.5492957746478873,
            "no_speech_prob": 0.003299713134765625,
            "words": [
                {
                    "start": 919.75,
                    "end": 920.19,
                    "word": " It",
                    "probability": 0.888671875
                },
                {
                    "start": 920.19,
                    "end": 920.35,
                    "word": " is",
                    "probability": 0.89794921875
                },
                {
                    "start": 920.35,
                    "end": 920.67,
                    "word": " possible",
                    "probability": 0.85498046875
                },
                {
                    "start": 920.67,
                    "end": 920.87,
                    "word": " to",
                    "probability": 0.89453125
                },
                {
                    "start": 920.87,
                    "end": 921.13,
                    "word": " bypass",
                    "probability": 0.9033203125
                },
                {
                    "start": 921.13,
                    "end": 921.73,
                    "word": " with",
                    "probability": 0.68310546875
                },
                {
                    "start": 921.73,
                    "end": 922.11,
                    "word": " Hooks",
                    "probability": 0.275390625
                },
                {
                    "start": 922.11,
                    "end": 922.43,
                    "word": " API",
                    "probability": 0.705078125
                },
                {
                    "start": 922.43,
                    "end": 923.17,
                    "word": ",",
                    "probability": 0.76806640625
                }
            ]
        },
        {
            "id": 232,
            "seek": 82536,
            "start": 923.17,
            "end": 926.83,
            "text": " but it is more easy to modify the virtual machine settings.",
            "tokens": [
                51110,
                457,
                309,
                307,
                544,
                1858,
                281,
                16927,
                264,
                6374,
                3479,
                6257,
                13,
                51260
            ],
            "temperature": 0.0,
            "avg_logprob": -0.25035510246049275,
            "compression_ratio": 1.5492957746478873,
            "no_speech_prob": 0.003299713134765625,
            "words": [
                {
                    "start": 923.17,
                    "end": 923.73,
                    "word": " but",
                    "probability": 0.8955078125
                },
                {
                    "start": 923.73,
                    "end": 923.93,
                    "word": " it",
                    "probability": 0.888671875
                },
                {
                    "start": 923.93,
                    "end": 924.05,
                    "word": " is",
                    "probability": 0.89013671875
                },
                {
                    "start": 924.05,
                    "end": 924.23,
                    "word": " more",
                    "probability": 0.802734375
                },
                {
                    "start": 924.23,
                    "end": 924.43,
                    "word": " easy",
                    "probability": 0.7998046875
                },
                {
                    "start": 924.43,
                    "end": 924.61,
                    "word": " to",
                    "probability": 0.9033203125
                },
                {
                    "start": 924.61,
                    "end": 924.97,
                    "word": " modify",
                    "probability": 0.900390625
                },
                {
                    "start": 924.97,
                    "end": 925.21,
                    "word": " the",
                    "probability": 0.76025390625
                },
                {
                    "start": 925.21,
                    "end": 925.47,
                    "word": " virtual",
                    "probability": 0.83984375
                },
                {
                    "start": 925.47,
                    "end": 925.69,
                    "word": " machine",
                    "probability": 0.69482421875
                },
                {
                    "start": 925.69,
                    "end": 926.19,
                    "word": " settings",
                    "probability": 0.78369140625
                },
                {
                    "start": 926.19,
                    "end": 926.83,
                    "word": ".",
                    "probability": 0.99267578125
                }
            ]
        },
        {
            "id": 233,
            "seek": 82536,
            "start": 930.53,
            "end": 932.99,
            "text": " Here is a sample configuration.",
            "tokens": [
                51332,
                1692,
                307,
                257,
                6889,
                11694,
                13,
                51448
            ],
            "temperature": 0.0,
            "avg_logprob": -0.25035510246049275,
            "compression_ratio": 1.5492957746478873,
            "no_speech_prob": 0.003299713134765625,
            "words": [
                {
                    "start": 930.53,
                    "end": 931.17,
                    "word": " Here",
                    "probability": 0.8291015625
                },
                {
                    "start": 931.17,
                    "end": 931.31,
                    "word": " is",
                    "probability": 0.87939453125
                },
                {
                    "start": 931.41,
                    "end": 931.69,
                    "word": " a sample",
                    "probability": 0.79931640625
                },
                {
                    "start": 931.69,
                    "end": 932.35,
                    "word": " configuration",
                    "probability": 0.84228515625
                },
                {
                    "start": 932.35,
                    "end": 932.99,
                    "word": ".",
                    "probability": 0.95849609375
                }
            ]
        },
        {
            "id": 234,
            "seek": 82536,
            "start": 933.21,
            "end": 936.17,
            "text": " As you can see, you could also change the device name",
            "tokens": [
                51448,
                1018,
                291,
                393,
                536,
                11,
                291,
                727,
                611,
                1319,
                264,
                4302,
                1315,
                51594
            ],
            "temperature": 0.0,
            "avg_logprob": -0.25035510246049275,
            "compression_ratio": 1.5492957746478873,
            "no_speech_prob": 0.003299713134765625,
            "words": [
                {
                    "start": 933.21,
                    "end": 933.47,
                    "word": " As",
                    "probability": 0.8994140625
                },
                {
                    "start": 933.47,
                    "end": 933.59,
                    "word": " you",
                    "probability": 0.89501953125
                },
                {
                    "start": 933.59,
                    "end": 933.73,
                    "word": " can",
                    "probability": 0.90185546875
                },
                {
                    "start": 933.73,
                    "end": 934.03,
                    "word": " see",
                    "probability": 0.8134765625
                },
                {
                    "start": 934.03,
                    "end": 934.51,
                    "word": ",",
                    "probability": 0.96728515625
                },
                {
                    "start": 934.51,
                    "end": 934.73,
                    "word": " you",
                    "probability": 0.884765625
                },
                {
                    "start": 934.73,
                    "end": 934.89,
                    "word": " could",
                    "probability": 0.748046875
                },
                {
                    "start": 934.89,
                    "end": 935.09,
                    "word": " also",
                    "probability": 0.814453125
                },
                {
                    "start": 935.09,
                    "end": 935.49,
                    "word": " change",
                    "probability": 0.83984375
                },
                {
                    "start": 935.49,
                    "end": 935.61,
                    "word": " the",
                    "probability": 0.76806640625
                },
                {
                    "start": 935.61,
                    "end": 935.89,
                    "word": " device",
                    "probability": 0.91259765625
                },
                {
                    "start": 935.89,
                    "end": 936.17,
                    "word": " name",
                    "probability": 0.81689453125
                }
            ]
        },
        {
            "id": 235,
            "seek": 82536,
            "start": 936.17,
            "end": 939.95,
            "text": " just writing few lines into the configuration file.",
            "tokens": [
                51594,
                445,
                3579,
                1326,
                3876,
                666,
                264,
                11694,
                3991,
                13,
                51764
            ],
            "temperature": 0.0,
            "avg_logprob": -0.25035510246049275,
            "compression_ratio": 1.5492957746478873,
            "no_speech_prob": 0.003299713134765625,
            "words": [
                {
                    "start": 936.17,
                    "end": 936.49,
                    "word": " just",
                    "probability": 0.748046875
                },
                {
                    "start": 936.49,
                    "end": 937.35,
                    "word": " writing",
                    "probability": 0.7880859375
                },
                {
                    "start": 937.35,
                    "end": 937.65,
                    "word": " few",
                    "probability": 0.416015625
                },
                {
                    "start": 937.65,
                    "end": 938.03,
                    "word": " lines",
                    "probability": 0.89990234375
                },
                {
                    "start": 938.03,
                    "end": 938.27,
                    "word": " into",
                    "probability": 0.74560546875
                },
                {
                    "start": 938.27,
                    "end": 938.43,
                    "word": " the",
                    "probability": 0.8154296875
                },
                {
                    "start": 938.43,
                    "end": 938.87,
                    "word": " configuration",
                    "probability": 0.87451171875
                },
                {
                    "start": 938.87,
                    "end": 939.31,
                    "word": " file",
                    "probability": 0.81982421875
                },
                {
                    "start": 939.31,
                    "end": 939.95,
                    "word": ".",
                    "probability": 0.98876953125
                }
            ]
        },
        {
            "id": 236,
            "seek": 85422,
            "start": 940.21,
            "end": 942.41,
            "text": " You could do the same things for MAC address",
            "tokens": [
                50390,
                509,
                727,
                360,
                264,
                912,
                721,
                337,
                27716,
                2985,
                50498
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2584918526851613,
            "compression_ratio": 1.5450643776824033,
            "no_speech_prob": 0.0006628036499023438,
            "words": [
                {
                    "start": 940.21,
                    "end": 940.57,
                    "word": " You",
                    "probability": 0.82177734375
                },
                {
                    "start": 940.57,
                    "end": 940.73,
                    "word": " could",
                    "probability": 0.7783203125
                },
                {
                    "start": 940.73,
                    "end": 940.89,
                    "word": " do",
                    "probability": 0.87744140625
                },
                {
                    "start": 940.89,
                    "end": 941.03,
                    "word": " the",
                    "probability": 0.71142578125
                },
                {
                    "start": 941.03,
                    "end": 941.19,
                    "word": " same",
                    "probability": 0.81494140625
                },
                {
                    "start": 941.19,
                    "end": 941.53,
                    "word": " things",
                    "probability": 0.50537109375
                },
                {
                    "start": 941.53,
                    "end": 941.73,
                    "word": " for",
                    "probability": 0.88623046875
                },
                {
                    "start": 941.73,
                    "end": 942.01,
                    "word": " MAC",
                    "probability": 0.71923828125
                },
                {
                    "start": 942.01,
                    "end": 942.41,
                    "word": " address",
                    "probability": 0.78662109375
                }
            ]
        },
        {
            "id": 237,
            "seek": 85422,
            "start": 942.41,
            "end": 947.21,
            "text": " or CD drive name or BIOS setting, et cetera, et cetera.",
            "tokens": [
                50498,
                420,
                6743,
                3332,
                1315,
                420,
                23524,
                4367,
                3287,
                11,
                1030,
                11458,
                11,
                1030,
                11458,
                13,
                50706
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2584918526851613,
            "compression_ratio": 1.5450643776824033,
            "no_speech_prob": 0.0006628036499023438,
            "words": [
                {
                    "start": 942.41,
                    "end": 943.17,
                    "word": " or",
                    "probability": 0.666015625
                },
                {
                    "start": 943.17,
                    "end": 943.55,
                    "word": " CD",
                    "probability": 0.75830078125
                },
                {
                    "start": 943.55,
                    "end": 943.87,
                    "word": " drive",
                    "probability": 0.78466796875
                },
                {
                    "start": 943.87,
                    "end": 944.17,
                    "word": " name",
                    "probability": 0.84326171875
                },
                {
                    "start": 944.17,
                    "end": 944.51,
                    "word": " or",
                    "probability": 0.76708984375
                },
                {
                    "start": 944.51,
                    "end": 944.83,
                    "word": " BIOS",
                    "probability": 0.828369140625
                },
                {
                    "start": 944.83,
                    "end": 945.17,
                    "word": " setting",
                    "probability": 0.55078125
                },
                {
                    "start": 945.17,
                    "end": 945.39,
                    "word": ",",
                    "probability": 0.66943359375
                },
                {
                    "start": 945.39,
                    "end": 945.79,
                    "word": " et",
                    "probability": 0.266357421875
                },
                {
                    "start": 945.79,
                    "end": 946.03,
                    "word": " cetera",
                    "probability": 0.75439453125
                },
                {
                    "start": 946.03,
                    "end": 946.11,
                    "word": ",",
                    "probability": 0.8369140625
                },
                {
                    "start": 946.11,
                    "end": 946.25,
                    "word": " et",
                    "probability": 0.89013671875
                },
                {
                    "start": 946.25,
                    "end": 946.49,
                    "word": " cetera",
                    "probability": 0.748046875
                },
                {
                    "start": 946.49,
                    "end": 947.21,
                    "word": ".",
                    "probability": 0.9677734375
                }
            ]
        },
        {
            "id": 238,
            "seek": 85422,
            "start": 951.24,
            "end": 955.82,
            "text": " Here is our recommended setting for anti-anti-analysis.",
            "tokens": [
                50776,
                1692,
                307,
                527,
                9628,
                3287,
                337,
                6061,
                12,
                11520,
                12,
                29702,
                4642,
                13,
                51020
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2584918526851613,
            "compression_ratio": 1.5450643776824033,
            "no_speech_prob": 0.0006628036499023438,
            "words": [
                {
                    "start": 951.24,
                    "end": 951.74,
                    "word": " Here",
                    "probability": 0.81884765625
                },
                {
                    "start": 951.74,
                    "end": 951.96,
                    "word": " is",
                    "probability": 0.8662109375
                },
                {
                    "start": 951.96,
                    "end": 952.42,
                    "word": " our",
                    "probability": 0.80224609375
                },
                {
                    "start": 952.42,
                    "end": 952.88,
                    "word": " recommended",
                    "probability": 0.5810546875
                },
                {
                    "start": 952.88,
                    "end": 953.4,
                    "word": " setting",
                    "probability": 0.69384765625
                },
                {
                    "start": 953.4,
                    "end": 953.76,
                    "word": " for",
                    "probability": 0.9013671875
                },
                {
                    "start": 953.76,
                    "end": 954.26,
                    "word": " anti",
                    "probability": 0.58935546875
                },
                {
                    "start": 954.26,
                    "end": 954.72,
                    "word": "-anti",
                    "probability": 0.710693359375
                },
                {
                    "start": 954.72,
                    "end": 955.1,
                    "word": "-analysis",
                    "probability": 0.9210611979166666
                },
                {
                    "start": 955.1,
                    "end": 955.82,
                    "word": ".",
                    "probability": 0.9814453125
                }
            ]
        },
        {
            "id": 239,
            "seek": 85422,
            "start": 956.08,
            "end": 959.58,
            "text": " First, do not install VMware tools",
            "tokens": [
                51020,
                2386,
                11,
                360,
                406,
                3625,
                40146,
                3873,
                51196
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2584918526851613,
            "compression_ratio": 1.5450643776824033,
            "no_speech_prob": 0.0006628036499023438,
            "words": [
                {
                    "start": 956.08,
                    "end": 956.74,
                    "word": " First",
                    "probability": 0.884765625
                },
                {
                    "start": 956.74,
                    "end": 957.22,
                    "word": ",",
                    "probability": 0.9677734375
                },
                {
                    "start": 957.22,
                    "end": 957.4,
                    "word": " do",
                    "probability": 0.89111328125
                },
                {
                    "start": 957.4,
                    "end": 957.64,
                    "word": " not",
                    "probability": 0.892578125
                },
                {
                    "start": 957.64,
                    "end": 958.32,
                    "word": " install",
                    "probability": 0.85302734375
                },
                {
                    "start": 958.32,
                    "end": 959.04,
                    "word": " VMware",
                    "probability": 0.1798095703125
                },
                {
                    "start": 959.04,
                    "end": 959.58,
                    "word": " tools",
                    "probability": 0.68994140625
                }
            ]
        },
        {
            "id": 240,
            "seek": 85422,
            "start": 959.58,
            "end": 962.3,
            "text": " or VirtualBox guest additions.",
            "tokens": [
                51196,
                420,
                23887,
                34980,
                8341,
                35113,
                13,
                51340
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2584918526851613,
            "compression_ratio": 1.5450643776824033,
            "no_speech_prob": 0.0006628036499023438,
            "words": [
                {
                    "start": 959.58,
                    "end": 960.12,
                    "word": " or",
                    "probability": 0.880859375
                },
                {
                    "start": 960.12,
                    "end": 960.74,
                    "word": " VirtualBox",
                    "probability": 0.882568359375
                },
                {
                    "start": 960.74,
                    "end": 961.18,
                    "word": " guest",
                    "probability": 0.79541015625
                },
                {
                    "start": 961.18,
                    "end": 961.58,
                    "word": " additions",
                    "probability": 0.8603515625
                },
                {
                    "start": 961.58,
                    "end": 962.3,
                    "word": ".",
                    "probability": 0.994140625
                }
            ]
        },
        {
            "id": 241,
            "seek": 85422,
            "start": 962.68,
            "end": 964.68,
            "text": " These tools modify so many settings",
            "tokens": [
                51340,
                1981,
                3873,
                16927,
                370,
                867,
                6257,
                51444
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2584918526851613,
            "compression_ratio": 1.5450643776824033,
            "no_speech_prob": 0.0006628036499023438,
            "words": [
                {
                    "start": 962.68,
                    "end": 963.04,
                    "word": " These",
                    "probability": 0.90283203125
                },
                {
                    "start": 963.04,
                    "end": 963.4,
                    "word": " tools",
                    "probability": 0.796875
                },
                {
                    "start": 963.4,
                    "end": 963.84,
                    "word": " modify",
                    "probability": 0.8330078125
                },
                {
                    "start": 963.84,
                    "end": 964.14,
                    "word": " so",
                    "probability": 0.90283203125
                },
                {
                    "start": 964.14,
                    "end": 964.34,
                    "word": " many",
                    "probability": 0.81591796875
                },
                {
                    "start": 964.34,
                    "end": 964.68,
                    "word": " settings",
                    "probability": 0.81201171875
                }
            ]
        },
        {
            "id": 242,
            "seek": 85422,
            "start": 964.68,
            "end": 968.36,
            "text": " and it makes it easy to detect the sandbox environment.",
            "tokens": [
                51444,
                293,
                309,
                1669,
                309,
                1858,
                281,
                5531,
                264,
                42115,
                2823,
                13,
                51604
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2584918526851613,
            "compression_ratio": 1.5450643776824033,
            "no_speech_prob": 0.0006628036499023438,
            "words": [
                {
                    "start": 964.68,
                    "end": 965.16,
                    "word": " and",
                    "probability": 0.666015625
                },
                {
                    "start": 965.16,
                    "end": 965.4,
                    "word": " it",
                    "probability": 0.8916015625
                },
                {
                    "start": 965.4,
                    "end": 965.68,
                    "word": " makes",
                    "probability": 0.7197265625
                },
                {
                    "start": 965.68,
                    "end": 965.84,
                    "word": " it",
                    "probability": 0.90380859375
                },
                {
                    "start": 965.84,
                    "end": 966.04,
                    "word": " easy",
                    "probability": 0.79638671875
                },
                {
                    "start": 966.04,
                    "end": 966.24,
                    "word": " to",
                    "probability": 0.908203125
                },
                {
                    "start": 966.24,
                    "end": 966.6,
                    "word": " detect",
                    "probability": 0.76416015625
                },
                {
                    "start": 966.6,
                    "end": 966.8,
                    "word": " the",
                    "probability": 0.71728515625
                },
                {
                    "start": 966.8,
                    "end": 967.06,
                    "word": " sandbox",
                    "probability": 0.7705078125
                },
                {
                    "start": 967.06,
                    "end": 967.64,
                    "word": " environment",
                    "probability": 0.7880859375
                },
                {
                    "start": 967.64,
                    "end": 968.36,
                    "word": ".",
                    "probability": 0.99755859375
                }
            ]
        },
        {
            "id": 243,
            "seek": 85422,
            "start": 968.84,
            "end": 972.1,
            "text": " Second is use local language operating system",
            "tokens": [
                51650,
                5736,
                307,
                764,
                2654,
                2856,
                7447,
                1185,
                51814
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2584918526851613,
            "compression_ratio": 1.5450643776824033,
            "no_speech_prob": 0.0006628036499023438,
            "words": [
                {
                    "start": 968.84,
                    "end": 969.26,
                    "word": " Second",
                    "probability": 0.759765625
                },
                {
                    "start": 969.26,
                    "end": 969.96,
                    "word": " is",
                    "probability": 0.67626953125
                },
                {
                    "start": 969.96,
                    "end": 970.24,
                    "word": " use",
                    "probability": 0.7197265625
                },
                {
                    "start": 970.24,
                    "end": 970.62,
                    "word": " local",
                    "probability": 0.72802734375
                },
                {
                    "start": 970.62,
                    "end": 971.04,
                    "word": " language",
                    "probability": 0.4150390625
                },
                {
                    "start": 971.04,
                    "end": 971.68,
                    "word": " operating",
                    "probability": 0.7138671875
                },
                {
                    "start": 971.68,
                    "end": 972.1,
                    "word": " system",
                    "probability": 0.77978515625
                }
            ]
        },
        {
            "id": 244,
            "seek": 88280,
            "start": 972.1,
            "end": 973.86,
            "text": " for virtual machine.",
            "tokens": [
                50374,
                337,
                6374,
                3479,
                13,
                50428
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2977528197042058,
            "compression_ratio": 1.528888888888889,
            "no_speech_prob": 0.0009703636169433594,
            "words": [
                {
                    "start": 972.1,
                    "end": 972.46,
                    "word": " for",
                    "probability": 0.708984375
                },
                {
                    "start": 972.46,
                    "end": 972.8,
                    "word": " virtual",
                    "probability": 0.6728515625
                },
                {
                    "start": 972.8,
                    "end": 973.1,
                    "word": " machine",
                    "probability": 0.459716796875
                },
                {
                    "start": 973.1,
                    "end": 973.86,
                    "word": ".",
                    "probability": 0.943359375
                }
            ]
        },
        {
            "id": 245,
            "seek": 88280,
            "start": 974.16,
            "end": 978.02,
            "text": " Some malware is specified for regions,",
            "tokens": [
                50486,
                2188,
                40747,
                307,
                22206,
                337,
                10682,
                11,
                50666
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2977528197042058,
            "compression_ratio": 1.528888888888889,
            "no_speech_prob": 0.0009703636169433594,
            "words": [
                {
                    "start": 974.16,
                    "end": 974.92,
                    "word": " Some",
                    "probability": 0.8642578125
                },
                {
                    "start": 974.92,
                    "end": 975.26,
                    "word": " malware",
                    "probability": 0.84912109375
                },
                {
                    "start": 975.26,
                    "end": 975.58,
                    "word": " is",
                    "probability": 0.9033203125
                },
                {
                    "start": 975.58,
                    "end": 976.0,
                    "word": " specified",
                    "probability": 0.6015625
                },
                {
                    "start": 976.0,
                    "end": 977.02,
                    "word": " for",
                    "probability": 0.880859375
                },
                {
                    "start": 977.02,
                    "end": 977.52,
                    "word": " regions",
                    "probability": 0.75146484375
                },
                {
                    "start": 977.52,
                    "end": 978.02,
                    "word": ",",
                    "probability": 0.3681640625
                }
            ]
        },
        {
            "id": 246,
            "seek": 88280,
            "start": 978.02,
            "end": 980.68,
            "text": " and if you want to analyze these malware,",
            "tokens": [
                50666,
                293,
                498,
                291,
                528,
                281,
                12477,
                613,
                40747,
                11,
                50796
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2977528197042058,
            "compression_ratio": 1.528888888888889,
            "no_speech_prob": 0.0009703636169433594,
            "words": [
                {
                    "start": 978.02,
                    "end": 978.48,
                    "word": " and",
                    "probability": 0.892578125
                },
                {
                    "start": 978.48,
                    "end": 978.72,
                    "word": " if",
                    "probability": 0.89599609375
                },
                {
                    "start": 978.72,
                    "end": 978.86,
                    "word": " you",
                    "probability": 0.8935546875
                },
                {
                    "start": 978.86,
                    "end": 979.16,
                    "word": " want",
                    "probability": 0.82373046875
                },
                {
                    "start": 979.16,
                    "end": 979.32,
                    "word": " to",
                    "probability": 0.908203125
                },
                {
                    "start": 979.32,
                    "end": 979.62,
                    "word": " analyze",
                    "probability": 0.7099609375
                },
                {
                    "start": 979.62,
                    "end": 979.88,
                    "word": " these",
                    "probability": 0.48974609375
                },
                {
                    "start": 979.88,
                    "end": 980.26,
                    "word": " malware",
                    "probability": 0.74169921875
                },
                {
                    "start": 980.26,
                    "end": 980.68,
                    "word": ",",
                    "probability": 0.8349609375
                }
            ]
        },
        {
            "id": 247,
            "seek": 88280,
            "start": 980.68,
            "end": 982.98,
            "text": " use local languages always.",
            "tokens": [
                50796,
                764,
                2654,
                8650,
                1009,
                13,
                50896
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2977528197042058,
            "compression_ratio": 1.528888888888889,
            "no_speech_prob": 0.0009703636169433594,
            "words": [
                {
                    "start": 980.68,
                    "end": 980.94,
                    "word": " use",
                    "probability": 0.82177734375
                },
                {
                    "start": 980.94,
                    "end": 981.32,
                    "word": " local",
                    "probability": 0.84375
                },
                {
                    "start": 981.32,
                    "end": 981.82,
                    "word": " languages",
                    "probability": 0.8466796875
                },
                {
                    "start": 981.82,
                    "end": 982.22,
                    "word": " always",
                    "probability": 0.457275390625
                },
                {
                    "start": 982.22,
                    "end": 982.98,
                    "word": ".",
                    "probability": 0.99658203125
                }
            ]
        },
        {
            "id": 248,
            "seek": 88280,
            "start": 983.7,
            "end": 987.46,
            "text": " Third is modify the virtual machine configuration.",
            "tokens": [
                50956,
                12548,
                307,
                16927,
                264,
                6374,
                3479,
                11694,
                13,
                51136
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2977528197042058,
            "compression_ratio": 1.528888888888889,
            "no_speech_prob": 0.0009703636169433594,
            "words": [
                {
                    "start": 983.7,
                    "end": 984.3,
                    "word": " Third",
                    "probability": 0.80029296875
                },
                {
                    "start": 984.3,
                    "end": 984.7,
                    "word": " is",
                    "probability": 0.71240234375
                },
                {
                    "start": 984.7,
                    "end": 985.06,
                    "word": " modify",
                    "probability": 0.11053466796875
                },
                {
                    "start": 985.06,
                    "end": 985.32,
                    "word": " the",
                    "probability": 0.4521484375
                },
                {
                    "start": 985.32,
                    "end": 985.88,
                    "word": " virtual",
                    "probability": 0.8828125
                },
                {
                    "start": 985.88,
                    "end": 986.16,
                    "word": " machine",
                    "probability": 0.7490234375
                },
                {
                    "start": 986.16,
                    "end": 986.76,
                    "word": " configuration",
                    "probability": 0.8837890625
                },
                {
                    "start": 986.76,
                    "end": 987.46,
                    "word": ".",
                    "probability": 0.80810546875
                }
            ]
        },
        {
            "id": 249,
            "seek": 88280,
            "start": 987.46,
            "end": 991.44,
            "text": " Especially, we recommend to modify CPU ID response,",
            "tokens": [
                51136,
                8545,
                11,
                321,
                2748,
                281,
                16927,
                13199,
                7348,
                4134,
                11,
                51332
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2977528197042058,
            "compression_ratio": 1.528888888888889,
            "no_speech_prob": 0.0009703636169433594,
            "words": [
                {
                    "start": 987.46,
                    "end": 987.9,
                    "word": " Especially",
                    "probability": 0.7626953125
                },
                {
                    "start": 987.9,
                    "end": 988.24,
                    "word": ",",
                    "probability": 0.64013671875
                },
                {
                    "start": 988.24,
                    "end": 988.52,
                    "word": " we",
                    "probability": 0.89794921875
                },
                {
                    "start": 988.52,
                    "end": 988.94,
                    "word": " recommend",
                    "probability": 0.67236328125
                },
                {
                    "start": 988.94,
                    "end": 989.2,
                    "word": " to",
                    "probability": 0.87890625
                },
                {
                    "start": 989.2,
                    "end": 989.52,
                    "word": " modify",
                    "probability": 0.884765625
                },
                {
                    "start": 989.52,
                    "end": 990.04,
                    "word": " CPU",
                    "probability": 0.85693359375
                },
                {
                    "start": 990.04,
                    "end": 990.32,
                    "word": " ID",
                    "probability": 0.58740234375
                },
                {
                    "start": 990.32,
                    "end": 990.88,
                    "word": " response",
                    "probability": 0.88330078125
                },
                {
                    "start": 990.88,
                    "end": 991.44,
                    "word": ",",
                    "probability": 0.96533203125
                }
            ]
        },
        {
            "id": 250,
            "seek": 88280,
            "start": 991.44,
            "end": 994.62,
            "text": " device name, and NIC setting.",
            "tokens": [
                51332,
                4302,
                1315,
                11,
                293,
                426,
                2532,
                3287,
                13,
                51466
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2977528197042058,
            "compression_ratio": 1.528888888888889,
            "no_speech_prob": 0.0009703636169433594,
            "words": [
                {
                    "start": 991.44,
                    "end": 991.76,
                    "word": " device",
                    "probability": 0.8896484375
                },
                {
                    "start": 991.76,
                    "end": 992.06,
                    "word": " name",
                    "probability": 0.80517578125
                },
                {
                    "start": 992.06,
                    "end": 992.56,
                    "word": ",",
                    "probability": 0.82373046875
                },
                {
                    "start": 992.56,
                    "end": 992.94,
                    "word": " and",
                    "probability": 0.8955078125
                },
                {
                    "start": 992.94,
                    "end": 993.44,
                    "word": " NIC",
                    "probability": 0.921142578125
                },
                {
                    "start": 993.44,
                    "end": 993.86,
                    "word": " setting",
                    "probability": 0.7109375
                },
                {
                    "start": 993.86,
                    "end": 994.62,
                    "word": ".",
                    "probability": 0.99755859375
                }
            ]
        },
        {
            "id": 251,
            "seek": 88280,
            "start": 995.44,
            "end": 999.02,
            "text": " In most case, we are able to bypass anti-analysis techniques",
            "tokens": [
                51546,
                682,
                881,
                1389,
                11,
                321,
                366,
                1075,
                281,
                24996,
                6061,
                12,
                29702,
                4642,
                7512,
                51716
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2977528197042058,
            "compression_ratio": 1.528888888888889,
            "no_speech_prob": 0.0009703636169433594,
            "words": [
                {
                    "start": 995.44,
                    "end": 995.82,
                    "word": " In",
                    "probability": 0.900390625
                },
                {
                    "start": 995.82,
                    "end": 996.04,
                    "word": " most",
                    "probability": 0.7939453125
                },
                {
                    "start": 996.04,
                    "end": 996.36,
                    "word": " case",
                    "probability": 0.28369140625
                },
                {
                    "start": 996.36,
                    "end": 996.52,
                    "word": ",",
                    "probability": 0.8955078125
                },
                {
                    "start": 996.52,
                    "end": 996.66,
                    "word": " we",
                    "probability": 0.904296875
                },
                {
                    "start": 996.66,
                    "end": 996.8,
                    "word": " are",
                    "probability": 0.52880859375
                },
                {
                    "start": 996.8,
                    "end": 997.0,
                    "word": " able",
                    "probability": 0.884765625
                },
                {
                    "start": 997.0,
                    "end": 997.34,
                    "word": " to",
                    "probability": 0.90283203125
                },
                {
                    "start": 997.34,
                    "end": 997.74,
                    "word": " bypass",
                    "probability": 0.90087890625
                },
                {
                    "start": 997.74,
                    "end": 998.26,
                    "word": " anti",
                    "probability": 0.6396484375
                },
                {
                    "start": 998.26,
                    "end": 998.64,
                    "word": "-analysis",
                    "probability": 0.8098958333333334
                },
                {
                    "start": 998.64,
                    "end": 999.02,
                    "word": " techniques",
                    "probability": 0.8466796875
                }
            ]
        },
        {
            "id": 252,
            "seek": 88280,
            "start": 999.02,
            "end": 1000.68,
            "text": " with these settings.",
            "tokens": [
                51716,
                365,
                613,
                6257,
                13,
                51778
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2977528197042058,
            "compression_ratio": 1.528888888888889,
            "no_speech_prob": 0.0009703636169433594,
            "words": [
                {
                    "start": 999.02,
                    "end": 999.3,
                    "word": " with",
                    "probability": 0.8134765625
                },
                {
                    "start": 999.3,
                    "end": 999.58,
                    "word": " these",
                    "probability": 0.6845703125
                },
                {
                    "start": 999.58,
                    "end": 999.92,
                    "word": " settings",
                    "probability": 0.81591796875
                },
                {
                    "start": 999.92,
                    "end": 1000.68,
                    "word": ".",
                    "probability": 0.9970703125
                }
            ]
        },
        {
            "id": 253,
            "seek": 90892,
            "start": 1003.39,
            "end": 1006.52,
            "text": " Okay, let's move on to the demonstration",
            "tokens": [
                50414,
                1033,
                11,
                718,
                311,
                1286,
                322,
                281,
                264,
                16520,
                50574
            ],
            "temperature": 0.0,
            "avg_logprob": -0.30180921680048894,
            "compression_ratio": 1.447674418604651,
            "no_speech_prob": 0.0008263587951660156,
            "words": [
                {
                    "start": 1003.39,
                    "end": 1003.76,
                    "word": " Okay",
                    "probability": 0.370361328125
                },
                {
                    "start": 1003.76,
                    "end": 1004.02,
                    "word": ",",
                    "probability": 0.7744140625
                },
                {
                    "start": 1004.02,
                    "end": 1004.72,
                    "word": " let's",
                    "probability": 0.911376953125
                },
                {
                    "start": 1004.72,
                    "end": 1005.04,
                    "word": " move",
                    "probability": 0.88134765625
                },
                {
                    "start": 1005.04,
                    "end": 1005.38,
                    "word": " on",
                    "probability": 0.8857421875
                },
                {
                    "start": 1005.38,
                    "end": 1005.52,
                    "word": " to",
                    "probability": 0.89990234375
                },
                {
                    "start": 1005.52,
                    "end": 1005.88,
                    "word": " the",
                    "probability": 0.8076171875
                },
                {
                    "start": 1005.88,
                    "end": 1006.52,
                    "word": " demonstration",
                    "probability": 0.82958984375
                }
            ]
        },
        {
            "id": 254,
            "seek": 90892,
            "start": 1006.52,
            "end": 1008.9,
            "text": " of Malcom scan with Cuckoo.",
            "tokens": [
                50574,
                295,
                5746,
                1112,
                11049,
                365,
                383,
                1134,
                1986,
                13,
                50658
            ],
            "temperature": 0.0,
            "avg_logprob": -0.30180921680048894,
            "compression_ratio": 1.447674418604651,
            "no_speech_prob": 0.0008263587951660156,
            "words": [
                {
                    "start": 1006.52,
                    "end": 1007.06,
                    "word": " of",
                    "probability": 0.88671875
                },
                {
                    "start": 1007.06,
                    "end": 1007.32,
                    "word": " Malcom",
                    "probability": 0.4307861328125
                },
                {
                    "start": 1007.32,
                    "end": 1007.6,
                    "word": " scan",
                    "probability": 0.3330078125
                },
                {
                    "start": 1007.6,
                    "end": 1007.88,
                    "word": " with",
                    "probability": 0.8095703125
                },
                {
                    "start": 1007.88,
                    "end": 1008.16,
                    "word": " Cuckoo",
                    "probability": 0.728515625
                },
                {
                    "start": 1008.16,
                    "end": 1008.9,
                    "word": ".",
                    "probability": 0.97216796875
                }
            ]
        },
        {
            "id": 255,
            "seek": 90892,
            "start": 1018.92,
            "end": 1022.48,
            "text": " Okay, here is the web GUI of Cuckoo.",
            "tokens": [
                50730,
                1033,
                11,
                510,
                307,
                264,
                3670,
                17917,
                40,
                295,
                383,
                1134,
                1986,
                13,
                50866
            ],
            "temperature": 0.0,
            "avg_logprob": -0.30180921680048894,
            "compression_ratio": 1.447674418604651,
            "no_speech_prob": 0.0008263587951660156,
            "words": [
                {
                    "start": 1018.92,
                    "end": 1019.44,
                    "word": " Okay",
                    "probability": 0.69921875
                },
                {
                    "start": 1019.44,
                    "end": 1019.5,
                    "word": ",",
                    "probability": 0.85107421875
                },
                {
                    "start": 1019.5,
                    "end": 1019.9,
                    "word": " here",
                    "probability": 0.806640625
                },
                {
                    "start": 1019.9,
                    "end": 1020.3,
                    "word": " is",
                    "probability": 0.8935546875
                },
                {
                    "start": 1020.3,
                    "end": 1020.44,
                    "word": " the",
                    "probability": 0.79052734375
                },
                {
                    "start": 1020.44,
                    "end": 1020.6,
                    "word": " web",
                    "probability": 0.37451171875
                },
                {
                    "start": 1020.6,
                    "end": 1021.08,
                    "word": " GUI",
                    "probability": 0.8720703125
                },
                {
                    "start": 1021.08,
                    "end": 1021.4,
                    "word": " of",
                    "probability": 0.9033203125
                },
                {
                    "start": 1021.4,
                    "end": 1021.74,
                    "word": " Cuckoo",
                    "probability": 0.9537760416666666
                },
                {
                    "start": 1021.74,
                    "end": 1022.48,
                    "word": ".",
                    "probability": 0.97900390625
                }
            ]
        },
        {
            "id": 256,
            "seek": 90892,
            "start": 1022.54,
            "end": 1028.02,
            "text": " All things you need to do is submit malware and do analysis.",
            "tokens": [
                50912,
                1057,
                721,
                291,
                643,
                281,
                360,
                307,
                10315,
                40747,
                293,
                360,
                5215,
                13,
                51154
            ],
            "temperature": 0.0,
            "avg_logprob": -0.30180921680048894,
            "compression_ratio": 1.447674418604651,
            "no_speech_prob": 0.0008263587951660156,
            "words": [
                {
                    "start": 1022.54,
                    "end": 1023.26,
                    "word": " All",
                    "probability": 0.890625
                },
                {
                    "start": 1023.26,
                    "end": 1023.98,
                    "word": " things",
                    "probability": 0.68017578125
                },
                {
                    "start": 1023.98,
                    "end": 1024.2,
                    "word": " you",
                    "probability": 0.896484375
                },
                {
                    "start": 1024.2,
                    "end": 1024.38,
                    "word": " need",
                    "probability": 0.810546875
                },
                {
                    "start": 1024.38,
                    "end": 1024.52,
                    "word": " to",
                    "probability": 0.90673828125
                },
                {
                    "start": 1024.52,
                    "end": 1024.88,
                    "word": " do",
                    "probability": 0.9140625
                },
                {
                    "start": 1024.88,
                    "end": 1025.3,
                    "word": " is",
                    "probability": 0.818359375
                },
                {
                    "start": 1025.3,
                    "end": 1025.74,
                    "word": " submit",
                    "probability": 0.72021484375
                },
                {
                    "start": 1025.74,
                    "end": 1026.12,
                    "word": " malware",
                    "probability": 0.828125
                },
                {
                    "start": 1026.12,
                    "end": 1026.58,
                    "word": " and",
                    "probability": 0.88134765625
                },
                {
                    "start": 1026.58,
                    "end": 1026.8,
                    "word": " do",
                    "probability": 0.9033203125
                },
                {
                    "start": 1026.8,
                    "end": 1027.28,
                    "word": " analysis",
                    "probability": 0.7353515625
                },
                {
                    "start": 1027.28,
                    "end": 1028.02,
                    "word": ".",
                    "probability": 0.9931640625
                }
            ]
        },
        {
            "id": 257,
            "seek": 90892,
            "start": 1035.73,
            "end": 1041.35,
            "text": " Each analysis takes two to three minutes per sample.",
            "tokens": [
                51222,
                6947,
                5215,
                2516,
                732,
                281,
                1045,
                2077,
                680,
                6889,
                13,
                51464
            ],
            "temperature": 0.0,
            "avg_logprob": -0.30180921680048894,
            "compression_ratio": 1.447674418604651,
            "no_speech_prob": 0.0008263587951660156,
            "words": [
                {
                    "start": 1035.73,
                    "end": 1036.47,
                    "word": " Each",
                    "probability": 0.8505859375
                },
                {
                    "start": 1036.47,
                    "end": 1036.87,
                    "word": " analysis",
                    "probability": 0.75146484375
                },
                {
                    "start": 1036.87,
                    "end": 1037.87,
                    "word": " takes",
                    "probability": 0.7626953125
                },
                {
                    "start": 1037.87,
                    "end": 1038.99,
                    "word": " two",
                    "probability": 0.77490234375
                },
                {
                    "start": 1038.99,
                    "end": 1039.23,
                    "word": " to",
                    "probability": 0.90478515625
                },
                {
                    "start": 1039.23,
                    "end": 1039.57,
                    "word": " three",
                    "probability": 0.8564453125
                },
                {
                    "start": 1039.57,
                    "end": 1039.93,
                    "word": " minutes",
                    "probability": 0.88037109375
                },
                {
                    "start": 1039.93,
                    "end": 1040.23,
                    "word": " per",
                    "probability": 0.88330078125
                },
                {
                    "start": 1040.23,
                    "end": 1040.61,
                    "word": " sample",
                    "probability": 0.7431640625
                },
                {
                    "start": 1040.61,
                    "end": 1041.35,
                    "word": ".",
                    "probability": 0.99462890625
                }
            ]
        },
        {
            "id": 258,
            "seek": 90892,
            "start": 1044.39,
            "end": 1047.15,
            "text": " Okay, let's check the report.",
            "tokens": [
                51542,
                1033,
                11,
                718,
                311,
                1520,
                264,
                2275,
                13,
                51646
            ],
            "temperature": 0.0,
            "avg_logprob": -0.30180921680048894,
            "compression_ratio": 1.447674418604651,
            "no_speech_prob": 0.0008263587951660156,
            "words": [
                {
                    "start": 1044.39,
                    "end": 1044.93,
                    "word": " Okay",
                    "probability": 0.8779296875
                },
                {
                    "start": 1044.93,
                    "end": 1045.17,
                    "word": ",",
                    "probability": 0.953125
                },
                {
                    "start": 1045.17,
                    "end": 1045.71,
                    "word": " let's",
                    "probability": 0.947998046875
                },
                {
                    "start": 1045.71,
                    "end": 1045.89,
                    "word": " check",
                    "probability": 0.82080078125
                },
                {
                    "start": 1045.89,
                    "end": 1046.07,
                    "word": " the",
                    "probability": 0.8134765625
                },
                {
                    "start": 1046.07,
                    "end": 1046.41,
                    "word": " report",
                    "probability": 0.84912109375
                },
                {
                    "start": 1046.41,
                    "end": 1047.15,
                    "word": ".",
                    "probability": 0.9951171875
                }
            ]
        },
        {
            "id": 259,
            "seek": 93218,
            "start": 1050.96,
            "end": 1054.94,
            "text": " You could find the report in VM memory dump menu.",
            "tokens": [
                50414,
                509,
                727,
                915,
                264,
                2275,
                294,
                18038,
                4675,
                11430,
                6510,
                13,
                50594
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3808035761117935,
            "compression_ratio": 1.3895348837209303,
            "no_speech_prob": 0.0011463165283203125,
            "words": [
                {
                    "start": 1050.96,
                    "end": 1051.31,
                    "word": " You",
                    "probability": 0.63623046875
                },
                {
                    "start": 1051.31,
                    "end": 1051.45,
                    "word": " could",
                    "probability": 0.552734375
                },
                {
                    "start": 1051.45,
                    "end": 1051.83,
                    "word": " find",
                    "probability": 0.81982421875
                },
                {
                    "start": 1051.83,
                    "end": 1051.97,
                    "word": " the",
                    "probability": 0.79345703125
                },
                {
                    "start": 1051.97,
                    "end": 1052.37,
                    "word": " report",
                    "probability": 0.822265625
                },
                {
                    "start": 1052.37,
                    "end": 1052.89,
                    "word": " in",
                    "probability": 0.7421875
                },
                {
                    "start": 1052.89,
                    "end": 1053.23,
                    "word": " VM",
                    "probability": 0.81982421875
                },
                {
                    "start": 1053.23,
                    "end": 1053.59,
                    "word": " memory",
                    "probability": 0.59228515625
                },
                {
                    "start": 1053.59,
                    "end": 1054.13,
                    "word": " dump",
                    "probability": 0.81494140625
                },
                {
                    "start": 1054.13,
                    "end": 1054.59,
                    "word": " menu",
                    "probability": 0.85791015625
                },
                {
                    "start": 1054.59,
                    "end": 1054.94,
                    "word": ".",
                    "probability": 0.365966796875
                }
            ]
        },
        {
            "id": 260,
            "seek": 93218,
            "start": 1057.71,
            "end": 1062.17,
            "text": " And click Malcom scan tab, and the result will display.",
            "tokens": [
                50672,
                400,
                2052,
                5746,
                1112,
                11049,
                4421,
                11,
                293,
                264,
                1874,
                486,
                4674,
                13,
                50862
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3808035761117935,
            "compression_ratio": 1.3895348837209303,
            "no_speech_prob": 0.0011463165283203125,
            "words": [
                {
                    "start": 1057.71,
                    "end": 1058.17,
                    "word": " And",
                    "probability": 0.833984375
                },
                {
                    "start": 1058.17,
                    "end": 1058.49,
                    "word": " click",
                    "probability": 0.8173828125
                },
                {
                    "start": 1058.49,
                    "end": 1058.81,
                    "word": " Malcom",
                    "probability": 0.3243408203125
                },
                {
                    "start": 1058.81,
                    "end": 1059.07,
                    "word": " scan",
                    "probability": 0.375244140625
                },
                {
                    "start": 1059.07,
                    "end": 1059.61,
                    "word": " tab",
                    "probability": 0.89306640625
                },
                {
                    "start": 1059.61,
                    "end": 1060.03,
                    "word": ",",
                    "probability": 0.377685546875
                },
                {
                    "start": 1060.03,
                    "end": 1060.13,
                    "word": " and",
                    "probability": 0.68212890625
                },
                {
                    "start": 1060.13,
                    "end": 1060.25,
                    "word": " the",
                    "probability": 0.76171875
                },
                {
                    "start": 1060.25,
                    "end": 1060.73,
                    "word": " result",
                    "probability": 0.78125
                },
                {
                    "start": 1060.73,
                    "end": 1061.05,
                    "word": " will",
                    "probability": 0.80712890625
                },
                {
                    "start": 1061.05,
                    "end": 1061.47,
                    "word": " display",
                    "probability": 0.89794921875
                },
                {
                    "start": 1061.47,
                    "end": 1062.17,
                    "word": ".",
                    "probability": 0.9921875
                }
            ]
        },
        {
            "id": 261,
            "seek": 93218,
            "start": 1063.01,
            "end": 1065.87,
            "text": " Here is showing some sample reports.",
            "tokens": [
                50946,
                1692,
                307,
                4099,
                512,
                6889,
                7122,
                13,
                51068
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3808035761117935,
            "compression_ratio": 1.3895348837209303,
            "no_speech_prob": 0.0011463165283203125,
            "words": [
                {
                    "start": 1063.01,
                    "end": 1063.71,
                    "word": " Here",
                    "probability": 0.83349609375
                },
                {
                    "start": 1063.71,
                    "end": 1063.85,
                    "word": " is",
                    "probability": 0.4248046875
                },
                {
                    "start": 1063.85,
                    "end": 1064.13,
                    "word": " showing",
                    "probability": 0.7783203125
                },
                {
                    "start": 1064.13,
                    "end": 1064.37,
                    "word": " some",
                    "probability": 0.8115234375
                },
                {
                    "start": 1064.37,
                    "end": 1064.69,
                    "word": " sample",
                    "probability": 0.7958984375
                },
                {
                    "start": 1064.69,
                    "end": 1065.23,
                    "word": " reports",
                    "probability": 0.78466796875
                },
                {
                    "start": 1065.23,
                    "end": 1065.87,
                    "word": ".",
                    "probability": 0.9609375
                }
            ]
        },
        {
            "id": 262,
            "seek": 93218,
            "start": 1065.87,
            "end": 1068.87,
            "text": " This is Himari, the variant of Red Leaves.",
            "tokens": [
                51068,
                639,
                307,
                5920,
                3504,
                11,
                264,
                17501,
                295,
                4477,
                1456,
                5423,
                13,
                51202
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3808035761117935,
            "compression_ratio": 1.3895348837209303,
            "no_speech_prob": 0.0011463165283203125,
            "words": [
                {
                    "start": 1065.87,
                    "end": 1066.03,
                    "word": " This",
                    "probability": 0.81396484375
                },
                {
                    "start": 1066.03,
                    "end": 1066.17,
                    "word": " is",
                    "probability": 0.91064453125
                },
                {
                    "start": 1066.17,
                    "end": 1066.55,
                    "word": " Himari",
                    "probability": 0.8408203125
                },
                {
                    "start": 1066.55,
                    "end": 1066.97,
                    "word": ",",
                    "probability": 0.86767578125
                },
                {
                    "start": 1066.97,
                    "end": 1067.17,
                    "word": " the",
                    "probability": 0.81201171875
                },
                {
                    "start": 1067.17,
                    "end": 1067.49,
                    "word": " variant",
                    "probability": 0.62548828125
                },
                {
                    "start": 1067.49,
                    "end": 1067.69,
                    "word": " of",
                    "probability": 0.904296875
                },
                {
                    "start": 1067.69,
                    "end": 1067.87,
                    "word": " Red",
                    "probability": 0.386962890625
                },
                {
                    "start": 1067.87,
                    "end": 1068.17,
                    "word": " Leaves",
                    "probability": 0.6689453125
                },
                {
                    "start": 1068.17,
                    "end": 1068.87,
                    "word": ".",
                    "probability": 0.74951171875
                }
            ]
        },
        {
            "id": 263,
            "seek": 93218,
            "start": 1073.94,
            "end": 1079.02,
            "text": " And this is ts-cookie, the malware used by Blacktech.",
            "tokens": [
                51278,
                400,
                341,
                307,
                35492,
                12,
                66,
                39611,
                11,
                264,
                40747,
                1143,
                538,
                4076,
                25970,
                13,
                51504
            ],
            "temperature": 0.0,
            "avg_logprob": -0.3808035761117935,
            "compression_ratio": 1.3895348837209303,
            "no_speech_prob": 0.0011463165283203125,
            "words": [
                {
                    "start": 1073.94,
                    "end": 1074.64,
                    "word": " And",
                    "probability": 0.88232421875
                },
                {
                    "start": 1074.64,
                    "end": 1074.88,
                    "word": " this",
                    "probability": 0.88037109375
                },
                {
                    "start": 1074.88,
                    "end": 1075.08,
                    "word": " is",
                    "probability": 0.8994140625
                },
                {
                    "start": 1075.08,
                    "end": 1075.48,
                    "word": " ts",
                    "probability": 0.142333984375
                },
                {
                    "start": 1075.48,
                    "end": 1075.82,
                    "word": "-cookie",
                    "probability": 0.6476236979166666
                },
                {
                    "start": 1075.82,
                    "end": 1076.46,
                    "word": ",",
                    "probability": 0.890625
                },
                {
                    "start": 1076.46,
                    "end": 1076.74,
                    "word": " the",
                    "probability": 0.80712890625
                },
                {
                    "start": 1076.74,
                    "end": 1077.02,
                    "word": " malware",
                    "probability": 0.60791015625
                },
                {
                    "start": 1077.02,
                    "end": 1077.44,
                    "word": " used",
                    "probability": 0.8046875
                },
                {
                    "start": 1077.44,
                    "end": 1077.78,
                    "word": " by",
                    "probability": 0.89794921875
                },
                {
                    "start": 1077.78,
                    "end": 1078.32,
                    "word": " Blacktech",
                    "probability": 0.496337890625
                },
                {
                    "start": 1078.32,
                    "end": 1079.02,
                    "word": ".",
                    "probability": 0.78466796875
                }
            ]
        },
        {
            "id": 264,
            "seek": 96206,
            "start": 1085.04,
            "end": 1089.22,
            "text": " And Ersniff, as known as DreamBot,",
            "tokens": [
                50412,
                400,
                3300,
                18860,
                3661,
                11,
                382,
                2570,
                382,
                12105,
                33,
                310,
                11,
                50562
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2745339977636672,
            "compression_ratio": 1.7163461538461537,
            "no_speech_prob": 0.0018148422241210938,
            "words": [
                {
                    "start": 1085.04,
                    "end": 1085.6,
                    "word": " And",
                    "probability": 0.3359375
                },
                {
                    "start": 1085.6,
                    "end": 1086.16,
                    "word": " Ersniff",
                    "probability": 0.5015462239583334
                },
                {
                    "start": 1086.16,
                    "end": 1086.86,
                    "word": ",",
                    "probability": 0.64599609375
                },
                {
                    "start": 1086.86,
                    "end": 1087.24,
                    "word": " as",
                    "probability": 0.55078125
                },
                {
                    "start": 1087.24,
                    "end": 1087.46,
                    "word": " known",
                    "probability": 0.6591796875
                },
                {
                    "start": 1087.46,
                    "end": 1087.66,
                    "word": " as",
                    "probability": 0.892578125
                },
                {
                    "start": 1087.66,
                    "end": 1088.14,
                    "word": " DreamBot",
                    "probability": 0.7659505208333334
                },
                {
                    "start": 1088.14,
                    "end": 1089.22,
                    "word": ",",
                    "probability": 0.640625
                }
            ]
        },
        {
            "id": 265,
            "seek": 96206,
            "start": 1089.42,
            "end": 1092.48,
            "text": " a very numerous banking Trojan.",
            "tokens": [
                50612,
                257,
                588,
                12546,
                18261,
                19406,
                14763,
                13,
                50774
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2745339977636672,
            "compression_ratio": 1.7163461538461537,
            "no_speech_prob": 0.0018148422241210938,
            "words": [
                {
                    "start": 1089.42,
                    "end": 1089.78,
                    "word": " a very",
                    "probability": 0.71728515625
                },
                {
                    "start": 1089.78,
                    "end": 1090.74,
                    "word": " numerous",
                    "probability": 0.76953125
                },
                {
                    "start": 1090.74,
                    "end": 1091.74,
                    "word": " banking",
                    "probability": 0.54443359375
                },
                {
                    "start": 1091.74,
                    "end": 1092.2,
                    "word": " Trojan",
                    "probability": 0.752685546875
                },
                {
                    "start": 1092.2,
                    "end": 1092.48,
                    "word": ".",
                    "probability": 0.96875
                }
            ]
        },
        {
            "id": 266,
            "seek": 96206,
            "start": 1095.58,
            "end": 1098.36,
            "text": " And yes, that's all for the demonstration.",
            "tokens": [
                50854,
                400,
                2086,
                11,
                300,
                311,
                439,
                337,
                264,
                16520,
                13,
                50978
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2745339977636672,
            "compression_ratio": 1.7163461538461537,
            "no_speech_prob": 0.0018148422241210938,
            "words": [
                {
                    "start": 1095.58,
                    "end": 1095.94,
                    "word": " And",
                    "probability": 0.8076171875
                },
                {
                    "start": 1095.94,
                    "end": 1096.14,
                    "word": " yes",
                    "probability": 0.67578125
                },
                {
                    "start": 1096.14,
                    "end": 1096.2,
                    "word": ",",
                    "probability": 0.88916015625
                },
                {
                    "start": 1096.2,
                    "end": 1096.52,
                    "word": " that's",
                    "probability": 0.9306640625
                },
                {
                    "start": 1096.52,
                    "end": 1096.8,
                    "word": " all",
                    "probability": 0.9033203125
                },
                {
                    "start": 1096.8,
                    "end": 1097.12,
                    "word": " for",
                    "probability": 0.89501953125
                },
                {
                    "start": 1097.12,
                    "end": 1097.32,
                    "word": " the",
                    "probability": 0.80712890625
                },
                {
                    "start": 1097.32,
                    "end": 1097.8,
                    "word": " demonstration",
                    "probability": 0.84033203125
                },
                {
                    "start": 1097.8,
                    "end": 1098.36,
                    "word": ".",
                    "probability": 0.9921875
                }
            ]
        },
        {
            "id": 267,
            "seek": 96206,
            "start": 1102.36,
            "end": 1104.18,
            "text": " If you want to know more detail",
            "tokens": [
                51056,
                759,
                291,
                528,
                281,
                458,
                544,
                2607,
                51130
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2745339977636672,
            "compression_ratio": 1.7163461538461537,
            "no_speech_prob": 0.0018148422241210938,
            "words": [
                {
                    "start": 1102.36,
                    "end": 1102.92,
                    "word": " If",
                    "probability": 0.89404296875
                },
                {
                    "start": 1102.92,
                    "end": 1103.06,
                    "word": " you",
                    "probability": 0.89306640625
                },
                {
                    "start": 1103.06,
                    "end": 1103.28,
                    "word": " want",
                    "probability": 0.8291015625
                },
                {
                    "start": 1103.28,
                    "end": 1103.4,
                    "word": " to",
                    "probability": 0.90185546875
                },
                {
                    "start": 1103.4,
                    "end": 1103.56,
                    "word": " know",
                    "probability": 0.822265625
                },
                {
                    "start": 1103.56,
                    "end": 1103.78,
                    "word": " more",
                    "probability": 0.88330078125
                },
                {
                    "start": 1103.78,
                    "end": 1104.18,
                    "word": " detail",
                    "probability": 0.728515625
                }
            ]
        },
        {
            "id": 268,
            "seek": 96206,
            "start": 1104.18,
            "end": 1106.28,
            "text": " about the Malcom scan with Cuckoo,",
            "tokens": [
                51130,
                466,
                264,
                5746,
                1112,
                11049,
                365,
                383,
                1134,
                1986,
                11,
                51236
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2745339977636672,
            "compression_ratio": 1.7163461538461537,
            "no_speech_prob": 0.0018148422241210938,
            "words": [
                {
                    "start": 1104.18,
                    "end": 1104.52,
                    "word": " about",
                    "probability": 0.81201171875
                },
                {
                    "start": 1104.52,
                    "end": 1104.68,
                    "word": " the",
                    "probability": 0.736328125
                },
                {
                    "start": 1104.68,
                    "end": 1104.9,
                    "word": " Malcom",
                    "probability": 0.3162841796875
                },
                {
                    "start": 1104.9,
                    "end": 1105.2,
                    "word": " scan",
                    "probability": 0.509765625
                },
                {
                    "start": 1105.2,
                    "end": 1105.46,
                    "word": " with",
                    "probability": 0.79541015625
                },
                {
                    "start": 1105.46,
                    "end": 1105.8,
                    "word": " Cuckoo",
                    "probability": 0.7431640625
                },
                {
                    "start": 1105.8,
                    "end": 1106.28,
                    "word": ",",
                    "probability": 0.91845703125
                }
            ]
        },
        {
            "id": 269,
            "seek": 96206,
            "start": 1106.28,
            "end": 1109.48,
            "text": " you can check it out our wiki on GitHub.",
            "tokens": [
                51236,
                291,
                393,
                1520,
                309,
                484,
                527,
                261,
                9850,
                322,
                23331,
                13,
                51396
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2745339977636672,
            "compression_ratio": 1.7163461538461537,
            "no_speech_prob": 0.0018148422241210938,
            "words": [
                {
                    "start": 1106.28,
                    "end": 1106.48,
                    "word": " you",
                    "probability": 0.88232421875
                },
                {
                    "start": 1106.48,
                    "end": 1106.62,
                    "word": " can",
                    "probability": 0.89501953125
                },
                {
                    "start": 1106.62,
                    "end": 1106.8,
                    "word": " check",
                    "probability": 0.85009765625
                },
                {
                    "start": 1106.8,
                    "end": 1106.94,
                    "word": " it",
                    "probability": 0.869140625
                },
                {
                    "start": 1106.94,
                    "end": 1107.16,
                    "word": " out",
                    "probability": 0.8173828125
                },
                {
                    "start": 1107.16,
                    "end": 1107.82,
                    "word": " our",
                    "probability": 0.1697998046875
                },
                {
                    "start": 1107.82,
                    "end": 1108.3,
                    "word": " wiki",
                    "probability": 0.8603515625
                },
                {
                    "start": 1108.3,
                    "end": 1108.64,
                    "word": " on",
                    "probability": 0.89990234375
                },
                {
                    "start": 1108.64,
                    "end": 1108.92,
                    "word": " GitHub",
                    "probability": 0.80322265625
                },
                {
                    "start": 1108.92,
                    "end": 1109.48,
                    "word": ".",
                    "probability": 0.96484375
                }
            ]
        },
        {
            "id": 270,
            "seek": 96206,
            "start": 1109.58,
            "end": 1112.14,
            "text": " In this wiki, you can learn how to install",
            "tokens": [
                51396,
                682,
                341,
                261,
                9850,
                11,
                291,
                393,
                1466,
                577,
                281,
                3625,
                51544
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2745339977636672,
            "compression_ratio": 1.7163461538461537,
            "no_speech_prob": 0.0018148422241210938,
            "words": [
                {
                    "start": 1109.58,
                    "end": 1109.74,
                    "word": " In",
                    "probability": 0.87353515625
                },
                {
                    "start": 1109.74,
                    "end": 1109.96,
                    "word": " this",
                    "probability": 0.88134765625
                },
                {
                    "start": 1109.96,
                    "end": 1110.24,
                    "word": " wiki",
                    "probability": 0.921630859375
                },
                {
                    "start": 1110.24,
                    "end": 1110.58,
                    "word": ",",
                    "probability": 0.8388671875
                },
                {
                    "start": 1110.58,
                    "end": 1110.76,
                    "word": " you",
                    "probability": 0.8916015625
                },
                {
                    "start": 1110.76,
                    "end": 1110.88,
                    "word": " can",
                    "probability": 0.884765625
                },
                {
                    "start": 1110.88,
                    "end": 1111.12,
                    "word": " learn",
                    "probability": 0.91064453125
                },
                {
                    "start": 1111.12,
                    "end": 1111.4,
                    "word": " how",
                    "probability": 0.8984375
                },
                {
                    "start": 1111.4,
                    "end": 1111.58,
                    "word": " to",
                    "probability": 0.90673828125
                },
                {
                    "start": 1111.58,
                    "end": 1112.14,
                    "word": " install",
                    "probability": 0.857421875
                }
            ]
        },
        {
            "id": 271,
            "seek": 96206,
            "start": 1112.14,
            "end": 1114.86,
            "text": " and how to use Malcom scan with Cuckoo.",
            "tokens": [
                51544,
                293,
                577,
                281,
                764,
                5746,
                1112,
                11049,
                365,
                383,
                1134,
                1986,
                13,
                51672
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2745339977636672,
            "compression_ratio": 1.7163461538461537,
            "no_speech_prob": 0.0018148422241210938,
            "words": [
                {
                    "start": 1112.14,
                    "end": 1112.82,
                    "word": " and",
                    "probability": 0.80810546875
                },
                {
                    "start": 1112.82,
                    "end": 1113.02,
                    "word": " how",
                    "probability": 0.8896484375
                },
                {
                    "start": 1113.02,
                    "end": 1113.16,
                    "word": " to",
                    "probability": 0.90380859375
                },
                {
                    "start": 1113.16,
                    "end": 1113.3,
                    "word": " use",
                    "probability": 0.83544921875
                },
                {
                    "start": 1113.3,
                    "end": 1113.56,
                    "word": " Malcom",
                    "probability": 0.880615234375
                },
                {
                    "start": 1113.56,
                    "end": 1113.82,
                    "word": " scan",
                    "probability": 0.69873046875
                },
                {
                    "start": 1113.82,
                    "end": 1114.04,
                    "word": " with",
                    "probability": 0.81103515625
                },
                {
                    "start": 1114.04,
                    "end": 1114.34,
                    "word": " Cuckoo",
                    "probability": 0.9554036458333334
                },
                {
                    "start": 1114.34,
                    "end": 1114.86,
                    "word": ".",
                    "probability": 0.755859375
                }
            ]
        },
        {
            "id": 272,
            "seek": 96206,
            "start": 1114.86,
            "end": 1118.58,
            "text": " And if you want to know more detail about anti-analysis,",
            "tokens": [
                51672,
                400,
                498,
                291,
                528,
                281,
                458,
                544,
                2607,
                466,
                6061,
                12,
                29702,
                4642,
                11,
                51848
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2745339977636672,
            "compression_ratio": 1.7163461538461537,
            "no_speech_prob": 0.0018148422241210938,
            "words": [
                {
                    "start": 1114.86,
                    "end": 1115.38,
                    "word": " And",
                    "probability": 0.89111328125
                },
                {
                    "start": 1115.38,
                    "end": 1115.54,
                    "word": " if",
                    "probability": 0.8974609375
                },
                {
                    "start": 1115.54,
                    "end": 1115.66,
                    "word": " you",
                    "probability": 0.8935546875
                },
                {
                    "start": 1115.66,
                    "end": 1115.82,
                    "word": " want",
                    "probability": 0.8173828125
                },
                {
                    "start": 1115.82,
                    "end": 1115.92,
                    "word": " to",
                    "probability": 0.90283203125
                },
                {
                    "start": 1115.92,
                    "end": 1116.04,
                    "word": " know",
                    "probability": 0.82763671875
                },
                {
                    "start": 1116.04,
                    "end": 1116.2,
                    "word": " more",
                    "probability": 0.8828125
                },
                {
                    "start": 1116.2,
                    "end": 1116.46,
                    "word": " detail",
                    "probability": 0.806640625
                },
                {
                    "start": 1116.46,
                    "end": 1116.74,
                    "word": " about",
                    "probability": 0.83203125
                },
                {
                    "start": 1116.74,
                    "end": 1117.16,
                    "word": " anti",
                    "probability": 0.466796875
                },
                {
                    "start": 1117.16,
                    "end": 1118.06,
                    "word": "-analysis",
                    "probability": 0.6513493855794271
                },
                {
                    "start": 1118.06,
                    "end": 1118.58,
                    "word": ",",
                    "probability": 0.978515625
                }
            ]
        },
        {
            "id": 273,
            "seek": 99126,
            "start": 1118.58,
            "end": 1119.7,
            "text": " we have written some articles",
            "tokens": [
                50398,
                321,
                362,
                3720,
                512,
                11290,
                50440
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2970412202337955,
            "compression_ratio": 1.5327510917030567,
            "no_speech_prob": 0.00031685829162597656,
            "words": [
                {
                    "start": 1118.58,
                    "end": 1118.74,
                    "word": " we",
                    "probability": 0.076904296875
                },
                {
                    "start": 1118.74,
                    "end": 1118.9,
                    "word": " have",
                    "probability": 0.80078125
                },
                {
                    "start": 1118.9,
                    "end": 1119.1,
                    "word": " written",
                    "probability": 0.72314453125
                },
                {
                    "start": 1119.1,
                    "end": 1119.32,
                    "word": " some",
                    "probability": 0.78125
                },
                {
                    "start": 1119.32,
                    "end": 1119.7,
                    "word": " articles",
                    "probability": 0.84130859375
                }
            ]
        },
        {
            "id": 274,
            "seek": 99126,
            "start": 1119.7,
            "end": 1123.18,
            "text": " and some sample configuration on this wiki.",
            "tokens": [
                50440,
                293,
                512,
                6889,
                11694,
                322,
                341,
                261,
                9850,
                13,
                50574
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2970412202337955,
            "compression_ratio": 1.5327510917030567,
            "no_speech_prob": 0.00031685829162597656,
            "words": [
                {
                    "start": 1119.7,
                    "end": 1120.02,
                    "word": " and",
                    "probability": 0.84912109375
                },
                {
                    "start": 1120.02,
                    "end": 1120.24,
                    "word": " some",
                    "probability": 0.71435546875
                },
                {
                    "start": 1120.24,
                    "end": 1121.0,
                    "word": " sample",
                    "probability": 0.5625
                },
                {
                    "start": 1121.0,
                    "end": 1121.62,
                    "word": " configuration",
                    "probability": 0.62158203125
                },
                {
                    "start": 1121.62,
                    "end": 1122.0,
                    "word": " on",
                    "probability": 0.890625
                },
                {
                    "start": 1122.0,
                    "end": 1122.2,
                    "word": " this",
                    "probability": 0.87841796875
                },
                {
                    "start": 1122.2,
                    "end": 1122.52,
                    "word": " wiki",
                    "probability": 0.864013671875
                },
                {
                    "start": 1122.52,
                    "end": 1123.18,
                    "word": ".",
                    "probability": 0.87451171875
                }
            ]
        },
        {
            "id": 275,
            "seek": 99126,
            "start": 1126.48,
            "end": 1129.38,
            "text": " And now, we are developing Malcom scan",
            "tokens": [
                50650,
                400,
                586,
                11,
                321,
                366,
                6416,
                5746,
                1112,
                11049,
                50806
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2970412202337955,
            "compression_ratio": 1.5327510917030567,
            "no_speech_prob": 0.00031685829162597656,
            "words": [
                {
                    "start": 1126.48,
                    "end": 1126.86,
                    "word": " And",
                    "probability": 0.78564453125
                },
                {
                    "start": 1126.86,
                    "end": 1127.22,
                    "word": " now",
                    "probability": 0.88427734375
                },
                {
                    "start": 1127.22,
                    "end": 1127.46,
                    "word": ",",
                    "probability": 0.3984375
                },
                {
                    "start": 1127.46,
                    "end": 1127.58,
                    "word": " we",
                    "probability": 0.9111328125
                },
                {
                    "start": 1127.58,
                    "end": 1127.7,
                    "word": " are",
                    "probability": 0.86376953125
                },
                {
                    "start": 1127.7,
                    "end": 1128.3,
                    "word": " developing",
                    "probability": 0.646484375
                },
                {
                    "start": 1128.3,
                    "end": 1129.14,
                    "word": " Malcom",
                    "probability": 0.113739013671875
                },
                {
                    "start": 1129.14,
                    "end": 1129.38,
                    "word": " scan",
                    "probability": 0.0019121170043945312
                }
            ]
        },
        {
            "id": 276,
            "seek": 99126,
            "start": 1129.38,
            "end": 1133.28,
            "text": " which supports Bolt ET3.",
            "tokens": [
                50806,
                597,
                9346,
                37884,
                36953,
                18,
                13,
                50988
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2970412202337955,
            "compression_ratio": 1.5327510917030567,
            "no_speech_prob": 0.00031685829162597656,
            "words": [
                {
                    "start": 1129.38,
                    "end": 1130.1,
                    "word": " which",
                    "probability": 0.40576171875
                },
                {
                    "start": 1130.1,
                    "end": 1131.32,
                    "word": " supports",
                    "probability": 0.7900390625
                },
                {
                    "start": 1131.32,
                    "end": 1132.12,
                    "word": " Bolt",
                    "probability": 0.320068359375
                },
                {
                    "start": 1132.12,
                    "end": 1132.64,
                    "word": " ET3",
                    "probability": 0.491943359375
                },
                {
                    "start": 1132.64,
                    "end": 1133.28,
                    "word": ".",
                    "probability": 0.916015625
                }
            ]
        },
        {
            "id": 277,
            "seek": 99126,
            "start": 1133.28,
            "end": 1137.36,
            "text": " We have released the beta version on our GitHub repository.",
            "tokens": [
                50988,
                492,
                362,
                4736,
                264,
                9861,
                3037,
                322,
                527,
                23331,
                25841,
                13,
                51202
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2970412202337955,
            "compression_ratio": 1.5327510917030567,
            "no_speech_prob": 0.00031685829162597656,
            "words": [
                {
                    "start": 1133.28,
                    "end": 1133.62,
                    "word": " We",
                    "probability": 0.89453125
                },
                {
                    "start": 1133.62,
                    "end": 1133.82,
                    "word": " have",
                    "probability": 0.865234375
                },
                {
                    "start": 1133.82,
                    "end": 1134.36,
                    "word": " released",
                    "probability": 0.865234375
                },
                {
                    "start": 1134.36,
                    "end": 1134.6,
                    "word": " the",
                    "probability": 0.69921875
                },
                {
                    "start": 1134.6,
                    "end": 1134.8,
                    "word": " beta",
                    "probability": 0.81201171875
                },
                {
                    "start": 1134.8,
                    "end": 1135.2,
                    "word": " version",
                    "probability": 0.71240234375
                },
                {
                    "start": 1135.2,
                    "end": 1135.66,
                    "word": " on",
                    "probability": 0.8974609375
                },
                {
                    "start": 1135.66,
                    "end": 1135.9,
                    "word": " our",
                    "probability": 0.765625
                },
                {
                    "start": 1135.9,
                    "end": 1136.12,
                    "word": " GitHub",
                    "probability": 0.8115234375
                },
                {
                    "start": 1136.12,
                    "end": 1136.7,
                    "word": " repository",
                    "probability": 0.841796875
                },
                {
                    "start": 1136.7,
                    "end": 1137.36,
                    "word": ".",
                    "probability": 0.95166015625
                }
            ]
        },
        {
            "id": 278,
            "seek": 99126,
            "start": 1137.76,
            "end": 1142.42,
            "text": " You could find this code in the Bolt ET3 branch.",
            "tokens": [
                51202,
                509,
                727,
                915,
                341,
                3089,
                294,
                264,
                37884,
                36953,
                18,
                9819,
                13,
                51452
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2970412202337955,
            "compression_ratio": 1.5327510917030567,
            "no_speech_prob": 0.00031685829162597656,
            "words": [
                {
                    "start": 1137.76,
                    "end": 1137.86,
                    "word": " You",
                    "probability": 0.890625
                },
                {
                    "start": 1137.86,
                    "end": 1137.98,
                    "word": " could",
                    "probability": 0.440185546875
                },
                {
                    "start": 1137.98,
                    "end": 1138.28,
                    "word": " find",
                    "probability": 0.798828125
                },
                {
                    "start": 1138.28,
                    "end": 1138.54,
                    "word": " this",
                    "probability": 0.66259765625
                },
                {
                    "start": 1138.54,
                    "end": 1139.08,
                    "word": " code",
                    "probability": 0.78125
                },
                {
                    "start": 1139.08,
                    "end": 1139.6,
                    "word": " in",
                    "probability": 0.87939453125
                },
                {
                    "start": 1139.6,
                    "end": 1140.02,
                    "word": " the",
                    "probability": 0.75390625
                },
                {
                    "start": 1140.02,
                    "end": 1140.4,
                    "word": " Bolt",
                    "probability": 0.8037109375
                },
                {
                    "start": 1140.4,
                    "end": 1141.08,
                    "word": " ET3",
                    "probability": 0.805419921875
                },
                {
                    "start": 1141.08,
                    "end": 1141.76,
                    "word": " branch",
                    "probability": 0.72314453125
                },
                {
                    "start": 1141.76,
                    "end": 1142.42,
                    "word": ".",
                    "probability": 0.9833984375
                }
            ]
        },
        {
            "id": 279,
            "seek": 99126,
            "start": 1142.74,
            "end": 1146.32,
            "text": " We will finish the conversion as soon as possible.",
            "tokens": [
                51456,
                492,
                486,
                2413,
                264,
                14298,
                382,
                2321,
                382,
                1944,
                13,
                51614
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2970412202337955,
            "compression_ratio": 1.5327510917030567,
            "no_speech_prob": 0.00031685829162597656,
            "words": [
                {
                    "start": 1142.74,
                    "end": 1142.96,
                    "word": " We",
                    "probability": 0.91064453125
                },
                {
                    "start": 1142.96,
                    "end": 1143.12,
                    "word": " will",
                    "probability": 0.8154296875
                },
                {
                    "start": 1143.12,
                    "end": 1143.42,
                    "word": " finish",
                    "probability": 0.92333984375
                },
                {
                    "start": 1143.42,
                    "end": 1143.62,
                    "word": " the",
                    "probability": 0.8125
                },
                {
                    "start": 1143.62,
                    "end": 1144.08,
                    "word": " conversion",
                    "probability": 0.720703125
                },
                {
                    "start": 1144.08,
                    "end": 1144.72,
                    "word": " as",
                    "probability": 0.8974609375
                },
                {
                    "start": 1144.72,
                    "end": 1144.98,
                    "word": " soon",
                    "probability": 0.8701171875
                },
                {
                    "start": 1144.98,
                    "end": 1145.18,
                    "word": " as",
                    "probability": 0.90380859375
                },
                {
                    "start": 1145.18,
                    "end": 1145.66,
                    "word": " possible",
                    "probability": 0.8359375
                },
                {
                    "start": 1145.66,
                    "end": 1146.32,
                    "word": ".",
                    "probability": 0.9599609375
                }
            ]
        },
        {
            "id": 280,
            "seek": 99126,
            "start": 1146.94,
            "end": 1150.2,
            "text": " In Bolt ET3, you don't need to set the memory profile",
            "tokens": [
                51666,
                682,
                37884,
                36953,
                18,
                11,
                291,
                500,
                380,
                643,
                281,
                992,
                264,
                4675,
                7964,
                51832
            ],
            "temperature": 0.0,
            "avg_logprob": -0.2970412202337955,
            "compression_ratio": 1.5327510917030567,
            "no_speech_prob": 0.00031685829162597656,
            "words": [
                {
                    "start": 1146.94,
                    "end": 1147.18,
                    "word": " In",
                    "probability": 0.66015625
                },
                {
                    "start": 1147.18,
                    "end": 1147.38,
                    "word": " Bolt",
                    "probability": 0.84912109375
                },
                {
                    "start": 1147.38,
                    "end": 1147.86,
                    "word": " ET3",
                    "probability": 0.91748046875
                },
                {
                    "start": 1147.86,
                    "end": 1148.2,
                    "word": ",",
                    "probability": 0.92138671875
                },
                {
                    "start": 1148.2,
                    "end": 1148.54,
                    "word": " you",
                    "probability": 0.89453125
                },
                {
                    "start": 1148.54,
                    "end": 1148.7,
                    "word": " don't",
                    "probability": 0.945068359375
                },
                {
                    "start": 1148.7,
                    "end": 1148.86,
                    "word": " need",
                    "probability": 0.814453125
                },
                {
                    "start": 1148.86,
                    "end": 1149.0,
                    "word": " to",
                    "probability": 0.9033203125
                },
                {
                    "start": 1149.0,
                    "end": 1149.26,
                    "word": " set",
                    "probability": 0.888671875
                },
                {
                    "start": 1149.26,
                    "end": 1149.46,
                    "word": " the",
                    "probability": 0.7421875
                },
                {
                    "start": 1149.46,
                    "end": 1149.72,
                    "word": " memory",
                    "probability": 0.8046875
                },
                {
                    "start": 1149.72,
                    "end": 1150.2,
                    "word": " profile",
                    "probability": 0.857421875
                }
            ]
        },
        {
            "id": 281,
            "seek": 100893,
            "start": 1150.2,
            "end": 1153.66,
            "text": " and also has a better support to Windows 10.",
            "tokens": [
                50372,
                293,
                611,
                575,
                257,
                1101,
                1406,
                281,
                8591,
                1266,
                13,
                50540
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23742055438332638,
            "compression_ratio": 1.3055555555555556,
            "no_speech_prob": 0.001068115234375,
            "words": [
                {
                    "start": 1150.2,
                    "end": 1150.56,
                    "word": " and",
                    "probability": 0.8291015625
                },
                {
                    "start": 1150.56,
                    "end": 1150.82,
                    "word": " also",
                    "probability": 0.76123046875
                },
                {
                    "start": 1150.82,
                    "end": 1151.02,
                    "word": " has",
                    "probability": 0.85107421875
                },
                {
                    "start": 1151.14,
                    "end": 1151.32,
                    "word": " a better",
                    "probability": 0.8095703125
                },
                {
                    "start": 1151.32,
                    "end": 1151.76,
                    "word": " support",
                    "probability": 0.92724609375
                },
                {
                    "start": 1151.76,
                    "end": 1152.24,
                    "word": " to",
                    "probability": 0.8935546875
                },
                {
                    "start": 1152.24,
                    "end": 1152.72,
                    "word": " Windows",
                    "probability": 0.830078125
                },
                {
                    "start": 1152.72,
                    "end": 1153.1,
                    "word": " 10",
                    "probability": 0.9208984375
                },
                {
                    "start": 1153.1,
                    "end": 1153.66,
                    "word": ".",
                    "probability": 0.497314453125
                }
            ]
        },
        {
            "id": 282,
            "seek": 100893,
            "start": 1153.66,
            "end": 1158.9,
            "text": " So we recommend you to use Bolt ET3 rather than Bolt ET2.",
            "tokens": [
                50540,
                407,
                321,
                2748,
                291,
                281,
                764,
                37884,
                36953,
                18,
                2831,
                813,
                37884,
                36953,
                17,
                13,
                50778
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23742055438332638,
            "compression_ratio": 1.3055555555555556,
            "no_speech_prob": 0.001068115234375,
            "words": [
                {
                    "start": 1153.66,
                    "end": 1153.98,
                    "word": " So",
                    "probability": 0.8466796875
                },
                {
                    "start": 1153.98,
                    "end": 1154.36,
                    "word": " we",
                    "probability": 0.578125
                },
                {
                    "start": 1154.36,
                    "end": 1154.74,
                    "word": " recommend",
                    "probability": 0.681640625
                },
                {
                    "start": 1154.74,
                    "end": 1155.18,
                    "word": " you",
                    "probability": 0.8662109375
                },
                {
                    "start": 1155.18,
                    "end": 1155.5,
                    "word": " to",
                    "probability": 0.8291015625
                },
                {
                    "start": 1155.5,
                    "end": 1155.82,
                    "word": " use",
                    "probability": 0.8193359375
                },
                {
                    "start": 1155.82,
                    "end": 1156.04,
                    "word": " Bolt",
                    "probability": 0.61572265625
                },
                {
                    "start": 1156.04,
                    "end": 1156.48,
                    "word": " ET3",
                    "probability": 0.4639892578125
                },
                {
                    "start": 1156.48,
                    "end": 1156.84,
                    "word": " rather",
                    "probability": 0.72900390625
                },
                {
                    "start": 1156.84,
                    "end": 1157.16,
                    "word": " than",
                    "probability": 0.89892578125
                },
                {
                    "start": 1157.16,
                    "end": 1157.48,
                    "word": " Bolt",
                    "probability": 0.83056640625
                },
                {
                    "start": 1157.48,
                    "end": 1158.26,
                    "word": " ET2",
                    "probability": 0.94677734375
                },
                {
                    "start": 1158.26,
                    "end": 1158.9,
                    "word": ".",
                    "probability": 0.984375
                }
            ]
        },
        {
            "id": 283,
            "seek": 100893,
            "start": 1160.82,
            "end": 1162.36,
            "text": " Okay, that's all.",
            "tokens": [
                50918,
                1033,
                11,
                300,
                311,
                439,
                13,
                50968
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23742055438332638,
            "compression_ratio": 1.3055555555555556,
            "no_speech_prob": 0.001068115234375,
            "words": [
                {
                    "start": 1160.82,
                    "end": 1161.46,
                    "word": " Okay",
                    "probability": 0.52880859375
                },
                {
                    "start": 1161.46,
                    "end": 1161.5,
                    "word": ",",
                    "probability": 0.734375
                },
                {
                    "start": 1161.5,
                    "end": 1161.78,
                    "word": " that's",
                    "probability": 0.93896484375
                },
                {
                    "start": 1161.78,
                    "end": 1162.0,
                    "word": " all",
                    "probability": 0.8994140625
                },
                {
                    "start": 1162.0,
                    "end": 1162.36,
                    "word": ".",
                    "probability": 0.39208984375
                }
            ]
        },
        {
            "id": 284,
            "seek": 100893,
            "start": 1162.36,
            "end": 1163.92,
            "text": " And thank you for watching.",
            "tokens": [
                50968,
                400,
                1309,
                291,
                337,
                1976,
                13,
                51040
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23742055438332638,
            "compression_ratio": 1.3055555555555556,
            "no_speech_prob": 0.001068115234375,
            "words": [
                {
                    "start": 1162.36,
                    "end": 1162.54,
                    "word": " And",
                    "probability": 0.63427734375
                },
                {
                    "start": 1162.54,
                    "end": 1162.74,
                    "word": " thank",
                    "probability": 0.8125
                },
                {
                    "start": 1162.74,
                    "end": 1162.82,
                    "word": " you",
                    "probability": 0.89697265625
                },
                {
                    "start": 1162.82,
                    "end": 1162.96,
                    "word": " for",
                    "probability": 0.89453125
                },
                {
                    "start": 1162.96,
                    "end": 1163.28,
                    "word": " watching",
                    "probability": 0.740234375
                },
                {
                    "start": 1163.28,
                    "end": 1163.92,
                    "word": ".",
                    "probability": 0.52783203125
                }
            ]
        },
        {
            "id": 285,
            "seek": 100893,
            "start": 1163.92,
            "end": 1166.32,
            "text": " And any feedback is welcome.",
            "tokens": [
                51040,
                400,
                604,
                5824,
                307,
                2928,
                13,
                51188
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23742055438332638,
            "compression_ratio": 1.3055555555555556,
            "no_speech_prob": 0.001068115234375,
            "words": [
                {
                    "start": 1163.92,
                    "end": 1164.08,
                    "word": " And",
                    "probability": 0.55908203125
                },
                {
                    "start": 1164.08,
                    "end": 1164.74,
                    "word": " any",
                    "probability": 0.69140625
                },
                {
                    "start": 1164.74,
                    "end": 1165.14,
                    "word": " feedback",
                    "probability": 0.84765625
                },
                {
                    "start": 1165.14,
                    "end": 1165.38,
                    "word": " is",
                    "probability": 0.896484375
                },
                {
                    "start": 1165.38,
                    "end": 1165.68,
                    "word": " welcome",
                    "probability": 0.748046875
                },
                {
                    "start": 1165.68,
                    "end": 1166.32,
                    "word": ".",
                    "probability": 0.97705078125
                }
            ]
        },
        {
            "id": 286,
            "seek": 100893,
            "start": 1166.44,
            "end": 1167.42,
            "text": " Thank you.",
            "tokens": [
                51188,
                1044,
                291,
                13,
                51230
            ],
            "temperature": 0.0,
            "avg_logprob": -0.23742055438332638,
            "compression_ratio": 1.3055555555555556,
            "no_speech_prob": 0.001068115234375,
            "words": [
                {
                    "start": 1166.44,
                    "end": 1166.84,
                    "word": " Thank",
                    "probability": 0.8876953125
                },
                {
                    "start": 1166.84,
                    "end": 1167.0,
                    "word": " you",
                    "probability": 0.8984375
                },
                {
                    "start": 1167.0,
                    "end": 1167.42,
                    "word": ".",
                    "probability": 0.9658203125
                }
            ]
        }
    ],
    "text": " Thank you for listening to our DEF CON Demo Labo. I'm Shusei Tomuraga from JPSAT. Our Demo Labo presentation today is about MarconScan with KUKU, a tool that automatically dumps malware configuration data. First, let's talk about why we want to create such a tool and its motivation. Sandbox is a great tool for malware analysts. However, we, the malware analysts, cannot get what we want using the sandbox. We want configuration data. We need to get configuration data for static analysis. Why do we need malware configuration data? Many barriers of malware code are almost unchanged and only configuration data is defined. If the configuration data is known, there is no need for static analysis. Configuration data contains important information that cannot be obtained by sandbox analysis, such as campaign ID, encryption key, C2 server, and so on. Let me introduce how malware analysts extract malware configuration. This is very simple, so everyone should remember this. First step, we analyze the malware to understand how to encrypt the configuration data. Then we understand the structure of the configuration data. Step two, we create our tools for extracting configuration data. That's all, it's very simple. For example, in the case of PlugX, in PlugX data, PlugX main module and configuration are encoded for original algorithm and LZNT1. All decoded data is injected into one process and running. PlugX custom encoding algorithm depending on the version of it. This custom encoding algorithm is used to encode key log file modules and configuration data. Configuration structure also differs depending on the version. PlugX has a maximum configuration data of 0x36A4 size. It has such large configuration data is running. Other example is ts-cookie. ts-cookie is very simple, use only RC4 for encryption. This pattern has not changed for about five years. The size of ts-cookie configuration data is 0x8D0, which is the same as another normal malware. So it is difficult to analyze a lot of malware in the same way. From this slide, I will introduce a tool we created named MarukonScan. MarukonScan is a ValTT plugin that extracts the configuration data of known malware. ValTT is an open source memory forensic framework for incident response and malware analysis. This tool search for malware in memory image and dumps configuration data. This is an example of MarukonScan dumping RedRibs malware configuration. You can see C2 server, encryption key, mutex, and user agent. This tool dumps different configuration data depending on malware. Now, MarukonScan support over 28 malware. MarukonScan support most of the malware families reported in any run's top 10 threat report. So, I think you have a question here. Why use ValTT? It is effective to analyze the memory dump. There are two advantages. First, no need to unpack. When extracting configuration data, it is not necessary to unpack malware. Second, no need to decode because encoded configuration data may be already decoded on memory. You may be able to skip running how to decrypt configuration data. In addition, this tool also dumps more than configuration data if needed. In addition to configuration data, it dumps decoded strings and DGA domains. This is an example of MarukonScan dumping web of malware configuration. You can see RSA key, bot ID, and DGA domains. Here is another example of MarukonScan dumping phone book malware configuration. You can see C2 server and decoded strings. MarukonScan have another feature called MariaSTL scan. MariaSTL scan function can list the strings the following process refers. Configuration data is usually encoded by malware. However, most of malware writes decoded configuration data on memory. This function lists decoded configuration data when possible. The strings command may list unreferred strings, but this tool only displays the strings referred to in the code. And this function can also display the heap area. If decoded configuration data is in the heap area, it will be displayed. MarukonScan also support Linux-based memory image. However, there are still few Linux malware that can be scanned. So it's the time. You can use MarukonScan from command line. Set primary name and pass to memory dump file and OS profile of memory dump. Here is a sample of Red Ribs Maria used by FPT10. You can find C2 server address, campaign ID, user agent, and so on. So let's move on the next sample. This sample is TS cookie, Maria used by BlackTek. You can find the C2 server address, and encryption key, campaign ID, and so on. If you want to know more detail about the MarukonScan, you can check out our wiki on GitHub. In this wiki, you can learn how to install and use MarukonScan. Hello guys, I'm Tomoki Tani, the developer of MarukonScan and MarukonScan with Google. From here, I would like to show how to automate the MarukonScan analysis. MarukonScan alone cannot dump configuration data automatically. To automate the extraction of malware configuration, we've developed a tool that executes MarukonScan in Cuckoo Sandbox. MarukonScan with Cuckoo is Cuckoo Sandbox plugin for MarukonScan. The plugin adds the function to extract novel malware's configuration data from memory dump, and then add MarukonScan report to Cuckoo Sandbox. And how it works. This tool uses Cuckoo's memory dump function to extract configuration data of executed malware from memory dumps. Here's a video we make to give you an idea how MarukonScan with Cuckoo works. MarukonScan with Cuckoo integrates MarukonScan into Cuckoo Sandbox. It enables extracting malware configuration in Cuckoo Sandbox. And let's see how MarukonScan with Cuckoo works. All you need to do is upload malware to Cuckoo. Cuckoo sends the malware into the virtual machine and executes it on the host. Cuckoo acquires the memory dump and send it to MarukonScan. MarukonScan analyzes the memory dump and extracts the malware's configuration data. Finally, the malware's configuration will be reported to Cuckoo. This UI shows the Cuckoo's report of MarukonScan. In here, you can find the same result as we saw in the MarukonScan CLI interface. This case shows the report of Red Leaves, the malware used by APT10. You can find the C2 address, campaign ID, and traffic encryption key. Of course, this report is saved into the database. You could search and do some statistic analysis with it. However, we have to overcome some obstacles in order to make a better auto-analysis system. I think most of malware reversers have struggled with the anti-analysis techniques implemented by the malware author. This is same for auto-analysis system. For example, Earthsniff, used to attack Japan, has many kinds of anti-analysis functions. If you have experience to analyze it, you have seen this pop-up. As you know, there are several types of anti-analysis techniques, and it is not easy to bypass all of them. Checking language systems, system running time, total size of physical memory, is generally used for these techniques. Also, checking virtualization is well-known techniques. In these techniques, malware calls CPU ID instruction and checks the specific return value, or checks registry keys, which hypervisor set up. And some malware checks the process names, like Wireshark, or ODDebug, or ProcMon. So, how can we bypass them? Do we need to use physical Windows host for sandbox? The answer is no. Let's bypass them by configuring our virtual machine. It's much more easier than preparing a physical machine. Okay, let's check some samples. This control flow graph shows an anti-analysis function embedded in EarthNift backer. Here, you can find four anti-analysis techniques. It checks CPU brand name, SCSI device name, boot time, and debugger. Let's check some of these anti-analysis techniques and how to bypass them. CPU brand name detection. Malware calls the CPU ID instruction with specified value on EAX register and get the CPU brand name as a return value. In this case, it is checking if Xeon is included in the CPU brand name. In many cases, sandbox is running on the server and the server uses Xeon processor. It is calling CPU instruction direct and it is not easy to hook this call. So how can we bypass it? The answer is modify the virtual machine configuration. Here is a sample virtual machine configuration. In this slide, it is showing the sample configuration of VMware. It is not well known, but VMware allows you to modify the CPU ID response. Also, VirtualBox allows you to modify it. After setting this configuration, you can find that the OS is showing the different CPU brand name. With this technique, you can bypass most of the anti-analysis techniques using CPU ID instruction. Let's check another anti-analysis techniques. In here, Malware is calling Windows API to check the device name. If device name includes VBox or VMware, Malware will kill itself. It is possible to bypass with Hooks API, but it is more easy to modify the virtual machine settings. Here is a sample configuration. As you can see, you could also change the device name just writing few lines into the configuration file. You could do the same things for MAC address or CD drive name or BIOS setting, et cetera, et cetera. Here is our recommended setting for anti-anti-analysis. First, do not install VMware tools or VirtualBox guest additions. These tools modify so many settings and it makes it easy to detect the sandbox environment. Second is use local language operating system for virtual machine. Some malware is specified for regions, and if you want to analyze these malware, use local languages always. Third is modify the virtual machine configuration. Especially, we recommend to modify CPU ID response, device name, and NIC setting. In most case, we are able to bypass anti-analysis techniques with these settings. Okay, let's move on to the demonstration of Malcom scan with Cuckoo. Okay, here is the web GUI of Cuckoo. All things you need to do is submit malware and do analysis. Each analysis takes two to three minutes per sample. Okay, let's check the report. You could find the report in VM memory dump menu. And click Malcom scan tab, and the result will display. Here is showing some sample reports. This is Himari, the variant of Red Leaves. And this is ts-cookie, the malware used by Blacktech. And Ersniff, as known as DreamBot, a very numerous banking Trojan. And yes, that's all for the demonstration. If you want to know more detail about the Malcom scan with Cuckoo, you can check it out our wiki on GitHub. In this wiki, you can learn how to install and how to use Malcom scan with Cuckoo. And if you want to know more detail about anti-analysis, we have written some articles and some sample configuration on this wiki. And now, we are developing Malcom scan which supports Bolt ET3. We have released the beta version on our GitHub repository. You could find this code in the Bolt ET3 branch. We will finish the conversion as soon as possible. In Bolt ET3, you don't need to set the memory profile and also has a better support to Windows 10. So we recommend you to use Bolt ET3 rather than Bolt ET2. Okay, that's all. And thank you for watching. And any feedback is welcome. Thank you."
}