26:I[10321,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js","/_next/static/chunks/23qlsjvno4-wq.js","/_next/static/chunks/11pkz44bx8x1b.js","/_next/static/chunks/04k_7k5p4krw4.js"],"ReportDetailWrapper"] 64:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js"],"IconMark"] 25:T46a,{"@context":"https://schema.org","@type":"TechArticle","headline":"Clean — Falcon Sandbox Report 67b5e643ef57… — Sample 16126ff5daa3…","description":"Clean verdict for sandbox report 67b5e643ef57…. 0 malicious and 6 suspicious behavioral indicators across 98 signatures. Detonated in Windows 10 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT\u0026CK mappings.","url":"/sample/16126ff5daa3787a159cf4a39aa040b8050ebb66ab90dbb97c503110ef72824a/67b5e643ef57b0d1f706e929","keywords":["Clean","sandbox report","malware analysis","MITRE ATT\u0026CK","16126ff5daa3787a159cf4a39aa040b8050ebb66ab90dbb97c503110ef72824a"],"about":{"@type":"SoftwareApplication","name":"madbasic_.bpl","applicationCategory":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows","identifier":"16126ff5daa3787a159cf4a39aa040b8050ebb66ab90dbb97c503110ef72824a","additionalType":"Clean sample"},"sandboxEnvironment":"Windows 10 64 bit","behavioralIndicators":{"malicious":0,"suspicious":6,"totalSignatures":98},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T5a4,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:T5a4,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:T5a4,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:T5a4,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:T5a4,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:T5a4,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAEAklEQVR4Xu2W+VOaRxzG84+3E+8LxQsQEHhBIJOjbeqReBKYOtrxmNiYoKAgSWREoTUlraCoT/dZXAIvxsk6/a19Z77Dzgvs8/meuw8e/P/c8oRCIdCCwSAmJiYQCATg9wdg+P0wDAM+nw9erxcejxfjHg/c4+Nwud1wudxwOl3wiO9GR0dh3vebH4pfXV012WW9XZrtEtfX1wiHw8hkMhLq3hD0nIKVSgUXtAtlFzhXdl79LJ8rO5cQBCgWi0il0nC6XLDeB4Jhvw2gJs71HQCnp6coFArYTSTgGHPCarXqQTDnBJDitwFQvCbcDJDP53F8fIxsNovt7W3Y7Q49ABZcDeBr4a8TNgNYLJYGGxwe1gNgtUuAmvgd4S9/AeA6Jzw/yinLiWgUMDg0pAkgWk0BKOF05j1m5hZR/PwX8oU/8OPkDHYSybooVAFK9VYqizq6hHVQE4B9zlarF3f5Q3gRWZYQRugxZmMrsLmNBu8bAco1gAHroB4Ah0wVgBGohtwXfor4+xxmIr9gaXUDb1If4REgFE8dZJq9FwBnNwD9A5pdwAnH4bKT2IN93C/FJ+ej2PmQw7vMEd4eiOpOH+Knl4vwBB/DaQQlhNl7BWAZGNAD4HhlBJjnpZUNJA7z2P14IiBeyfDTns8uySj8tv8BkwtRTM8uNHmvAPr6+/UAOEYZARYbxWLrW3ibzsq1yjnXjMLUYkyKfyp+bvK+BmDRBODBwp4uik1nxOYsOIa9ClCteAWwuLIu1yf535vEFUBvn0UTwEWAK0zPLWAutoq9bAHJbF6GWqXg57lItRZSh3gZXcEPIl1m8SpABT29fXoAPFIZARaWOxCG8egZphZiohZORC0cy2KMi2J8LiC8AobtGN9N4Nf1TcxHYg0AnKbdvb16AGNOpwRga6kWMx49RVIUY2xtCy9eLYuWPII3/ESGnTXg9AXkb3zCuOa7s7OSBOjq0QRwjI2hIgDq+5rtuHSTb25OCA6n/XRGCq5u7WArmcHrxAGWN7flu79vADq7e/QA7A5HE0B8NynzfCJm+6c/ixKC4gw5Paf4kMMtbSO+L1LzBKtrm1WArm49AJvdDFD+YqXGSmfeGXZ6rgDW3+3J2piPRCVAR2eXJoDNLttHiZlFzcZwM+z0nOLRtdcNKWjv7NQDGLXZJIBZ6Gs2PTsvBRl2es71lHinANo6NAFGxD3umwCEAEWUUZR5r39HgNb2Dj2A4ZG7AEpNwncZAVra2vUAhoZH5ARTYjqCZpMArW16ALzD8Y/mze5j3OehNoC4w9VuxP+Cfd/SqgfAOxyvUbzJ8DLB85xHKk81Hiyc7RyvnHAcMuxzthqrnQXHnDPs9Jzi3z1s0QP4Tz3/AI2nAnKaFughAAAAAElFTkSuQmCC2d:T5a4,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:T5a4,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:T5a4,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:T5a4,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:T5a4,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:T5a4,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAEAklEQVR4Xu2W+VOaRxzG84+3E+8LxQsQEHhBIJOjbeqReBKYOtrxmNiYoKAgSWREoTUlraCoT/dZXAIvxsk6/a19Z77Dzgvs8/meuw8e/P/c8oRCIdCCwSAmJiYQCATg9wdg+P0wDAM+nw9erxcejxfjHg/c4+Nwud1wudxwOl3wiO9GR0dh3vebH4pfXV012WW9XZrtEtfX1wiHw8hkMhLq3hD0nIKVSgUXtAtlFzhXdl79LJ8rO5cQBCgWi0il0nC6XLDeB4Jhvw2gJs71HQCnp6coFArYTSTgGHPCarXqQTDnBJDitwFQvCbcDJDP53F8fIxsNovt7W3Y7Q49ABZcDeBr4a8TNgNYLJYGGxwe1gNgtUuAmvgd4S9/AeA6Jzw/yinLiWgUMDg0pAkgWk0BKOF05j1m5hZR/PwX8oU/8OPkDHYSybooVAFK9VYqizq6hHVQE4B9zlarF3f5Q3gRWZYQRugxZmMrsLmNBu8bAco1gAHroB4Ah0wVgBGohtwXfor4+xxmIr9gaXUDb1If4REgFE8dZJq9FwBnNwD9A5pdwAnH4bKT2IN93C/FJ+ej2PmQw7vMEd4eiOpOH+Knl4vwBB/DaQQlhNl7BWAZGNAD4HhlBJjnpZUNJA7z2P14IiBeyfDTns8uySj8tv8BkwtRTM8uNHmvAPr6+/UAOEYZARYbxWLrW3ibzsq1yjnXjMLUYkyKfyp+bvK+BmDRBODBwp4uik1nxOYsOIa9ClCteAWwuLIu1yf535vEFUBvn0UTwEWAK0zPLWAutoq9bAHJbF6GWqXg57lItRZSh3gZXcEPIl1m8SpABT29fXoAPFIZARaWOxCG8egZphZiohZORC0cy2KMi2J8LiC8AobtGN9N4Nf1TcxHYg0AnKbdvb16AGNOpwRga6kWMx49RVIUY2xtCy9eLYuWPII3/ESGnTXg9AXkb3zCuOa7s7OSBOjq0QRwjI2hIgDq+5rtuHSTb25OCA6n/XRGCq5u7WArmcHrxAGWN7flu79vADq7e/QA7A5HE0B8NynzfCJm+6c/ixKC4gw5Paf4kMMtbSO+L1LzBKtrm1WArm49AJvdDFD+YqXGSmfeGXZ6rgDW3+3J2piPRCVAR2eXJoDNLttHiZlFzcZwM+z0nOLRtdcNKWjv7NQDGLXZJIBZ6Gs2PTsvBRl2es71lHinANo6NAFGxD3umwCEAEWUUZR5r39HgNb2Dj2A4ZG7AEpNwncZAVra2vUAhoZH5ARTYjqCZpMArW16ALzD8Y/mze5j3OehNoC4w9VuxP+Cfd/SqgfAOxyvUbzJ8DLB85xHKk81Hiyc7RyvnHAcMuxzthqrnQXHnDPs9Jzi3z1s0QP4Tz3/AI2nAnKaFughAAAAAElFTkSuQmCC33:T5a4,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAEAklEQVR4Xu2W+VOaRxzG84+3E+8LxQsQEHhBIJOjbeqReBKYOtrxmNiYoKAgSWREoTUlraCoT/dZXAIvxsk6/a19Z77Dzgvs8/meuw8e/P/c8oRCIdCCwSAmJiYQCATg9wdg+P0wDAM+nw9erxcejxfjHg/c4+Nwud1wudxwOl3wiO9GR0dh3vebH4pfXV012WW9XZrtEtfX1wiHw8hkMhLq3hD0nIKVSgUXtAtlFzhXdl79LJ8rO5cQBCgWi0il0nC6XLDeB4Jhvw2gJs71HQCnp6coFArYTSTgGHPCarXqQTDnBJDitwFQvCbcDJDP53F8fIxsNovt7W3Y7Q49ABZcDeBr4a8TNgNYLJYGGxwe1gNgtUuAmvgd4S9/AeA6Jzw/yinLiWgUMDg0pAkgWk0BKOF05j1m5hZR/PwX8oU/8OPkDHYSybooVAFK9VYqizq6hHVQE4B9zlarF3f5Q3gRWZYQRugxZmMrsLmNBu8bAco1gAHroB4Ah0wVgBGohtwXfor4+xxmIr9gaXUDb1If4REgFE8dZJq9FwBnNwD9A5pdwAnH4bKT2IN93C/FJ+ej2PmQw7vMEd4eiOpOH+Knl4vwBB/DaQQlhNl7BWAZGNAD4HhlBJjnpZUNJA7z2P14IiBeyfDTns8uySj8tv8BkwtRTM8uNHmvAPr6+/UAOEYZARYbxWLrW3ibzsq1yjnXjMLUYkyKfyp+bvK+BmDRBODBwp4uik1nxOYsOIa9ClCteAWwuLIu1yf535vEFUBvn0UTwEWAK0zPLWAutoq9bAHJbF6GWqXg57lItRZSh3gZXcEPIl1m8SpABT29fXoAPFIZARaWOxCG8egZphZiohZORC0cy2KMi2J8LiC8AobtGN9N4Nf1TcxHYg0AnKbdvb16AGNOpwRga6kWMx49RVIUY2xtCy9eLYuWPII3/ESGnTXg9AXkb3zCuOa7s7OSBOjq0QRwjI2hIgDq+5rtuHSTb25OCA6n/XRGCq5u7WArmcHrxAGWN7flu79vADq7e/QA7A5HE0B8NynzfCJm+6c/ixKC4gw5Paf4kMMtbSO+L1LzBKtrm1WArm49AJvdDFD+YqXGSmfeGXZ6rgDW3+3J2piPRCVAR2eXJoDNLttHiZlFzcZwM+z0nOLRtdcNKWjv7NQDGLXZJIBZ6Gs2PTsvBRl2es71lHinANo6NAFGxD3umwCEAEWUUZR5r39HgNb2Dj2A4ZG7AEpNwncZAVra2vUAhoZH5ARTYjqCZpMArW16ALzD8Y/mze5j3OehNoC4w9VuxP+Cfd/SqgfAOxyvUbzJ8DLB85xHKk81Hiyc7RyvnHAcMuxzthqrnQXHnDPs9Jzi3z1s0QP4Tz3/AI2nAnKaFughAAAAAElFTkSuQmCC34:T5a4,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:T5a4,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:T5a4,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:T5a4,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:T5a4,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:T5a4,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:T5a4,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:T5a4,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAEAklEQVR4Xu2W+VOaRxzG84+3E+8LxQsQEHhBIJOjbeqReBKYOtrxmNiYoKAgSWREoTUlraCoT/dZXAIvxsk6/a19Z77Dzgvs8/meuw8e/P/c8oRCIdCCwSAmJiYQCATg9wdg+P0wDAM+nw9erxcejxfjHg/c4+Nwud1wudxwOl3wiO9GR0dh3vebH4pfXV012WW9XZrtEtfX1wiHw8hkMhLq3hD0nIKVSgUXtAtlFzhXdl79LJ8rO5cQBCgWi0il0nC6XLDeB4Jhvw2gJs71HQCnp6coFArYTSTgGHPCarXqQTDnBJDitwFQvCbcDJDP53F8fIxsNovt7W3Y7Q49ABZcDeBr4a8TNgNYLJYGGxwe1gNgtUuAmvgd4S9/AeA6Jzw/yinLiWgUMDg0pAkgWk0BKOF05j1m5hZR/PwX8oU/8OPkDHYSybooVAFK9VYqizq6hHVQE4B9zlarF3f5Q3gRWZYQRugxZmMrsLmNBu8bAco1gAHroB4Ah0wVgBGohtwXfor4+xxmIr9gaXUDb1If4REgFE8dZJq9FwBnNwD9A5pdwAnH4bKT2IN93C/FJ+ej2PmQw7vMEd4eiOpOH+Knl4vwBB/DaQQlhNl7BWAZGNAD4HhlBJjnpZUNJA7z2P14IiBeyfDTns8uySj8tv8BkwtRTM8uNHmvAPr6+/UAOEYZARYbxWLrW3ibzsq1yjnXjMLUYkyKfyp+bvK+BmDRBODBwp4uik1nxOYsOIa9ClCteAWwuLIu1yf535vEFUBvn0UTwEWAK0zPLWAutoq9bAHJbF6GWqXg57lItRZSh3gZXcEPIl1m8SpABT29fXoAPFIZARaWOxCG8egZphZiohZORC0cy2KMi2J8LiC8AobtGN9N4Nf1TcxHYg0AnKbdvb16AGNOpwRga6kWMx49RVIUY2xtCy9eLYuWPII3/ESGnTXg9AXkb3zCuOa7s7OSBOjq0QRwjI2hIgDq+5rtuHSTb25OCA6n/XRGCq5u7WArmcHrxAGWN7flu79vADq7e/QA7A5HE0B8NynzfCJm+6c/ixKC4gw5Paf4kMMtbSO+L1LzBKtrm1WArm49AJvdDFD+YqXGSmfeGXZ6rgDW3+3J2piPRCVAR2eXJoDNLttHiZlFzcZwM+z0nOLRtdcNKWjv7NQDGLXZJIBZ6Gs2PTsvBRl2es71lHinANo6NAFGxD3umwCEAEWUUZR5r39HgNb2Dj2A4ZG7AEpNwncZAVra2vUAhoZH5ARTYjqCZpMArW16ALzD8Y/mze5j3OehNoC4w9VuxP+Cfd/SqgfAOxyvUbzJ8DLB85xHKk81Hiyc7RyvnHAcMuxzthqrnQXHnDPs9Jzi3z1s0QP4Tz3/AI2nAnKaFughAAAAAElFTkSuQmCC3c:T5a4,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:T5a4,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAEAklEQVR4Xu2W+VOaRxzG84+3E+8LxQsQEHhBIJOjbeqReBKYOtrxmNiYoKAgSWREoTUlraCoT/dZXAIvxsk6/a19Z77Dzgvs8/meuw8e/P/c8oRCIdCCwSAmJiYQCATg9wdg+P0wDAM+nw9erxcejxfjHg/c4+Nwud1wudxwOl3wiO9GR0dh3vebH4pfXV012WW9XZrtEtfX1wiHw8hkMhLq3hD0nIKVSgUXtAtlFzhXdl79LJ8rO5cQBCgWi0il0nC6XLDeB4Jhvw2gJs71HQCnp6coFArYTSTgGHPCarXqQTDnBJDitwFQvCbcDJDP53F8fIxsNovt7W3Y7Q49ABZcDeBr4a8TNgNYLJYGGxwe1gNgtUuAmvgd4S9/AeA6Jzw/yinLiWgUMDg0pAkgWk0BKOF05j1m5hZR/PwX8oU/8OPkDHYSybooVAFK9VYqizq6hHVQE4B9zlarF3f5Q3gRWZYQRugxZmMrsLmNBu8bAco1gAHroB4Ah0wVgBGohtwXfor4+xxmIr9gaXUDb1If4REgFE8dZJq9FwBnNwD9A5pdwAnH4bKT2IN93C/FJ+ej2PmQw7vMEd4eiOpOH+Knl4vwBB/DaQQlhNl7BWAZGNAD4HhlBJjnpZUNJA7z2P14IiBeyfDTns8uySj8tv8BkwtRTM8uNHmvAPr6+/UAOEYZARYbxWLrW3ibzsq1yjnXjMLUYkyKfyp+bvK+BmDRBODBwp4uik1nxOYsOIa9ClCteAWwuLIu1yf535vEFUBvn0UTwEWAK0zPLWAutoq9bAHJbF6GWqXg57lItRZSh3gZXcEPIl1m8SpABT29fXoAPFIZARaWOxCG8egZphZiohZORC0cy2KMi2J8LiC8AobtGN9N4Nf1TcxHYg0AnKbdvb16AGNOpwRga6kWMx49RVIUY2xtCy9eLYuWPII3/ESGnTXg9AXkb3zCuOa7s7OSBOjq0QRwjI2hIgDq+5rtuHSTb25OCA6n/XRGCq5u7WArmcHrxAGWN7flu79vADq7e/QA7A5HE0B8NynzfCJm+6c/ixKC4gw5Paf4kMMtbSO+L1LzBKtrm1WArm49AJvdDFD+YqXGSmfeGXZ6rgDW3+3J2piPRCVAR2eXJoDNLttHiZlFzcZwM+z0nOLRtdcNKWjv7NQDGLXZJIBZ6Gs2PTsvBRl2es71lHinANo6NAFGxD3umwCEAEWUUZR5r39HgNb2Dj2A4ZG7AEpNwncZAVra2vUAhoZH5ARTYjqCZpMArW16ALzD8Y/mze5j3OehNoC4w9VuxP+Cfd/SqgfAOxyvUbzJ8DLB85xHKk81Hiyc7RyvnHAcMuxzthqrnQXHnDPs9Jzi3z1s0QP4Tz3/AI2nAnKaFughAAAAAElFTkSuQmCC3e:T5a4,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAEAklEQVR4Xu2W+VOaRxzG84+3E+8LxQsQEHhBIJOjbeqReBKYOtrxmNiYoKAgSWREoTUlraCoT/dZXAIvxsk6/a19Z77Dzgvs8/meuw8e/P/c8oRCIdCCwSAmJiYQCATg9wdg+P0wDAM+nw9erxcejxfjHg/c4+Nwud1wudxwOl3wiO9GR0dh3vebH4pfXV012WW9XZrtEtfX1wiHw8hkMhLq3hD0nIKVSgUXtAtlFzhXdl79LJ8rO5cQBCgWi0il0nC6XLDeB4Jhvw2gJs71HQCnp6coFArYTSTgGHPCarXqQTDnBJDitwFQvCbcDJDP53F8fIxsNovt7W3Y7Q49ABZcDeBr4a8TNgNYLJYGGxwe1gNgtUuAmvgd4S9/AeA6Jzw/yinLiWgUMDg0pAkgWk0BKOF05j1m5hZR/PwX8oU/8OPkDHYSybooVAFK9VYqizq6hHVQE4B9zlarF3f5Q3gRWZYQRugxZmMrsLmNBu8bAco1gAHroB4Ah0wVgBGohtwXfor4+xxmIr9gaXUDb1If4REgFE8dZJq9FwBnNwD9A5pdwAnH4bKT2IN93C/FJ+ej2PmQw7vMEd4eiOpOH+Knl4vwBB/DaQQlhNl7BWAZGNAD4HhlBJjnpZUNJA7z2P14IiBeyfDTns8uySj8tv8BkwtRTM8uNHmvAPr6+/UAOEYZARYbxWLrW3ibzsq1yjnXjMLUYkyKfyp+bvK+BmDRBODBwp4uik1nxOYsOIa9ClCteAWwuLIu1yf535vEFUBvn0UTwEWAK0zPLWAutoq9bAHJbF6GWqXg57lItRZSh3gZXcEPIl1m8SpABT29fXoAPFIZARaWOxCG8egZphZiohZORC0cy2KMi2J8LiC8AobtGN9N4Nf1TcxHYg0AnKbdvb16AGNOpwRga6kWMx49RVIUY2xtCy9eLYuWPII3/ESGnTXg9AXkb3zCuOa7s7OSBOjq0QRwjI2hIgDq+5rtuHSTb25OCA6n/XRGCq5u7WArmcHrxAGWN7flu79vADq7e/QA7A5HE0B8NynzfCJm+6c/ixKC4gw5Paf4kMMtbSO+L1LzBKtrm1WArm49AJvdDFD+YqXGSmfeGXZ6rgDW3+3J2piPRCVAR2eXJoDNLttHiZlFzcZwM+z0nOLRtdcNKWjv7NQDGLXZJIBZ6Gs2PTsvBRl2es71lHinANo6NAFGxD3umwCEAEWUUZR5r39HgNb2Dj2A4ZG7AEpNwncZAVra2vUAhoZH5ARTYjqCZpMArW16ALzD8Y/mze5j3OehNoC4w9VuxP+Cfd/SqgfAOxyvUbzJ8DLB85xHKk81Hiyc7RyvnHAcMuxzthqrnQXHnDPs9Jzi3z1s0QP4Tz3/AI2nAnKaFughAAAAAElFTkSuQmCC3f:T5a4,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:T5a4,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAEAklEQVR4Xu2W+VOaRxzG84+3E+8LxQsQEHhBIJOjbeqReBKYOtrxmNiYoKAgSWREoTUlraCoT/dZXAIvxsk6/a19Z77Dzgvs8/meuw8e/P/c8oRCIdCCwSAmJiYQCATg9wdg+P0wDAM+nw9erxcejxfjHg/c4+Nwud1wudxwOl3wiO9GR0dh3vebH4pfXV012WW9XZrtEtfX1wiHw8hkMhLq3hD0nIKVSgUXtAtlFzhXdl79LJ8rO5cQBCgWi0il0nC6XLDeB4Jhvw2gJs71HQCnp6coFArYTSTgGHPCarXqQTDnBJDitwFQvCbcDJDP53F8fIxsNovt7W3Y7Q49ABZcDeBr4a8TNgNYLJYGGxwe1gNgtUuAmvgd4S9/AeA6Jzw/yinLiWgUMDg0pAkgWk0BKOF05j1m5hZR/PwX8oU/8OPkDHYSybooVAFK9VYqizq6hHVQE4B9zlarF3f5Q3gRWZYQRugxZmMrsLmNBu8bAco1gAHroB4Ah0wVgBGohtwXfor4+xxmIr9gaXUDb1If4REgFE8dZJq9FwBnNwD9A5pdwAnH4bKT2IN93C/FJ+ej2PmQw7vMEd4eiOpOH+Knl4vwBB/DaQQlhNl7BWAZGNAD4HhlBJjnpZUNJA7z2P14IiBeyfDTns8uySj8tv8BkwtRTM8uNHmvAPr6+/UAOEYZARYbxWLrW3ibzsq1yjnXjMLUYkyKfyp+bvK+BmDRBODBwp4uik1nxOYsOIa9ClCteAWwuLIu1yf535vEFUBvn0UTwEWAK0zPLWAutoq9bAHJbF6GWqXg57lItRZSh3gZXcEPIl1m8SpABT29fXoAPFIZARaWOxCG8egZphZiohZORC0cy2KMi2J8LiC8AobtGN9N4Nf1TcxHYg0AnKbdvb16AGNOpwRga6kWMx49RVIUY2xtCy9eLYuWPII3/ESGnTXg9AXkb3zCuOa7s7OSBOjq0QRwjI2hIgDq+5rtuHSTb25OCA6n/XRGCq5u7WArmcHrxAGWN7flu79vADq7e/QA7A5HE0B8NynzfCJm+6c/ixKC4gw5Paf4kMMtbSO+L1LzBKtrm1WArm49AJvdDFD+YqXGSmfeGXZ6rgDW3+3J2piPRCVAR2eXJoDNLttHiZlFzcZwM+z0nOLRtdcNKWjv7NQDGLXZJIBZ6Gs2PTsvBRl2es71lHinANo6NAFGxD3umwCEAEWUUZR5r39HgNb2Dj2A4ZG7AEpNwncZAVra2vUAhoZH5ARTYjqCZpMArW16ALzD8Y/mze5j3OehNoC4w9VuxP+Cfd/SqgfAOxyvUbzJ8DLB85xHKk81Hiyc7RyvnHAcMuxzthqrnQXHnDPs9Jzi3z1s0QP4Tz3/AI2nAnKaFughAAAAAElFTkSuQmCC41:T5a4,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:T5a4,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:T5a4,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:T5a4,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAEAklEQVR4Xu2W+VOaRxzG84+3E+8LxQsQEHhBIJOjbeqReBKYOtrxmNiYoKAgSWREoTUlraCoT/dZXAIvxsk6/a19Z77Dzgvs8/meuw8e/P/c8oRCIdCCwSAmJiYQCATg9wdg+P0wDAM+nw9erxcejxfjHg/c4+Nwud1wudxwOl3wiO9GR0dh3vebH4pfXV012WW9XZrtEtfX1wiHw8hkMhLq3hD0nIKVSgUXtAtlFzhXdl79LJ8rO5cQBCgWi0il0nC6XLDeB4Jhvw2gJs71HQCnp6coFArYTSTgGHPCarXqQTDnBJDitwFQvCbcDJDP53F8fIxsNovt7W3Y7Q49ABZcDeBr4a8TNgNYLJYGGxwe1gNgtUuAmvgd4S9/AeA6Jzw/yinLiWgUMDg0pAkgWk0BKOF05j1m5hZR/PwX8oU/8OPkDHYSybooVAFK9VYqizq6hHVQE4B9zlarF3f5Q3gRWZYQRugxZmMrsLmNBu8bAco1gAHroB4Ah0wVgBGohtwXfor4+xxmIr9gaXUDb1If4REgFE8dZJq9FwBnNwD9A5pdwAnH4bKT2IN93C/FJ+ej2PmQw7vMEd4eiOpOH+Knl4vwBB/DaQQlhNl7BWAZGNAD4HhlBJjnpZUNJA7z2P14IiBeyfDTns8uySj8tv8BkwtRTM8uNHmvAPr6+/UAOEYZARYbxWLrW3ibzsq1yjnXjMLUYkyKfyp+bvK+BmDRBODBwp4uik1nxOYsOIa9ClCteAWwuLIu1yf535vEFUBvn0UTwEWAK0zPLWAutoq9bAHJbF6GWqXg57lItRZSh3gZXcEPIl1m8SpABT29fXoAPFIZARaWOxCG8egZphZiohZORC0cy2KMi2J8LiC8AobtGN9N4Nf1TcxHYg0AnKbdvb16AGNOpwRga6kWMx49RVIUY2xtCy9eLYuWPII3/ESGnTXg9AXkb3zCuOa7s7OSBOjq0QRwjI2hIgDq+5rtuHSTb25OCA6n/XRGCq5u7WArmcHrxAGWN7flu79vADq7e/QA7A5HE0B8NynzfCJm+6c/ixKC4gw5Paf4kMMtbSO+L1LzBKtrm1WArm49AJvdDFD+YqXGSmfeGXZ6rgDW3+3J2piPRCVAR2eXJoDNLttHiZlFzcZwM+z0nOLRtdcNKWjv7NQDGLXZJIBZ6Gs2PTsvBRl2es71lHinANo6NAFGxD3umwCEAEWUUZR5r39HgNb2Dj2A4ZG7AEpNwncZAVra2vUAhoZH5ARTYjqCZpMArW16ALzD8Y/mze5j3OehNoC4w9VuxP+Cfd/SqgfAOxyvUbzJ8DLB85xHKk81Hiyc7RyvnHAcMuxzthqrnQXHnDPs9Jzi3z1s0QP4Tz3/AI2nAnKaFughAAAAAElFTkSuQmCC45:T5a4,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:T5a4,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:T5a4,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:T5a4,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:T5a4,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:T404,Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; File: "madbasic_.bpl") Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObject"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObjectEx"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API "NtQuerySystemInformation" (Indicator: "NtQuerySystemInformation"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp")4b:T408,"rundll32.exe" called "RtlGetNtProductType" with parameter 01000000 (UID: 00000000-00004440) "rundll32.exe" called "RtlGetNtProductType" with parameter 01000000 (UID: 00000000-00003356) "rundll32.exe" called "RtlGetNtProductType" with parameter 01000000 (UID: 00000000-00003236) "rundll32.exe" called "RtlGetNtProductType" with parameter 01000000 (UID: 00000000-00002964) "rundll32.exe" called "RtlGetNtProductType" with parameter 01000000 (UID: 00000000-00004996) "rundll32.exe" called "RtlGetNtProductType" with parameter 01000000 (UID: 00000000-00003744) "rundll32.exe" called "RtlGetNtProductType" with parameter 01000000 (UID: 00000000-00002820) "rundll32.exe" called "RtlGetNtProductType" with parameter 01000000 (UID: 00000000-00002936) "rundll32.exe" called "RtlGetNtProductType" with parameter 01000000 (UID: 00000000-00008400) "rundll32.exe" called "RtlGetNtProductType" with parameter 01000000 (UID: 00000000-00007640) "rundll32.exe" called "RtlGetNtProductType" with parameter 01000000 (UID: 00000000-00002940)4c:T3db6,"rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00004440) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003356) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003236) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00002964) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00004996) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003744) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00002820) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00002936) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00008400) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00007640) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00002940) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00009000) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00006388) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00001500) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003552) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00008040) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00008560) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00006392) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00008688) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003648) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00001284) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00004324) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00006948) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003628) "rundll32.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00007512)4d:T396a,"rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00004440) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00004440) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00004440) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00004440) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003356) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003356) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003356) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00003356) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003236) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003236) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003236) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00003236) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00002964) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00002964) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00002964) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00002964) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00004996) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00004996) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00004996) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00004996) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003744) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003744) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003744) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00003744) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00002820) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00002820) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00002820) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00002820) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00002936) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00002936) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00002936) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00002936) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00008400) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00008400) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00008400) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00008400) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00007640) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00007640) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00007640) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00007640) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00002940) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00002940) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00002940) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00002940) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00009000) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00009000) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00009000) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00009000) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00006388) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00006388) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00006388) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00006388) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00001500) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00001500) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00001500) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00001500) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003552) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003552) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003552) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00003552) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00008040) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00008040) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00008040) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00008040) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00008560) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00008560) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00008560) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00008560) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00006392) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00006392) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00006392) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00006392) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00008688) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00008688) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00008688) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00008688) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003648) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003648) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003648) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00003648) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00001284) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00001284) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00001284) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00001284) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00004324) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00004324) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00004324) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00004324) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00006948) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00006948) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00006948) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00006948) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003628) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003628) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003628) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00003628) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00007512) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00007512) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00007512) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00007512) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00007268) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00007268) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00007268) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00007268) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00007540) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00007540) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00007540) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00007540) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00004412) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00004412) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00004412) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00004412) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00000196) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00000196) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00000196) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00000196) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00005944) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00005944) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00005944) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00005944) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00006112) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00006112) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00006112) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00006112) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00009072) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00009072) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00009072) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00009072) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00001924) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00001924) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00001924) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00001924) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003112) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003112) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003112) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00003112) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00007248) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00007248) "rundll32.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00007248) "rundll32.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00007248)4e:T10b9,Found reference to API "levateCreateProcess" (Indicator: "CreateProcess"; Source: "00000000-00000196.00000000.127395.030C0000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00000196.00000000.127395.030C0000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00000196.00000000.127395.030C0000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00000196.00000000.127395.030C0000.00000004.mdmp") Found reference to API "levateCreateProcess" (Indicator: "CreateProcess"; Source: "00000000-00001284.00000000.123556.03080000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00001284.00000000.123556.03080000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00001284.00000000.123556.03080000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00001284.00000000.123556.03080000.00000004.mdmp") Found reference to API "levateCreateProcess" (Indicator: "CreateProcess"; Source: "00000000-00001500.00000000.120930.02EA0000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00001500.00000000.120930.02EA0000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00001500.00000000.120930.02EA0000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00001500.00000000.120930.02EA0000.00000004.mdmp") Found reference to API "levateCreateProcess" (Indicator: "CreateProcess"; Source: "00000000-00001924.00000000.129314.02FF0000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00001924.00000000.129314.02FF0000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00001924.00000000.129314.02FF0000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00001924.00000000.129314.02FF0000.00000004.mdmp") Found reference to API "levateCreateProcess" (Indicator: "CreateProcess"; Source: "00000000-00002820.00000000.117497.02C90000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00002820.00000000.117497.02C90000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00002820.00000000.117497.02C90000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00002820.00000000.117497.02C90000.00000004.mdmp") Found reference to API "levateCreateProcess" (Indicator: "CreateProcess"; Source: "00000000-00002936.00000000.118456.033C0000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00002936.00000000.118456.033C0000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00002936.00000000.118456.033C0000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00002936.00000000.118456.033C0000.00000004.mdmp") Found reference to API "levateCreateProcess" (Indicator: "CreateProcess"; Source: "00000000-00002964.00000000.116532.02490000.00000004.mdmp")4f:T4f4c,Found reference to API (Indicator: "GetObjectW"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetLastError"; File: "madbasic_.bpl") Found reference to API (Indicator: "FileTimeToDosDateTime"; File: "madbasic_.bpl") Found reference to API (Indicator: "ReadFile"; File: "madbasic_.bpl") Found reference to API (Indicator: "UnmapViewOfFile"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetFileAttributesA"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetFileTime"; File: "madbasic_.bpl") Found reference to API (Indicator: "WaitForSingleObject"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetVersionExW"; File: "madbasic_.bpl") Found reference to API (Indicator: "FreeLibrary"; File: "madbasic_.bpl") Found reference to API (Indicator: "LocalAlloc"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetTickCount"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetThreadLocale"; File: "madbasic_.bpl") Found reference to API (Indicator: "TlsAlloc"; File: "madbasic_.bpl") Found reference to API (Indicator: "VirtualProtect"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetVersionExA"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetFileAttributesW"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetModuleFileNameA"; File: "madbasic_.bpl") Found reference to API (Indicator: "DeleteCriticalSection"; File: "madbasic_.bpl") Found reference to API (Indicator: "LeaveCriticalSection"; File: "madbasic_.bpl") Found reference to API (Indicator: "EnterCriticalSection"; File: "madbasic_.bpl") Found reference to API (Indicator: "SizeofResource"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetLocaleInfoA"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetCurrentProcessId"; File: "madbasic_.bpl") Found reference to API (Indicator: "LockResource"; File: "madbasic_.bpl") Found reference to API (Indicator: "SetFileTime"; File: "madbasic_.bpl") Found reference to API (Indicator: "DeleteFileA"; File: "madbasic_.bpl") Found reference to API (Indicator: "ReleaseMutex"; File: "madbasic_.bpl") Found reference to API (Indicator: "TlsGetValue"; File: "madbasic_.bpl") Found reference to API (Indicator: "lstrlenW"; File: "madbasic_.bpl") Found reference to API (Indicator: "MapViewOfFile"; File: "madbasic_.bpl") Found reference to API (Indicator: "DeleteFileW"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetProcAddress"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetLocaleInfoW"; File: "madbasic_.bpl") Found reference to API (Indicator: "CreateFileMappingW"; File: "madbasic_.bpl") Found reference to API (Indicator: "CreateMutexA"; File: "madbasic_.bpl") Found reference to API (Indicator: "SetFilePointer"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetTempPathA"; File: "madbasic_.bpl") Found reference to API (Indicator: "SetFileAttributesW"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetModuleFileNameW"; File: "madbasic_.bpl") Found reference to API (Indicator: "TlsFree"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetModuleHandleA"; File: "madbasic_.bpl") Found reference to API (Indicator: "lstrcmpA"; File: "madbasic_.bpl") Found reference to API (Indicator: "FindFirstFileA"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetTempPathW"; File: "madbasic_.bpl") Found reference to API (Indicator: "CloseHandle"; File: "madbasic_.bpl") Found reference to API (Indicator: "CreateFileMappingA"; File: "madbasic_.bpl") Found reference to API (Indicator: "FindFirstFileW"; File: "madbasic_.bpl") Found reference to API (Indicator: "WriteFile"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetModuleHandleW"; File: "madbasic_.bpl") Found reference to API (Indicator: "FreeResource"; File: "madbasic_.bpl") Found reference to API (Indicator: "FileTimeToLocalFileTime"; File: "madbasic_.bpl") Found reference to API (Indicator: "SetFileAttributesA"; File: "madbasic_.bpl") Found reference to API (Indicator: "LoadLibraryExA"; File: "madbasic_.bpl") Found reference to API (Indicator: "LocalFree"; File: "madbasic_.bpl") Found reference to API (Indicator: "FormatMessageW"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetVersion"; File: "madbasic_.bpl") Found reference to API (Indicator: "InitializeCriticalSection"; File: "madbasic_.bpl") Found reference to API (Indicator: "LoadResource"; File: "madbasic_.bpl") Found reference to API (Indicator: "FindResourceW"; File: "madbasic_.bpl") Found reference to API (Indicator: "CreateFileW"; File: "madbasic_.bpl") Found reference to API (Indicator: "VirtualQuery"; File: "madbasic_.bpl") Found reference to API (Indicator: "VirtualFree"; File: "madbasic_.bpl") Found reference to API (Indicator: "FindClose"; File: "madbasic_.bpl") Found reference to API (Indicator: "InterlockedDecrement"; File: "madbasic_.bpl") Found reference to API (Indicator: "FormatMessageA"; File: "madbasic_.bpl") Found reference to API (Indicator: "SetEndOfFile"; File: "madbasic_.bpl") Found reference to API (Indicator: "TlsSetValue"; File: "madbasic_.bpl") Found reference to API (Indicator: "CreateFileA"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetCurrentThreadId"; File: "madbasic_.bpl") Found reference to API (Indicator: "FindResourceA"; File: "madbasic_.bpl") Found reference to API (Indicator: "VirtualAlloc"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetFileSize"; File: "madbasic_.bpl") Found reference to API (Indicator: "SetLastError"; File: "madbasic_.bpl") Found reference to API (Indicator: "InterlockedIncrement"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetSystemMetrics"; File: "madbasic_.bpl") Found reference to API (Indicator: "CreateWindowExA"; File: "madbasic_.bpl") Found reference to API (Indicator: "IsWindow"; File: "madbasic_.bpl") Found reference to API (Indicator: "UnregisterClassA"; File: "madbasic_.bpl") Found reference to API (Indicator: "DefWindowProcW"; File: "madbasic_.bpl") Found reference to API (Indicator: "DefWindowProcA"; File: "madbasic_.bpl") Found reference to API (Indicator: "RegisterClassA"; File: "madbasic_.bpl") Found reference to API (Indicator: "DestroyWindow"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetFileVersionInfoSizeA"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetFileVersionInfoA"; File: "madbasic_.bpl") Found reference to API (Indicator: "VerQueryValueW"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetFileVersionInfoW"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetFileVersionInfoSizeW"; File: "madbasic_.bpl") Found reference to API (Indicator: "VerQueryValueA"; File: "madbasic_.bpl") Found reference to API (Indicator: "MultiByteToWideChar"; File: "madbasic_.bpl") Found reference to API (Indicator: "WideCharToMultiByte"; File: "madbasic_.bpl") Found reference to API (Indicator: "TryEnterCriticalSection"; File: "madbasic_.bpl") Found reference to API (Indicator: "RtlGetVersion"; File: "madbasic_.bpl") Found reference to API (Indicator: "GetNativeSystemInfo"; File: "madbasic_.bpl") Found reference to API (Indicator: "InitializeConditionVariable"; Source: "00000000-00003552.00000000.121142.00041000.00000020.mdmp") Found reference to API (Indicator: "SleepConditionVariableCS"; Source: "00000000-00003552.00000000.121142.00041000.00000020.mdmp") Found reference to API (Indicator: "WakeAllConditionVariable"; Source: "00000000-00003552.00000000.121142.00041000.00000020.mdmp") Found reference to API (Indicator: "RtlDllShutdownInProgress"; Source: "00000000-00003552.00000000.121142.00041000.00000020.mdmp") Found reference to API (Indicator: "MessageBoxW"; Source: "00000000-00003552.00000000.121142.00041000.00000020.mdmp") Found reference to API (Indicator: "LoadIconW"; Source: "00000000-00003552.00000000.121142.00041000.00000020.mdmp") Found reference to API (Indicator: "TranslateMessage"; Source: "00000000-00003552.00000000.121142.00041000.00000020.mdmp") Found reference to API (Indicator: "DispatchMessageW"; Source: "00000000-00003552.00000000.121142.00041000.00000020.mdmp") Found reference to API (Indicator: "RegisterClassW"; Source: "00000000-00003552.00000000.121142.00041000.00000020.mdmp") Found reference to API (Indicator: "DestroyWindow"; Source: "00000000-00003552.00000000.121142.00041000.00000020.mdmp") Found reference to API (Indicator: "CreateWindowExW"; Source: "00000000-00003552.00000000.121142.00041000.00000020.mdmp") Found reference to API (Indicator: "GetWindow"; Source: "00000000-00003552.00000000.121142.00041000.00000020.mdmp") Found reference to API (Indicator: "DefWindowProcW"; Source: "00000000-00003552.00000000.121142.00041000.00000020.mdmp") Found reference to API (Indicator: "LoadCursorW"; Source: "00000000-00003552.00000000.121142.00041000.00000020.mdmp") Found reference to API (Indicator: "ReadFile"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "GetModuleFileNameA"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "IsWow64Process2"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "CreateSemaphoreExW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "HeapFree"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "SetLastError"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "GetCommandLineW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "GetCurrentProcess"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "ReleaseSemaphore"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "GetModuleHandleExW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "GetSystemWow64Directory2W"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "CoUninitialize"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "CoCreateInstance"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "EncodePointer"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "SetErrorMode"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "SetFilePointer"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "WaitForSingleObject"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "LocalAlloc"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "CreateFileW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "GetCurrentThreadId"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "ReleaseMutex"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "GetSystemDirectoryW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "SetProcessMitigationPolicy"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "CreateEventW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "FormatMessageW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "CoInitializeSecurity"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "GetLastError"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "AttachConsole"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "ReleaseSRWLockExclusive"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "OutputDebugStringW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "SetEvent"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "AcquireSRWLockExclusive"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "WaitForSingleObjectEx"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "OpenSemaphoreW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "CloseHandle"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "ReleaseSRWLockShared"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "FreeConsole"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "HeapSetInformation"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "HeapAlloc"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "LoadStringW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "DecodePointer"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "WriteConsoleW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "GetProcAddress"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "CreateMutexExW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "LocalFree"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "AcquireSRWLockShared"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "CLSIDFromString"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "ExitProcess"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "GetCurrentProcessId"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "GetProcessHeap"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "CreateProcessW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "GetModuleHandleW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "FreeLibrary"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "WideCharToMultiByte"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "CoInitializeEx"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "DebugBreak"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "LoadLibraryExW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "IsDebuggerPresent"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "Sleep"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "GetStartupInfoW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "EnterCriticalSection"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "LeaveCriticalSection"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "DeleteCriticalSection"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "ResetEvent"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "UnhandledExceptionFilter"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "SetUnhandledExceptionFilter"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "TerminateProcess"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "QueryPerformanceCounter"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "GetSystemTimeAsFileTime"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "GetTickCount"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "InitializeCriticalSectionAndSpinCount"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "IsProcessorFeaturePresent"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "SearchPathW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "CompareStringW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "GetFileAttributesW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "CharNextW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "Wow64EnableWow64FsRedirection"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "CreateActCtxW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "ActivateActCtx"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "DeactivateActCtx"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "ReleaseActCtx"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "QueryActCtxW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "PathIsRelativeW"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "NtQuerySystemInformation"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "RtlImageNtHeader"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "NtSetInformationProcess"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "NtQueryInformationToken"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "RtlNtStatusToDosError"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "NtOpenProcessToken"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "NtClose"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API (Indicator: "DelayLoadFailureHook"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp")50:T1034,Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00000196.00000000.127395.030C0000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00001284.00000000.123556.03080000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00001500.00000000.120930.02EA0000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00001924.00000000.129314.02FF0000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00002820.00000000.117497.02C90000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00002936.00000000.118456.033C0000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00002964.00000000.116532.02490000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00003112.00000000.129327.029E0000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00003236.00000000.116532.024F0000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00003356.00000000.116530.02E70000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00003552.00000000.121142.02C10000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00003628.00000000.125470.02E20000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00003648.00000000.123550.02840000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00003744.00000000.117297.02550000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00004324.00000000.123594.032F0000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00004412.00000000.127389.03150000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00004440.00000000.116530.02520000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00004996.00000000.117085.02AF0000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00005944.00000000.127409.03370000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00006112.00000000.127410.028A0000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00006388.00000000.120378.03420000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00006392.00000000.122301.02D70000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00006948.00000000.124223.02680000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00007248.00000000.129343.02EE0000.00000004.mdmp") Found reference to API "" (Indicator: "WinExec"; Source: "00000000-00007268.00000000.125483.02EE0000.00000004.mdmp")51:T42e,Found reference to API "GetLastError" (Indicator: "GetLastError"; File: "madbasic_.bpl") Found reference to API "SetLastError" (Indicator: "SetLastError"; File: "madbasic_.bpl") Found reference to API "@Madbasic@TIBasic@GetLastErrorNo$qqrv" (Indicator: "GetLastError"; File: "madbasic_.bpl") Found reference to API "@Madbasic@TIBasic@GetLastErrorStr$qqrv" (Indicator: "GetLastError"; File: "madbasic_.bpl") Found reference to API "@Madbasic@TIBasic@SetLastError$qqruix20System@UnicodeString" (Indicator: "SetLastError"; File: "madbasic_.bpl") Found reference to API "@Madbasic@TIBasic@SetLastErrorNo$qqrui" (Indicator: "SetLastError"; File: "madbasic_.bpl") Found reference to API "@Madbasic@TIBasic@SetLastErrorStr$qqrx20System@UnicodeString" (Indicator: "SetLastError"; File: "madbasic_.bpl") Found reference to API "SetLastError" (Indicator: "SetLastError"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API "GetLastError" (Indicator: "GetLastError"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp")52:T8cd,"madbasic_.bpl" contains export function called "@$xp$12Madtools@TOS" at ordinal 405 "madbasic_.bpl" contains export function called "@$xp$14Madbasic@IList" at ordinal 340 "madbasic_.bpl" contains export function called "@$xp$15Madbasic@IBasic" at ordinal 342 "madbasic_.bpl" contains export function called "@$xp$15Madbasic@TIList" at ordinal 324 "madbasic_.bpl" contains export function called "@$xp$15Madtypes@TSByte" at ordinal 36 "madbasic_.bpl" contains export function called "@$xp$15Madtypes@TSChar" at ordinal 35 "madbasic_.bpl" contains export function called "@$xp$16Madbasic@TIBasic" at ordinal 326 "madbasic_.bpl" contains export function called "@$xp$16Madtools@TOsEnum" at ordinal 406 "madbasic_.bpl" contains export function called "@$xp$16Madtypes@TDAByte" at ordinal 27 "madbasic_.bpl" contains export function called "@$xp$16Madtypes@TDAChar" at ordinal 25 "madbasic_.bpl" contains export function called "@$xp$16Madtypes@TDAWord" at ordinal 20 "madbasic_.bpl" contains export function called "@$xp$17Madbasic@TDABasic" at ordinal 341 "madbasic_.bpl" contains export function called "@$xp$17Madtypes@TAString" at ordinal 32 "madbasic_.bpl" contains export function called "@$xp$17Madtypes@TDAInt64" at ordinal 8 "madbasic_.bpl" contains export function called "@$xp$17Madtypes@TExtBool" at ordinal 37 "madbasic_.bpl" contains export function called "@$xp$18Madtypes@TDAString" at ordinal 13 "madbasic_.bpl" contains export function called "@$xp$18Madtypes@TSBoolean" at ordinal 34 "madbasic_.bpl" contains export function called "@$xp$18Madtypes@TSExtBool" at ordinal 33 "madbasic_.bpl" contains export function called "@$xp$19Madlists@IBasicList" at ordinal 417 "madbasic_.bpl" contains export function called "@$xp$19Madtypes@TAIUnknown" at ordinal 28 "madbasic_.bpl" contains export function called "@$xp$19Madtypes@TDABoolean" at ordinal 22 "madbasic_.bpl" contains export function called "@$xp$19Madtypes@TDAExtBool" at ordinal 21 "madbasic_.bpl" contains export function called "@$xp$19Madtypes@TDAInteger" at ordinal 17 "madbasic_.bpl" contains export function called "@$xp$19Madtypes@TDAPointer" at ordinal 14 "madbasic_.bpl" contains export function called "@$xp$20Madbasic@TChangeType" at ordinal 34353:T1cfa,"\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00000196.00000000.127395.030C0000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00000196.00000000.127395.030C0000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00001284.00000000.123556.03080000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00001500.00000000.120930.02EA0000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00001500.00000000.120930.02EA0000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00001924.00000000.129314.02FF0000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00001924.00000000.129314.02FF0000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00002820.00000000.117497.02C90000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00002820.00000000.117497.02C90000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00002936.00000000.118456.033C0000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00002936.00000000.118456.033C0000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00002964.00000000.116532.02490000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00002964.00000000.116532.02490000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00003112.00000000.129327.029E0000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00003112.00000000.129327.029E0000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00003236.00000000.116532.024F0000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00003236.00000000.116532.024F0000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00003356.00000000.116530.02E70000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00003356.00000000.116530.02E70000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00003552.00000000.121142.02C10000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00003552.00000000.121142.02C10000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00003628.00000000.125470.02E20000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00003648.00000000.123550.02840000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00003744.00000000.117297.02550000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00003744.00000000.117297.02550000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00004324.00000000.123594.032F0000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00004324.00000000.123594.032F0000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00004412.00000000.127389.03150000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00004412.00000000.127389.03150000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00004440.00000000.116530.02520000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00004440.00000000.116530.02520000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00004996.00000000.117085.02AF0000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00004996.00000000.117085.02AF0000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00005944.00000000.127409.03370000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00005944.00000000.127409.03370000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00006112.00000000.127410.028A0000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00006112.00000000.127410.028A0000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00006388.00000000.120378.03420000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00006388.00000000.120378.03420000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00006392.00000000.122301.02D70000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00006392.00000000.122301.02D70000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00006948.00000000.124223.02680000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00006948.00000000.124223.02680000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00007248.00000000.129343.02EE0000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00007248.00000000.129343.02EE0000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00007268.00000000.125483.02EE0000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00007268.00000000.125483.02EE0000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00007512.00000000.125476.02C60000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00007512.00000000.125476.02C60000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00007540.00000000.125530.03150000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00007640.00000000.119219.02E00000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00007640.00000000.119219.02E00000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00008040.00000000.121629.03260000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00008040.00000000.121629.03260000.00000004.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00008400.00000000.119007.03370000.00000004.mdmp "stry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00008400.00000000.119007.03370000.00000004.mdmp54:T955,Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#1" (UID: 00000000-00004440) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#2" (UID: 00000000-00003356) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#3" (UID: 00000000-00003236) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#4" (UID: 00000000-00002964) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#5" (UID: 00000000-00004996) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#6" (UID: 00000000-00003744) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#7" (UID: 00000000-00002820) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#8" (UID: 00000000-00002936) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#9" (UID: 00000000-00008400) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#10" (UID: 00000000-00007640) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#11" (UID: 00000000-00002940) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#12" (UID: 00000000-00009000) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#13" (UID: 00000000-00006388) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#14" (UID: 00000000-00001500) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#15" (UID: 00000000-00003552) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#16" (UID: 00000000-00008040) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#17" (UID: 00000000-00008560) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#18" (UID: 00000000-00006392) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#19" (UID: 00000000-00008688) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#20" (UID: 00000000-00003648) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#21" (UID: 00000000-00001284) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#22" (UID: 00000000-00004324) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#23" (UID: 00000000-00006948) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#24" (UID: 00000000-00003628) Process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#25" (UID: 00000000-00007512)55:T466,"rundll32.exe" loaded module "API-MS-WIN-CORE-SYNCH-L1-2-0" at base 76f40000 "rundll32.exe" loaded module "API-MS-WIN-CORE-FIBERS-L1-1-1" at base 76f40000 "rundll32.exe" loaded module "API-MS-WIN-CORE-LOCALIZATION-L1-2-1" at base 76f40000 "rundll32.exe" loaded module "KERNEL32" at base 773c0000 "rundll32.exe" loaded module "%WINDIR%\TEMP\VXOLE32.DLL" at base 72ee0000 "rundll32.exe" loaded module "C:\MADBASIC_.BPL.DLL" at base 0 "rundll32.exe" loaded module "%WINDIR%\SYSTEM32\UXTHEME.DLL" at base 73ff0000 "rundll32.exe" loaded module "%WINDIR%\SYSTEM32\MSCTF.DLL" at base 76c80000 "rundll32.exe" loaded module "KERNEL32.DLL" at base 773c0000 "rundll32.exe" loaded module "%WINDIR%\SYSTEM32\OLE32.DLL" at base 75cf0000 "rundll32.exe" loaded module "OLEAUT32.DLL" at base 764b0000 "rundll32.exe" loaded module "RPCRT4.DLL" at base 763a0000 "rundll32.exe" loaded module "EXT-MS-WIN-RTCORE-NTUSER-WINDOW-EXT-L1-1-0.DLL" at base 75df0000 "rundll32.exe" loaded module "EXT-MS-WIN-RTCORE-NTUSER-INTEGRATION-L1-1-0.DLL" at base 75df0000 "rundll32.exe" loaded module "API-MS-WIN-CORE-COM-L1-1-0.DLL" at base 76a3000056:T478,"madbasic_.bpl" file has an entrypoint instructions - "jmp 0x570014b0,lea eax, [eax],add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,"57:T478,"madbasic_.bpl" file has an entrypoint instructions - "jmp 0x570014b0,lea eax, [eax],add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,"58:T478,"madbasic_.bpl" file has an entrypoint instructions - "jmp 0x570014b0,lea eax, [eax],add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,"59:Ta1e,Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#2" (UID: 00000000-00003356) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#3" (UID: 00000000-00003236) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#4" (UID: 00000000-00002964) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#5" (UID: 00000000-00004996) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#6" (UID: 00000000-00003744) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#7" (UID: 00000000-00002820) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#8" (UID: 00000000-00002936) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#9" (UID: 00000000-00008400) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#10" (UID: 00000000-00007640) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#11" (UID: 00000000-00002940) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#12" (UID: 00000000-00009000) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#13" (UID: 00000000-00006388) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#14" (UID: 00000000-00001500) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#15" (UID: 00000000-00003552) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#16" (UID: 00000000-00008040) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#17" (UID: 00000000-00008560) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#18" (UID: 00000000-00006392) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#19" (UID: 00000000-00008688) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#20" (UID: 00000000-00003648) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#21" (UID: 00000000-00001284) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#22" (UID: 00000000-00004324) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#23" (UID: 00000000-00006948) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#24" (UID: 00000000-00003628) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#25" (UID: 00000000-00007512) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#26" (UID: 00000000-00007268)5a:Ta1e,Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#2" (UID: 00000000-00003356) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#3" (UID: 00000000-00003236) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#4" (UID: 00000000-00002964) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#5" (UID: 00000000-00004996) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#6" (UID: 00000000-00003744) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#7" (UID: 00000000-00002820) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#8" (UID: 00000000-00002936) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#9" (UID: 00000000-00008400) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#10" (UID: 00000000-00007640) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#11" (UID: 00000000-00002940) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#12" (UID: 00000000-00009000) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#13" (UID: 00000000-00006388) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#14" (UID: 00000000-00001500) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#15" (UID: 00000000-00003552) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#16" (UID: 00000000-00008040) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#17" (UID: 00000000-00008560) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#18" (UID: 00000000-00006392) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#19" (UID: 00000000-00008688) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#20" (UID: 00000000-00003648) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#21" (UID: 00000000-00001284) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#22" (UID: 00000000-00004324) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#23" (UID: 00000000-00006948) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#24" (UID: 00000000-00003628) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#25" (UID: 00000000-00007512) Spawned process "rundll32.exe" with commandline ""C:\\madbasic_.bpl.dll",#26" (UID: 00000000-00007268)5b:T574,"rundll32.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS"; Key: ""; Value: "") "rundll32.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RUNDLL32.EXE"; Key: ""; Value: "") "rundll32.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SESSION MANAGER\SEGMENT HEAP"; Key: ""; Value: "") "rundll32.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SESSION MANAGER"; Key: ""; Value: "") "rundll32.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\MICROSOFT\WOW64\X86"; Key: ""; Value: "") "rundll32.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SAFEBOOT\OPTION"; Key: ""; Value: "") "rundll32.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SRP\GP\DLL"; Key: ""; Value: "") "rundll32.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\SAFER\CODEIDENTIFIERS"; Key: ""; Value: "") "rundll32.exe" (Access type: "OPEN"; Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\SAFER\CODEIDENTIFIERS"; Key: ""; Value: "") "rundll32.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\FILESYSTEM"; Key: ""; Value: "") "rundll32.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS"; Key: ""; Value: "")5c:Td8a,"rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RUNDLL32.EXE"; Key: "USEFILTER"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RUNDLL32.EXE"; Key: "DISABLEHEAPLOOKASIDE"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RUNDLL32.EXE"; Key: "FRONTENDHEAPDEBUGOPTIONS"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RUNDLL32.EXE"; Key: "SHUTDOWNFLAGS"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RUNDLL32.EXE"; Key: "UNLOADEVENTTRACEDEPTH"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RUNDLL32.EXE"; Key: "MAXLOADERTHREADS"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RUNDLL32.EXE"; Key: "USEIMPERSONATEDDEVICEMAP"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RUNDLL32.EXE"; Key: "TRACINGFLAGS"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RUNDLL32.EXE"; Key: "CFGOPTIONS"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RUNDLL32.EXE"; Key: "MINIMUMSTACKCOMMITINBYTES"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RUNDLL32.EXE"; Key: "BREAKONINITIALIZEPROCESSFAILURE"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RUNDLL32.EXE"; Key: "KEEPACTIVATIONCONTEXTSALIVE"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RUNDLL32.EXE"; Key: "TRACKACTIVATIONCONTEXTRELEASES"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RUNDLL32.EXE"; Key: "MAXDEADACTIVATIONCONTEXTS"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RUNDLL32.EXE"; Key: "GLOBALFLAG"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RUNDLL32.EXE"; Key: "CWDILLEGALINDLLSEARCH"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SESSION MANAGER"; Key: "RESOURCEPOLICIES"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RUNDLL32.EXE"; Key: "DEBUGPROCESSHEAPONLY"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WOW64\X86"; Key: "RUNDLL32.EXE"; Value: "") "rundll32.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WOW64\X86"; Key: ""; Value: "")5d:T6a4,"rundll32.exe" trying to access non-existent file "C:\MADBASIC_.BPL.DLL.MANIFEST" "rundll32.exe" trying to access non-existent file "C:\madbasic_.bpl.dll.manifest" "rundll32.exe" trying to access non-existent file "C:\MADBASIC_.BPL.DLL.123.MANIFEST" "rundll32.exe" trying to access non-existent file "C:\MADBASIC_.BPL.DLL.124.MANIFEST" "rundll32.exe" trying to access non-existent file "C:\MADBASIC_.BPL.DLL.2.MANIFEST" "rundll32.exe" trying to access non-existent file "C:\Windows\SysWOW64\RUNDLL32.EXE.LOCAL" "rundll32.exe" trying to access non-existent file "C:\WINDOWS\SysWOW64\rundll32.exe.Local\" "rundll32.exe" trying to access non-existent file "C:\RTL120.BPL" "rundll32.exe" trying to access non-existent file "C:\rtl120.bpl" "rundll32.exe" trying to access non-existent file "C:\Windows\SysWOW64\RTL120.BPL" "rundll32.exe" trying to access non-existent file "C:\WINDOWS\SYSTEM32\rtl120.bpl" "rundll32.exe" trying to access non-existent file "C:\Windows\System\RTL120.BPL" "rundll32.exe" trying to access non-existent file "C:\WINDOWS\system\rtl120.bpl" "rundll32.exe" trying to access non-existent file "C:\Windows\RTL120.BPL" "rundll32.exe" trying to access non-existent file "C:\WINDOWS\rtl120.bpl" "rundll32.exe" trying to access non-existent file "C:\ProgramData\Oracle\Java\javapath_target_114250\RTL120.BPL" "rundll32.exe" trying to access non-existent file "C:\ProgramData\Oracle\Java\javapath\rtl120.bpl" "rundll32.exe" trying to access non-existent file "C:\WINDOWS\system32\rtl120.bpl" "rundll32.exe" trying to access non-existent file "C:\Windows\SysWOW64\wbem\RTL120.BPL" "rundll32.exe" trying to access non-existent file "C:\WINDOWS\System32\Wbem\rtl120.bpl"5e:T6b6,Pattern match: "www.madshi.net" Pattern match: "www.madshi.nettpf0tmadexceptmadexcept" Pattern match: "www.digicert.com1+0" Pattern match: "crl3.digicert.com/evcodesigningsha2-g1.crl07" Pattern match: "crl4.digicert.com/evcodesigningsha2-g1.crl0k" Pattern match: "https://www.digicert.com/cps0" Pattern match: "http://ocsp.digicert.com0h" Pattern match: "http://cacerts.digicert.com/digicertevcodesigningca-sha2.crt0" Pattern match: "http://ocsp.digicert.com0i" Pattern match: "http://cacerts.digicert.com/digicerthighassuranceevrootca.crt0" Pattern match: "http://crl3.digicert.com/digicerthighassuranceevrootca.crl0@" Pattern match: "http://crl4.digicert.com/digicerthighassuranceevrootca.crl0" Pattern match: "http://www.digicert.com/ssl-cps-repository.htm0" Pattern match: "www.digicert.com110/" Pattern match: "http://www.digicert.com/cps0" Pattern match: "http://crl3.digicert.com/sha2-assured-ts.crl02" Pattern match: "http://crl4.digicert.com/sha2-assured-ts.crl0" Pattern match: "http://ocsp.digicert.com0o" Pattern match: "cacerts.digicert.com/digicertsha2assuredidtimestampingca.crt0" Pattern match: "www.digicert.com1$0" Pattern match: "http://ocsp.digicert.com0c" Pattern match: "cacerts.digicert.com/digicertassuredidrootca.crt0" Pattern match: "crl4.digicert.com/digicertassuredidrootca.crl0" Pattern match: "crl3.digicert.com/digicertassuredidrootca.crl0p" Pattern match: "http://crl3.digicert.com/evcodesigning-g1.crl03" Pattern match: "http://crl4.digicert.com/evcodesigning-g1.crl0k" Pattern match: "cacerts.digicert.com/digicertevcodesigningca.crt0" Pattern match: "http://www.w3.org/2001/xmlschema-instance" Heuristic match: "e;.ba" Heuristic match: "pathext=.com;.eg"5f:T57a,Found reference to API "GetFileAttributesA" (Indicator: "GetFileAttributes"; File: "madbasic_.bpl") Found reference to API "GetFileAttributesW" (Indicator: "GetFileAttributes"; File: "madbasic_.bpl") Found reference to API "GetTempPathA" (Indicator: "GetTempPath"; File: "madbasic_.bpl") Found reference to API "GetTempPathW" (Indicator: "GetTempPath"; File: "madbasic_.bpl") Found reference to API "GetFileSize" (Indicator: "GetFileSize"; File: "madbasic_.bpl") Found reference to API "GetFileVersionInfoSizeA" (Indicator: "GetFileVersionInfo"; File: "madbasic_.bpl") Found reference to API "GetFileVersionInfoSizeA" (Indicator: "GetFileVersionInfoSize"; File: "madbasic_.bpl") Found reference to API "GetFileVersionInfoA" (Indicator: "GetFileVersionInfo"; File: "madbasic_.bpl") Found reference to API "GetFileVersionInfoW" (Indicator: "GetFileVersionInfo"; File: "madbasic_.bpl") Found reference to API "GetFileVersionInfoSizeW" (Indicator: "GetFileVersionInfo"; File: "madbasic_.bpl") Found reference to API "GetFileVersionInfoSizeW" (Indicator: "GetFileVersionInfoSize"; File: "madbasic_.bpl") Found reference to API "GetSystemDirectoryW" (Indicator: "GetSystemDirectory"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp") Found reference to API "GetFileAttributesW" (Indicator: "GetFileAttributes"; Source: "00000000-00003628.00000000.125470.00049000.00000002.mdmp")60:T438,Found reference to API "RtlGetVersion" (Indicator: "RtlGetVersion"; File: "madbasic_.bpl") Found reference to API "67,4780,3025,,RtlGetNtProductType,NTDLL.dll,"00:30:17.296",RX=0,PX=0" (Indicator: "RtlGetNtProductType"; Source: "00000000-00002964.00000000.116532.02490000.00000004.mdmp") Found reference to API "97,3240,3025,,RtlGetNtProductType,NTDLL.dll,"00:30:17.296",RX=0,PX=0" (Indicator: "RtlGetNtProductType"; Source: "00000000-00003356.00000000.116530.02E70000.00000004.mdmp") Found reference to API "21,7920,3025,,RtlGetNtProductType,NTDLL.dll,"00:32:36.609",RX=0,PX=0" (Indicator: "RtlGetNtProductType"; Source: "00000000-00003628.00000000.125470.02E20000.00000004.mdmp") Found reference to API "41,8636,3025,,RtlGetNtProductType,NTDLL.dll,"00:30:17.296",RX=0,PX=0" (Indicator: "RtlGetNtProductType"; Source: "00000000-00004440.00000000.116530.02520000.00000004.mdmp") Found reference to API "62,8536,3025,,RtlGetNtProductType,NTDLL.dll,"00:32:36.609",RX=0,PX=0" (Indicator: "RtlGetNtProductType"; Source: "00000000-00007512.00000000.125476.02C60000.00000004.mdmp")61:Teec,Found string ":\WINDOWS\system32\DriverStore\FileRepository" (Indicator: "system32\drivers"; Source: "00000000-00000196.00000000.127395.030C0000.00000004.mdmp") Found string ":\WINDOWS\system32\DRIVERS" (Indicator: "system32\drivers"; Source: "00000000-00000196.00000000.127395.030C0000.00000004.mdmp") Found string ":\WINDOWS\system32\DriverStore\FileRepository" (Indicator: "system32\drivers"; Source: "00000000-00001284.00000000.123556.03080000.00000004.mdmp") Found string ":\WINDOWS\system32\DRIVERS" (Indicator: "system32\drivers"; Source: "00000000-00001284.00000000.123556.03080000.00000004.mdmp") Found string ":\WINDOWS\system32\DriverStore\FileRepository" (Indicator: "system32\drivers"; Source: "00000000-00001500.00000000.120930.02EA0000.00000004.mdmp") Found string ":\WINDOWS\system32\DRIVERS" (Indicator: "system32\drivers"; Source: "00000000-00001500.00000000.120930.02EA0000.00000004.mdmp") Found string ":\WINDOWS\system32\DriverStore\FileRepository" (Indicator: "system32\drivers"; Source: "00000000-00001924.00000000.129314.02FF0000.00000004.mdmp") Found string ":\WINDOWS\system32\DRIVERS" (Indicator: "system32\drivers"; Source: "00000000-00001924.00000000.129314.02FF0000.00000004.mdmp") Found string ":\WINDOWS\system32\DriverStore\FileRepository" (Indicator: "system32\drivers"; Source: "00000000-00002820.00000000.117497.02C90000.00000004.mdmp") Found string ":\WINDOWS\system32\DRIVERS" (Indicator: "system32\drivers"; Source: "00000000-00002820.00000000.117497.02C90000.00000004.mdmp") Found string ":\WINDOWS\system32\DriverStore\FileRepository" (Indicator: "system32\drivers"; Source: "00000000-00002936.00000000.118456.033C0000.00000004.mdmp") Found string ":\WINDOWS\system32\DRIVERS" (Indicator: "system32\drivers"; Source: "00000000-00002936.00000000.118456.033C0000.00000004.mdmp") Found string ":\WINDOWS\system32\DriverStore\FileRepository" (Indicator: "system32\drivers"; Source: "00000000-00002964.00000000.116532.02490000.00000004.mdmp") Found string ":\WINDOWS\system32\DRIVERS" (Indicator: "system32\drivers"; Source: "00000000-00002964.00000000.116532.02490000.00000004.mdmp") Found string ":\WINDOWS\system32\DriverStore\FileRepository" (Indicator: "system32\drivers"; Source: "00000000-00003112.00000000.129327.029E0000.00000004.mdmp") Found string ":\WINDOWS\system32\DRIVERS" (Indicator: "system32\drivers"; Source: "00000000-00003112.00000000.129327.029E0000.00000004.mdmp") Found string ":\WINDOWS\system32\DriverStore\FileRepository" (Indicator: "system32\drivers"; Source: "00000000-00003236.00000000.116532.024F0000.00000004.mdmp") Found string ":\WINDOWS\system32\DRIVERS" (Indicator: "system32\drivers"; Source: "00000000-00003236.00000000.116532.024F0000.00000004.mdmp") Found string ":\WINDOWS\system32\DriverStore\FileRepository" (Indicator: "system32\drivers"; Source: "00000000-00003356.00000000.116530.02E70000.00000004.mdmp") Found string ":\WINDOWS\system32\DRIVERS" (Indicator: "system32\drivers"; Source: "00000000-00003356.00000000.116530.02E70000.00000004.mdmp") Found string ":\WINDOWS\system32\DriverStore\FileRepository" (Indicator: "system32\drivers"; Source: "00000000-00003552.00000000.121142.02C10000.00000004.mdmp") Found string ":\WINDOWS\system32\DRIVERS" (Indicator: "system32\drivers"; Source: "00000000-00003552.00000000.121142.02C10000.00000004.mdmp") Found string ":\WINDOWS\system32\DriverStore\FileRepository" (Indicator: "system32\drivers"; Source: "00000000-00003628.00000000.125470.02E20000.00000004.mdmp") Found string ":\WINDOWS\system32\DRIVERS" (Indicator: "system32\drivers"; Source: "00000000-00003628.00000000.125470.02E20000.00000004.mdmp") Found string ":\WINDOWS\system32\DriverStore\FileRepository" (Indicator: "system32\drivers"; Source: "00000000-00003648.00000000.123550.02840000.00000004.mdmp")62:T5a4,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:T11f4c,iVBORw0KGgoAAAANSUhEUgAABLAAAAJYCAIAAAD9hIhNAACAAElEQVR4Xuycf6hf5Z3nH0JWQhApIqWIlOCWUkrpDp2hlLJ0s6XbFemUbinurAxOap20Y61NUxutWjVq1Bitxvqj9sdUq9FqtFHTjCOuVCnDbHCliEgI3TKEQUqQIqFICSLZ3Pu993w/79fnnOf7/d57c+7Nve8X7z/O9znPec5zfsTzed3Sp5TyY02d32iWJB/STMR6TX9s1UzEfI4FfxNzTHnf+0pMOUVy6JBkomMvvlgy0bGlHImZ8NgrYiY8Vpjo2O3bJeWSS2rZtElyxRWSr39d8tGPSsB/+A+S//SfJP/1v0q+9CXJ+vWS//yfJTj2L/9S8h//owTn/dSnJP/tv0k+8xnJZz8r+eu/lvz3/y7BnM89V3LeeZLPf15yzjmS//JfJB/7mOT00yVr10rABz4g+R//Q/KNb9SCl+Hb35Zs3izBsXiv8uDj55vfrCX3X6hjv/UtCS4fNycf3p0Xq/AJLhzXKcf+T+kpe/acdOG9Wzj+n1kC8KkYY3rHQhhYbyG0EI55rDDRsRZCC6GFsD25f4yFcKGSdGvph/du4aCamMWAT8UY0zsWwsB6C6GFcMxjhYmOtRBaCC2E7cn9YyyEC5WkW0s/vHcLB9XELAZ8KsaY3rEQBtZbCC2EYx4rTHSshdBCaCFsT+4fYyFcqCTdWvrhvVs4qCZmMeBTMcb0joUwsN5CaCEc81hhomMthBZCC2F7cv8YC+FCJenW0g/v3cJBNTGLAZ+KMaZnJipkUfbUjz311FpQurz6qqSUw5oHY3BeGBH3vqfEYBqnnCIpZY9kXYnhyDor3CtcEY6t3+cvflEy0bFwWrjW229LJhu5+hRGHKuWPtGxDz4oqR+LvaXs0OgjK3sl/FPCPRpwSHJqkZTfS84skvKYpF6po8xFrrlG8v3vS+6+W3LbbZKbbpLceqvkhhskN94ogdT+6EeSf/xHycMPSx56SPLzn0vuv1+CWe3YIcFe5OqrJbix9dtez1VXSXCff/ITyU9/KvnxjyU/+IHk2mslWZnG16fcvxK8V1AvjHzddZI775TgenFz8Hzx9HfvlvziF5LHHpPgPiMPPCD52c8k2pnFqTGmX/iBNcb0DAroemluIZSRYRd6ryyEEguhhdBCaCG0EBpj2uAH1hjTMyig66W5hVBGhl3ovbIQSiyEFkILoYXQQmiMaYMfWGNMz6CArpfmFkIZGXah98pCKLEQWggthBZCC6Expg1+YI0xPYMCul6aWwhlZNiF3isLocRCaCG0EFoILYTGmDb4gTXG9A1LVaCCREPQveBsTfmTBrymeTkmVfnbNFs1E83qdxqghfuIzjdoVBiIGu96FTnyqOYPGkUFuM7WrZKySnOaRq+obrwYmcr3Kcm+fZJSNmvkgd53X4lJ4F7JfcYkcSQm+eyzEjxfDMUL1PM++miJIffeK/nhDyVwLVTbOPaOOyQYCu4BP8RQ99wjuf12CU6Eoh97kZ07JRgZUoe9EMJbbpFgZFwCvAVvEi4BwVOAe+DGwqW3bJHgjzQITBuTfOQRCXwJ79muXZLHH5egM6Qdnoa37uabJRDv735XgkeGvyxArb/3PQneHNwcdIZL483BnNVpWZwaY/qFn8XF48UXX2TTJLw4TbMdd7US+0e62k9SjlVjlgYWwprjRRt8bFRnC+EQC6GFsDMWwkoshBZCY1Ye/CwmBoLUwN2B+t6GrgFHHl7vMOehcufccvLCeitQ2dWAiutYqt/AyA4VJjpRGeNcIzssGSyENceLNvjYqM4WwiEWQgthZyyElVgILYTGrDz4WUzAjiqyVNkV6Rpw5OH1DnFvvWcZ1Tm3nLwM6q34vwoO0uyqkwu2OpP2j+DY+Qw1YP4j9IWFsOZ40QYfG9XZQjjEQmgh7IyFsBILoYXQmJUHP4sJ2NHgZ26MtLbHxmY7/kSfhq6WCBrjz3xgbIk0hwz6xJ8nLydICAftTSXWNOaW3C3uqrTEn80IaIwb6ND8bFqWMBbCmuNFG3xsVGcL4RALoYWwMxbCSiyEFkJjVh78LCZaTWnMxqYF2zM99GdX59whg11dh7cOhWMHtDaejAzqrWMpza46uWAbMCjA4k9sND8ru+LP3BIP7NrOjWhvGpc0KGQH19Nw6FCJqXcuHy4xqZ5+PubKK0sMRn79dcm//ZsEYBqXXlpiUJqvWVNicCym8fvfS/Aio3Na0PLdmNR5v+bZmMlmVXbHoPNZZ0nKao1Ospwiwo9plPJjjXga/BAcOCDhUJzVeTG4Is5K54yncPBgiXn6aQlGTshQPO/x/iGvvSZBsY1jAUtkOAAqdQRrJ2LvU09JnnxSgllCNrDe4549kgd17df64pB790qeeUbywAMS1PGw1rvuksDT6hqD1U0xZwQ3FmaC1VwholhHFPcKS7BC27CQJu4kOuMCcXOg1tBj+D9mhTnjbuA+41hcPs5b/3sHZoULRDANBEqPPwdoWJwaY/qFn9/EwKMaYnvXRv3nzECztHZoGivtkTEPaW1vHba18WRkoERaRE8mhCycZtvRrd6On2hvGiOxPfRqGWRkh6VOvdq2EFoIG2hxFkILoYXQQvhzC6ExZr7w85sY6VR5o/kJWrs1dHXoao9UDgHogO2G1saTkYESaRE9mRCyaRq0Nz+72vGzddjWxpLa8yAjOyx16tW2hdBC2ECLsxBaCC2EFsKfWwiNMfOFn98E1CirVKtl5Z8NI9u7xuk6sKRdIw+J7a19WhtPRgZKpEX0oglh05LbuxpLas/nGtlhqVOvti2EFsIGWpyF0EJoIbQQ/txCaIyZL/z8Jrpca7BdMauuvejWEDt0bQ82Wol7Ww9He26stJy8VJSosqthqlJqA+3Nz6722JIbB1Ta4/j5XF0n7RpwyVGvti2EFsIGWpyF0EJoIbQQ/txCaIyZL/z8JgZO1ZD3xm30aVrQ2GxHxjkQLRH0jNv5wNYOrXtPdrR8ZkbCsqnDtWJ7pVulsXS3F51GbMRGbschS5RmorPTVUNYV2LeeksCB0hKUK2nVSfgaRxqUOvPBmV9KQ/GoMo/4wxJ+ZAEs4IAv/yyBCO/8ooEq1CioMKxv/2tBNNASYy91CcNTlTer8E6oiqi5fj9ieGKnX8bc+RIieF5MXI5X6LT2L9fcvSoBJfPB6ov0p/+VGLSrF7QCPkdlpdwnQSqCcPHsbgE/JGClev990vgaVgrEpU6anFoDIITIajyUYvXDQHqhZExSezFyNDFeuf6JBEsDQozgZbjvDgR1Br/+HGiutPiRPVJ5mdaeb6YM54v7jOeIP7QgHcSNxZ6jP+cwaVxRfUniNcM97n+EkL49d8Ri1NjTL/Ix3hylo47QermzEKNY7qYLsZMIJWqFkILoYWwJRbCCSp1C6GF0EJojBkb+RhPiMXJTMp0JWaUVKpaCC2EFsKWWAgnqNQthBZCC6ExZmzkYzw2/p/RzKTMlmEmoZWqhdBCaCFsj4VwgkrdQmghtBAaY8ZGPsbGmP5JpaqF0EJoIWyJhXCCSt1CaCG0EBpjxkY+xsaY/lm1SoJa/KWXJCivoQRc0FJ1gqU5zURKZBT9WMIR3oLiG9PAoqMszY/PM+TttyW4G7wElPXl5hic6OabS0wdHLt9e4nBnEvZqAHiS9jHkcurMbj8P/5RUspnNbgbW2K2bCkxpWyOQeVWyoUxaS+uSPLJT5aYzZslSSb3xWAp1OyEMfh7x7nnlpjTTpNs2iTBMqpcSRLBspNYKRSLf2IBTxTu9YoZQ+3bJ8HIKK936eqXuAR0xlBYgxSTxCVgZPxx6LnnJLgiiPdNN0kuv1yC1U0hZnBa3MknnpD88pcSKH3daqBtuBsYCu8G1pj91a8keApQPswKV4SR68fCljFJvGZ4oBBCKG79fcac8TLoW8fi1BjTL8O6xBizKFgILYQWQgvhVDCUhdBCaCE0xvTCsC7pYPB/Fxz8Pwa9vbjbZnliIbQQWggthFPBUBZCC6GF0BjTC8O6xBizKFgILYQWQgvhVDCUhdBCaCE0xvTCsC4xxiwKFkILoYXQQjgVDGUhtBBaCI0xvTCsS4wxiwIkBypyXBli8O0+/XQJgGxgZIBqe+tWCTonMduvERGF1ZTyRc3eGJSmUCBMA8t74hLQ+Y03SgxIsqF8UJKsRkwMVnPPPRJoDDoDWtynNOWyWij84oeYBu4VNU8XSj31VEkp72je1MiJ0q0DP5ZggVaOvDMGl4DlamGAfNwo61H0190DwlCXSZTmWOARI2MaCEaGEmDJSkwSdTxmVZ9k3T3gpRgKx2Lke++V1GUDF4gTwT1wXnTGJeBEmAZeFTgPLh+PDCNDCOFpGAr3CmqNS8CcMQ3sxR8L6jcHk8TdqF8+/mnoQ2FxaozpF36NFXxhAXubpcixahYBvznEQmghtBDOYiEMwTQQC6GF0EJojFkg+DVW8IUF7N3GmP1jt6Zna6OZkCyBMWOxsI9gocZZPlgILYQWwlkshCGYBmIhtBBaCI0xCwS/xgq+sIC922i61fu37m1tNBOSJTBmNPEpLMgTWZBBlhUWQguhhXAWC2EIpoFYCC2EFkJjzALBr7GCLyxg7wT6DH6O0zigtdFMSNS/nBHkR9D6vJqfs6/GFNjbNGIX+se9+efyxEJoIbQQzmIhDME0EAuhhdBCaIxZIPg1VvCFBeydQJ/mZ2Uj0tpoJuRYNSPIj2DQ0vpk41vRtd10jhvxZ2vjskcq5sOHSwzW8yxlkwQV8wc06gD1EvmSS0oMK+ayMYYrdrJwl85YSRIWB3uEimAaWFUVDF61BnSGHpeyNQaVTFknwcio6+DDuDm4BAwFbcPe9BREniGTEG8EFXIp2yS0R1Hc5g7P8moM5vyHP5SY9LjlrTvnnBLz059K0rsh9xmv94c/XGJKuT0m3cmbJbALFLKoetEZe1H1oviGmUDqMBQWeMRrB02tL8L5wx9KMDICB8BTwTqTOBbnxVC4GxgZQ/3kJ5L6XpwI9xmzwhPEsRgZLo2R8bhhU9AnLA2KaaAz/jaGf8CwuPqLhEmiM9Y+xTRwLEbGUAiOxVqveoEsTo0x/aJfeYIPPWDvBPo0P1s3IpVGMyHHqhlBvu3x6XRtjNkOcv+unssPC6GF0EJoIUx1PBTIQljZixPhPmNWeII41kJoITRm5aFfeYIPPWDvBPrEnxihdbTWRjMhx6oZQX4ETUvrBkCH/LPeHwcuYyyEFkILoYUw1fFQIAthZS9OhPuMWeEJ4lgLoYXQmJWHfuUJPvSAvRPo0/ysbERaG82EHKtmBPkR5EeWN8DI1yD/HGx3Dbj8sBBaCC2EFsJUx0OBLISVvTgR7jNmhSeIYy2EFkJjVh76lSf40AP2bqPpFvvnxtbRWhvNhByrZjStD675ib2tnfNRuT0fi6OWNxZCC6GF0EKY6ngokIWwshcnwn3GrPAEcayF0EJozMpDv/IEH3rA3m3k/jhw8LN1tNZGMyHHqhkLPEG05xa05z5xu+lc6bbMae7C7L14QSPeUsqXNFq4rykS9Yd0IiEtHXmORoCKrFkjScderUGVL/Z4++0lBifiGpWUjTdjKMC8OdslcNr3aPREd9whWbVKghOl2y4LaX7ucyWGV6SzSvdZ/pSgj4jHpue7LYbL1fLG6p8hyq81Anz4wgslCXlk3KmsXi155x0JH2j5mUb+pfDYp5+WoPhGsLAk7BF1PIITQZDgPPVg2UkEI6NSh7dgVlACOACCuwHnwV4YAowIqgmLw5xx23fpX3RwvZhGvoqYfKtjMGfsheLedZekruXwUlwC9t50k+T66yXXXCPBrLBCKRZ3xX/d8IcG/FUCdwNvHd5JqLV2ZnFqjOkXfnGNWRpkYVm2JGGwEFoIZ2MhDFgIJVkCLYRNLIQWQmPMJPCLa8wSINvKciYJg4XQQjgbC2HAQijJEmghbGIhtBAaYyaBX1xjFpXZmnklob5gIbQQhlgIAxZCSZZAC2ETC6GF0BgzCfziGmN6JgmDhdBCOBsLYcBCKMkSaCFsYiG0EBpjJoFfXGNMz+zbJ0Hx/b73lZi1a2sBOLaUByVQoHUa7FXHg+QcPFhitmyRoHOdNGexR6wkmS5f3BIj799fYnCif/kXyVlnSdJqTK/HYKiNGyWYRrI4WbGzlGdj0rG7NeKWpVyiAThWoS0/HwOZxIqdqFTheLg5uCLc523bJDgWfywAmzZJ4KUjQJkLu4Co3HefBEU/Cmgci9Ic9w71NIwI9TS0DctOwvFwgZgVCve6t+AScK+gbbgEjHzPPRIs4AnZwHmxFihONNGcEfgSgnuFlTPxFDAyJomnAMXFncTIePo4FpcP5cM0cEW47XhF8SIhmEbd/3WSLE6NMf3Cz6IxpmcshJE0ZwthPBZSZyEcYiG0EA4z0ZyRLIEWQguhMcsdfhaNMT1jIYykOVsI47GQOgvhEAuhhXCYieaMZAm0EFoIjVnu8LNojOkZC2EkzdlCGI+F1FkIh1gILYTDTDRnJEughdBCaMxyh59FY0zPWAgjac4WwngspM5COMRCaCEcZqI5I1kCLYQWQmOWO/wsGmN656gGiyWCPRrxJVTq5QyNVuo4Lyr1VE+/I6Eu7ohBHY9jYRfHjTgG04Bqchoj2BCDkaFAac7Cjh0SmCeWQuVQVddKewXM+fe/LzFHjkjQuawqkrJfI6tu8s3RC+TIcEtewisa6cx1YnUh3KS48icM6CJmtXlzieFTOE2DtXwhDDATeBpUBJIDIYTFobzGieqVen0vLgGdJ5Kr+lCwOFgNVATCgDuJvTgW50UmcmmMjEeGS8Ajw63bpY6HS8CdxKxwLHwJQ+Ep1B83zgsxwzRwRTgvOmNvfY1ZnBe3HX9J0WfE4tQY0y9SfBhjFgMLoYWw2StgzhZCC2HnXlwCOlsIYyyEFkJjjCLFxwkgfq+5T+nq2dVuzLLBQmghbPYKmLOF0ELYuReXgM4WwhgLoYXQGKNI8XECmC4eZKOLrp5d7cYsGyyEFsJmr4A5WwgthJ17cQnobCGMsRBaCI0xihQfC8105cCf4zdW2o1ZTlgILYTNXgFzthBaCDv34hLQ2UIYYyG0EBpjFCk+FprpyqHlZ2VjzHZjlhMidSiC33yzxLDMVTF74w3Jn/4kKeW8GAyFDAvtaXjecmHMeeeVmE9/WpJkQ3VCBemdd0rMhLPCyFL0//GPJabutKg2oSJY7vKOOyQADwWXgMuvXy/WHTyBz/dUCRyencvTEhXRG26QvPKK5NlnJfjrAJ+R5hOfkNDxylua38RceWWJYXldL5ERVPl79tSCzqjjISqop/FS4m3AXowMQcKyk3ih8fcPLKNaX1UVlwC5wuXDH/LtikHniW4dzgsTQ2c8fRyL5VuxyigeCm57XZ7xXmGSmAauFyfCsY89JsFQ+VZXgqeAxU6xZDZuTvUVZXFqjOkXrVwWmGMdOlfZGLPdmOWEhdBCaCG0EI6yGryUFsLxbx3OayGMybe6EguhMcsUrVwWmGPdOjcoQlp3xZ9d7cYsJyyEFkILoYVwlNXgpbQQjn/rcF4LYUy+1ZVYCI1ZpmjlssAc69C5ysaY7cYsJyyEFkILoYVwlNXgpbQQjn/rcF4LYUy+1ZVYCI1ZpmjlsvAca1O78Rsr7cYsGyyEFkILoYVwlNXgpbQQjn/rcF4LYUy+1ZVYCI1ZpmjlsvDEkqNpQYdmAz3r7cYsE846S/LrX0viP4D8bwB7ARZ1qx870d6kXljB8h3NlyQqDOWY5GMfk8AB1qyRQDU55w8XSXk15uWXS0ydCy6QHD0qWbVKUtZJsF7rOedIElhyVkhrrm6oLaOql4+94NChEgM9xpKkSQjfjEGVixNxmdy/KDF4oO++K8E0GLxXqyXbt0uwjCrXXcSKjtAnFN/oDFFBUKmjRIaYffWrkr/7O8m3vy25804JrqjuS7jAurdAnrHoKK5o924J/BCX8Nd/LTn/fMktt0ggORCVp56SwExwLCwOz+iZZyRQIIyMVTfhlkh9KFwCOuN6cdsxDSwNimBW9fcZ1ooT4RJw66rnZXFqjOmXptIwxiwOFkILYcBCaCG0EFoILYTGmF5pKg1jzOJgIbQQBiyEFkILoYXQQmiM6ZWm0jDGLA4WQgthwEJoIbQQWggthMaYXmkqDWPM4mAhtBAGLIQWQguhhdBCaIzplabSMMYsDqiYRxXBW2KwSCPcMmnb2zGwGkzjyJESAwd46y1JOU2CzskfapeP80I20hXtj4F6YWS4ZSmvx6SVQh+KwcqCvCKoSJUvfEECqfv850sMT1QFNjWKXTG4V+eeW2LACA9fXyQK1qQEr78uATgRXuDLLpPgocDDMRQVCOX1Ll2VEVXvr34l+ad/kqAIRj0NT4NrQergLVj+EdOAieG8qPKhfLh8XAKqfFwvNAbq9fDDEqgI5oz7jEu4+24JVkbFusDf/74EbyEMHzcH/2mAAOPNgU3t3CmpaznOi5cBBogbiyu67jrJjTdK8LcDnAizgsPjr4y4fNwcdMbN0WNZnBpj+oVfXGNMz6A2tRBaCC2EFkILIe+zhdBCaIw5YfCLa4zpGdSmFkILoYXQQmgh5H22EFoIjTEnDH5xjTE9g9rUQmghtBBaCC2EvM8WQguhMeaEwS+uMaZnUJtaCC2EFkILoYWQ99lCaCE0xpww+MU1xiwpULkePlxisGZjqqdlL0rk/fslpbwmOaVIFMyKu8smjVrc6SXmM5+R/PnPklHIBaKSSXoswLUOHJCUsjfmk58sMUm93tDIsaX8WiOqCdeo+xI9fI0EDwWXj71JvAXMKv1V4iWNaHn9vLh19c6l/FSzLSZ1/pNG3zr9cwDtEXaBwh1lLvZiiU5UveiM0vzrX5f8r/8l2bRJcvXVEjjPXXdJ8I8BTxTKh0BEsbcuk9C2+l6MDD/EupqQSehx/bz1K4LVILfdJrnpJgl0EU8BRgS5gpjhVcE0YK14J6uuxWMRvBtYZBWTvPxyyd//veT66yX4zxneHL0bLE6NMf3COoDoivDMiWL6495CV7sxyxZUvRZCxUJoIWw6DzywiYUwBE8URoTU9clCaCG0EBqz7GAdQLIExkzM9Fe7k2ZvV7eu9gqzpUJLY31XbMGGMf3RvJEDLISKhdBC2HQeeGATC2EIniiMCKnrk4XQQmghNGbZwTqAHKvmRDH9cW+hq73CbKkgLV0/W7fzhjH9MXiDGyyEioXQQth0HnhgEwthCJ4ojAip65OF0EJoITRm2cE6gByrpsb0B5o/Y2P4jkufuKurA/o0jaDZ1TVIZGR7VwdjTiDxRT9mISQWQgth03nggU0shCF4ojAipK5PFkILoYXQmGUH6wByrJoa0x9o/mwa497cOPt9b9lubWy2QT4Q25GR7V0djJkXgze4oZSNmrdi/v3fSwyOxTKbALX4K69ISnkwBgoEDh6UlLUSzKqsLpL1GnCGpmyWfKjEYBo4L+QZK4WW8mTM6tUlBvKckHuF88I90hW9GpPcckPM1q0l5i/+QlLKzhhMA8aLK9q3T4KaEJ5WztaUHTGHDpUYnPfUUyXQ41WrSkwpf4i59NISc8YZEipfeVTzTsxHP1pi+NcQFO5wPAS1OGSy3hklMoJp5No9BuU1hrr2WsmGDRKsdXvRRZIrr5RAgXAirFEJqYNdwIjgaRgKBgiLg/JhEU7oItbkhGpiL/4xYBqYMwKpwwPFnHEiXGD9ErAXNxbnhS1jQdq9eyX182LpVyx1i3Vi8fRxgRZCY5YSM9VNJ8eqGcFUaTRqI9K1N7d3dQCV/g2xMXQZ0jWIMQtDfB2nXzILoYVwJhZCC2FnLIQWwiYWQmPM/Jipbjo5Vs0Ipkqjjo3B9oDYgo2u9ubYhmHvWdDY2qe0DQ5GdjBmXsT3ePolsxBaCGdiIbQQdsZCaCFsYiE0xsyPmeqmk2PVjGCqNOrYiOS96JbbW8cBTV3UwB7TNO1z7mDMvNC39JiF0EJoIbQQTiVLoIXQQjgI9loIjTHzY6a66eRYNaMZVCbxJzZaG+NR2M6NsT2CxjxI/tm6nTeMWUgGb3ODhdBCaCG0EE4lS6CF0EI4CPZaCI0x82OmuunkWDWjGVQm8Sd2te5tdnV1QJ+mMe5lU8f42mXErJpGY04UR49KQPOCDkBFcfzoGK4keYoEQ2HxT+7lOpNvaFCL367ZoHlOskaWykTRv3atZM0aCZdRLa9rLouBmaQLfDeGNqWXkJ7RPZp9muc1uJN/G0M/VIv72tckCXkoWK/17LMlvEBVPu7VR8ZJ8vm+EnPNNSWGx+ofCyDApTwr0c54ggDCX9aVGP5FI68tGQPlQ/ENMUPVC8mB1MEf0Bl7b7lFcqMuWIqRH39cgv9SQNueekryxBMSKAEusK5A0OOdOyX1u4GVMyGidQ+HeqEz/nJ2660SPIX63YAuQpDgWnURxXuF+wzzxBPENPC4MTL8EC6NoXDbEayqipExSdwcvXwWp8aYfhmUEcaYpUKSDQFVL777FkILoYVwgIXQQmghtBAaY8ZkUEYYY5YKSTYEVL347lsILYQWwgEWQguhhdBCaIwZk0EZYYxZKiTZEFD14rtvIbQQWggHWAgthBZCC6ExZkwGZYQxZqmQZENA1YvvvoXQQmghHGAhtBBaCC2ExpgxGZQRxphFAys61pOqXvCY5l81L2u2a87RAFEvTuPUUssZWGZzvwZS96YG3K+BeuF6X9Pg5ug01heJrgWa9irrq3vBtHE1ee01STIi5QOSEcfqYqdwnFJ+oxFQxyZw2ydCb6z+OQDgrwOlbNU8qMHe2vt82mkSmgkMAaKCtRNRBKMzVARlPYbCNGAmKOuhfJgGxAxBHY8TwRAQrEIJ90BnzBnatn27BIp73XWSG26QwC1xRXjdcewVV0j+4R9qufhiyde/LvnGNyRYoBXmiXzve5KvflWCkS+/XHLJJZL/+T8lWEX2wgsluISrrpLgtuM+4wliBdqrr5bgr0EY+bLLYlicGmP6BV9JY0zfZOurhCZG4DwWQguhhbDlfbYQWggthBZCY0wDvpLGmL7J1lcJTYzAeSyEFkILYcv7bCG0EFoILYTGmAZ8JY0xfZOtrxKaGIHzWAgthBbClvfZQmghtBBaCI0xDfhKGmP6JltfJTQxAuexEFoILYQt77OF0EJoIbQQGmMa8JU0xvTNiLIeaJU/2bEsvn+tEVCaJnZolFWaSUD1NQKYJ/ldNX+I+fSnS0ziBzHw4TPPLDFYohN7y/skXM/zExIUkFhkFdMoZVcMzpsWaFX0TtaP5RWRz2mET31KAjZskCRe0EzAiPfq0ksl2QpiUE+jNN+0SYISGSuFop6GqOBE3/xmLddeK8FQsAtc0Ve+IsHev/97CS4QVf6OHRLoBAwQne+8UwKXxlBYgxRD4T5jkjdWzbNuNddfL1Gr4c3BncQywXgp8RJu3iyBauJvFrgi2OPGjZL6NJBvfUtS91K8ZnhzcKxeEYtTY0y/8LMIjlWzeEwXPy10tRuzdJlM6iyEEQthwEJYYcR7ZSG0EFoIW2MhNGZlwM8iyBIYM4rpEmUy6oc0e7u6dbVXmC2lWhrru2ILNoyZgMmkzkIYsRAGLIQVRrxXFkILoYWwNRZCY1YG/CyCY9UsHtPFTwtd7RVmSylp6frZup03jJmAyaTOQhixEAYshBVGvFcWQguhhbA1FkJjVgb8LIJj1YxiukQZboS6RfaiT2yJ/ePeZldXB/RpGkGzq2uQyMj2rg7G1JhM6iyEEQthwEJYYcR7ZSG0EFoIW2MhNGZlwM8iOFbNKKZLlJmNZrtpjy25MffHRtd2a2OzDfKB2I6MbO/qYEyNI0cko3gt5gMfKDF1IXzPeyRr10omWrMRx9ZlAys6TnRsKW/EjDpWJsmRyu81wiuvSMgI89ysETDnBO6zsGqVJHFQc1jzaAzMc/CfxYZt20oMz3tMgmPT4q6IzAqKW1ZryvOTBH+V2Bjz6qslhldUnpRs2SJBlY+7g/zkJxL8KQUKBPfA6pfYCweAmeBfO5ashF3UhRCGUBfR735XgkvA9UJTcaL6upoIRAXahkni2IsukmAoLLOJO4mnAGvF6qZY6/XJJyUPPSR5QJecffhhyWOPSbAS7A9+IMFDwbKiuCIcizlj5VvMGWvM/vKXElzv7t0SrIurYXFqjOkX1hdAywBmFNOlgmx0tVc2Il17c3tXB1Dp3xAbQ5chXYMYMxYWwsqxFkILYXcshBZCC6GF0BizALC+AFoGMKOYLhVko6s9bwy2Z+uNYQs2utqbYxuGvWdBY2uf0jY4GNnBmBoWwsqxFkILYXcshBZCC6GF0BizALC+AFoGMKOYLhVko6s9b0Ty3vEHrDAoZiLsMU3TPucOxtSwEFaOtRBaCLtjIbQQWggthMaYBYD1BdAygBnFdKkgG/nnbEXBXfXGeBS2c2Nsj6AxD5J/tm7nDWMmwEJYOdZCaCHsjoXQQmghtBAaYxYA1hdAywBmFNOlgmzkn7MVReeu1r3Nrq4O6NM0xr1s6hhfu4yYVdNozNh8RFP+FHPgQImBAp16quSMMyRwgPIXkuZVnnmhP1QkqhPwFnz3y1qNAgdIFveCBlbzBY3MCpePOqeU82NwN955R8J7hUx23r+NwchHj0p4Xl1FFuflI6NMig9jkqefLsF5EZ7orBKT/oTxpuQDRaJgGphkXerw5mCSVE2F97lskTzyiAS1OIpg1LKo1O+7rxasnHnHHRIspIlgIc177pFARO+/X3LvvZKf/UyCzlBcCAOq/KefluBO1pUAe2EX6PzEExLshcagM05UD6bx1FOSPXskuHzkV7+SPPus5J//WYJjcQm4sbDHutThinCiZ56RoDOm8eCDErxISF2A9R8Oi1NjTL/wq2mM6RsLoYWwOa+FMMRCaCEcBmaCvRZCC6ExZh7wq2mM6RsLoYWwOa+FMMRCaCEcBmaCvRZCC6ExZh7wq2mM6RsLoYWwOa+FMMRCaCEcBmaCvRZCC6ExZh7wq2mM6RsLoYWwOa+FMMRCaCEcBmaCvRZCC6ExZh7wq2mM6Zt1mnKz5LgyxYBVGl2Ts5Q9mr0xWKTwrLMkYN06SSm7Nfs1+2JQuGf9iIEwlDM1tNa/0eB6ATpDRHdoXtbI3jztmLPPlpTyU41a3HtKzOHDknS9ojH51DHnniuBw8O1cCIMlZZgFW1LL4O8wBBgXD7eOpw3HfuQ5tWYJITi0qXsjMGJWE+j6kUtDkOATkAmcSwq9XowFPbCiOqXAMfD2pgwT7glRkZQ9COwZdwNDPWjH0lgy1jOFCtnYtFRrMiKxU5vvFFyyy0SLJSKewWrwRXhbwe7dkmyMlX0CcGJ6ufFq4JXFDKJK8J7hUniRarvxZ8hqn93YHFqjOmXWC0ZYxaDdRbCYSyEFsIm6VgLYYiF0ELYdV68KhZCY8woYrVkjFkM1lkIh7EQWgibpGMthCEWQgth13nxqlgIjTGjiNWSMWYxWGchHMZCaCFsko61EIZYCC2EXefFq2IhNMaMIlZLxpjFYJ2FcBgLoYWwSTrWQhhiIbQQdp0Xr4qF0BgzilgtGWMWBalr0zqTAGUuEG/BPixxV8qDMWvXlhgsWFrWwVrFAb74xRIDA0QtHmY0BU9Uno350IdKTCmvx6Csx3lR13384xKYGKAwlB9rDkv4yOQpJFGpnmiNZNs2SRIkZV3tGZWPFYnO+ZOflEAXMckzz5RgkVU8hVI+o9Fbpy8/74aCvWmFUrle7OXIp2rgLbkcj8lSFIN1RHF3br1VAtmAiaFwR9GPWcEBsLfuHrgEdMZeHAudwJ2El+IScIGQnH/8RwnkCt4CeUZnzBknwm3HeXEs/rKCRThxXlwgnhH21s+LkXEn8cjqdxLa9sMfSrAuLh4o7hWUD3th+Oh8550xLE6NMf3CL65y/GNeiTFmQbAQWghnT2QhlNsuYK+FUGIhtBBaCI0xc4VfXCVL4BIRwtlKo6Wxviu2YMOYxcJCaCGcPZGFUG67gL0WQomF0EJoITTGzBV+cZUsgTGLyGylIS1dP1u384Yxi4WF0EI4eyILodx2AXsthBILoYXQQmiMmSv84ipZAmNGMl0MDMsD7Mrtg+3cDppd+djMyPauDsb0hoXQQjh7Iguh3HYBey2EEguhhdBCaIyZK/ziKo37tWYks/XA8Gdu79oe/Gy2I7F/bgQj27s6GNMTKL7T+pZf02yVVFUERfDLL0uSPV6kuV/yiSJRbeNQ68RMtupypmvWSA4dkiRk5I0bS0wpj2lu1/y7ZrdG7yT2nlUk5BKNTBK+VMqvNTjvfs3nNAIe6JEjknKKpshaoBBvDDX4j28D5flDkqS4uM+4QLk5F19cYuoXiGNfeqnEwNKffrrE3H67pJT7JPiHg2U2sb4lpA4VM4rguluicIcSoOiH5OzZI4ERQcweVBOrCwP2YjVIDDXR9cI97rlHguU91RB4IqQuolARXAJue32dWHTGFeHNwWuH68WbU9+Lp4ArguPVlQ/H4hnhTuJlgHni5kCP63+VgBDqiVicGmP6BZ9jEPUvZyRwrS4HG9kOKv0bYmPoMqRrEGP6xkJoIbQQtl4gjrUQWgiHsRBWYiE0xkwIPscg6l/OSOBaXQ42TvuASh/QNWbDyA7G9ISF0EJoIWy9QBxrIbQQDmMhrMRCaIyZEHyOQeN+rRkJXKvLwUa2oxGwxzRN+5w7GNMTFkILoYWw9QJxrIXQQjiMhbASC6ExZkLwOQYwQGQkcK3oYF3bg43Wn62N4xzbup03jFkcLIQWQgth6wXiWAuhhXAYC2ElFkJjzITgcwwG4teVkcC14s9Ye7R2yD9bW2Jj65jYFVuwYcxiIXUtd5YXYlBvwLUOHpSU8nmNgOKbtfgqDW1KFodkZy7guSUGJ8IlcBrlvBhU5igCTz9dcuGFEijBgQMlBudNK1jui0lG9Lxmj4R3QySnrBN5/uAHJZs3S9LNATLyiCVJVUSb/0QOWLWqxKTzivLB8Ola5SGNTBIjo7zEHykwK/zNAiuy4r3CBT73XIlh1fvUU5J9+yTYu3evBNqGkaPvHU99AU8oEKp8FO4ISnP8U8F563KFOh62jP8kYclKjFw3BFwg7hVeDvwBAHux+CduDtSrblMQM1wg7hUeGY7F3YCW46HkZxqD9wpDYW/dLetPAf/NrU8DI+Pf5Le+JdH/urE4Ncb0i1YIxphFwEJoIbQQTsVCaCEcBvfKQhiD98pCaIyZH1ohGGMWAQuhhdBCOBULoYVwGNwrC2EM3isLoTFmfmiFYIxZBCyEFkIL4VQshBbCYXCvLIQxeK8shMaY+aEVgjFmEbAQWggthFOxEFoIh8G9shDG4L2yEBpj5odWCMaY3nntNUm9kH3hhRJTPxZ1LKqCz31OQj6pIW9qJkJlshzUvK7ZpZF1RHFzAJyHDkAOa5RPYJFVzOr3GgyFC5RZYS1QLDmLK4KIovMbb0jSoqM4r0rscemNgdOWIxrxtFJ+I+FQuDmPacBmzR80+qeT9UXCWW3QVPdi8dOvfU3y1a9KLrmklquuktx2mwT6dM01Egz19a9L8OeBLVskX/mKBHP+8pclqPJhj1h1E74E53lQF/DEKpTYC2+BHyKYFXwJ7oF/G3CPW2+VYKhf/rIWWByuCHPGXtxJ/CkBNgUTw6uCFVlxRVCvK6+U3HWXBE8fufFGybXXSq67TvK979VyxRWS7363Ehanxph+KcaYxaUudVACC6GF0EJoIbQQWggthMaYBaQYYxaXutRBCSyEFkILoYXQQmghtBAaYxaQYoxZXOpSByWwEFoILYQWQguhhdBCaIxZQIoxZnGpSx2UwEJoIbQQWggthBZCC6ExZgEpxpglhlau62QVylJ2al7WoPjeHQO7KGV7TNorzoO9R46UmDqoVUo5FJP2Ph0DxS2rNXCeMyQoqHDe4/PSCH/+swT3qpxeJBhZp1HWavQSsNgpOyt4CqV8IQb3Cgt4ovhMC4feI9FJomLES3j++SWGQ+laoGkv3ufXNPXXW0w73Zw6N0tQuaLaxp9SoCJYpBHLMEKQdunKmfAHuNbOnZI775SgUkctjrf/7rslcDxcEaaBzlhXE6tu4l2BxuASvv99yY2qIsj110t27JDgGWFW2Itjt2+XYFZ4vrh8PEGoJl4GHAsDxH3GebEy6j33SLC3vowqtByzwn9H/vZvJfi7A/50gpWdL7hAsmGDRPeyODXG9As/kicbL07D1gnpGqFp7+rQsCDTMGZAsEELoYUwgKdgIbQQWggthBZCY8z84UcyMVCdCHsoIzssLBOdrqvzyPauDpFx+hgzDsEGLYQWwgCegoXQQmghtBBaCI0x84cfycSknjNp/3myIKfrGsRCaBaFYIMWQgthAE/BQmghtBBaCC2Expj5w49kostzBu0vztI05pamvasPGpv22CH/zC1hgKn2uN10iNuRentXh6ax2YUWY+ZAsEELoYUwgKdgIbQQWggthBZCY8z84Ucy0SU5MKJmG/1zt9izvt20NO3xZ26JP1u348ak262NzXbTEn8aMyaXaB7ViIqcc06JgYo8/XSJQT1ZyiuaAxoU34gsO4n1LUvZITlFPA2dUZthdUCQ9u6uKu6rMVhkdf9+ybvvSjAUaiTeuuOnCjnrLAmGwsqRp54qgS9cdpkkIRpz9GiJ4eqmq4oEA/HGCriEM84oMdhbP3bNmlIJ3g2cCJ3rDo+7gWkAvKK87xBC2NQdd0iwhCNeHRjCww9LYGIQFZgJyvp6lY/z1r0Fs3rgAQmOxT/grB+V4F7BPOu3DnIFI8JQEEKIKDS1ftuxTiyePu4G7hXWIIUB4o9hMN7LL5fA8BHMCsEV4W7gTuKKcGNxCbjPdQ/H09fvE4tTY0y/4JOaGWhPpGlHt3p7/efIdnQY0HVU13bemLS9q0PrT2PGxELYaSZp74wKWggthDivhdBCaCFsj4XQGDMKfFIzXZLT5UJd7fWfI9vRYUDXUV3beWPS9hcTM121mzETYSHsNJO0d0YFLYQWQpzXQmghtBC2x0JojBkFPqmZLsnpcqGu9vrPrvZmGx0GjDwK23lj0nZ0APW9xnRhIew0k7R3RgUthBZCnNdCaCG0ELbHQmiMGQU+qZkuyRnpTl0/Y8+R2/knQM/6dtyYdDs3xnZsGzMRFsJOM0l7Z1TQQmghxHkthBZCC2F7LITGmFHgk5oZKFCkaUe3ZqPSbdCCPmiM7c1etDTEXSO30Ript3d1aBoH7fGnMXOEpasC90BVkAroNyXrsGCpkAzhS5onY0YZwnOaa2KwQimCoQCWA0xLZV4dg2PLKeoAp2rKBo245cUXl5h03o0a1WMVM8wKV/TJT0q4yKrykY9ISnlHczTmj38sMZykHotJ4s8BmzeXGFwgFh195x1JYksMXu90+dK5HL/kGH0KEG8U6rxAKAECP8Q/FawGCcfDiWFxUM3vfldy000SnBfFN9QL08Din9gL18IkIQywC1w+rgh/lIKKwLVwn3EspoFJwmnhHlu2SHCfsRfnhVxhGrhe3GdcL/ZCrnBFMDHMqv4UMMmqifEp4D9JmDPeOrw5CDpfd51E18VlcWqM6Rd+nBeJuk1V9mYxWxSWyDTMcgClKrAQWggbLIQWQgvhTCyEFkJjzDzgx3mRqNhUZZcxyxCUqsBCaCFssBBaCC2EM7EQWgiNMfOAH+dFotX6/D+7mZUISlVgIbQQNlgILYQWwplYCC2Exph5wI+zMWZxQakKLIQWwgYLoYXQQjgTC6GF0BgzD/hxNsb0DGpTVNtpPc/NGllYEgtpQttK2RSza1eJQdlTys6YNA0ZaqJpYKiDByVJrhDxtMOHSwzupNzlKS7RCOleqUur86xeLcGsMHLy8Oc14lql7I/BFWEhzUOHJHS8U1SAde/atSUmoUMp0LZHH5WkV+WgZJ3cDVxgKa/H4O8daWRwgwb/UjTvKZIrr5Sgjodr1Q0BZrJ7t+TxxyV1B8B5cSI4AIJ/3ljN9sknJXiEWBsTVT6mgZUkcUVYOBSGgHuFzjgvJLYuwDgROmNkrKqKoDPuM6QOV4TgrwO4dRi57qW4XjwyvHV4KDBAvO3ojLVesRf3GVeE247XW4dicWqM6Rd+UY0xPYOa2EJYjaiXhdBCGLAQhuCft4UwBiNnCbQQNrEQGrMy4Bc1Mfg/8g3+v3zeXtxtszxBTWwhrEbUy0JoIQxYCEPwz9tCGIORswRaCJtYCI1ZGfCLaozpGdTEFsJqRL0shBbCgIUwBP+8LYQxGDlLoIWwiYXQmJUBv6jGmJ5BTWwhrEbUy0JoIQxYCEPwz9tCGIORswRaCJtYCI1ZGfCLaozpGVS9rFxVzLA3lcio4xGRjbT3Wc0rGvCaBuyOefrpElPO1KggJUNQnSj3ay7TyHmhT+l6Jf/6ryUmTeMiieoEFh3Fsdu2lZg9eyRljeavNAT2KNc76mXYqxGHL2V7DIZKq31K51Ie1Mh5MVRaoFVcGp6C68WNxa3DyLwbqsecBuppmAlWkkSwhCP2QhhQx8M9UKlfc43ky1+WfOUrkm9/W4JVKHEiGOATT0hwN1DH33KLBJePWwcjws2BMGBWv/ylBC6NdwX/rnBFuAQ8hV0qzxgZQ6HzL34hgS9BJhHcKxyLE+FuPPWUBJcP/8f1wi2xjii8FJPEuwFdxJwxjaoeszg1xvSLFhuJv/zLWnpkpgA4mVkGl2BOCBZCC6GF0EJoIeSsLIQxFkJjzIlEi41ElsAJhVA+3x2M2YdNCw1O0fzsap8D8znWLFsshBZCC6GF0ELIWVkIYyyExpgTiRYbiSyBkwshNkBsn/nKt9HVvoB0naKrfQ4s4FBm+WAhtBBaCC2EFkLOykIYYyE0xpxItNhIZAmcRAinPtndP1tp7dM6zkxJMNvSELu1tmNXpaXS3nVU0yG3x73GDLEQWggthBZCCyFnZSGMsRAaY04kWmwksgQuDSGMLfHnPLcHG/hZaR+5PfjZbOefxsy8MQ3cXX6j+a1mowaeJkX/KaeUGNTiKBJKORSDSR44UGJQyCVtu1kD0Fkkh33VxFj0K2nh0P0aAStnUhj0vBdcIPnc5yS4V6eeWmKSPjWqPxWeVy0urchaMzEulKoWh1KtlEdjLrywxOAS3nlHgusFW1Umf/c7CTpricinUD/vl75UYuqdAVdHRIm8Y4fkO9+RbNgg+eY3Jfh3hZoYkoN6GntR9ENF6pU6hLDuLRgK/7zx6mAa9WAoBOfFJKG4WOwUF1g/b/3mxEewK5kYRsax8H90fuQRCaQONxbTgNThFYVpY/FP7MWc8ZrVny/8EEqPwMMRfdwsTo0x/aI1USJL4IkUwq4O9XG6fi619tafxky9ExHuLhbCgIXQQthxXguhpO48FsLKzYmPYJeFUC/BQmjMMkVrokSWwBMmhJW99XHkuz5NV7dmA6ADfi5Ue+tPY/hGcnexEAYshBbCjvNaCCV157EQVm5OfAS7LIR6CRZCY5YpWhMlsgSeGCGs7Cppb/1nQ1e3efafc3vrT2Om3okIdxcLYcBCaCHsOK+FUFJ3Hgth5ebER7DLQqiXYCE0ZpmiNVEiS+AkQlg6NClu55+t1A9v3Rvbu7YHP7ExfnvX9mAj/8QuY6YYvD0N3F0shAELoYWw47wWQkndeSyElZsTH8EuC6FegoXQmGWK1kSJLIGTC+HwmxsaWzsMaHZFYnvu03p4bIzt2JUbm5/19rgLjc02fmKXMa3si3nttRIT37njwHmwFwqUZGNLTNoropIWHX1BIyQTOy9mzZoSA1atkuCKQBrqXA2QOW/cWGJoU6foupS6F9PAcqbQtp07JTwR2R2DhwIPx94jRyQYCnMu5SXJ+iIpn9XM/E1hkLffLjGlXK3BBcoqspDYj3+8xCTkBca+dEVbYyCiW7ZI6NJwLVTqUAIEVT4KaJT1qLYhKhBiFO44Fqtf7t0r+dWvJP/7f0v++Z8lECSo1/XXS26+WXLTTRKsQVrXNqgI7iQ6w7WgizBtBJ1hnjgRgs54ZDgROu/Sp4+7Aanbvl2C/3BACHFFuHV4VfDGYlZ4Y/FQcDcghFiSFLPCHxpw63TOLE6NMf2CL+ySZfaLPwGT9j/RzOESzMrEQmghnAkeioUwkq7IQmgh7Ag6WwhjLITGmJNHCOfAdIVgzMmHhdBCOBM8FAthJF2RhdBC2BF0thDGWAiNMRZCY5YeFkIL4UzwUCyEkXRFFkILYUfQ2UIYYyE0xixrITTmJMVCaCGcCR6KhTCSrshCaCHsCDpbCGMshMYYC6Exiw6Wyly7VpLWEZVqGzUxVAR74Q9IXUXq58UVYS8W8MRezDnJpBTuUK/yccmhQxIu77keziMLeJbVJQazKmVDDIwIFwgvxfWC6RsWUBG95hpJKbfHwABR5uGKbr9dkp6vwEnqUIkrNOdI6sd+VFN/zVaVGO5Va0WxXb/eESaGO4uhb7tNctddEqy7iJoYJ8I00Bl74R4IHA/TuPNOCQwQ6gUHwOXjxcJQ2ItpYOSqMJTduyXYi+vFvYKo4Lz1p4ATQZ8wK1wCZoW9WNsWuohnhOVqsXAobizW88T1ojOutz7JW2+VXHaZBE6L245/R3onWZwaY/qFn0VjTM9YCC2EQyyEldfMQhiTJdBCaCEcxEJojJkQfhaNMT1jIbQQDrEQVl4zC2FMlkALoYVwEAuhMWZC+Fk0xvSMhdBCOMRCWHnNLIQxWQIthBbCQSyExpgJ4WfRGNMzFkIL4RALYeU1sxDGZAm0EFoIB7EQGmMmhJ9FY0zPQAixhh8MAe6BY1mL67GozQDK69NPLzGoxVFgoBbHUDgRSojyQc2HNWWbRsCJ3nqrxGAvLgGigs51ytklZv9+SWJjDMdSSnlZ85bmDcn6abNtUv5No+jLUMohzZ6YNKvtmiOan0reXyREDD+daENMsritMfiX8sUvSnjsGslWXYOUpSpWR0RdiyofOoFlJ+EPsAusBolpIBgKy05CJ6BtWLISe2EIEEIoAVKfJIa64QbJ178u+drXJFiwFPcZJoY7+eSTEiwbi6cA9cJ/oS64QPJ3f1fLpk2SHTskuATcK1zRM89IsBevWV1i4XjojPuMRWW/9z0J/uXceKMEQ23bJsFQeiIWp8aYfpEPdea662rpkdlqYb6MHGShTmTMuFgILYQNFkILYWcwlIXQQmghNMYsEPKhzmQJnFAI9VvfQuzQ1aeMIXJjMs444/QxZsGwEFoIGyyEFsLOYCgLoYXQQmiMWSDkQ53JEji5EGIDdLWDMbuNZJxxxuljzIJhIbQQNlgILYSdwVAWQguhhdAYs0DIhzqTJXASIZz+vnf+rDSC3CfUDy2Nlfa4q7Wx2YUWY04UFkILYYOF0ELYGQxlIbQQWgiNMQuEfKgzWQJPgBBqPdBCHqdpiRsLst20xJ/GnEDWr5e89poE39/By9rw0Y+WmImO/au/KjGomMlAombDalv30j2wt3xWgr3vlaCSqYOiFyN/+MOSxP2aVyWnlZgzz5QcPizBUqhnny3BrUNljkVW0bmetD7trhgu0KpyxZtxhmZaZYc5vUhUU7HQYCn7NZ+JqV8C9uKB5jsQwzVm8ZqV1yU33SS56irJP/yD5KtflcBqEBx7ySUSnAj+gBU7UU9jGrCpjRslF10kufBCyZe/LIHV4BK+8Q3JV74i+fa3JVgn99prJVigFeIN1YRbQtrvvVcCa4U8Y4lOHIvOWN4TzwjHQstxIuzFWqAILhCryNbdEoEt1/8MgRPhj394ZBBCfHLQGZevl8Di1BjTL1oEJLIELrQQRgZlKlvTgRP1mbS99acxJ5D16y2EIRZCC6GF0EJoIbQQGmN6RIuARJbAEymEpaPPOON09am0g9Zuxpxw1q+3EIZYCC2EFkILoYXQQmiM6REtAhJZApeREMZ2UN9rzEKyfr2FMMRCaCG0EFoILYQWQmNMj2gRkMgSOIkQlg4Bq2zHn5GubnFjztuDn63bxpxw1q+3EIZYCC2EFkILoYXQQmiM6REtAhJZAicXwobYGLq09wFdh7Q2VtrjrtbGQXv8acyJZlPMli0lJhXushpkKc/G1OtpFIGABTSMCOeF8nGS52i2Sc4sEoWLrH5Iwr3lQY3wsY9J1qyRxH//x4EuTnTsoUMlBmqNejKZyQaJ7sXKmdiLIj+NrOje979fAupqDQ4elMBp8V4dOSLBncRfND71KUkpOzSiqXjbsVwtzsvOqHof1GUYUZqj2n78cQn+hoHOWCtyzx7JE09IHtG1IjHJeuEOL4eJwS2xsCQWh8SHH8cOTKAJOtf1GIHTYi+G+s53JDBP/Ku79VbJd78rqU8Se7/5TQkMH0aEe7V5s+TiiyXw8KuvluCh4HFj0VG8SHif8YrWhRAjI+hcPxYSq9LO4tQY0y/8tC9VBtUCW08AvZ3ImAYL4RAqn4XQQmghtBBmMbMQxkC9LITGmAnhp90Y0zsWwiFUPguhhdBCaCHMYmYhjIF6WQiNMRPCT7sxpncshEOofBZCC6GF0EKYxcxCGAP1shAaYyaEn3ZjTO9YCIdQ+SyEFkILoYUwi5mFMAbqZSE0xkwIP+3GmL5htf28ZnfMCy+UGNS1LHPpaVJPs/N7JCjrS9kbg7IHIlrKp2NgU2lkVPnvxEDMSnlac0kM7IIXuE5T9sVANXEsVhZMc5abc+BAicFQWO0TC/7VO4+wGn1VMKvXXy8xSa1xRfi7wy6NmFhavxTTkKHwjNKfIeTppwsUXn1VAnCiNKsNEpSqqJjrqzLWO0Mmf/5zCSp1LLOJkeGHGBmXgBUdf/hDCVa/xDSwnifcA5PEUDgRAmHAncQF1u8z9j75ZC04L64XF1h/gvVHhr3ZoGLwMuACERyLe4W/O+DmYG8ePKb+jDDn+nnhpXgozzwTw+LUGNMv+gk1xvSPhVBiIezsbCGMWAgthMNkCbQQNrEQGmNGoZ9QY0z/WAglFsLOzhbCiIXQQjhMlkALYRMLoTFmFPoJNcb0j4VQYiHs7GwhjFgILYTDZAm0EDaxEBpjRqGfUGNM/1gIJRbCzs4WwoiF0EI4TJZAC2ETC6ExZhT6CTXG9M4oQRKpg4lhKcXDhyWsp2metRVKYXHQp1Rt79e8FMNplOck7y8SBcem814WAzNJoiIaAz/kJHmvHo1B2QO5es97JFi/FAtp1lco5ax0L14GnAhPkLdOL3+yY8uDMTi2lO0S3kmFe49IdC//pejed9+VJB7TKFj8E2Uuqnw8/voqoyigcSIEVT4cD6KCE8FqfvxjCfZC+XBFUALMCmbyox9JIKK6kiSHwuVjzdX6U8BQ2HvbbRL8U8GSpFjAcz6LrN5wg+TSSyXf+IYEy5l+9auSjRslWOz0W9+SYEnS739fgj9oXXWVZAEXWcVytbgbl18u0bvB4tQY0y/8LIL/+39r6ZHZOmTBmM9ozbELPiuzEmGZayEM4Nh0XguhhXAmFkILoYXQQmiMmRv8LIIsgRMKoVYR7YzZh03zYz4DxmPnM44xU7DMtRAGcGw6r4XQQjgTC6GF0EJoITTGzA1+FkGWwMmFEBsA7WN2mz/zGTAeO59xjJmCZa6FMIBj03kthBbCmVgILYQWQguhMWZu8LMIsgROIoTTlUPnz9bGMftEuna1tseWru3cGe15V/xpzGSwzLUQBnBsOq+F0EI4EwuhhdBCaCE0xswNfhZBlsAlI4St28NO4Wdrn7wx2O46qnW7aYk/jZmMp5+WJK6QsIB+MuaCC0oMYD1NREQHL3oDl51cV7OpdKzoYr0zlo7EXtgUVt18+20Jr1eXUcXIEG84Xup8NAZXhGzfLqE844GeIsmjVZIEWLQtXYI87jxazAc/KMGfIV5+WcJprJbgkeG2p7VAsdgp9spTKGVLDF4kXBHZtEkCf4AhYNlJiBlWVkQgdZBJmBg6w8RwXgSOBy+dKFAvjAxtg9Rl6a0IMPbWLwFPoX7r6jfn3ntrue8+CRQX08CqqliDFPJ8110SnAgOj3uFN6ceXD5W+6x7eF3LcYG4sdibX60QFqfGmH7hZxFkCVxoISyzijVbpbRQH2fkUa0dBo31obpGqP80ZjIshBELoYXQQthuNRbCGAvh+MHlWwiNMQl+FkGWwIUWwvn3iT9DvTNF7tAQO6Ax0rSjW+WnMZNhIYxYCC2EFsJ2q7EQxlgIxw8u30JojEnwswiyBC5hIRyzPTZ2HQLq3bqOMmYsLIQRC6GF0ELYbjUWwhgL4fjB5VsIjTEJfhZBlsBJhLB0WFnXdv7ZgEPisF2nqPfJG4Nt/MztXX2MmSMWwoiF0EJoIWy3GgthjIVw/ODyLYTGmAQ/iyBL4ORCGCqQYWPo0t4H4PCuQ2Jj3JU7V7ZzZ7THXehmzMSgcgV48w4eLDF1UKk3/jYISnPU8fiyr14tOXBAUsouzaaYLVtKTHIAFP2y9mlygOdj/vznEoPzlnKeZkPM66+XGIgZZLJuF3hGcC1I7PEHrpFbR5vSobD4JzwtvRtfkhwXuZjytOZ1zZRDhsgjq8tVep/lErA3zbn2twPYcik7Y/AURh17oQTlKWpx7K2LGSpmHItKHVU+hqrLJBQIwXkxcn39UkzyqackdW3DNHCvEHSGXGFkXAIuEMfiinCfscgqVmStL9Cab3UMJonzZtuMuftuCV4kjIyngEeGWeFO4oH+8pcS3FgsWHrZZRIsOoplVG/UJVjh0npzWJwaY/pFv+RLl8EnvtnWnYtGnJUxcyQV0EJT4A5IBXQNC6GF0ELYcayFMMRCWImF0EJozApAv+QnB9MVlzHLhVRACyhzUwFdw0JoIbQQdhxrIQyxEFZiIbQQGrMC0C/5ycF0xWXMciEV0ALK3FRA17AQWggthB3HWghDLISVWAgthMasAPRLbozpnVRACyhzUwFdw0JoIbQQdhxrIQyxEFZiIbQQGrMC0C+5MWYRuF8jZW4pv9Ec0pwjOa1IyqMxq1aVmHfflUA20lCvxGBRxtRZHO+ll0rMHXdIiA51ww0SgNXyyhqNuiWWiqSXvr/E8G7oUpmnny7BXk6juhemXcpmiR6LBWm36lqYCBR37VoJjOitt0rMb34j+chHJFg3NT2jwzH4uwNMu5S9GgFPAcqHzmnvGxpwjgQ6gZUVf/UryT/9kwTVNhygXqmj6IcBPvOMBA6AE2EaUD5cETrX9QnHQupwCfUTYVYQM9wcrFGJY+Fp2ItjMUnsxfXinxn0Camv2Jn7x+D5Yi+GwrtRPxEuAcqHzrgE3EncOjwyOB4WWUVnDKUvEotTY0y/8CNpjOkdC2FAh0qyIVgIK7EQWgiHqXuahTDGQhiDW2chNGaZwo+kMaZ3LIQBHSrJhmAhrMRCaCEcpu5pFsIYC2EMbp2F0JhlCj+SxpjesRAGdKgkG4KFsBILoYVwmLqnWQhjLIQxuHUWQmOWKfxIGmN6x0IY0KGSbAgWwkoshBbCYeqeZiGMsRDG4NZZCI1ZpvAjaYzpGYgZbKqUr2l0r2oMXIsLLSoooN9+u8TU19XEeUv5F8l7i6Q8qPk3CTqv06gP799fYnAJpWzTHNQo6kuchgrwiGPfo8HecoPmUMyvf11inntOgiU6odao+p5/fu7Bef/mbyTnnSdJS79icVe8wFdIcK/WSnCBpWzUYClU8GrMF75QYtLap9KZdnHttZJLL5Vg2dxbb5XcdJME/yaxZiP27tghgXn/6EcSKAHsAs5z110SLKR5zz0STOPmmyWXXy7BOpPf/rbkyislV10lqe/FXziuuUbyne9IbrlF8oMfSKB8UCC4FpbZhPPgXt1+u+S22yS4k3jcO3dK8Iy+9z0J7hXOe999EqxfiruRV1KNgcXhD2kI3nZcb/3m6F4Wp8aYfuEX1QRenIat4zHmgfM5hVkmWAgthBZCC+FUUE9bCC2EFkJjTC/wi5oYGEtDV/uLHVbT2qGr8xxYwKEylcEruwZ0dcjtucWsLCyEFkILoYVwKqinLYQWQguhMaYX+EVNQFean+NozHyOHZMFHCozn8G7js3tucWsLCyEFkILoYVwKqinLYQWQguhMaYX+EVNzEfqWvu8GGhamvbmZ0P8OejTtDQ/Y8tMV/052EDPhkELQPvgZ9M/7h00NjSNcVfuOWhp2uNPs7KwEFoILYQWwqmgnrYQWggthMaYXuAXNdGlLuM4TFefPGZsyXubjbiNjfrPeCx+YlcDGtGt9fCu7cFPbERaG83KQWvT47oVU56POXq0xJRyfsyzz5YYlBBwDxTuOJbLMCqf+IQkKZCM/MILpZJSvhBz+HCJKR/U6Iqsr71WYnA30qyulGAvO1+t0WPLVo2IKOQ5Cf8RjXDWWRI8btSTcHjoE2yZRrQGK7LKgrTcy6cg4ERJ6sRpcXPOPFOyd68E/s+/SlRHLuVnGnknudgpStU775RAF3fpypmPPirBXizgWV8pFENhL4JZQQnuvlsC2UDhDk2trxUJf4CmYhrQJ0wDooJZwZcgOVgYFueF1GHtU7g0/PAhXez0AV11E8vGQiZxItwrLLMJacedxFPA9eJlqF8CXhU8BRgvXmCcF+8V/uFgKLw5WOxU33YWp8aYfsGXPTMQm4au9hc7lKa1AzqP+RPtA7o642dXe+vPAfU+I0ces31Aa6NZOVgILYQzWAgthBZCC6GF0BjTM/iyZ7pcpau9QpcUjfmz9YxdnfEzt4O4dwAau37Os31Aa6NZOVgILYQzWAgthBZCC6GF0BjTM/iyZ7pcpau9QpcUjfmz9YxdnfGzq71C/ZCRI4/ZPqC10awcLIQWwhkshBZCC6GF0EJojOkZfNkzXa7S1R4ZU4oqP1+cpnUbG/lna/+8a/Cz2Y5U+sSRu7YHG/iJ9tYWs9KwEFoIZ7AQWggthBZCC6ExpmfwZc906cpAfiLsMU1rB7TEXU1L0yHuje3jtDTtsUPTEnu2EnehG3ZFcof4E93iLrNCQT2NUvXQIQmq3rT8o1S9sAs4TyqgpbxGHYu9CJasLKdLcIEAk8RQuBuY8w03SND5N7+RlPJODJboBKefLimrNXD4dbIyKi4wOfwGjbglLpAWVzbGYLVLTAMLeJZTNPMYCl568cUSjEzD1zVXN2woMVyDtByNSaqpcOVbof62s8pHWY9/DKi2H35YAhVBlY9jYQixxD8e7K27JS4BZX1d6jArXEL9vKjyIUgQlbq3ILixuMA8WsxTT0kwK3gLVijF2phYRRaKC2uFl+Lp41goLv4MgZEhz3XTxsi4k3iguDl4+rgirHxbPy9EFHPWp8Di1BjTL/xqmgDMbRzm0H/SQ8xyA/5gIbQQNrEQWggthBZCC6Ex5kTDr6aZnMbobHdmLsAfLIQWwiYWQguhhdBCaCE0xpxo+NU0c2KggrZBMxfgDxZCC2ETC6GF0EJoIbQQGmNONPxqGmN6Bv5gIbQQNrEQWggthBZCC6Ex5kTDr6YxZrGhbklQMbMIRn+pp+s18Zo1JQYjX3ONpJRdMc89V2IgZuUTkoMHJTzvWZLVqyWQulJeieF5id6c4x1CMA1MMoFpyMgQQhjvyy9LStmv2VDRxSSxshfvBh7KkSOSRG0oFJBDUZwO3qvzz5eUsjMGzwjH1ic54vnqm8P3Sh8Z/y1g7UQs/4gSGbqIpUFxLOp4yAZKZBTfdYtDZ5wIzoM5I3UHgC9h5IGsNsFeGBHMpH4nMQ2IGR4ZpoGRoYtYZRQejjuJPzvBiPBAcSx8CQuH4gLxMsAPEagXzguZxJ9w8Iri8iH82Ft/vbFcLZ4RLlDfZxanxph+4SfVGLPYqLcgFkILoYWw9flaCGMshDEWQguhMaYKP6mJ+P+O8/bibpsVgnoLYiG0EFoIW5+vhTDGQhhjIbQQGmOq8JNqjFls1FsQC6GF0ELY+nwthDEWwhgLoYXQGFOFn1RjzGKj3oJYCC2EFsLW52shjLEQxlgILYTGmCr8pBpjegb+QG8pG2NYyJYXYt54o8RgWVEs/plcC+eVHDhQYthBR0bhjgvcv7/ElLM1mPN6CUZGqYZJXnmlBBLLSygXS04rEn0KXMCTvCvRK0oLhwq4VxCzdKzMasRKoXq9eJGQVaskWCkUnfFQ6tNAZwwFiS3lPs2fYjAUxJtC+F4NlB7egjIXhSxqYqzniTUbISpQAtgF/AH1NIQQ6oXgWFzRz34mgT5hPU94KWQDooLODzwggQLhTmKVUcwKc8ZDgS7ibjQ+MwguEAqEv39gVriTuCI8QbxXeIKQOtgUVBP3GY6H82JWmDPejfoThMPjTuKKEEwDb86NN8awODXG9Mt0DdJJ839ga4W9VzBTlZsxc4MOQFGxEA6DkS2EFsImFkILoYXQQmiMmRvTNUgnVECFvRNT9UwiNkrl09YY23OHrva8a0Buzy1zY6HGMSuR+OJOv0kQFQvhMBjZQmghbGIhtBBaCC2Expi5MV2DdEIFVNg7MVPSdLTkXfX2/LNrO//saswtc2OhxjErkcG/ioYkKhbCYTCyhdBC2MRCaCG0EFoIjTFzY7oG6YQKqLB3Yqak6WjBrobcXjmksiuT+8SWwdwGhC5jtcddXY3NrqbRmCniGzP9fkBULITDYGQLoYWwiYXQQmghtBAaY+bGdA3SCRVQYe/EVD2TnA0/M7m9ckhlVyb3iYd3bQ828LPSf+S2MUK9ch28Ol2gCD71VAk6QwkuvbTEoAoq5Q8SLmeqrJagkiHaGZx+ugQX+OyzEqyNiSsqZUsMKnOs55mlqJJSzonB2pgQFQQPBQuH4gki8MOEPN+tW0sMijFeka65ikmW8mYM9uK240Sl/DgmLZQqc/7IR0oMTjTirxLliEaA4mLkctNNEnjajh0SXGE9KPphF5DJ+oKlkElU27fdJtm2TVK/IvyLvflmCYQBi47WTwTJUQco118vwR94MA2cCNeL4IFiL54RLhB3A+pVf744FncDJ4KY4d2AAGMaEGDcK/zjr+si3iucCMEF4orqgZfqXhanxph+wUcTUAEV9k5MfWeTszU/B9vDL3JobLbRUtk12M6jRWKHhmYXesafDSP7j9luzBALYcRCWImF0EJoIbQQTsVCaIxZUPDRBFRAhb0TU9/Z2Y24PewRqHQYZxdobc+NmGEk9sntsUP8ic6xfdjbmIiFMGIhrMRCaCG0EFoIp2IhNMYsKPhoAiqgwt6Jqe/s7EbcHvYIVDqMswu0tufGysgD0N7Vv6u9oavdGAuhYCGsxEJoIbQQWginYiE0xiwo+GgCKqDC3omp72yiacTeke35Z9d2/tnVGE/aOhoaW/t3bQ9+YsMYYiGMWAgrsRBaCC2EFsKpWAiNMQsKPpqACqiwd2LqO5uIjfJFbmuM7blDV3veNSC3x5auw2Nj3DXsPbs3t8fGZtsYAUs4QnJS1avLXWJNzrMkqNTjq3mc9763xKB0gU2V8koMRUV1ESfiJHWBx2QIAJevC3iW3ZqDMfv2lRiASVKQdElS1O24Igx17rklpqyrrfb561+XGD7f+stQnQY7cxpyIj5QXUYVI8PSyyc0el4cW+/MaZTDMfyXwiuSofhA8RcN/ZfCUrVefMMufvpTCSwOi2FCkCBm0Ji6psIBrrlGAm3DNLAaJGY1kdVgZKxR+fOfS7CeJ4K/2UBjcCKIGa4Iy3vCeXC9CC4QJ0IwMiaJS8DI9Xs1WMazCdZrxfViGniv4OF4oHjc+YZUUr8i/NPAFanxsjg1xvRLMcYsLixz6w6gdTxdy0JoIZyFnTkNC6GF0ELYFlxglkALYde9shAac9JSjDGLC8vcugNoHU/XshBaCGdhZ07DQmghtBC2BReYJdBC2HWvLITGnLQUY8ziwjK37gBax9O1LIQWwlnYmdOwEFoILYRtwQVmCbQQdt0rC6ExJy3FGLO4sMytO4DW8XQtC6GFcBZ25jQshBZCC2FbcIFZAi2EXffKQmjMSUsxxiwuGzZIWMiuQ9UrRjSqs6gXqm1W6qpAZ59dYqBt9fNi1U1U6gi07ehRCU7E82I0Xb8U5SXAUGeeKcHNwUqhoN4Ze7HqZn3hUEwSS7CCuv+vXl1icOtwr6B8mMaoC9SHckqJeeklCf7ugEvAWok4EcCxqNvr92pEeQ0/RHkN9UItjsAtUYujM0aGH2Ko666TwA+xnieGqq8UWr9e6DGOrZs2MpGoQDbULigqkGfMCo8bLwMmiZExyfqc8yXH1F0LL3T9rcM6ovgjBa4XTxBD4VXBa4b3CrPCFWFWeiIWp8aYfuFn0hjTMxZCC6GF0EI4FXTGyBbCGAth5a2zEBpjJoSfSWNMz1gILYQWQgvhVNAZI1sIYyyElbfOQmiMmRB+Jo0xPWMhtBBaCC2EU0FnjGwhjLEQVt46C6ExZkL4mTTG9IyF0EJoIbQQTgWdMbKFMMZCWHnrLITGmAnhZ9IYs7ig+EbNACVATfzuuyUGnVFe40RY0BIjb9xYYqAEKD6xF4aAkTdvLjHYWz5UJGqtuDlwj/vvl3DksiEGd+PVVyXlfRrlwAEJlI9mostdwoc3bZJwbUy9QMz5t7+VoDM9TVcoTS/DhsrN+dOfJKWcE5Oe/s6YdCIgf+84//wSU8rnY9IDrb1mI/aijodrwR+wkiTKaxTfTzwheewxyb33SlCa40R3310LpoG3H3vxUuJEE10vxAw2hWOhBFgLFIv5PvSQBMfCl3CiB3RNTizgiUvA08fIdW3DncQDxTRgrY8+KsESnbiTOBFmheVMMUncnPq7gc71C8SrgmeEE+FV0aFYnBpj+oVfY+W6Kuy9VJkuBhafJTINs9RBxYzvvoXQQmghtBC2BNOoF/14KXGiia7XQljxJQthjIXQmCUMv8YKFVBh7w6G39wx2pvGuKu1MdLaIW+MQ+6cW+bGQo1jljmomPHdtxBaCC2EFsKWYBr1oh8vJU400fVaCCu+ZCGMsRAas4Th11ihAirs3cb0h3iO2/XGSL1DfS/InXPL3FioccwyBxUzvvsWQguhhdBC2BJMo17046XEiSa6XgthxZcshDEWQmOWMPwaK1RAhb0T01/hFnJ705J3dTVGWju0jjmsANoOKW1DjXP4OO1xV1djs6tpNCsOVMz47lsILYQWQgthSzCNetGPlxInmuh6LYQVX7IQxlgIjVnC8GusUAEV9k5Mf4VbyO1NS97V1Rhp7ZDHnPn0p+1Ibmw9BNuDDfys9B+5bVYQ+GgO3oMGFtAwBHUPmgk6qwPgRFj+cc0aSX2V0dW6guWGDZIRklN+F3PoUIk5fFhSyh6N+CFW7ORKkgounwa4VlLvjL2claoIbh306cILJQ9yoVSVunW6vqs+X67nqXtLOU+itw6VG47lO6kvYSnPx+BlwLH1xz2fP2GUcnsM7jP+wMEyF/8mUcf/4hcSGCBKZBTuqPIhKhAklPUQFQgh9sIQcIE4ES4BYgargbfAASBXsIu6bMBMMEnsxQUiuDnYW/cWPCPcOgSd4Xi4k+iMR4a9uO34bwEuEH/CQHD5eIJ4+vXHjcuv/wkjP5cYHYrFqTGmX5rqqJWofxn2Tkx/lFvI7U1L+qZ3NkZaO1Q2Wn82jZlmF3rGnw0j+4/ZblYKFkILoYWw9XFbCC2EFsKZWAiNMSeSpjpqJepfhr0T0x/lFnJ705J3dTVGWjvkMYe1wizD3rPkxqaFB4eere2xQ/yJzrF92NusHCyEFkILYevjthBaCC2EM7EQGmNOJE111ErUvwx7J6Y/yi3k9qYl7+pqjLR2yGO2dgO5z8jD0d7Vv6u9oavdLHMshBZCC2Hr47YQWggthDOxEBpjTiRNddRK1L8Me7cx/V2e43a9MdLaoWmMG3M418jD0djav2t78BMbZmVhIbQQWghbH7eF0EJoIZyJhdAYcyJpqqNWov5l2LuD8IEe3Z67dTVGWjs0jXFvc9LWQ0rbUOMcHhvjrmHv2b25PTY222ZFsTEmvhzHgSGgrr3oIglXZVynUZ14660Sg2obpTlmBfPEsVdcIdm7V4JL4GKY75OgcqvbBVQT1SZtioHVvKnZVXE83Bys9Zqewj7N4Zi1a0sMvPToUUkpezUClB4jY87gggtKTFpkFVq+PwYPhc+oXKyR+/yZz5SYUnbHYJJ4CeGW6IxL4Kzq7lF3LZTmCGQDJ6pX25gGhAFeCvfAifCPoT4N7IWX3nKLZMcOCU4El0YeflgCFYGowD3gPJgz/sOBC8SNxV4Eho/gZaifF5OEPuFVwSKrjz9eyyOPSPAXHdxJnAiqWd+LZ4Tz7t4twTuJfxr65rA4Ncb0C0oIY0z/WAgthBbCqVgILYQWwplYCI0xPYISwhjTPxZCC6GFcCoWQguhhXAmFkJjTI+ghDDG9I+F0EJoIZyKhdBCaCGciYXQGNMjKCGMMf1jIbQQWginYiG0EFoIZ2IhNMb0CEoIY0zfsDat7sUXFntRBNc7I1dfLeEqlOpaXDhUgbaV1RqaGHhQUq3j6ZY6MjoTXVeT18u9R2MwMm471iD9whckOLY+SRRjeApMVVNhvDgv7DFPLCaN/C8x6Fx/grC4+ruBSZZPafCXhXK1ZJ1o+c03Syg5dQPEwTCT7dsl0BjoE9YghSGgrIcuYpIIjkVwRTgvvAUj43qhixgK+oRLQGecCMdCVDBJXBG89KabaoEfwlqhQLgE3FgsG4tFR3Esnj5mhTenruV4J/ES4li8hHiguJP4MwSeAq4IJ6qLt+5lcWqM6Rf53Bpj+ocFdHVv3fFQqdc7IxZCC6GF0EI4FQuhhbCJhdCYlYF8bo0x/cMCurq37nio1OudEQuhhdBCaCGcioXQQtjEQmjMykA+t8aY/mEBXd1bdzxU6vXOiIXQQmghtBBOxUJoIWxiITRmZSCfW2NM/7CAru6tOx4q9XpnxEJoIbQQWginYiG0EDaxEBqzMpDPrTFmEdCynlUvREWrXrjHSy9JUnmtQT1dtsRQRVSQ6ieiEuC8egnsrIF5Ipykjnz77ZL6kpUYKq3nKZcAEd22TYK9qKBwXsC7oe8GeP11SSm3a+R6+RSw96Ml5rLLJE8/LcEqo5gzL0FfYLyxWMz2ueckGGrrVkn6c4Cc6LHHSkwpF8VwknX3gF3UK3VYDcprLLSIartuRKincSxOhKHwj+HGGyU4Ef4xwIjqC2nCprAUKo7FjYXVwFtwRdAYDAXVxCODieEJ4lgEkoNXBZOELmLhUNxY3EkswYoXGrPCE8TjxgUicMv6642RERwLXcS90rVPWZwaY/pFyovEsf9Ty8nIsak/Z/dHz6czJycWwtjZQhjvhoUwxEJoIRzGQhiDJ4jHjQtELITGmF6EsCl1uKMNdBvzqPFpHTA35pa5sVDjmGWNhTB2thDGu2EhDLEQWgiHsRDG4AniceMCEQuhMebEC+GxYERxu4tx+syH1vFzY26ZGws1jlnWWAhjZwthvBsWwhALoYVwGAthDJ4gHjcuELEQGmNOsBAeSzrUtKAKyo3o37q36ZDbY2NsR5+uRhySxxmzPe7qamx2NY1mhWEhjJ0thPFuWAhDLIQWwmEshDF4gnjcuEDEQmiMWWwhbN0ebOBnpX88ZJxxYntXY+v42B5s4Gel/8htY6Z47TUJwPe3lHM1UvQPXq8GFMFpgUdZhRKrfabiW+1inSzhWMrnYtKxQET0wIESU8qGGFxRGnlnDFbaowOUXTEYas8eCc6brvchzaMaZb0Ear1xowRzhk2h8/79Ej4jvV7uVfNM92qvZn8MfPiPf5TgvLgE+P9HPiIpp0nS494dgznzEvQvGtwLncB6j9gLE4MhwHkQ+BLU65FHJLt0mWDIJAwQSoA6HqU5hsIlwLUgDPh3hbuBoh/XixPhWBiRCgMFCcHyno8/LnnqKcnu3RJoG+4V5oxHhgts7G4QHIvgKUAm63cDl/DkkxKYJ15CPCPcqyeekDzzjGTfPgmeAh4o7gZOpH8sYHFqjOmXYZXSRpbABRTCE9oOuvo3jZlmF3rGnw0j+/9/ds44xq7qzu9HCCGEaIoshFJEqUu3KWVplrIsS9xslrIEUZKmLM2yNE0TxyGEsonDEkIo6wWMMcZAQoKXEMJmCaWO63WJ46WUoohmKUtYL8siilBkEYQsFFkWQpFlIYQiNLVnPG9+38959zfvzntz38z4+9H3jzn3nHvuufe+4f0+Y3QGPG6MhdBCaCG0EFoIKwWqJdBCaCE0xoyImSqlH7UELiIhnK7dDlEP6FEfjONBHFMfjwNiE4Pj8ZnRxhQLoYXQQmghtBDWClRLoIXQQmiMGREzVUo/aglcLEI44PGmg/n4Uh1vGt90vEfTcXP4YiG0EFoILYQWQipQLYEWQguhMWZEzFQp/aglsJUQFhUe/Nxr4ufemNicw/h4sO/xHvXBvtfC8Xiw7/imn6ea+MGYQ1gILYQWQguhhZAKVEughdBCaIwZETNVSj9qCWwrhGXahQ4WUf0OogtH+nbhYO9nNOPg3nGMbzrYdx4Miwdj18zo6d76eDzY+9kctkjFXI4okhWa8nJMJXXSO0sRfJJGB8Nb3vc+SXVd4aSTJNixc9UqyQEF1kBjlFM1WHNK/A2cqPS4nCHZtUuCVcFM9u2TwEu5DlWvUq6VnCuPnY6nvcuWSXCD9NJjSwxvP5UrolOVsjem2ib3+Zhq+9Y3NI9p3o5ZvbrEVH/CyMC+kmTLFgkMAQU0er/zHUleIqPKRy+EAY6HjSVRbcMBUHxjVTAEOB4UH+YJX8Lt41nhfnGDMG3IFfQYd4RXBo2BH8KmsBnmLbdI0ItzsdsnAk+DiOLvTDgXUof7hYhiVejNP4R4znh0P/iBRLWNgS7Gv18cCD4q+CXUDzCLU2NMt/BrsSsmyxVjzEEshBZCC+FULIQWQguhhdAY0zX8WuyKyXLFGHMQC6GF0EI4FQuhhdBCaCE0xnQNvxa7YrJcMcYcxEJoIbQQTsVCaCG0EFoIjTFdw69FY0znWAgthBbCqVgILYQWQguhMaZr+LVojOkalRzW4ss179XQLtQBtBY/9tgSw1r8hCJRrrpKUsplknOKROUKVPo0I1oHs1zvFwYIjtSUjTGo29euleDRVTYF5EnCeaht5ZcaWRVUsxKkHHnsuZaXcrHmHc1+jb4FfeynagjfEa4rjy5/zrN8+E/XKDyXg2Hpl0pQQKPqhXugYkZQIu/YIXn0UQl6cV3sQomNQ7HjMPaoRC2OXwb4EtQLvdAJGCC8FEqAmRGYSW6PuXhDnyA5cC28MkyFZeBJwtLzxw7xxrPC7WPmdesk+c63cC1cF28QvfhDA1aFV4aHk3spejGz/u2Axakxplv4nWqM6Rqtp1nXLrcQRtlQLIQWwml4LgdbCC2EFkILoTGmP/xONcZ0jdbTrGuXWwijbCgWQgvhNDyXgy2EFkILoYXQGNMffqcaY7pG62nWtcsthFE2FAuhhXAansvBFkILoYXQQmiM6Q+/U40xXaP1NOva5RbCKBuKhdBCOA3P5WALoYXQQmghNMb0h9+pxpiOYSGrUocv+lIe1FwXU23guTcGtTigWx4lufpqybvvSq65RsKZdTfIqjd/GuDJGKwKVlNN9aOYY44pMaecIgE33igpR2uOl7z4ogQqAiGsuE9zoWS5CBI2g8SDhbXyuupL1bMSaK3w8PdqyvaY6s8Qu2N43eMkuCMuC2+ByI67RxxRYkp5SIJCFjt2opDNbQrnQuogOfj1hl3k56KsR2++ZmgbBsNbsBkmbhAzY6o8qgQMRCX3UpwLFYHy5XcEecZ18dcBmCd6cb/4mOHRwbXQi2A7U/TijvC6c0/D/eLDgHNxR/iLBlaFc/V+WZwaY7qFX6HKxPbtSTh6idKnDpmk6bgx7WBNbCFsNhMLoYVwBguhhdBCaCE0xowCfoUqtQS2FcLs23wwcOKc5+kRl9SDgwJNvU3HjWkHa2ILYbOZWAgthDNYCC2EFkILoTFmFPArVKklsJUQ4hu8zxf6AMztrEEYcOamYU3HjWkHa2ILYbOZWAgthDNYCC2EFkILoTFmFPArVKklcBghjDR9y+NgGDVzpB6Mg7Grd7ym7u2dFbviQRzvO6Z30JiBYE1sIWw2EwuhhXAGC6GF0EJoITTGjAJ+hSq1BI5ECOOXe/IzfqiPz/rzVLP3M2iaGc2myZsO9n42ZkCu1wgoZFFAn3mmhJyQbRx6/PGSWQzhHMnGjRJMxZnV05AnnihJsAzMnA8uZW0MBoPZpmrFFRrcMhAzwTKqNX8hplrkEzHofeklSXXuJTFT/yHrUcq+mHphMdBU2CP+lMBnpR8z/JECpl3dgjxn+DD+zsI/f8Au8tIcBoiaGLU4BqMXwVaZucagF0J4000S/MbedZcEblm7WQw2w4S1wmkR7I2J3jvukOS2fOedkg0bJNiCNZ8KD+eeeyS4fbxQuBZ68cnJnzN2kcW2ong4WDOCqXAhOB6CDz9eWavdTaHWmFn9kMWpMaZbYl1SU0tgKyEs04I0XVTMHAxDxKzi8b4HmwbPerwm6SoDTFj/0LdpzKxcbyFsCpaBmfPBFsIYC6GFcCYWwhg8HAuhhdCYw49Yl9TUEthWCCPRoAAGRHCwafCsx2vqrpkFTdI7iDH1D2BmtDEDcL2FsClYBmbOB1sIYyyEFsKZWAhj8HAshBZCYw4/Yl1SU0vgqIRQew7R9zgONk0y6/GafOSsE9Y/GDM3rrcQNgXLwMz5YAthjIXQQjgTC2EMHo6F0EJozOFHrEtqaglsJYQwpWhQsavv8fqH+njTz1M/9G1GkpHJ5PWF4sF43JgBud5C2BQsAzPngy2EMRZCC+FMLIQxeDgWQguhMYcfsS6pqSWwlRCWaVmaLipaHG860rcLB3s/181I3RVn6/X2Dva6esfjz/UAYwZElKCUSzVSi5fyXAy2ykQvSuRnnikxlag8Ljm2SI6RVLW4bGe6e3eJib8ek78hT2sU3bETM0MYqmUoumUlBnPnzKJmoueuXSvhjp36BnH7KNWqx36ZJn0pZb1EF4mNYffulWBVpWzTqC/pxrDVc5b9WvF+d+woMTx3uaZ8XLMm5s03S0wp18ZgQ0f84mBVuKNly0oMK1ctVVnIYjBkEmL2rW9JoE+5IWD7R4gKrAYXwtPBHeG6sCnoBAwQu1BiZtgFHk6tHzF4sHiS2HQUM+PRYao8eLB4OLgu/uDx1a9Krr9egu2J0QtrxQvFMhD8OSDf7BSbf25WicWGpZgKf4b44Q8luBB+U/CZxAvVP3+wODXGdMtk2WSMGScWwoCFMHkpFkILoYXQQnifhdAYM2ImyyZjzDixEAYshMlLsRBaCC2EFsL7LITGmBEzWTYZY8aJhTBgIUxeioXQQmghtBDeZyE0xoyYybLJGDNOLIQBC2HyUiyEFkILoYXwPguhMWbETJZNxpjx8cEPSljIapW/erUE4FzW4kjZnOWUIlEV2bevxECQcF0uY5mEcoXtH8uGmKeeKjGceUKjj64coaF6SWCAeOyokeAteAuQWGyVSY6W8AbJdZL8Bs8qMdgdsJQ3Y3gLuqqdOyX4MPBcVXqcixtELxwPF6oeTvD5g9HbPwE77m6ToK7NNw7VQpbBVKi284r5llskcA8IAzwNdgHJwXWxSGyG2TO0qcBLsQz4EnQRj+77ugknrAa9mAoWl3s4biF/v/krgyChFzcIPcaqcAs4F56GzxWkDo8OPowPA/4MgcD/8Z8G/EELM+NzhceON4gdSnXNLE6NMd0ixYUxpnsshBbCGSyEFkILoYVws4XQGNMpUlwYY7rHQmghnMFCaCG0EFoIN1sIjTGdIsWFMaZ7LIQWwhkshBZCC6GFcLOF0BjTKVJcGGO6x0JoIZzBQmghtBBaCDdbCI0xnSLFhTGme6q6VkrVqveXmos10vvSSyUGlTpmri4k9XQ+FWC1XdbGHH10icG2k+xVYGK4EBYJjj9eUj3JX8RUe5DK00D1hX01y5GS6sFeEnPDDSVmFpZji05ZFW/wXMm6dZJSLojBY8cNwsPhh/BhAsOntcpn4913S0wpD0o+VGJwvz/9qaR67CslZxQJJKdViXz77RIoAap8qBfqaVTM8AfMjEXCLVGa58GqcF3sb5mvCh8deClUBDPDH3KdwEvBVFgV7he9MN784aAXyofbx7NC4NL4XOFZ4VwsA8EdQYChmj/4gQQCvFk/wJB2aCpsOZdnfbAsTo0x3RK+tvvA0QpHG2PmQFW5iuRUvRZCC6GF0EJoIbQQNsdCaIxpSfja7gNHKxydMlklzoU5n2jM4qCqXEVyql4LoYXQQmghtBBaCJtjITTGtCR8bfeBoxWOTpmsEufCnE80ZnFQVa4iOVWvhdBCaCG0EFoILYTNsRAaY1oSvrb7wNEKRzejtWLjwdiLAegyZulQVa4iOVWvhdBCaCG0EFoILYTNsRAaY1oSvrb7wNEKR6dMVonS7B3Bz00/GLM0wRf91O9DD9a1WotXBbQYAqaiMKSDS7kh5pprSszu3ZKKFzXKMZp8cNkeUymf3ELu0gh3Ny3fjMn3Ta2uuzkGZR5uAedy01H40lGS2VYlt49nhcEwQHw2qpkFfFSw+ScfzntKDGbGucceK8k/sfiIcs9VHYzr8rGjnoanoZ6GIeR7VOKvBai2sVckrgvnwR6kt90myV0LopIH9wsHwO1Dru66SwJrxZ8l7rhDgmVAcaFeeDj5S8mDVwYFgvPgfvHKYGK4I/y3Hs+59roYXBf/lclfN3ZkxeANGyTwUrwjfOr+6I8k2IMU94uHo2GBaYzpFn7TKxytcHTKZIU5ezP5wZiliYUwG2whtBA2fGIthBZCC6GF0BgzEvhNr3C0wtEpkxWmNAG6YrP3szFLEAthNthCaCFs+MRaCC2EFkILoTFmJPCbXuFohaNTJivMxmaP3vH6B2OWJhbCbLCF0ELY8Im1EFoILYQWQmPMSOA3vcLRCkdXTFaVfX6eavbtTX4wZmliIcwGWwgthA2fWAuhhdBCaCE0xowEftMrHK1wdMVkVTnz8xT1kd7B2NtrYowxSw5sw6hQgbS8xt6Y1AndlZFVPgaXh2J6v3jTv35ZeV2O05SHNXLubFazK6ZaxvqYqlcuVO0UuicG52K3zyeekECfsOZ8f0tYzdq1klJ2a36kObj3Zi/Y7fPttyV8krqRJpQeJnbyyRI8yXJOkaCX2RZT6aLA/Uv5NK6PqfwQpg3ko4JF8tcKxTc8DbsjYq9bqAj0CbIBFcF+j3APDM6vC1+CA8BbsIEnbhDXxR3lt4BeOA8eLG4BkoCngSeJvTEfeUQC8caqcF24FjQGwdPAIjEzHjteCowXO7JCrtavl8DTsAVrrov4qGAZ+DDgfvEhRC9uHxdKhZ8FpjGmW/gVaozpGgthnMpCaCGciYUwJL+uhdBCaCE0xswVfoUaY7rGQhinshBaCGdiIQzJr2shtBBaCI0xc4VfocaYrrEQxqkshBbCmVgIQ/LrWggthBZCY8xc4VeoMaZrLIRxKguhhXAmFsKQ/LoWQguhhdAYM1f4FWqM6RhueKgOgMGoifHtDMmB8mEzOV5X9y8t5Q3NFTErVpSYslyj/oALIdSYsiUGVRDKerhlKStjMDN2ZEW5la+KD1a1nHZxvKZcHYMLYVXcNvYESSWTYo/4bMBpsWEp4A2Wl2MgddUes/JSMNWRR5YYUL19AVOxW8FgODxeGQZzY0nUxCjrb75Zgt+rb3xDgmobNTHEDIU7NBVyhV5caNMmCfbkRKUO58H9YjCWgf8GwcTwJKF8uF9oDAZDNrZvl/zwhxLYYy4qeDhYFW4BAozbRy8EGO8IW7DiP0l33inJDRAz47OBTx2C/WnRi2eFjzeCwTBtyLM+Ohanxphu4XeqMaZjYAgWQguhhXAKTMVuBYMthBZCC6GF0BgzIPxONcZ0DAzBQmghtBBOganYrWCwhdBCaCG0EBpjBoTfqcaYjoEhWAgthBbCKTAVuxUMthBaCC2EFkJjzIDwO9UY0zEwBAuhhdBCOAWmYreCwRZCC6GF0EJojBkQfqcaY8bMkZKXX5ZAJ/JaHLtfgqpXTKyUvTEoerHB43veU2JyuTqgwJovaOSOSlmtkV6ICvZrXb1aQtciv4yBTVW3gEXC4cWmMBhSh7od+7XCavB+c7fE+61u/1HNKo1yjOSkkySlPKkBF8bgjqi450r4fsunNHjOj8Rw5vLjGPZGGzwQbEr5/XQrRUgdbCrvRVDHYxlwLbgHBkPbUPRDgeAed90lue02CQZj5vqmYmobiYGJYebc4iBXmBliBjPB+8VeoFhGvhcoAl/CDWKR0HJcCJ8NiCh8GHeE24ctI1gGzBO3AGnHh/DRRyWPPSbR67I4NcZ0S/zarvk/KRxtjBkBFkKJhdBCaCG0EFoILYTGmHkkfm3XUAEVjk6ZmP7/fXo/tGXOJxqzqLAQSiyEFkILoYXQQmghNMbMI/Fru4YKqHD0YEzM1evmfKIxiwoLocRCaCG0EFoILYQWQmPMPBK/tmuogApHp0xM6lwsZmIXDsZeDECXMUsOC6HEQmghtBBaCC2EFkJjzDwSv7ZrqIAKR6dMpLLX9+emH4xZ2nwyZuq3okelbUA87dhjS0wlk8rR2GVU6vhf/KLEVFL3I41sScr9LY/VqHlWriVFfyWxl8Xs2VNi+OhOLBI9F4NRumD/0nxVfM5q+Cjk4Gk8l1uDymejlG0x2GW0lIc08mA/9KESA+Pdu1eCXpTilS0/HfP88yVmxw5Jda4s8p13Sgze74knSjBVtQPthhg+Z2yHCLtAaY46HsqH/R6hEyivsa8m9An7W6La/ou/kOBvGLBHGALuCA4AI4KJ5UIIQ4A8w0zQC4nFS8HDwZPcuFGCG8QdYWb0YhlYJMQM94sPA94vnjM+SFgVPki4o/yDBG3DYPwVCg82v0H04tHh9vOp9GmwODXGdEtJoQIqHJ1ysB7TH/Jm8oMxSxsLYUymXhZCC6GF0EJ4MBZCC6ExZghKChVQ4eiUg/WY/tBrAnTFZu9nY5YwFsKYTL0shBZCC6GF8GAshBZCY8wQlBQqoMLRKQfrMf2hb7NHPb5ppDFLDAthTKZeFkILoYXQQngwFkILoTFmCEoKFVDh6IqDNVj1czw41cyH1T8Ys7SxEMZk6mUhtBBaCC2EB2MhtBAaY4agpFABFY6uOFiDVT/3Kq7YhYOxt9fEGGOWDLs0UhNXCpQjW0c+9VSJwW6Qr7xSYtatk1Tninug+F6xQnL22RLw5psS2iM4U6P7iFY6oVPBpnQDz3xL0vwGMRhg8O7dkgq49BsSvYUrrpDwBonMXC1DXmj5lRIDE8O2ovioYKrqQuKl2GX0ueck1QuVjUN73wGHvglOLTHoBfpkKlCqwsRgUyhzUQSj6IeYYTdIBMoHfcqXgQ0tIUjYOPT22yV33CGB8uWDsQExzsUycC5mzq+LW8iviwthGUg+FXpb3QKCzwZUE38rQi8+ZujFJweqmX+ecV18YrEja670EFE4LcxTw+LUGNMt/Fo0xnSOhTBGsRCGWAjF8SyEFsKm6+JCtQTG5FOht9UtIBbC5rA4NcZ0C78WjTGdYyGMUSyEIRZCcTwLoYWw6bq4UC2BMflU6G11C4iFsDksTo0x3cKvRWNM51gIYxQLYYiFUBzPQmghbLouLlRLYEw+FXpb3QJiIWwOi1NjTLfwa9EY0zkWwhjFQhhiIRTHsxBaCJuuiwvVEhiTT4XeVreAWAibw+LUGNMt/Fo0xnQMNjx87TUJthXdv7/EoOrFPpOoZHAhnPv44yUG+9KVsk8CuSrvSA6U8iG4EG6/vEeCW+BukOnMHEyu16yJqVRE+NrXJNA2LKOUrZJZJFbAK8PMb71VYnC/P/+5hHq8vEh0Q1oo7nnnSWiAR2hUJtlbfizRXtwC9lw96ywJ/lZSymMaoXrOF2p0b1sUstg5E66FXVZhCPAW1OLbtkl+8ANJXrij6Ec2b5Zs3y5B0Y9zcd1cRB95RII7wsx//ueS/I7yXtwgZobG4MEieBqYGbt95vvEVmIjyZ8kLoS3kL8UbIWK3T7xNLAhLR4s/hqCPzRgGfBD/EXj0Ucl+KhgVTozi1NjTLfgO9QY0zWoiS2EFkILoYXwYHJByn3JQpjEQhhjITTGWAiNGTuoiS2EFkILoYXwYHJByn3JQpjEQhhjITTGWAiNGTuoiS2EFkILoYXwYHJByn3JQpjEQhhjITTGWAiNGTuoiS2EFkILoYXwYHJByn3JQpjEQhhjITTGWAiNGT8qDGvXSqAi2HQU9XQ+GCUyto6Ee6A0P/lkCTQVm1KWsjNm164SAxXBLcCIqrJetlEt5fEYPDqKmVLNvE2i5kkBpg8/FFPNLGvGDWKnUJy7d68EG3iiF2+wlBc18qxwC3jdpezQiFtC2pctk2BV+/ZJ8GnHc8aHoZQHYqoHKzeYuzQ+7Xw43/62JK/FUTHDAXAuKmZ4GqwGhoDrwlvy5K6FW8B1N22SYDCmQuCHcADcES50zz0S/Ofs3nsl2MESSo9z4fCQOvRiVbgQngY2/8S2ovhjAQbDxPDo8FFBL8QMnzps/onHjsEIXig+3rhuruU4F3uf6oNlcWqM6ZZQH/Xheykc3YbJcsUYU1giWwgthL1YCC2EM9lcWV8SC2GMhTAGgxG8UAuhMYcHoT7qw/dSOLoNk+VKxqwDjFkqWAgthBZCC6GF0EJoITTGjIlQH/Xheykc3YbJciVj1gHGLBUshBZCC6GF0EJoIbQQGmPGRKiP+vC9FI6eDXxB9z3edKTpoDGLHwuhhdBCaCG0EFoILYTGmDER6qM+fC+Fo1OmvpT7/jwzKDSbjvdtGrOo0doUfVoiI1O/Sz161eBUKm8RcC4r5uWaIyWrVknQW06VXHCBBNeFPVZFv7hWKZdJ1C7gS+VYSTWzAHk+4ggJJKcyzzslRxeJAkG6+mpJKes1qqnoXVFiqhu8X6IvhWqNjwpuAb38XOEdIU9q3ojBgwV4zpUuZlx3nQT7SpblGggh9mzM95nEHqSwmlxjMDMGw3HXrJHceKOklcXldoE6HneUa8yOHRJs74kL1ft/xmDm3HkwGP8pxJpxR3h08BbYMq6L4Dmj97vfleB1oxeBTKIXa8afA/Dph8XlBohnNUKX1lfG4tQY0y3yDVpxyPwa4OiUycKvsdmjd7xpwBR5rzGLCwuhhdBCaCG0EFoIm2MhNMbMJ/INWnHI/Brg6JTJwq9/s6oPOaB3pB5mzBLAQmghtBBaCC2EFsLmWAiNMfOJfINWHDK/Bjg6ZbLw69Nse7xv05hFjYXQQmghtBBaCC2EzbEQGmPmE/kGrThkfg1wdMVksTfzc6+Jn5vG9I6jGYcZswSwEFoILYQWQguhhbA5FkJjzHwi36AVh8yvAY6umCz2pKl1II9P/VwfrI/E48Ysbp57ToItHFHlV0W/lNc0InWAai/QnJdjUF+V92hY9Ms+otjwr7oFAD2WfSaPPbbE8EwKQ5C0g3k+Zs+eEpObCZ4kbwFRPd65U1KtSoFaq/GyV+/ogEDFwKYqt8S5YnFHHllicC4+orij114rMRVyod5/1qf/4359DP5IUb3fzTF4zpiZrwxP49FHs6CeRrWN3SD/5/+UPP64JC++IaIQBpgJBAmLRPALDH+Al0JxsUgs46GHJBiMZ4XA4iAqefAkMVU+M7z0kUeyYOdMPMn8jqDHWAY2/4Qv5TYFP8Qmq/hs4EL4bKA3l1j86SRXa6wKa9Y3yOLUGNMt/K42xnSMhVCxEFoILYQWwtliIbQQGmNGB7+rjTEdYyFULIQWQguhhXC2WAgthMaY0cHvamNMx2t4uVEAAFc0SURBVFgIFQuhhdBCaCGcLRZCC6ExZnTwu9oY0zEWQsVCaCG0EFoIZ4uF0EJojBkd/K42xnTOFRopVVkEH6FBXVs2aFKgMedIWEDrddmrvoRavJQtMejFDaIXssHrlktjZpnqqCJRfYJ7YJvNm2+WVMsQsA8fgqkq1kuWlZinnpLs2iW54QbJSy9J8HBmeVb6Qt99V1KfHoPBYONGCd4CNnetEJnEJxbbt2Ir1LfekpTyNQmqfBTBEDNsWQlhQNGPmaEx6IVdwLVwLgp3eFqufKjjMRi3D8fDVHAAPCtYDW4Qt48LYWbcIB47TAwXggHmy4B65YKEDwPuF08D/y3AY8cNYmbIFcQMjw6fHBhgvpsr/BCrwsPBzPjjCHwYpv3DH8awODXGdAu/b40xnWMhnAl6LYQWwoCF0EJoIbQQGmNGD79vjTGdYyGcCXothBbCgIXQQmghtBAaY0YPv2+NMZ1jIZwJei2EFsKAhdBCaCG0EBpjRg+/b40xnWMhnAl6LYQWwoCF0EJoIbQQGmNGD79vjTEdgxIZsoEtOiuknman2lS1y6jsBVrK3ZoLY1D0V6t6NE3cNfRF7pypgcaAo4+WlCMlv/ylBNUInYcejtwbUxngXg3OlceO94tlHHNMiYGIlvJdCR6X/jkAi8SWs3g4eKHlVzR6Cxs2lJhqGTK4ys6Yn/60JKmkXf7AgbcPH6YQlqdisDMq9+OFxaFiRi+qbQgD6mlMpUVw+Yu/kKC8xl6RKM3T8rr87/8tgT6hrMfuphCVvBeBxiC5p2GReJJ47FHhDgTvCBfCMjAzpsK531cPx0vBzHhWsEe8QQTn4n7xrHLFzXcZzT/tuR+iF59YvEHcAlalvzgsTo0x3RJKrT7cksLRKZMFmDGmwkIYYyG0EFoILYQWQt5vLYEWQmPM6AilVh+ogApHp0wWYMaYCgthjIXQQmghtBBaCHm/tQRaCI0xoyOUWn2gAiocnTJZgBljKiyEMRZCC6GF0EJoIeT91hJoITTGjI5QavWBCqhwdAqqoL5dsx40ZgliIYyxEFoILYQWQgsh77eWQAuhMWZ0hFKrD1RAhaNTpoqfvj/HMclBY5YqUkBD21i46y6UV19dYqrBwtq1Eg5GLc7S/KE0UrizV7UNIgqN4W6f5UeaLTFQPjyNl1+W0D14Cyn0tCti8CTxBl9/XVLZozwNeAssrqzQcKrzNVdqRMvpeHxHF2pSeK6i+9Nin8UKeRrsbAM+V/xTgmoqK9ep0r8XlLmop1Eiwy5QBGNmnAu3fOABCXaSRGAXmArLgKhgMAwB1opePDr4Ax4dJBa3j1XhBuE8eM64fRgvFgmbwprheHg4GIwXikViMN4C9iD9ylckH/6w5PTTJf/qX0n+3b+TfO5zks9+VvLpT0tWrpT8zu9Ifuu3JDkf+pDki1+U4H71ObM4Nca05/8MAX+dFSqgwtEp8Lq+7tej70FjlioWQguhhXAKC6GF0EJoITTGzAVKXhv466xQARWOTmkSwqmfpwj9/Q8asySxEFoILYRTWAgthBZCC6ExZi5Q8trAX2eFCqhwdErte7HZ9qAxSwkLoYXQQjiFhdBCaCG0EBpj5gIlrw38dVaogApHV0SXi//ch5/jmOSgMUsVC6GF0EI4hYXQQmghtBAaY+YCJa8N/HVWqIAKR1fUQtgjjOr/f4f2PWjMEqTaHXFrTO83Yfr3QQpZnPvss5KFCXbdBNx1UzntNAn4xCckFSs1CpUPcrVW86TmnZizzy4x11wjefNNyd69kiWBPA30PfGEZBZUJg/8rkiOK5LyhER73/c+Cc+Fitxzj+TuuyUQBqjItddKPvAByfwB5T3zTMnHPy7Bh/LGGyW33io58GUfs26d5KabJDffnAXnYl9N/IFn584sTz8twX/7/t//kzz3nOTJJyV33in5D/9B8s/+mQSfpH/5LyXLl0v+/t+X5Jx8suTCCyWf+Yzky1+WQL2+9CUJPpOrV0t+//cl/+k/Sa68UoKpkFWrJL/3e4OHxeki5HvGLGb4XyRjTMdYCCMWwsWPhTDEQmghtBAOENpVSw58NfbCvq5gfW3MooL/RTLGdIyFMGIhXPxYCEMshBZCC+EAoV21xEJozJDwv0jGmI6xEEYshIsfC2GIhdBCaCEcILSrllgIjRkS/hfJGNMxFsKIhXDxYyEMsRBaCC2EA4R21RILoTFDwv8iGWO65iyNlqrPPy9hIVtelWjv+edLqnMvkWgvaqTq3Ack6H2fZpnmBI32ci9Q7X37bQlnLi9I2PsLifauXClBL8ra8h5N+aYEvUdp8KzO0RyjOVGDXtwgHux7NZjqpDQnpzlNc4YGn+ezNbhfZEWbYM341GGR79dgzVV5uvjyqU9JUJpjY0n87WRRBDeI39j/+B8lkDr0fvKTkssuk/z7fy/Bo7vqKglM7NJLJfhPMCwdbgkhPOUUyb/+1xLcIF73v/k3EuwU+i/+heSf/3MJnBbbmcIer79ego1SIbEf+5jkvPNiWJwaY7qlV5MaY8aEhTDEQmghHDQWwhgLoYXQQmiMmSu9mtQYMyYshCEWQgvhoLEQxlgILYQWQmPMXOnVpMaYMWEhDLEQWggHjYUwxkJoIbQQGmPmSq8mNcaMCQthiIXQQjhoLIQxFkILoYXQGDNXejWpMWZMnKnJ62mAol/RL1z2lrJS0wZu/6jAW1r1pndEfkXzQQ3Ir1su1bQBygfSZ4VtF9txrKYN3L1WN1m97jrJtm0SCnD5qebJmC98ocSgyF+zRlLKDTHw8DPOkFQPdlPMj39cYkrZI8HHDHuBrlghueiiLBdcIMG5yG/+pgQ70p5zjuRXf1UCf/jH/1iC3n/6TyXYKvPXfk3y678ugYocf7wEhgBPgyBBCbBz5rnnSn77tyXvf7/kn/wTyT/6RxLc/umnS846SwJB+shHJOfpfzcxGG/wN34jywc/KPmd35FArjZskOC3Druq/u3fZsGeq3/91xLsuYo/OtazxdTbvcY884wE100vxOLUGNMtUiJUXJ7C0XNiciN9Yw5nLISR9I6IhdBCOPNgLYQWQgvhZCyExpiWSIlQQQVUODqlSfyajveYdYAxixwLYSS9I2IhtBDOPFgLoYXQQjgZC6ExpiVSIlRQARWOnhOz+t6sA4xZ5FgII+kdEQuhhXDmwVoILYQWwslYCI0xLZESoYIKqHB0SvQ6liL9jjcdaTpozKLFQhhJ74hYCC2EMw/WQmghtBBOxkJojGmJlAgVVECFo1N68nao/Oj389QPaDYd79s0ZvGBXetWr5aUskZynOxR+dRTkkcekTz2mKSUlzSfinn00RJz7LGSSgke1zyneTpmx44Sg63mSnkxZteuEgNbfvBBSSn7Y1D1lbJDc43m2pjTTisxpWzVXKG5OGbZshLzzW9KMHjlSt3OVEXloYdKDP86UF6WLMt2Gd23T1LKBTEoPt96S4JPzuuvS66+WoKXgg8hKnMU26Xs1Lyp2SI5TTYOhbVec40ED+eNNyT41LGu/Zu/kaCQRVD1onD/v/9XgkodpTmKb1zo7/5OgjX/5CeSuliPwZqffFLyl3+Z5a/+SpJfF3eE28dUrYJbwHVxIfTmRoSZ8WEYJlhVqwvBtfC5wqcOLwVT4X7xjjAYvfma888zztWnweLUGNMtJYUKqHB0yoCC16NpPMh7jVkEWAgthBZCC2GfAhoXshDG4BZwXVwIvRbCGLwjDEZvvub884xz9WmwODXGdEtJoQIqHJ3SJHixefCfCwP1gN6RepgxixULoYXQQmgh7FNA40IWwhjcAq6LC6HXQhiDd4TB6M3XnH+eca4+DRanxphuKSlUQIWjU5oEb87H+zaNWXxYCC2EFkILYZ8CGheyEMbgFnBdXAi9FsIYvCMMRm++5vzzjHP1abA4NcZ0S0mhAiocXRFtLQpe089TPyTH0YzDjFmsWAgthBZCC2GfAhoXshDG4BZwXVwIvRbCGLwjDEZvvub884xz9WmwODXGdEtJoQIqHF0BeYs/R+rjcfyAw4xZtJyjAbqVImXjKMmpp0rK+zV6oQ99SFLKhTFXXlliSrlfcnKRlLc118Xcf3+JueEGSSmPxVxySYlBpYq6DjqBDS1LeUYDbtS8KtFdN2Geq1aVmF/8QgLzhOLee6/k1VclpezTrIp5990SA+OFAXLmUzQqV6X8XPOxmJ/+tMRgq8jyPsnFF0vefltSysc1cr/HHVdifvQjyTHHSCDA5UgNlE/vqJSnJLk/5FVvWuayUsfgXFRwXVT5GIyp8lUhuBDqeFwIvTgXy8Ca0YtzczHDmnMjgj3m94tV4QbRmyd/Kbhu/pwxOH8a0MV6YTF4znhHeHToxTLy3nxVeoMsTo0x3TJTHBljxoOF0EJoIbQQ7qx0AtdF8Y3BmCpfFYIL5aKCXpyLZWDN6MW5FsIYDM6fRq5eiIXQGFMxUxwZY8aDhdBCaCG0EO6sdALXRfGNwZgqXxWCC+Wigl6ci2VgzejFuRbCGAzOn0auXoiF0BhTMVMcGWPGg4XQQmghtBDurHQC10XxjcGYKl8VggvlooJenItlYM3oxbkWwhgMzp9Grl6IhdAYUzFTHBljxoOF0EJoIbQQ7qx0AtdF8Y3BmCpfFYIL5aKCXpyLZWDN6MW5FsIYDM6fRq5eiIXQGFMxUxwZY8bC+edLSnkgBlX+2WdLKqkTYI/Y7/HSSyXYdRMiWu0y+rpElWDNGsmKFZJSXtDoNqrqpTfeWGKgi6V8N4bCcJYEe2OW8qBGbh+1WTlJg9s/cFMhy5dLzjhDUspbmvM1V2uekExuLTsT/ahgVdi9tvKlpY7+rYSgF4VsXUPH4MOR18T16TEo6/NelNdI7g/1pZPk18XMefBw6mvF4BbwnOvxMa3eAm4wf3QIBmPrV2jq978v+epXJRddJDnpJMnC5O/9PQm+VH77tyXYURp/K/r4x2NYnBpjBoDbfQ4Bf9mNMR1jIbQQWghHj4Vw8GW0ui5mzoOHU18rBrdgIVyAWAiNWUgcELmJMtHLME3+shtjOsZCaCG0EI4eC+Hgy2h1XcycBw+nvlYMbsFCuACxEBqzkMgdr1WTv+zGmI6xEFoILYSjx0I4+DJaXRcz58HDqa8Vg1uwEC5ALITGLCRyx2vV5C+7MaZjLIQWQgvh6LEQDr6MVtfFzHnwcOprxeAWLIQLEAuhMQuJ3PFaNfnLbowZM60K2SF6d++W8NxzNdp7wgkS9H7taxLOjI00tZd7Y+Lc4zXae5QGvRdcIEEvZbLNzPm5eW++quuuk1Rs1ggvvyypEJfGdUv5pIS9WyXam3+u3npLgl5sKoveUtZK2Kt/WdDe1aslPPf3fk+CPzz87u9KUNciH/6w5Pd/X/LpT0uuuSYLXj/yla9IcO6XvyzJz8XgeiVJ8IcWBH+WQLBd7+WXSz73OUl9esyXviT5gz+QoPeLX5RgzditGFMhWCTeL/7q9olPSD7/eQk+o3hH114rgVsiGIxXht76oxXzh3+YBTOjF48dN6i3f7kxZqxohUAuSOHoUTAxYUc1hzksc+erNy/cLYSDz5yfm/fmq0JtVmEhjL0WwhALoYVwsQlh8m8Xbh7mTZAPbtU0PbRCIFRAhaNHwaxCOOsAYxY5LHPnqzcv3C2Eg8+cn5v35qtCbVZhIYy9FsIQC6GF0ELo5lJpgnxwq6bpoRUCoQIqHD0KZvW9WQcYs8hhmTtfvXnhbiEcfOb83Lw3XxVqswoLYey1EIZYCC2EFkI3l0oT5INbNU0PrRAIFVDh6NmYCDQdj131wfpI00FjFi0sc+erNy/cLYSDz5yfm/fmq0JtVmEhjL0WwhALoYXQQujmUmmCfHCrpumhFQKhAiocnRKFbcCfp35As+l436YxiwB8/7JUBdqLwhW92MQOvahV0Lt5swS92HcQvdgaFL251JXycw325NyreV7znAaDd2lanYteLHKnBqzWqNWU/ZpXNBj8pgZgVTgXM+/W6L6pnAq9eBr5o8O5uF8ssp4tBuzR4Aa3aJ7W6F8lhhEV2AWSiwpUBIMRzIw1Y+bPfEbyqU9JIMCYau1ayZ13Sr7xDcm3viXZtEmCwcjdd0u+/vUsd90lufdeSX7de+6RYPAdd0huvVWyfr3k9tuzbNwowVQ33yxB74YNEqwKTwNbSKMXy7jtNgnWjF6cm68KLwXBhfCXQv1csTg1xnQLv2AVKqDC0SlN5tZ0HDSNB3mvMQsRC6GEKmIhjLEQRiyEFkILoYVwaZL/u9bCbIJ8sJsLrckvWIUKqHB0ytS//kV6xzEs/jzr+Kkj9TBjFg0WQglVxEIYYyGMWAgthBZCC+HSJCncF2wT5IPdXGhNfsEqVECFo1OaVA3He822x/s2jVkEWAglVBELYYyFMGIhtBBaCC2ES5OkcF+wTZAPdnOhNfkFq1ABFY6uiHqGf76Lgtf089QPyXE04zBjFg0WQglVxEIYYyGMWAgthBZCC+HSJCncF2wT5IPdXGhNfsEqVECFoytqeevRdDx2xSO94wMOM2YRgRL5JQ1K8ws1ADUxzsXMqMVRXufV9quafM0ozbdrMFV+gys1cA/cEZaBC+1v89hhNbs18LRVmnxVCBQIi3xBg3eER4c7wi1gMG4Ba86fM9aMVT2tQW/+ucLDyZeRz5w+2LwIRpmLXgRT5SUyjCgXpLw3V6BW56I3HwwzyXvxcHIzgT/k7wjXxf3CaWG8f/RHkj/+YwkWianQi2BVeJJ/8icSrBkiilWtWyfJPQ1PEi8FepzLM5K/fTwrRBd5uTFmrEipZYwZByj6UcejJs59CUUwzsXMeT2dl9co3PM1b7EQNq8KSb3FQpgtI585fbC5bKC8riUwBlPhXAgDHACBP+S9qMUthDFQEQthzIIRwuTfLuomyAcvxibIB7vp5vBNKbWMMeMART/qeNTEuS+hCMa5mDmvp/PyGoV7vuYtFsLmVSGpt1gIs2XkM6cPNpcNlNe1BMZgKpwLYYADIPCHvBe1uIUwBipiIYyxEC7IJsgHu+nm8E0ptYwx4wBFP+p41MS5L6EIxrmYOa+n8/IahXu+5i0WwuZVIam3WAizZeQzpw82lw2U17UExmAqnAthgAMg8Ie8F7W4hTAGKmIhjLEQLsgmyAe76ebwTSm1jDHjAEU/6njUxLkvoQjGuZg5r6fz8hqFe77mLRbC5lUhqbdYCLNl5DOnDzaXDZTXtQTGYCqcC2GAAyDwh7wXtbiFMAYqYiGMsRAuyCbIB7vp5vBNKbWMMeMgr3pR5g5DXuWjYr5fg7L+GQ2mgsagF5U6VoVgqis1z2u2avJlYPBGDZ4GVvWSJl8G7hevG713a/DY92ry95vndU1uYq0utEWDC+HzjHNxg9gYFo89XyTePp6z/lUCRXCrmhi1OCp1SA6U4NvfljzwwNxz//0S3AIWidIcKoJgP084AAajFyoCX4K35OdizRhcv5ckMDE8OgxGL+4XmppvKwrHw2cDwcPBo8PDwecK5+LRwaWx5ltukWDNuBCeBhaJ6+JDqLncGDNW+BVqjOkc1LWoiS2EMRbCmPz95oGnWQibUxtFDEpbC2EidRZCC2FDLk//7cJNN2MT5IPdHLDJr1BjTOegrkVNbCGMsRDG5O83DzzNQtic2ihiUNpaCBOpsxBaCBuSl6puuhmbIB/s5oBNfoUaYzoHdS1qYgthjIUwJn+/eeBpFsLm1EYRg9LWQphInYXQQtiQvFR1083YBPlgNwds8ivUGNM5qGtRE1sIYyyEMfn7zQNPsxA2pzaKGJS2FsJE6iyEFsKG5KWqm27GJsgHuzlgk1+hxpjOQV27SXOhBnUtel/TAEgOgko9n2qDBufm4H53agCUYJ0G+oQ7gl2g9w3NI5ptmmc1MBPMnF8X9oingQuhF9fNeToN3m9+C9BFTJWvCreAC+XLwIWASh3XvFWDj6heNy++UbyicEfFjGobM6OeRi1+ww2Sm26SYGYEIoqyHlO1KtxxIcwM58Ed4VmhF6vCzAhu8L/8FwkeHYJzb7xRglvAqnAubgGbf+ZrxnUxGFMNMxgPB3eEc/GsMFX+cOpHHbNmTZavfjXmcmPMWOEXrHJqCkcPwcQBOTXmcAUV8yYLYcBCGJOrF4BNIXi/+S1YCC2E08HMFsKYfM24Lgbnjtdq8OIUwuTfLtx00835bvILVqECKhw9BLMK4awDjFm8oGLeZCEMWAhjcvUCsCkE7ze/BQuhhXA6mNlCGJOvGdfF4NzxWg22ELrpppstm/yCVaiACkcPway+N+sAYxYvqJg3WQgDFsKYXL0AbArB+81vwUJoIZwOZrYQxuRrxnUxOHe8VoMthG666WbLJr9gFSqgwtEpU0Y3MUnvSCSOxMH6SNNBYxYjqJg3WQgDFsKYXL0AbArB+81vwUJoIZwOZrYQxuRrxnUxOHe8VoMthG666WbLJr9gFSqgwtEpfXWu78+9MbHZdLxv05jFBepa1MQvaNCLoOpFpY5crtmtAV/TYHBefEMJWqVedszrGmxZCfXCmuHSCGaGl76V5g0NrAaPHRqD4Lq4oys06F16XC05skjKOxph1y4J+cpXJKin8/IayoftH/NNOL/xDQkGY2ZoG4LtLpH8QtiSFNfNN9JEL2QSvRBRqCbOxZPMB+OlQJ8wOBd+9CJQejzY666TfOQjkhNPlCwK/sE/kJx3nmTlSsnVV0uuuELymc9IPv/5mMuNMf24oCv4u69QARWOTskVrsnomoQQ5L3GLHAshEnqZcdA29ZaCC2EFsI+yS9kIUx6EQvhvAlh8m8Xbg7TBPng+WuCfHDeBK0GLzoOqNrPLv5ZL/PX5O++QgVUODolN8DYPPjPhYF6QO9IPcyYxYiFMEm97Bho21oLoYXQQtgn+YUshEkvYiG0EC62JsgHz18T5IPzJmg1eNGRW9wIm/zdV6iACkenwNmamm2P920as7iwECaplx0DbVtrIbQQWgj7JL+QhTDpRSyEFsLF1gT54Plrgnxw3gStBi86cosbYZO/+woVUOHoiuhptcJF2esrfk3H0YzDjFmMWAiT1MuOgbattRBaCC2EfZJfyEKY9CIWQgvhYmuCfPD8NUE+OG+CVoMXHbnFjbDJ332FCqhwdAW0LfQcOhKpj0/9XB+sj8Tjxiw6XtQASI6wYoUEXHKJBFx1lYScq1F27JBUQL3ANyUo69+r0d6HHpKg97TTJJy57JCg91SNwuuCMzTKmWdKwP33S8As7whr1jvat08C8k9OKU9pwEoJn7NqG4kf5rXliBLzxBMS9O7eLUFvKZdJsKr0c1W+9CXJtddKvvxlCQZ/4QuSK6+UrF4twVR/+IcS1NNf/KIEM2s9zeIb5+JC+GBdfrkEvcjnPjf3fPazEsyMh4O3gDv6gz+QYGY8HDy6//yfJTgXyc/N3yD+0IA7uuYaCabCxwxTwTxxXVzo+uslN98swaaja9dKoNY4F70INuBN9029wBgzVvhdbYzpHAvhoIU7xUx7LYQxFkJJ+rli8Y162kIYU2ve4IFrYWYLYczhJ4TJv1246aab893kd7UxpnMshIMW7hQz7bUQxlgIJennisU36mkLYUyteYMHroWZLYQxFkI33XSzwya/q40xnWMhHLRwp5hpr4UwxkIoST9XLL5RT1sIY2rNGzxwLcxsIYyxELrpppsdNvldbYzpHAvhoIU7xUx7LYQxFkJJ+rli8Y162kIYU2ve4IFrYWYLYYyF0E033eywye9qY0znfE1yVImh1Gkvy2v0omJG73s0bWY+91xJde7jEu199FEJeilInPkVifZu2yapzl0jQe+ZGp67X6K9qOt47jINZ9YdWdn7mkR7sQtjde4lEvZ+SqK9H/uYpDpXd4LVXgqw9p6nmxRyZqi19lJxcW75goS92ZrLmjUSFN8ozfPg04DSHM6D4FwU/ZgKvV/9qiTvveEGCW4fvdhkNb/BvDdfFXoRvBQEF0Jvfl0Mxi3gHeWrarUM9ObBuflU+TLQi8Atc03Fw8HgNsu4wBgzVg5Wo8aYsWIhnImFUHsthDOxEErQm8sVei2EMRiMW8A7ylfVahnozYNz86nyZaAXGZ8QJv924aabbs5382A1aowZKxbCmVgItddCOBMLoQS9uVyh10IYg8G4BbyjfFWtloHePDg3nypfBnoRC6Gbbh6WzYPVqDFmrFgIZ2Ih1F4L4UwshBL05nKFXgthDAbjFvCO8lW1WgZ68+DcfKp8GehFLIRuunlYNg9Wo8aYsWIhnImFUHsthDOxEErQm8sVei2EMRiMW8A7ylfVahnozYNz86nyZaAXsRC66eZh2TxYjRpjxsjDD0tYquYp70jYe6EEzlMe1Ojmn+8rknKV5oKY114rMW+9JSknSqAxGzdKsPslHQ9CWK7UfFTzcMxRR5WYk06SlPJ0zEUXlZgTTpDAPdatKzGlPBGzfXuJqW7hWc1jmidjsJFkKbs0cgulbNKo4ZcHNFjGq5p9GlwI5+7VAP1McqrdGtzCNg1uH8GFkJUSlKpQglxyYFP5Rov4uCP4JGH7R8yMwbfdlgXLyA0QO0nWs8XkU40reFYbNkjwNHDuTTdJsOvmffdJ/uzPJH/yJxL8x+6uuyRf/7pk0ybJt74l+cY3suBcLCPvzZeBwd/8puTuu7N8+9sS3JHmAmPMWNFvanJMCkePgomJCR4yZmnzsIXQQmghPBQLoYVwFLEQxuS9+TIweD6FMPm3CzfdjE2QD3ZzwKZ+UxMqoMLRo8BCaA47HrYQWggthIdiIbQQjiIWwpi8N18GBlsI3VwATZAPdnPApn5TEyqgwtGjwEJoDjsethBaCC2Eh2IhtBCOIhbCmLw3XwYGWwjdXABNkA92c8CmflMTKqDC0SlTpjcxSe9IDwxLBsTj8aAxi5WHLYQWQgvhoVgILYSjiIUwJu/Nl4HBFkI3F0AT5IPdHLCp39SECqhwdAoULjbxc9+DTT9P/WDMogY1MepplMh7NFs16zQo61G4b9Hgus+l0T0bWamjF+c+pHlNg2Vs0OzR4NFBcqAx+Q2id60GF0Lv/RpM9WwaPCsEF8Lt70yDG9ymgSBhzXiSl2te0uCO8Kww+HUN7giDN2lwoa2aVzR4dJhKz0XVi6IfvaiYUdree6/knnskqJghDBiMC+VBpY5lYJG4wao6z4JzEThAq17c0Xe+I8Ey8FJgNVAvXOiBByS4EJ4kZsYbvPPOLHfcIcnfPv46gGXkHxUMhi7md5R/ROtPWgyeJJ4zHixm1hd6gTFmrLAyVaiACkenQN6amvUP+XFjlgAooFGa77YQWging9vfmQY3uM1CaCE8FNwgevPgXCRXvrwXd2QhjMk/Khi8OIUw+bcLN4dpgnxw3gT54M6aIB/cqgmGGZz35k2Q94LBZ2ZlqlABFY5OqQUPYFjvh/y4MUsAFNAozXdbCC2E08Ht70yDG9xmIbQQHgpuEL15cC6SK1/eizuyEMbkHxUMthC6GZogH5w3QT64sybIB7dqgmEG5715E+S9YPCZWZkqVECFo1OaBA80iV/TcWOWACigUZrvthBaCKeD29+ZBje4zUJoITwU3CB68+BcJFe+vBd3ZCGMyT8qGGwhdDM0QT44b4J8cGdNkA9u1QTDDM578ybIe8HgM7MyVaiACkdXRHmrBa9vb/xhkJ+nfjBmUYMCGqX5bguhhXA6uP2daXCD2yyEFsJDwQ2iNw/ORXLly3txRxbCmPyjgsEWQjdDE+SD8ybIB3fWBPngVk0wzOC8N2+CvBcMPjMrU4UKqHB0RV/li0d6xIP5gHg8HjRm8dKqkN2oeUOD8jrPsxpcd4vmQQ1UEzPj3FaD79ZgMBwAa35GA/fAYEyVv4U7NXCevalMvql5TvOsBlO9qMGHAcvAzDDtFzToxbkvafCOsKr80WFm3OBWDXqxDMy8U4MnuVuDR6fXReWK5BpTj4+5/34JCmhU6tCJXJAwc75I2BTOxTLgHq0CEcWq8lv40z+VYANP3AI0BhuH3n67BPaI6+JZoRe3gF7cEQbjulhzHrx9LBLB5wrPCi8F52KRCKbCDWKR6MXnClE/RG1qjOkYVqbGmM7J62kUshsthCFYs4UwxkIYg0en10VZn1f5qKfr8THwBwthcgsWwpjDXgiTf8qoGeFg9OaDwTCDR9gErQbn5FPlM+e9oNVgkJ+L3laDc/LBnfXOucnK1BjTOXk9jUJ2o4UwBGu2EMZYCGPw6PS6KOvzKh/1dD0+Bv5gIUxuwUIYYyHUyjVnhIPRmw8GwwweYRO0GpyTT5XPnPeCVoNBfi56Ww3OyQd31jvnJitTY0zn5PU0CtmNFsIQrNlCGGMhjMGj0+uirM+rfNTT9fgY+IOFMLkFC2GMhVAr15wRDkZvPhgMM3iETdBqcE4+VT5z3gtaDQb5uehtNTgnH9xZ75ybrEyNMZ2T19MoZDdaCEOwZgthjIUwBo9Or4uyPq/yUU/X42PgDxbC5BYshDEWQq1cc0Y4GL35YDDM4BE2QavBOflU+cx5L2g1GOTnorfV4Jx8cGe9c26yMjXGdA4K2T0a7Aa5T/OABoYAQUK1jfIaaVXlY80YjEViGbj9XRooAc6FmVykweA3ND9P9/PEubgFrArPCpuOYma8UEyFwZgZq9qvwdvHg0WwyI0aTIXBWAaEH5+N+tIxe1Lhh8Tu0mAZmzTYGXWnZrcEGzxik0bUxLlOoJ7Gjo5QPthUfiEU/bguBuO6uBB6YTWYGddF0Y/gXNwvrov7xYXgh7hB2AWcJ+/FO8Jg9OLhYM1IfiF8rnBHmArXVX3iY8ejQ/BS8teNVeEt4FwEq0JvLb0hWuIaY7qGlakxpnPyEtlCGINzLYQxFsIYC6GFsKEX78hCGINVdSiE+LeLVuTnDtM7DPnMeS8YZnB+bt4L8sHDXDcf3Ip8qrwXzN8iwbhmjr2sTI0xnZOXyBbCGJxrIYyxEMZYCC2EDb14RxbCGKzKQjgE+cx5LxhmcH5u3gvywcNcNx/cinyqvBfM3yLBuGaOvaxMjTGdk5fIFsIYnGshjLEQxlgILYQNvXhHFsIYrMpCOAT5zHkvGGZwfm7eC/LBw1w3H9yKfKq8F8zfIsG4Zo69rEyNMZ2Tl8gWwhicayGMsRDGWAgthA29eEcWwhisykI4BPnMeS8YZnB+bt4L8sHDXDcf3Ip8qrwXzN8iwbhmjr2sTI0xnbNeg8oV3oLB6L1So1XvLLX4Fs0zGhT90BiU5pj5Tg0Kd7gH7ghPA9fFYOgT5AqigkViL9CtGtw+pA4z447u1mBmDMbMz2r2arBT6E81uNAVmp0azAz1wiJ/rMFzRi9mxnXxFvBCN2rwFl7XvJEKP96R9kJUENTiKPrzmhhKkBffeSAMuFC+SBhCXcont4Bl5LefB7ePC0ESsIMlbhCD77hDUr/EGOgxAm1DsIy77pJgKtwvgpeCC0FT81vI/9CAZ4XPJF4okn+A6/ExeIOYSsNC1RjTLaxMlYkUjjbGzIn1FsIQ3BGehoUwxkIY84aFsHGRFsIY+BJSS6CFsOkDXI+PaSmEg/9TBvtaMn9TjXBmMH8zg/xC+f0O0wT54FbNnPzc+WuCYQaPqpeVqUIFVDjaGDMn1lsIQ3BHeBoWwhgLYcwbFsLGRVoIY+BLSC2BFsKmD3A9PsZCODrmb2aQXyi/32GaIB/cqpmTnzt/TTDM4FH1sjJVqIAKRxtj5sR6C2EI7ghPw0IYYyGMecNC2LhIC2EMfAmpJdBC2PQBrsfHWAhHx/zNDPIL5fc7TBPkg1s1c/Jz568Jhhk8ql5WpgoVUOHolKnx8cR6nkHGGLP0WG8hDMEd4WlYCGNesxBaCA8lX6SFMAa+hNQSaCFs+gDX42MshKNj/mYG+YXy+x2mCfLBrZo5+bnz1wTDDB5VLytTpedjfeHoFJzS9+d6TOzqHTdmiQHJQaAEyJ0anItaHCUy2J9uWdlKCGE1ueRgKiwD14Xi7kmD+8Uy0IvtW3O+oMGzwg1iVas0EBWYGO4XF8Imq3iS6N2qwXXxcHChnRooLhaZrwofFWwMu16DwZjqec0DGrBPo1PlFTNMDEqA4hs1Mc5FiYzeuqROgqnyW8gHQ0XgaVhk/nBa9cJ5sEjcL87FmmvrS/QJbzA3MQSD8SRxC/ljxzKwZqgmgsFYFWbGuZC6Vq87/xDm7wjL0K19UZsaYzqG35nKlJI1wdEpGN/39EHGGLP0QJmLwC4QC2ES3C+WgV4IQ46F0EJoIez3cFr1WghjsOZaAmMwGKvCzDh3kQgh/ikjb4J8cKtmzjCD8ybIe0E+OO8FGJw3Qd6b0+rcVqsC+eC8F+TLGOFUoFVv0uR3pqICSDg6pR5fz4Mx9SnGLElQ5iKwC8RCmAT3i2WgF8KQYyG0EFoI+z2cVr0WwhisuZbAGAzGqjAzzrUQtmnmDDM4b4K8F+SD816AwXkT5L05rc5ttSqQD857Qb6MEU4FWvUmTX5nKj1n6wtHpyTje10Yk5xizFICZS4Cu0AshElwv1gGeiEMORZCC6GFsN/DadVrIYzBmmsJjMFgrAoz41wLYZtmzjCD8ybIe0E+OO8FGJw3Qd6b0+rcVqsC+eC8F+TLGOFUoFVv0uR3pqICSDi6Io7B+L5d9ZimLmOWEihzEdgFYiFMgvvFMtALYcixEFoILYT9Hk6rXgthDNZcS2AMBmNVmBnnWgjbNHOGGZw3Qd4L8sF5L8DgvAny3pxW57ZaFcgH570gX8YIpwKtepMmvzOVafXrD0dXxDH1+HqeQcYYs/TIi2+UuajjX9Os1WAqgN43NFgV9AmBAmEZMCL4AwZjGeByDcDTyA0Bq8K5eM7wpS0aXGh/6rTrNOjFMl7X4EKwKfgSwJrxfvemwczozV8ZbhBT4X6RDRpI3TYN7minBqatH2AU/aiJUQSjnkbVm7sHgnMRFP04FxfCufngfGb0osqH1aAX211i8088ZzzYXDZwLhaZ3xEWWataTG5EePt5LzZohXrhXLxB9OL2EbxfPMl8Zjyr9eslsLj6ccXgs5FHz2UZa4zpFn51G2M6Jy9k4QAQFRTQkCtMBdCLsh6rqiXQQtgLLrTfQhiwEDYH5yK55OBCODcfnM+MXvgDynr0WggthANGz72g+rcLkPzLxqxNMMLeYQYPcy4YZvAwva0G572tmiAfnDfBCHuHGZw3wah6+dVtjOmcvJCFA0BUUEBDrjAVQC/KeqyqlkALYS+40H4LYcBC2Byci+SSgwvh3HxwPjN64Q8o69FrIbQQDhg9F7Up69aqt1UTjLB3mMHDnAuGGTxMb6vBeW+rJsgH500wwt5hBudNMKpefnUbYzonL2ThABAVFNCQK0wF0IuyHquqJdBC2AsutN9CGLAQNgfnIrnk4EI4Nx+cz4xe+APKevRaCC2EA0bPRW3KurXqbdUEI+wdZvAw54JhBg/T22pw3tuqCfLBeROMsHeYwXkTjKqXX93GmM7JC1k4AEQFBTTkClMB9KKsx6pqCbQQ9oIL7bcQBiyEzcG5SC45uBDOzQfnM6MX/oCyHr0WQgvhgNFzUZuybq16WzXBCHuHGTzMuWCYwcP0thqc97Zqgnxw3gQj7B1mcN4Eo+rlV7cxpnNQXoP9qV3sSYMSGTaF62LmFzS1BMa8rkEtjlvAqvJl5IFdYFWYGavCMnJ7zHlWg1W9rMkfHcxzu2ZLGogZbh82hV48DdzCK5rnNLjuHg2E/z4NXuh+DV4KzsUtYKoNGjzYdRKU16hc0QthaFUTozTHzCjNUeXrroycKjciDMbM6M3XDEPAVEirVeWDMfPtt0vwcBB4KawVyZ8zHg7kKu/NB+N+MRifOgxGsGYEg7EMfJ7xUvAW8AHGmnMv1WWwUDXGdAvrGmNM56CuBSiRUfWi+EZQ5VsIY7AMC2EMbsFCaCGcjoUwJnc89OaDcb8YfPgJIf5lY/B/6GjbBPngVk2QD14gTZAPHlcTjLC31eD5623VBK16Y5N1jTGmc1DXApTIqHpRfCOo8i2EMViGhTAGt2AhtBBOx0IYkzseevPBuF8MthDOtcydtQnywa2aIB+8QJogHzyuJhhhb6vB89fbqgla9cYm6xpjTOegrgUokVH1ovhGUOVbCGOwDAthDG7BQmghnI6FMCZ3PPTmg3G/GGwhnGuZO2sT5INbNUE+eIE0QT54XE0wwt5Wg+evt1UTtOqNTdY1xpjOQV0LUCKj6kXxjaDKtxDGYBkWwhjcgoXQQjgdC2FM7njozQfjfjHYQjjXMnfWJsgHt2qCfPACaYJ88LiaYIS9rQbPX2+rJmjVG5usa4wxnQNDQF2LQhabJWIw6ngMBqinn9XgupgZgQNgr0jIBgwB5rlFA4nFubjulFP1slOD54wLYWbk2VT5cAu4X6wqnwovBVPt0aB3vwaD8VHBhbZosCo8OuxuiueM6+L2YY9YM3px3W0aXAhr3qpZpdGZUapiN0jU4ihzkVZ+iGobwary0hyDoW0IpoIh4BZyQ7jtNsmtt2bB7ePR1coUk58LM2n1QnEh+OGGDVnwNHBdJB+Mt4Dknxy8BXw28qnyR5cPxqPDuRiMNevninWrMaZbWCGCiTRmmomJ/o+j6bgxEVS9FsIYC2HMHg1691sIQ7ZaCBuDqSAMtQTG4FwLYQyui+SDawlMLC5/C0tRCPN/9wDJP4PUTZD3gnzmVk3QqrdVM2eYwXkzJz93mCYYZnDemzdBZ715M8IKESQ6k3RNM6GwewGDlU/BQYGm3qbjxkRQ9VoIYyyEMXs06N1vIQzZaiFsDKaCMNQSGINzLYQxuC6SD64lMLG4/C1YCNMiOJ8q7wX5zK2aoFVvq2bOMIPzZk5+7jBNMMzgvDdvgs5682aEFSKY0pmJKr2uFOjQYrSjAdfcNKzpuDERVL0WwhgLYcweDXr3WwhDtloIG4OpIAy1BMbgXAthDK6L5INrCUwsLn8LFsK0CM6nyntBPnOrJmjV26qZM8zgvJmTnztMEwwzOO/Nm6Cz3rwZYYUIeu6H9LpSEiHs/bNbPSY5GI/XY+IPcXB9bjyI46Du7XtiPIjjfcf0DhpTWJuycLcQWgh72aNB734LYchWC2FjMBWEoZbAGJxrIYzBdZF8cC2BicXlb8FCmBbB+VR5L8hnbtUErXpbNXOGGZw3c/Jzh2mCYQbnvXkTdNabNyOsEMGUuUxU6XWlwHx6zShF+Hnqh/jzIINjM45Bs+8YjAfoamo2Tdh0sPezMaUqc1Gao3BHEYxgcK4TKKBhj+hFdmtQfKOOx16RWCR6c8V9TgMTywU4twv05pqKNePBQiZxv7gQAtfCzK9oMHN+XTzYTRqA54xl4KU8o4EB5h/CnRos8g0NBt+pwSvD7WPNugwUsgiMCGUuUp8eU4+PwYVQbaMXyYWhFoyYfDDsAtfFuTBPCCFcK78uBmNmKBA2HcXM9YtIXkq+KgRT4VysOd/7tF5YDN4vHk7+UrBm3C8ulMtk/onNb3/dOoleCLWpMaZjWAWAKW2ZqNLrSpkynx7xeBgl1hSP9z3YNHjW48nBvmOmSLrKABetf+jbNIc52yyEFsLpWAgthNOxEFoIezn8hDD5p4yawf8ZpGaYwa2aYJjBeW/eBK16h2mCEfZ21gT54M7OzXvzZoRVAJjSlokqva6UqD34GdRd8Ujv59hsexwHAUdMU3f1PRHD6uM4q3fcmFKZyRYLoYXQQmghtBBaCGdiIUwZvOqtGWZwqyYYZnDemzdBq95hmmCEvZ01QT64s3Pz3rwZYRUAprRlokqvKwXa02sOokNNg+d8fNaDfclnm/Wi9Q/G1GyzEFoIp2MhtBBOx0JoIezFQpgyeNVbM8zgVk0wzOC8N2+CVr3DNMEIeztrgnxwZ+fmvXkzwioAJBaTdE2TaFLs6mtNfQfj56kfkuNNXfFgPF5TzxZ/7jshfq4PxuPGlMpMtlgILYQWQguhhdBCOBMLYcrgVW/NMINbNcEwg/PevAla9Q7TBCPs7awJ8sGdnZv35s0IqwAwkWY2au2BIEGT4vG+B5uOT/3cOxjHTB1JzsVxUPfGs3q9vYO9rt7x+HM9wJjC2pQ1casqH4NR1r+owT6iYLUGYM35IvOdQlHHY1XPanC/cI+dqV3guhgMb8FgaBtuf6MGjx2DsebXNNs1UNyvadCLNUOBEJyLZ4XevW2CC2HNj2jwrPA0tmrwJHEhnIvgQnqDKGRRfNcaEFPX7kkdnxfQOBcXyleFOh7JbQpmgmBw/QQGXyRuEKtC8qnw6CDP+cawGIypcufBw4Hj4bHjfjEzFone+tnGYHC+5ypuYZipcO7NN0tyLU8/k6hNjTEdwyrPGNM5KHNzjUHxnQ9GEWwhjMFgC2EMeve2CS5kIQyxEMbUEhiTT4VHZyFMLG6RCGHybxd1b94ErXrnb3DeO8ImyAcPcy7IB+dNkA9u1QStelsNzntbDc57R9iMsMozxnQOytxcY1B854NRBFsIYzDYQhiD3r1tggtZCEMshDG1BMbkU+HRWQgTi7MQtumdv8F57wibIB88zLkgH5w3QT64VRO06m01OO9tNTjvHWEzwirPGNM5KHNzjUHxnQ9GEWwhjMFgC2EMeve2CS5kIQyxEMbUEhiTT4VHZyFMLM5C2KZ3/gbnvSNsgnzwMOeCfHDeBPngVk3QqrfV4Ly31eC8d4TNCKs8Y0znoMzNNQbFdz4YRbCFMAaDLYQx6N3bJriQhTDEQhhTS2BMPhUenYUwsTgLYZve+Ruc946wCfLBw5wL8sF5E+SDWzVBq95Wg/PeVoPz3hE2I6zyjDGd84YGRrRTA31ap8mdp66SY+A86MX+lhCGuzVbNJgK56LoR+93NXg4+S3gaSC40F4NZkYvLgSZBDBADM6XgUCBMBVuELfwrGarBjO/qcHMuzVYBoJb2KnJr7tfg2XkbwEGiOi52LMxrVypE/fdJ/n2tyV58Z17C5IPRtEPFYFc4Vz0YpG4wQcekPzX/yr57nclWDNWheeMZeA5oxczYyp4Gt4vevHo8HC+8x0J3m8eTPXgg1nuvz8LRBR3hI8Z7gjB+0XyTw4+DEj+rDBY3yBqU2NMx7ByMcZ0joUwBr0WwhjoE6bCDeIWLIQWwungXPRikbhBC+HgwVS1BFoIp3NB9W8XeRPkg4c5F+SDW52b9y6QJhjh4Fbnjqu3VRO06m3VBMMMjrByMcZ0joUwBr0WwhjoE6bCDeIWLIQWwungXPRikbhBC+HgwVS1BFoIp1OXqnkT5IOHORfkg1udm/cukCYY4eBW546rt1UTtOpt1QTDDI6wcjHGdI6FMAa9FsIY6BOmwg3iFiyEFsLp4Fz0YpG4QQvh4MFUtQRaCKdTl6p5E+SDhzkX5INbnZv3LpAmGOHgVueOq7dVE7TqbdUEwwyOsHIxxnSOhTAGvRbCGOgTpsIN4hYshBbC6eBc9GKRuEEL4eDBVLUEWginU5eqeRPkg4c5F+SDW52b9y6QJhjh4Fbnjqu3VRO06m3VBMMMjrByMcZ0DmpiVNvbNCiCUeai+MZOoQ+kwVQwTzge1vyqZmECp10Ua54/NsegcC1lfcx115UYbBt76aUlppTzY84+u8SsWSMp5WXJkUVS3tI8EgP1qLYzvV/zUY26JSpX1LUozfGwUG1DVFqVyOhFlQ9BgqZ+/vOSD3xAMi7e/37JgZojya//umQJ8A//oeRjH5Nce63kj/9YctNNEvTiF+nGGyUwXkgdPjn4mGFrUPgh9hHFdeGW+a+G/mUBtamZJ049vDnGNMP/fCkTZSIJRxtj5oSFsBsshBELoYVw/rEQWgibfjUqIUz+7aLuHWZwfm7OCKcaCzSkw4wD2nP5MT/rxc3Y5H++lMT6kq4eExOzjxkJnV3ImPnAQtgNFsKIhdBCOP9YCC2ETb8aFsJxQEM6zMiN6DBv8j9fypT19f23QQuhMaPCQtgNFsKIhdBCOP9YCC2ETb8aFsJxQEM6zMiN6DBv8j9fyqiEcCIQm3FkpHccXfEguqaoz+odMWbBYiHsBgthxEJoIZx/LIQWwqZfDQvhOKAhHWbkRnSYN/mfL2WEQlgfjD9HeWv781Sz9zOa6DJmwXHyyZKTTpKUU9No1fvaayUGe5BefXWJweCVKyWV8gmXXSYpx2rOklx8saScIuF1j9bo4IP/2Ql57DHJEUdI4MNvvlliXnhBUsq9mtc0+2K2bi0xuO4NN0hK2RiD133eeZInnpCUMyTLlklQ9ZXyouScIik7Yk47rcQ89JCEvlTeibnmmhJTykMxJ55YYlAi8v3qnzBWrSoxeGUV22PwecY7KsskqIHpWihkcQ/wQ1xp2zbJjh2S7dslOBeDf/hDCXpxIUz1538u+R//Q/L970sweMsWyX//75If/ECCc7EqXOiRRyQYnJ/73/6bBG8Bb3TdOgkUCFuSYgNPBL9mN98sgSBhZuwFCqlDNmzIcsstkvXrJbfeKoGnoRdrxrNCL54zNpXFpw6fWHza8X71hR5jjBkr/IJVuhTC3sFhjvdtGrOgsRBaCC2EFsKDsRAm51oIl7oQJv924aabbs53k1+wyiIVwqkjU+C4MQsOC6GF0EJoITwYC2FyroXQQuimm27OW5NfsMriFcIeSZcxCwILoYXQQmghPBgLYXKuhdBC6Kabbs5bk1+wSmJ9SVePvv7W9+eJSVr9PPXDrE10GbPgsBBaCC2EFsKDsRAm51oILYRuuunmvDX5BavU/zaIfyfM6etvfX+ekr0evQHoigfDkJkxyRFjFigor/fulZSyMuaii0pMWSH5xCck554rwSaNzzxTYriP6HtLDErz44+XHHecBCKKRZbTNeWCGGy8h0VedZWklAc1l8UcdVSJKeUqCdV6Z8wZZ5QYLAOBp8EesebduyVYcys/hCBUd9TG08rVGvG0ouzZI/nRjyTvvCPJZ4YBVhL7hAb74soNYttF/BkC+1mW8k0JdiyFXUAnsO/in/2Z5OGHJX/6pxLMDPfAzPBS7G6KPRtxC1B8yBWCsh7aBuXDDeL2sQz04mls3iyBMEAn8HHHLcBbbrtNApuC80Cu8BcdvDLsBIvr4vcK9rh2rQSqCXvEhwE+jIcDS8dzxoVwg3hW+WcSM+OjglV973sS3VYUG/AeY4wZK/iiHxc2N3P4YiG0EFoILYR9im8LoYWwl8NACJN/u3DTTTfnu4kv+nFhITSHLxZCC6GF0ELYp/i2EFoIe7EQuummm/PZxBf9uLAQmsMXC6GF0EJoIexTfFsILYS9WAjddNPN+Wzii94Y0zUWQguhhdBC2Kf4thBaCHuxELrpppvz2cQXvTGma667TvLe90pK2RoDnUCJiNL8wNwxKOSqov8LGgEOQNc6QlOulagQ/uIXklIe1Yg/PP98iSmnSLBj5+mnS7CqSy+V7NolKWWX5PgiOVtzpuYoCS0OIlquiHnxxRJTytOabTGvvlpisH/pEUdkm53u2ycp5cqYM88sMbyFaQU9FP1MospdsUICbet9ohYWKFXvu08CB0BNjN78XFgc/OGeeyS4EMprradpj3AeyAa0DbIBmcR/OPJeOB5mrl00CaZCL/Y+xYXgljj3wQcl8KVbdU9O6CL+8ICdQq+/XoKp8FLgWnhHEFFsOgqLwy18/euSyy+X4Ff0mGMkY+IYY8xY4e+kMaZjLIQWQgvhmLEQWggthOMWwuTfLtx0c7E3Fz78nTTGdIyF0EJoIRwzFkILoYXQQuimm/PWXPjwd9IY0zEWQguhhXDMWAgthBZCC6Gbbs5bc+HD30ljTMdYCC2EFsIxYyG0EFoILYRuujlvzYUPfyeNMUuGSy6RtAJ2Abi/5ShZJzmhSMoGzd2aHRqALUnf1Zyv2RQDAYYev/uu5KMflZx7ruSkkyQo5Ko7EpvCLrKlPB+DnWBLeTkGfyzAmk85RcK3UO6PefvtEvPUU5Kjj5ZgG1U4PJ5zKas1H4954YUSU8rjMeefX2Lw15BSztOs0owObOf6q78q+Y3fkPzmb0rQ+1u/JcEH6yMfkfzbfyv5wAckv/ZrkrPOknz4w5Lf/V3Jpz4l+fSnJZ/9rAR/38IGrdjO9C//UvKTn0h27pT81V9JMPiv/zoLpnr2WQl6ce7TT0uwxTDORTD4ueey4FzcINZcn54EM2Oqv/mbLPmTRPAHPPTWGzSHsDgdggljTHv4Xab87OKfJeFoY8yCwkKoWAgthL1EG1w18xkZHguhhbAXDK5VLdE23KCFcGAOlrYHitvp1E2QDx7hua2aw/CziZ/14qabAzb5XaYk1pd09Zio4IgRMX8zG7OIsRAqD1oILYQWQgshjQi9ONdCmDxJxEI4uuYwJEW/m242NfldpkxZX99/GxxQCHlofujsQsYsJiyEyoMWQguhhdBCSCNCL861ECZPErEQjq45DEnR76abTU1+lynzIYQ4ONWcUDCgPj71c+yaoj6rd8SYww4LofKghdBCaCG0ENKI0ItzLYTJk0QshKNrDkNS9LvpZlOT32XKfAhhCcfjD3P+earZ+xlNdBmz4IAhoICGt7z0Uol53/skpazR6Mah5xRJeTjmgx8sMaWsjcEWhqW8oXlW80rMypUlppwkqTRGZ9bB5VxN+WXMW2+VGE51YpHoVNh09OWXJXywRxZJeU1zfczPf15ili+XoIJ65BFJKffFYL9D7MgKQeJ2tb+i4UdFprryyhJz3HGSX/5SUs38Iw34WAwEAaZdjsDutWKPeJKl/FwzszvrgWDHyscek7D4zmUD1XZdQ8egJkYtjpkRLONv/zZLXou3CpaBO8plI7/9+vkkwbn5S6kEQ5JPVRtU8n7zZeD95uqVfxhaXQj3iwvh3Fyt62Uni0Ty142PqM48VdUZY8YFvqrB8ELY93LJD0Me79s0ZkFjIbQQWggthH2CZdQSaCHspZZAC2EvOHehCmHybxduuunmfDfxVQ2GF0IemmZiktgMnbOLX9PxeASXMGaBYiG0EFoILYR9gmXUEmgh7KWWQAthLzjXQuimm25WTXxVg3kSwt7x+ochj9ckXcYsCCyEFkILoYWwT7CMWgIthL3UEmgh7AXnWgjddNPNqomvapBYX9LVY6JBxnrH4w9tf576YdYmuoxZcFgILYQWQgthn2AZtQRaCHupJdBC2AvOtRC66aabVRNf1aD+t0H8O2HORMXUQYypR2JAfbxpTHLEmAXLhTG7d5cYFNBXXFFirrpKUsp6zaoYfLOj7CllZ8zq1SWmco+Pxjz+eIkp5TGNlOYnnFBiYGJnnCHBmssyTflkTLUz6vaYZctKTCnflMCWl2vKo5oHY1asKDEQ0XfeKTGlXBvzwAMlppwhuegiSSkrY7BVJK67dm2J2b5dgkdXytc0coN4R/jElvcXSdkbUy0SF9oSs2ZNiSnlOY2cu39/iSnlScmZRXK65PjjJayJ81ocVW+tEDF10ZwEM6OAzmfGufki8XsFnYAw5BqDZwVN/bu/k9QLS4JV4X7Rmw/GqnAhPBzcb72wGFwIT6MeHzPMC80/G0/rzqj5qvBCMVWe+g8TMZg5vcFe0WaMGQtlYbBwVmJM91gILYQWQgthNXNe9Ofn5ovE7xVsykJoIRwwtQTGYOb0BifSf7tw000357tZFgYTFkJzGGMhtBBaCC2E1cx50Z+fmy8Sv1ewKQuhhXDA1BIYg5nTG8xLVTfddHO+m2VhMGEhNIcxFkILoYXQQljNnBf9+bn5IvF7BZuyEFoIB0wtgTGYOb3BvFR1000357tZjDHjxkJoIbQQWgirmfOiPz83XyR+r2BTFkIL4YCpJTAGM6c3mJeqbrrp5nw3izFmvGALx1Ju1KyRYEfHYzXliphVq0oM6vgf/7jEfPzjEojZ8uXY0fGBGNwCd/ukMFyluSim2nP1pzEbNpSYa66RfPKTkptvlrzyiqSUlzXXxECBqk1Hn9Z8QqMac1SRlD1pRMu5fesR2HUTvKq5U3KubqxK18K5w7BSgo/o8Ro8nJM1+tnAXxZ4Lp/zZo38cYRTQSdQ9aKuRXIVyQtolOa5itSXjsF1f6IOAENAMBWWgVvIF4lgVVBNLBLBg/1f/7+98wu1q7rz+CJIkDBIEREZSh76IMMlSPFBpiXIxYcyT4MEkSFGe22DHWhJpQzFhtZiwzC1VTRtUltjNWrjn6apta0TozUxKg6lBhn6IKGKiFwuJQ8SyjD4EJzRE7fr+9nnrJvce+49NzefLx/k7LXW3mfvtfcN67MP/PzP4Kc/Db7znQCvFr7//QBFk++6K/jBD4JvfSvYvj347neDe+8Ndu8OHnwwuP/+4OtfDz73uaCdq64KvvrV4O67g4ceCn7xi+B3vwvwtg91kB97LHj00QD3COzaVfOBMedySlkFGGMmGoVQIVQIT6MQNlyr/9U1CqFCeI4LYeO3CzdXyObhdw53rMrNBacnV+cixpiJRiFUCBXC0yiEDdfqf3WNQqgQKoRuLvFm26ZWweaC05OrcxFjzESjECqECuFpFMKGa/W/ukYhVAgVQjeXeLNtU6tgc8HpydW5iDFmolEIFUKF8DQKYcO1+l9doxAqhAqhm0u82bapVbC54PTk6lzEGDPhvJfESn3t2lLTU4LXk901t99eakrZnuyo6RW0/FuwsQRcfM/UQNtgNajJuX590LvAe5IXAv5rdmcNLA7GS2uFxkxDn/6S/DnJfS8sAQ+1NXk7+WGLC0rNpk0ByopizX/99QGeK6yf8Rpi48ZSw+ulWucrDDwqeQnl6oSaOptsSe4L+HIkXZrnnH84WMj+8pfBb38bvPBC8OKLQdsP+8rU0Cd4Gr4XdWMfeSTAFeES8HDge8FZCWFbJtuO9+tfB23ZePjhAFaDfZ94ogWmDvviYXj++QAzeVY3FPRnvrHv0aMBzurZZwNcwt69wf79weOPB/fdF2By8BDiDuIe/exnAfyQ/5qLyDLTytZ1bzbg6EXnI8c25rzLwAM7Yk2sECqECqFC+CEKoULYoRCKyJhppWF9ja4uvR9U58mZjDnz4GjjPbgxY8zAAztiTawQKoQKoUL4IQqhQtihEIrImGllYH1Dfxs8QyFsbPYz74CzyniPZszSZeCBHbEmVggVQoVQIfwQhVAh7FAIRWTMtLJ0Qtj9bIjG9oC6fWhj1z60pTG+G9BvH9VozLgy8MCOWBMrhAqhQqgQfohCqBB2KIQiMmZaWSIhrOUKn4c2jvqMD2fePu/nwSY+4LMx48pNSTrA5aXmySeDEycCrEaOHQsgSCy0yGV9yNXPf15q3n036K22/yP5a7Ij+VKr/CN7NyVvNWtjDqqYnubWW0tNKadqUKWvlKeTcGlaerkmidqYg39ZurDM5qcSzhWMaK6mV58Wg/clf0xeruEVrUtQCnUNpP1cyIYE0v7AAwGEAXUXYYBYuLeVoG1TGPxqs1IoFv1PPx3gXwr4EuRqbxoCqlC21QtfBPOEqMBq2heI2YBbAhz5mWcClPfcuTNAtc+2t+zbF2DqMLGoMoovgqf96lcB1AtHxll973vBl78c3HBDMDMT3Hxzi5tuCm68sQW+CO+o8CDhdQDXpiKyzLSyeCGMhVDVXo0aol7zDmhk1OBxtRsz9iiENQphzaxCOJ4ohAqhQqgQishIWlm8EI76jGBM96Hd3iUPNnzwgtsHn+sjGzPeKIQ1CmHNrEI4niiECqFCqBCKyEhaGaMQ1pujzGrUgFHtQxtHDV5w+7yNxiwyCmGNQlgzqxCOJwqhQqgQKoQiMpJWGtbX6OoySrFOr4uGtfcHND7jw6gB2Jz3gNis2zHGmLFEIaxRCGtmFcLxRCFUCBVChVBERtJK/7dB/E7YTl+fupZYIPV6Rw2o20c1dl0YWe/SdaGx+4zN/mBjxpjram67rdSUi4Mf/zgoU8FnPxuUcrSme44/fpqjcubUVKkp5fEkPS01tZRrg7WoQbqtZseOUoOilKhBiuqXLIU6nWTpSMwklnmlnAhSciBIF10U9AT47uRLye5kNvlTsiVJE8ORLy0BZTKPnDcF1QGxui7lZA3qDpZyIMHl48nJ9x2oMnpZ8ndJ3hSWBq1v/XT/Hg2KuHagTmzOFVTklVcC1MZsWw00pj14oJQdf/hDAMeDEqA4JAaj3iOAe6BkJS4f1truhfHiwULvSy8FEG9YOqTu978PYBcQUTzuoK1eUD5U3fzJTwKcJJTvueeCI0cCzBUmFg8hwL4AtwxThwuEauKP/+DB4PDhAC8p8HYALxp27Qq4NhWRZcYYM+EohAphh0KoECqECqFCKCLLjDFmwlEIFcIOhVAhVAgVQoVQRJYZY8yEoxAqhB0KoUKoECqECqGILDPGmAlHIVQIOxRChVAhVAgVQhFZZowxEw4W/TPJfyUvJzuCvy/BdJL2iEX/qVOl5sCBoFwVwEt7jncwWJclK1Hg8coESkDJyVX+QEc7yp8DXD5qn8JMyi01EAT6MO3ijuThmunpUtPzpZmaW24pNddeG3ByMLEXJaz1mjZV3k4wz2fFPcE/lgDWuibAErGUYzV8CNM8t20rNSjoeOedQSn/W3PBBaWG5wEVwbsE1IpE1U3Ut8TCve1LcAC4ZRscGU8w1vHwQyz6UQ2yPRswokceCWBEv/lNAJ2AH2JycL2Yq9deCzAb0HJ80QsvBJgryDMelXYdUcgVijVjYvfsCTD43nsDSCzmGS8LYNqYdkxO+5kE7fcd6MX3wku5NhWRZcYYM+HMKYQKoUKoEHK13be+BgqhQqgQisjCMcZMOHMKoUKoECqEXG33ra+BQqgQKoQisnCMMRPOnEKoECqECiFX233ra6AQKoQKoYgsHGPMhDOnECqECqFCyNV23/oaKIQKoUIoIgvHGDPhYKX+pyQVCMqH5Gob5T03bSo1LFmJ0pHTH3vURxw/Hnz608HMTEDHo3vcV7NxY6mZnQ3uuCP4zGeCcnWSVVXLFSXIXqyROHXgsoS3bGfytQBGRJvC5JwIeLs318Ae5+aC3jn/U80ll5SaUt5P4mUBLqFXzzPqxK5ZU2reey84eTL4xjcC1Ji95prg1lsDPBtXXx2UciiAPGNisbyG1aBYIh4dCAOqUD6aJStxKBTDxIoZVSgPHQqgfFiLQ5+wNIemYl/YFA6FUqhwjx/9KMBswFtQGhQXiLnCF8HDIbH4XgBt27cvePLJAN4Cezyru4CJhXphX4AXDXhZAnvEJeAxQ9FRPBs452PHApwzPByDcb0vvhjgirg2FZFlppU3P3izAUcbYxYUhVAh7FAIFUKFUCHsoRCKyNLSSsP6Gl1dPvpfnTFo/Pj/iMaWLnWXMasyCqFC2KEQKoQKoULYQyEUkaWllYH1Df1t8AyFEEZ3hi2NTWNWXxRChbBDIVQIFUKFsIdCKCJLSytLLYTd56GNjRZjVlMUQoWwQyFUCBVChbCHQigiS0srixfC7r/9zX5X//OoFmNWUaYS+sOdQS5kWSzxwgS1MdeWYLoJFtDlvYC9kQ0bAqw36KW0x3+rwXIaZTbfeCOAP8xTk7PclLyVZMHSMhvgyOiFTJYtyTtJ+j/3DXnevLnUwLXWrw9Kub7mm98sNdDFd98N4At4s9B7lZCXz7q4c60iupzJ7G0/sZcE1+Tdf/314MorAyyYWf0SdoHVNlQEJTqfeCKAbKAX5onBWDHDxPB3BXAL0YuVOkpHQnKwjsdpQOpQvxQzCSHE1KFgKep5QoHwRfiXArcMlVFR/BPTDhGFpWNyULD01bQ4TCx621oObWvPM95o4IowOZhYzNXevQEOhdcfOCs8Km0BRi/XpiKyzLSiEBqz9JlSCBVChXAwk9nbfmIVwgYKoULYoRCKyPy0MhYhHHzoux80b1T70BZjVlGmFEKFUCEczGT2tp9YhbCBQqgQdiiEIjI/rSy1ECIY0KXfYswqypRCqBAqhIOZzN72E6sQNlAIFcIOhVBE5qeVhvU1uroMFblR4jdvuzGrNFMKoUKoEA5mMnvbT6xC2EAhVAg7FEIRmZ9W+r8N4nfCdoa63KCx3VWHg4xZZbn88qCUTcm/Jv+TPB18vgS5nu4VhwxhoJmg6Gi5LXk9OZ5ACf6aHE2agsTT+O9gOg0B38vexxMYYH4v9305+WOS+15VArhleul11wXlUwFKsE5NBe+/H2Clum5dsHt3wOqm///g1eCcMRt4zFBkNd9ZYNrxEF5xRdB7kMKHUSqylGdqTpwoNW+/HZTyLzVr15YaLlX7flWDVS+WyJhonPSePQFEBSt1LM0hV1jl43vRC/WCmGHRj9PYuTPYvj244YYWX/xicPPNLW68McC+W7YEX/lKcNddAcT72WcD/KkA3G5I3WIKh8IAUbAUDxLuwlNPBbBW9OL+olDq0aNB+/JBu+go5gqTgz8cOC3XpiKyzBhjJhqFUCFUCBVChVAhVAhFZHIYYyYahVAhVAgVQoVQIVQIRWRyGGMmGoVQIVQIFUKFUCFUCEVkchhjJhqFUCFUCBVChVAhVAhFZHIYYyabXECjdCR6t24NSvnnmlOnSs08JRzbDkAFyn1xZByKShCH4kmWr9WcPFlqSvlL8lQSZ3XwYKl5662gE+Ph4AIhdZxJyCQsHVYzl6Q98sgpz2mPNF4MXhMVSrHIL2VPDYpwQkx6gcM/lBwJ8jTIZQnfLOxIZlpPHXpxQ6eTPA0K4f33Byh3iZUrymxiWY/SoNgX5UxRZRQGiGKY7ZOE8kEYcJKvpqhAcgCUAL1tB8BcoborLhASC8l5/vkAjvfccwGEEE77wAMBymyCBx8M0AuLg2th6qBPmCvMZJu2eR45EuBh2L8/wEOI68U/DXgIMRsowIvb3S5JyrWpiCwzxpjJRiFUCD85skJYM9N66tCLGzqd5GkohAqhQqgQikiFMWayUQgVwk+OrBDWzLSeOvTihk4neRoKoUKoECqEIlJhjJlsFEKF8JMjK4Q1M62nDr24odNJnoZCqBAqhAqhiFQYYyYbhVAh/OTICmHNTOupQy9u6HSSp6EQKoQKoUIoIhXGmInm4ouDUrbWbNhQakp5o+b48VJTysPBFaVm8+Zg27ZgzZqA63isxdFbtiTvtAqHXliCMpvgUO3e6xI4LXrTpmAmVwYHDgTlH5Lyfg3Ns/x7zfr1paZX7HR/cDksPaeurUDrk7zAubng9tuD3g3dEdBLv1Bzzz2lpkwnnw++/e3g0kuDXtFRiPeSBattrNShQOhtL+tRWPKllwL4EuzxsceCXbsCFCyFH6K6KVyrvayHPsEQoBM4ZwjSoUPBYOnfAatBBUvMZNtL2/OM04CWY3Kg1ijRiX1R+hWqibcycFpILGQS5/zKKwGuFzN5Vk/sa68FmGec5BKmvzwVkQ/4hzKhHH7ncAOONsYsIAphU/navQqhQjiOKIQKoUKoEIqsRFZEGtbX6OryQWZo4yC53+m0x/Tbq7HRjgHYREYNNmapohA2la/dqxAqhOOIQqgQKoQKochKZEVkYH1Dfxs8QyE8881+GuOHfm6M71r6jYN2No0ebMyYoxA2la/dqxAqhOOIQqgQKoQKochKZEVkZQrhqB377XVLY/dGS7/LmDFHIWwqX7tXIVQIxxGFUCFUCBVCkZXIiohC2O8yxhhjjDHGmPMiixfCOv1etCCjdh+1Y7996F7tYWjpdxljjDHGGGPMeZHFC+HQz6NakFG7j9qx3z7K6xazaYwxxhhjjDHnRcYohPNu9jNq/Kgd++31LsjQYd0mUvcaY4wxxhhjzHmRhvU1urpApdqb/TTGD/18huMXuWmMMcYYY4wx50X6vw3id8J2+irVkLR++gOw+yD9ln5793lo46jP7UZjxpL/A9o9VdDW59NNAAAAAElFTkSuQmCC1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"job_id":"67b5e643ef57b0d1f706e929","environment_id":160,"environment_description":"Windows 10 64 bit","size":214016,"type":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows","type_short":["pedll","executable"],"type_short_id":"dll","target_url":null,"state":"SUCCESS","error_type":null,"error_origin":null,"submit_name":"madbasic_.bpl","md5":"dc6655a38ffdc3c349f13828fc8ec36e","sha1":"95db71ef7bff8c16ce955c760292bad9f09bb06d","sha256":"16126ff5daa3787a159cf4a39aa040b8050ebb66ab90dbb97c503110ef72824a","sha512":"84b85f2aaad773cbe039022db3d0c35263343243f0d021d7aa3086904b80dd309e6d2a93613cc774b5db27335f4d2850151e2bc8f4648b0065f66bd3722c3d69","ssdeep":"6144:wN/kSQxE6qeM/k4qTl5L5e5+53WCG1CbF/Frf1:PqeM/k4qR5L5e5+53WulZ1","imphash":"be62e7527c28574682b9e1414fa46358","entrypoint":"0x570230f4","entrypoint_section":".itext","image_base":"0x57000000","subsystem":"Windows Gui","image_file_characteristics":["LOCAL_SYMS_STRIPPED","32BIT_MACHINE","BYTES_REVERSED_LO","EXECUTABLE_IMAGE","DLL","LINE_NUMS_STRIPPED","BYTES_REVERSED_HI"],"dll_characteristics":[],"major_os_version":"5","minor_os_version":"0","av_detect":0,"vx_family":null,"url_analysis":false,"analysis_start_time":"2025-02-19T14:10:12+00:00","threat_score":null,"interesting":false,"threat_level":0,"verdict":"no specific threat","certificates":[{"owner":"CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US","issuer":"CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US","serial_number":"2ac5c266a0b409b8f0b79f2ae462577","md5":"D4:74:DE:57:5C:39:B2:D3:9C:85:83:C5:C0:65:49:8A","sha1":"5F:B7:EE:06:33:E2:59:DB:AD:0C:4C:9A:E6:D3:8F:1A:61:C7:DC:25","valid_from":"2006-11-10T00:00:00+00:00","valid_until":"2031-11-10T00:00:00+00:00"},{"owner":"CN=ORANGE VIEW LIMITED, O=ORANGE VIEW LIMITED, L=Kowloon, C=HK, SERIALNUMBER=2770852, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.3=HK","issuer":"CN=DigiCert EV Code Signing CA SHA2, OU=www.digicert.com, O=DigiCert Inc, C=US","serial_number":"e22f15724fa09f07fbbf2a05306bb27","md5":"45:E1:88:14:4C:DF:5D:4B:19:4C:20:83:1D:4B:75:44","sha1":"5C:BB:00:84:7F:50:BF:48:0D:E5:76:E6:05:A8:11:C9:FB:E7:7D:DB","valid_from":"2020-10-19T00:00:00+00:00","valid_until":"2023-10-22T23:59:59+00:00"},{"owner":"CN=DigiCert EV Code Signing CA SHA2, OU=www.digicert.com, O=DigiCert Inc, C=US","issuer":"CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US","serial_number":"3f1b4e15f3a82f1149678b3d7d8475c","md5":"1D:CB:A7:8C:6C:8A:0D:9B:72:CF:E9:21:10:3F:B2:6D","sha1":"60:EE:3F:C5:3D:4B:DF:D1:69:7A:E5:BE:AE:1C:AB:1C:0F:3A:D4:E3","valid_from":"2012-04-18T12:00:00+00:00","valid_until":"2027-04-18T12:00:00+00:00"}],"is_certificates_valid":true,"certificates_validation_message":null,"domains":[],"compromised_hosts":[],"hosts":[],"total_network_connections":0,"total_processes":36,"total_signatures":98,"extracted_files":[],"file_metadata":{"file_compositions":[],"imported_objects":[],"file_analysis":[],"total_file_compositions_imports":null},"processes":[{"uid":"00000000-00008504","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"8504","icon":null,"process_flags":[]},{"uid":"00000000-00004440","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#1","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"4440","icon":"$27","process_flags":[]},{"uid":"00000000-00003356","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#2","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"3356","icon":"$28","process_flags":[]},{"uid":"00000000-00003236","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#3","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"3236","icon":"$29","process_flags":[]},{"uid":"00000000-00002964","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#4","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"2964","icon":"$2a","process_flags":[]},{"uid":"00000000-00004996","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#5","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"4996","icon":"$2b","process_flags":[]},{"uid":"00000000-00003744","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#6","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"3744","icon":"$2c","process_flags":[]},{"uid":"00000000-00002820","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#7","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"2820","icon":"$2d","process_flags":[]},{"uid":"00000000-00002936","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#8","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"2936","icon":"$2e","process_flags":[]},{"uid":"00000000-00008400","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#9","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"8400","icon":"$2f","process_flags":[]},{"uid":"00000000-00007640","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#10","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"7640","icon":"$30","process_flags":[]},{"uid":"00000000-00002940","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#11","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"2940","icon":"$31","process_flags":[]},{"uid":"00000000-00009000","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#12","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"9000","icon":"$32","process_flags":[]},{"uid":"00000000-00006388","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#13","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"6388","icon":"$33","process_flags":[]},{"uid":"00000000-00001500","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#14","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"1500","icon":"$34","process_flags":[]},{"uid":"00000000-00003552","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#15","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"3552","icon":"$35","process_flags":[]},{"uid":"00000000-00008040","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#16","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"8040","icon":"$36","process_flags":[]},{"uid":"00000000-00008560","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#17","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"8560","icon":"$37","process_flags":[]},{"uid":"00000000-00006392","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#18","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"6392","icon":"$38","process_flags":[]},{"uid":"00000000-00008688","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#19","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"8688","icon":"$39","process_flags":[]},{"uid":"00000000-00003648","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#20","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"3648","icon":"$3a","process_flags":[]},{"uid":"00000000-00001284","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#21","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"1284","icon":"$3b","process_flags":[]},{"uid":"00000000-00004324","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#22","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"4324","icon":"$3c","process_flags":[]},{"uid":"00000000-00006948","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#23","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"6948","icon":"$3d","process_flags":[]},{"uid":"00000000-00003628","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#24","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"3628","icon":"$3e","process_flags":[]},{"uid":"00000000-00007512","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#25","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"7512","icon":"$3f","process_flags":[]},{"uid":"00000000-00007268","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#26","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"7268","icon":"$40","process_flags":[]},{"uid":"00000000-00007540","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#27","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"7540","icon":"$41","process_flags":[]},{"uid":"00000000-00004412","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#28","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"4412","icon":"$42","process_flags":[]},{"uid":"00000000-00000196","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#29","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"196","icon":"$43","process_flags":[]},{"uid":"00000000-00005944","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#30","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"5944","icon":"$44","process_flags":[]},{"uid":"00000000-00006112","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#31","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"6112","icon":"$45","process_flags":[]},{"uid":"00000000-00009072","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#32","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"9072","icon":"$46","process_flags":[]},{"uid":"00000000-00001924","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#33","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"1924","icon":"$47","process_flags":[]},{"uid":"00000000-00003112","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#34","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"3112","icon":"$48","process_flags":[]},{"uid":"00000000-00007248","parentuid":null,"name":"rundll32.exe","normalized_path":"%WINDIR%\\SysWOW64\\rundll32.exe","command_line":"\"C:\\madbasic_.bpl.dll\",#35","sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","av_label":null,"av_matched":null,"av_total":null,"pid":"7248","icon":"$49","process_flags":[]}],"mitre_attcks":[{"tactic":"Execution","technique":"Native API","attck_id":"T1106","attck_id_wiki":"https://attack.mitre.org/techniques/T1106","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Imports suspicious APIs"],"informative_identifiers_count":10,"informative_identifiers":["Contains ability to create/open files (API string)","Contains ability to create a new process (API string)","Contains ability to execute an application (API string)","Contains ability to execute Windows APIs","Contains ability to set/get the last-error code for a calling thread (API string)","Contains ability to retrieve the fully qualified path of module (API string)","Contains ability to find and load resources of specific modules (API string)","Contains ability to retrieve address of exported function from a DLL (API string)","Contains ability to load modules (API string)","Calls an API typically used to retrieve function addresses"],"parent":null},{"tactic":"Execution","technique":"Windows Command Shell","attck_id":"T1059.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1059/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to retrieve the command-line string for the current process (API string)"],"parent":{"technique":"Command and Scripting Interpreter","attck_id":"T1059","attck_id_wiki":"https://attack.mitre.org/techniques/T1059"}},{"tactic":"Execution","technique":"Shared Modules","attck_id":"T1129","attck_id_wiki":"https://attack.mitre.org/techniques/T1129","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Loads modules at runtime","Calls an API typically used to load libraries","Loads the RPC (Remote Procedure Call) module DLL"],"parent":null},{"tactic":"Persistence","technique":"Windows Service","attck_id":"T1543.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1543/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to access device drivers"],"parent":{"technique":"Create or Modify System Process","attck_id":"T1543","attck_id_wiki":"https://attack.mitre.org/techniques/T1543"}},{"tactic":"Persistence","technique":"DLL Side-Loading","attck_id":"T1574.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1574/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Fails to load modules at runtime"],"parent":{"technique":"Hijack Execution Flow","attck_id":"T1574","attck_id_wiki":"https://attack.mitre.org/techniques/T1574"}},{"tactic":"Privilege Escalation","technique":"Dynamic-link Library Injection","attck_id":"T1055.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to load/free library (API string)"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Privilege Escalation","technique":"Windows Service","attck_id":"T1543.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1543/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to access device drivers"],"parent":{"technique":"Create or Modify System Process","attck_id":"T1543","attck_id_wiki":"https://attack.mitre.org/techniques/T1543"}},{"tactic":"Privilege Escalation","technique":"Token Impersonation/Theft","attck_id":"T1134.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1134/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to impersonate access tokens (API string)"],"parent":{"technique":"Access Token Manipulation","attck_id":"T1134","attck_id_wiki":"https://attack.mitre.org/techniques/T1134"}},{"tactic":"Privilege Escalation","technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to inject code into another process (API string)"],"parent":null},{"tactic":"Privilege Escalation","technique":"ListPlanting","attck_id":"T1055.015","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/015","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to visualize and control listed components (API string)"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Privilege Escalation","technique":"Extra Window Memory Injection","attck_id":"T1055.011","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/011","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Privilege Escalation","technique":"DLL Side-Loading","attck_id":"T1574.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1574/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Fails to load modules at runtime"],"parent":{"technique":"Hijack Execution Flow","attck_id":"T1574","attck_id_wiki":"https://attack.mitre.org/techniques/T1574"}},{"tactic":"Defense Evasion","technique":"Timestomp","attck_id":"T1070.006","attck_id_wiki":"https://attack.mitre.org/techniques/T1070/006","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to retrieve file time (API string)","Contains ability to set file time (API string)"],"parent":{"technique":"Indicator Removal","attck_id":"T1070","attck_id_wiki":"https://attack.mitre.org/techniques/T1070"}},{"tactic":"Defense Evasion","technique":"Dynamic-link Library Injection","attck_id":"T1055.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to load/free library (API string)"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Defense Evasion","technique":"Debugger Evasion","attck_id":"T1622","attck_id_wiki":"https://attack.mitre.org/techniques/T1622","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to check debugger is running (API string)"],"parent":null},{"tactic":"Defense Evasion","technique":"File and Directory Permissions Modification","attck_id":"T1222","attck_id_wiki":"https://attack.mitre.org/techniques/T1222","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to modify file attributes (API string)"],"parent":null},{"tactic":"Defense Evasion","technique":"Disable or Modify Tools","attck_id":"T1562.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1562/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to modify process attributes (API string)"],"parent":{"technique":"Impair Defenses","attck_id":"T1562","attck_id_wiki":"https://attack.mitre.org/techniques/T1562"}},{"tactic":"Defense Evasion","technique":"Token Impersonation/Theft","attck_id":"T1134.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1134/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to impersonate access tokens (API string)"],"parent":{"technique":"Access Token Manipulation","attck_id":"T1134","attck_id_wiki":"https://attack.mitre.org/techniques/T1134"}},{"tactic":"Defense Evasion","technique":"Time Based Evasion","attck_id":"T1497.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1497/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to delay execution by waiting for signal/timeout (API string)","Contains ability to retrieve the time elapsed since the system was started (API string)"],"parent":{"technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497"}},{"tactic":"Defense Evasion","technique":"File Deletion","attck_id":"T1070.004","attck_id_wiki":"https://attack.mitre.org/techniques/T1070/004","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to delete files/directories (API string)"],"parent":{"technique":"Indicator Removal","attck_id":"T1070","attck_id_wiki":"https://attack.mitre.org/techniques/T1070"}},{"tactic":"Defense Evasion","technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to inject code into another process (API string)"],"parent":null},{"tactic":"Defense Evasion","technique":"ListPlanting","attck_id":"T1055.015","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/015","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to visualize and control listed components (API string)"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Defense Evasion","technique":"System Checks","attck_id":"T1497.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1497/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to identify virtual environment by using API string"],"parent":{"technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497"}},{"tactic":"Defense Evasion","technique":"Extra Window Memory Injection","attck_id":"T1055.011","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/011","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Defense Evasion","technique":"User Activity Based Checks","attck_id":"T1497.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1497/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to identify virtual environment by using user activity (API string)"],"parent":{"technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497"}},{"tactic":"Defense Evasion","technique":"DLL Side-Loading","attck_id":"T1574.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1574/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Fails to load modules at runtime"],"parent":{"technique":"Hijack Execution Flow","attck_id":"T1574","attck_id_wiki":"https://attack.mitre.org/techniques/T1574"}},{"tactic":"Defense Evasion","technique":"Modify Registry","attck_id":"T1112","attck_id_wiki":"https://attack.mitre.org/techniques/T1112","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Writes registry keys"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Defense Evasion","technique":"Rundll32","attck_id":"T1218.011","attck_id_wiki":"https://attack.mitre.org/techniques/T1218/011","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Executes a DLL using Rundll32 process"],"parent":{"technique":"System Binary Proxy Execution","attck_id":"T1218","attck_id_wiki":"https://attack.mitre.org/techniques/T1218"}},{"tactic":"Defense Evasion","technique":"Code Signing","attck_id":"T1553.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1553/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["The input sample is signed with a valid certificate","The input sample is signed with a certificate"],"parent":{"technique":"Subvert Trust Controls","attck_id":"T1553","attck_id_wiki":"https://attack.mitre.org/techniques/T1553"}},{"tactic":"Defense Evasion","technique":"Obfuscated Files or Information","attck_id":"T1027","attck_id_wiki":"https://attack.mitre.org/techniques/T1027","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":4,"informative_identifiers":["Matched Compiler/Packer signature (DIE)","PE file contains zero-size sections","Loads the Bcrypt module DLL","Shows ability to obfuscate file or information"],"parent":null},{"tactic":"Defense Evasion","technique":"Software Packing","attck_id":"T1027.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1027/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":2,"suspicious_identifiers":["PE file has unusual entropy resources","PE file contains unusual section name"],"informative_identifiers_count":1,"informative_identifiers":["Matched Compiler/Packer signature"],"parent":{"technique":"Obfuscated Files or Information","attck_id":"T1027","attck_id_wiki":"https://attack.mitre.org/techniques/T1027"}},{"tactic":"Defense Evasion","technique":"Execution Guardrails","attck_id":"T1480","attck_id_wiki":"https://attack.mitre.org/techniques/T1480","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Creates mutants","Shows ability to use execution guardrails"],"parent":null},{"tactic":"Defense Evasion","technique":"Embedded Payloads","attck_id":"T1027.009","attck_id_wiki":"https://attack.mitre.org/techniques/T1027/009","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Section contains high entropy"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Obfuscated Files or Information","attck_id":"T1027","attck_id_wiki":"https://attack.mitre.org/techniques/T1027"}},{"tactic":"Defense Evasion","technique":"Deobfuscate/Decode Files or Information","attck_id":"T1140","attck_id_wiki":"https://attack.mitre.org/techniques/T1140","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Shows ability to deobfuscate/decode files or information"],"parent":null},{"tactic":"Credential Access","technique":"Keylogging","attck_id":"T1056.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1056/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Calls an API typically used for keylogging"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Input Capture","attck_id":"T1056","attck_id_wiki":"https://attack.mitre.org/techniques/T1056"}},{"tactic":"Discovery","technique":"File and Directory Discovery","attck_id":"T1083","attck_id_wiki":"https://attack.mitre.org/techniques/T1083","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":7,"informative_identifiers":["Contains ability to read files (API string)","Contains ability to retrieve file and directory information (API string)","Tries to access non-existent files (executable)","Contains ability to enumerate files on disk (API string)","Touches files","Tries to access non-existent files (non-executable)","Reads files"],"parent":null},{"tactic":"Discovery","technique":"System Information Discovery","attck_id":"T1082","attck_id_wiki":"https://attack.mitre.org/techniques/T1082","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":11,"informative_identifiers":["Contains ability to retrieve the OS information (API string)","Contains reference to mutex-related activity (API string)","Contains ability to retrieve a module handle (API string)","Contains ability to retrieve the specified system metric or system configuration setting (API string)","Contains ability to retrieve information about operating system (API string)","Contains ability to retrieve information about the current system (API string)","Calls an API typically used to get product type","Reads information about supported languages","Calls an API typically used to get system version information","Reads the active computer name","Contains ability to read software policies"],"parent":null},{"tactic":"Discovery","technique":"Debugger Evasion","attck_id":"T1622","attck_id_wiki":"https://attack.mitre.org/techniques/T1622","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to check debugger is running (API string)"],"parent":null},{"tactic":"Discovery","technique":"System Location Discovery","attck_id":"T1614","attck_id_wiki":"https://attack.mitre.org/techniques/T1614","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to query system locale (API string)"],"parent":null},{"tactic":"Discovery","technique":"Query Registry","attck_id":"T1012","attck_id_wiki":"https://attack.mitre.org/techniques/T1012","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Contains registry location strings","Queries registry keys","Opens registry keys"],"parent":null},{"tactic":"Discovery","technique":"Process Discovery","attck_id":"T1057","attck_id_wiki":"https://attack.mitre.org/techniques/T1057","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":8,"informative_identifiers":["Contains ability to determine if process is running under WOW64 (API string)","Contains ability to enumerate process and/or its information (API string)","Contains ability to retrieve/open a process (API string)","Queries basic information of the specified process","Calls an API typically used for taking snapshot of the specified processes","Process launched with changed environment","Spawns new processes that are not known child processes","Spawns new processes"],"parent":null},{"tactic":"Discovery","technique":"Time Based Evasion","attck_id":"T1497.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1497/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to delay execution by waiting for signal/timeout (API string)","Contains ability to retrieve the time elapsed since the system was started (API string)"],"parent":{"technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497"}},{"tactic":"Discovery","technique":"System Checks","attck_id":"T1497.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1497/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to identify virtual environment by using API string"],"parent":{"technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497"}},{"tactic":"Discovery","technique":"User Activity Based Checks","attck_id":"T1497.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1497/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to identify virtual environment by using user activity (API string)"],"parent":{"technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497"}},{"tactic":"Discovery","technique":"System Time Discovery","attck_id":"T1124","attck_id_wiki":"https://attack.mitre.org/techniques/T1124","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to retrieve machine time (API string)"],"parent":null},{"tactic":"Discovery","technique":"System Owner/User Discovery","attck_id":"T1033","attck_id_wiki":"https://attack.mitre.org/techniques/T1033","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to retrieve usernames and/or user information (API string)"],"parent":null},{"tactic":"Discovery","technique":"System Language Discovery","attck_id":"T1614.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1614/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Reads the windows installation language"],"parent":{"technique":"System Location Discovery","attck_id":"T1614","attck_id_wiki":"https://attack.mitre.org/techniques/T1614"}},{"tactic":"Collection","technique":"Keylogging","attck_id":"T1056.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1056/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Calls an API typically used for keylogging"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Input Capture","attck_id":"T1056","attck_id_wiki":"https://attack.mitre.org/techniques/T1056"}},{"tactic":"Collection","technique":"Screen Capture","attck_id":"T1113","attck_id_wiki":"https://attack.mitre.org/techniques/T1113","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Calls an API possibly used to take screenshots"],"parent":null},{"tactic":"Command and Control","technique":"Application Layer Protocol","attck_id":"T1071","attck_id_wiki":"https://attack.mitre.org/techniques/T1071","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Found potential URL in binary/memory"],"parent":null},{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attck_id":"T1105","attck_id_wiki":"https://attack.mitre.org/techniques/T1105","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to write files (API string)"],"parent":null},{"tactic":"Command and Control","technique":"Data Encoding","attck_id":"T1132","attck_id_wiki":"https://attack.mitre.org/techniques/T1132","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to perform Base64 encoding/decoding"],"parent":null},{"tactic":"Command and Control","technique":"Encrypted Channel","attck_id":"T1573","attck_id_wiki":"https://attack.mitre.org/techniques/T1573","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Possibly tries to communicate over SSL connection (HTTPS)","Making HTTPS connections using secure TLS/SSL version"],"parent":null},{"tactic":"Exfiltration","technique":"Scheduled Transfer","attck_id":"T1029","attck_id_wiki":"https://attack.mitre.org/techniques/T1029","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to perform scheduled transfer (API string)"],"parent":null},{"tactic":"Impact","technique":"Service Stop","attck_id":"T1489","attck_id_wiki":"https://attack.mitre.org/techniques/T1489","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to terminate a process (API string)"],"parent":null}],"network_mode":"default","signatures":[{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthyness","identifier":"string-226","type":2,"relevance":1,"name":"Contains ability to delay execution by waiting for signal/timeout (API string)","description":"$4a","description_v2":["Found reference to API \"WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; File: \"madbasic_.bpl\")","Found reference to API \"WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API \"WaitForSingleObjectEx\" (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API \"WaitForSingleObjectEx\" (Indicator: \"WaitForSingleObjectEx\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API \"QueryPerformanceCounter\" (Indicator: \"QueryPerformanceCounter\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API \"NtQuerySystemInformation\" (Indicator: \"NtQuerySystemInformation\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"WaitForSingleObjectEx\" (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"WaitForSingleObjectEx\" (Indicator: \"WaitForSingleObjectEx\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"QueryPerformanceCounter\" (Indicator: \"QueryPerformanceCounter\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"NtQuerySystemInformation\" (Indicator: \"NtQuerySystemInformation\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1497.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1497/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthyness","identifier":"string-306","type":2,"relevance":1,"name":"Contains ability to impersonate access tokens (API string)","description":"Found reference to API \"NtOpenProcessToken\" (Indicator: \"OpenProcessToken\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"NtOpenProcessToken\" (Indicator: \"OpenProcessToken\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"NtOpenProcessToken\" (Indicator: \"OpenProcessToken\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1134.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1134/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthyness","identifier":"string-92","type":2,"relevance":1,"name":"Contains ability to inject code into another process (API string)","description":"Found reference to API \"VirtualFree\" (Indicator: \"VirtualFree\"; File: \"madbasic_.bpl\")\n Found reference to API \"VirtualAlloc\" (Indicator: \"VirtualAlloc\"; File: \"madbasic_.bpl\")","description_v2":["Found reference to API \"VirtualFree\" (Indicator: \"VirtualFree\"; File: \"madbasic_.bpl\")","Found reference to API \"VirtualAlloc\" (Indicator: \"VirtualAlloc\"; File: \"madbasic_.bpl\")"],"description_v3":[{"type":"text","value":"Found reference to API \"VirtualFree\" (Indicator: \"VirtualFree\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"VirtualAlloc\" (Indicator: \"VirtualAlloc\"; File: \"madbasic_.bpl\")"}],"origin":"File/Memory","attck_id":"T1055","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1055","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthyness","identifier":"string-318","type":2,"relevance":1,"name":"Contains ability to load/free library (API string)","description":"Found reference to API \"FreeLibrary\" (Indicator: \"FreeLibrary\"; File: \"madbasic_.bpl\")\n Found reference to API \"LoadLibraryExA\" (Indicator: \"LoadLibrary\"; File: \"madbasic_.bpl\")\n Found reference to API \"FreeLibrary\" (Indicator: \"FreeLibrary\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")\n Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"FreeLibrary\" (Indicator: \"FreeLibrary\"; File: \"madbasic_.bpl\")","Found reference to API \"LoadLibraryExA\" (Indicator: \"LoadLibrary\"; File: \"madbasic_.bpl\")","Found reference to API \"FreeLibrary\" (Indicator: \"FreeLibrary\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"FreeLibrary\" (Indicator: \"FreeLibrary\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"LoadLibraryExA\" (Indicator: \"LoadLibrary\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FreeLibrary\" (Indicator: \"FreeLibrary\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1055.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1055/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthyness","identifier":"string-338","type":2,"relevance":1,"name":"Contains ability to perform Base64 encoding/decoding","description":"Found string \":ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+\"; File: \"madbasic_.bpl\")\n Found string \":ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\"; File: \"madbasic_.bpl\")","description_v2":["Found string \":ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+\"; File: \"madbasic_.bpl\")","Found string \":ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\"; File: \"madbasic_.bpl\")"],"description_v3":[{"type":"text","value":"Found string \":ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\"; File: \"madbasic_.bpl\")"}],"origin":"File/Memory","attck_id":"T1132","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1132","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthyness","identifier":"string-409","type":2,"relevance":1,"name":"Contains ability to set file time (API string)","description":"Found reference to API \"SetFileTime\" (Indicator: \"SetFileTime\"; File: \"madbasic_.bpl\")","description_v2":["Found reference to API \"SetFileTime\" (Indicator: \"SetFileTime\"; File: \"madbasic_.bpl\")"],"description_v3":[{"type":"text","value":"Found reference to API \"SetFileTime\" (Indicator: \"SetFileTime\"; File: \"madbasic_.bpl\")"}],"origin":"File/Memory","attck_id":"T1070.006","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1070/006","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Reverse Engineering","identifier":"string-183","type":2,"relevance":1,"name":"Contains ability to check debugger is running (API string)","description":"Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; File: \"madbasic_.bpl\")","description_v2":["Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; File: \"madbasic_.bpl\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; File: \"madbasic_.bpl\")"}],"origin":"File/Memory","attck_id":"T1622","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1622","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Reverse Engineering","identifier":"static-5","type":0,"relevance":10,"name":"PE file contains zero-size sections","description":"Raw size of \".bss\" is zero","description_v2":["Raw size of \".bss\" is zero"],"description_v3":[{"type":"text","value":"Raw size of \".bss\" is zero"}],"origin":"Static Parser","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Cryptographic Related","identifier":"summary-32","type":15,"relevance":1,"name":"Shows ability to deobfuscate/decode files or information","description":"The analysis shows use of encryption and can be used to decode file or information. Matched sigs: Contains ability to perform Base64 encoding/decoding","description_v2":["The analysis shows use of encryption and can be used to decode file or information. Matched sigs: Contains ability to perform Base64 encoding/decoding"],"description_v3":[{"type":"text","value":"The analysis shows use of encryption and can be used to decode file or information. Matched sigs: Contains ability to perform Base64 encoding/decoding"}],"origin":"Indicator Combinations","attck_id":"T1140","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1140","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Cryptographic Related","identifier":"summary-28","type":15,"relevance":1,"name":"Shows ability to obfuscate file or information","description":"The analysis contains indicators for cyrpto or data obfuscation(base64/decrypt) which can hide information. Matched sigs: Contains ability to perform Base64 encoding/decoding","description_v2":["The analysis contains indicators for cyrpto or data obfuscation(base64/decrypt) which can hide information. Matched sigs: Contains ability to perform Base64 encoding/decoding"],"description_v3":[{"type":"text","value":"The analysis contains indicators for cyrpto or data obfuscation(base64/decrypt) which can hide information. Matched sigs: Contains ability to perform Base64 encoding/decoding"}],"origin":"Indicator Combinations","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-659","type":2,"relevance":1,"name":"Able to identify virtual environment by using API string","description":"Found string \"NtQuerySystemInformation\" (Indicator: \"NtQuerySystemInformation\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found string \"NtQuerySystemInformation\" (Indicator: \"NtQuerySystemInformation\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found string \"NtQuerySystemInformation\" (Indicator: \"NtQuerySystemInformation\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1497.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1497/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-661","type":2,"relevance":1,"name":"Able to identify virtual environment by using user activity (API string)","description":"Found string \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found string \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found string \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1497.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1497/002","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-721","type":2,"relevance":1,"name":"Able to visualize and control listed components (API string)","description":"Found reference to API \"PostMessageW\" (Indicator: \"postmessage\"; File: \"madbasic_.bpl\")","description_v2":["Found reference to API \"PostMessageW\" (Indicator: \"postmessage\"; File: \"madbasic_.bpl\")"],"description_v3":[{"type":"text","value":"Found reference to API \"PostMessageW\" (Indicator: \"postmessage\"; File: \"madbasic_.bpl\")"}],"origin":"File/Memory","attck_id":"T1055.015","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1055/015","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-124","type":6,"relevance":3,"name":"Calls an API typically used to get product type","description":"$4b","description_v2":["\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00004440)","\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00003356)","\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00003236)","\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00002964)","\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00004996)","\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00003744)","\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00002820)","\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00002936)","\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00008400)","\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00007640)","\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00002940)"],"description_v3":[{"type":"text","value":"\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00004440)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00003356)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00003236)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00002964)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00004996)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00003744)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00002820)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00002936)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00008400)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00007640)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00002940)"}],"origin":"API Call","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-125","type":6,"relevance":3,"name":"Calls an API typically used to get system version information","description":"$4c","description_v2":["\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00004440)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003356)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003236)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00002964)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00004996)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003744)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00002820)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00002936)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00008400)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00007640)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00002940)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00009000)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00006388)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00001500)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003552)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00008040)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00008560)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00006392)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00008688)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003648)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00001284)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00004324)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00006948)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003628)","\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00007512)"],"description_v3":[{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00004440)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003356)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003236)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00002964)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00004996)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003744)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00002820)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00002936)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00008400)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00007640)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00002940)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00009000)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00006388)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00001500)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003552)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00008040)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00008560)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00006392)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00008688)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003648)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00001284)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00004324)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00006948)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003628)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00007512)"}],"origin":"API Call","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-450","type":2,"relevance":1,"name":"Contains ability to determine if process is running under WOW64 (API string)","description":"Found reference to API \"IsWow64Process2\" (Indicator: \"IsWow64Process\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"IsWow64Process2\" (Indicator: \"IsWow64Process\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"IsWow64Process2\" (Indicator: \"IsWow64Process\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-365","type":2,"relevance":1,"name":"Contains ability to perform scheduled transfer (API string)","description":"Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTime\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTime\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTime\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1029","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1029","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-201","type":2,"relevance":1,"name":"Contains ability to query system locale (API string)","description":"Found reference to API \"GetLocaleInfoA\" (Indicator: \"GetLocaleInfo\"; File: \"madbasic_.bpl\")\n Found reference to API \"GetLocaleInfoW\" (Indicator: \"GetLocaleInfo\"; File: \"madbasic_.bpl\")","description_v2":["Found reference to API \"GetLocaleInfoA\" (Indicator: \"GetLocaleInfo\"; File: \"madbasic_.bpl\")","Found reference to API \"GetLocaleInfoW\" (Indicator: \"GetLocaleInfo\"; File: \"madbasic_.bpl\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetLocaleInfoA\" (Indicator: \"GetLocaleInfo\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetLocaleInfoW\" (Indicator: \"GetLocaleInfo\"; File: \"madbasic_.bpl\")"}],"origin":"File/Memory","attck_id":"T1614","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1614","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"registry-78","type":3,"relevance":1,"name":"Contains ability to read software policies","description":"\"rundll32.exe\" (Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"TRANSPARENTENABLED\")","description_v2":["\"rundll32.exe\" (Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"TRANSPARENTENABLED\")"],"description_v3":[{"type":"text","value":"\"rundll32.exe\" (Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"TRANSPARENTENABLED\")"}],"origin":"Registry Access","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-249","type":2,"relevance":1,"name":"Contains ability to retrieve file time (API string)","description":"Found reference to API \"GetFileTime\" (Indicator: \"GetFileTime\"; File: \"madbasic_.bpl\")\n Found reference to API \"FileTimeToLocalFileTime\" (Indicator: \"FileTimeToLocalFileTime\"; File: \"madbasic_.bpl\")\n Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"GetFileTime\" (Indicator: \"GetFileTime\"; File: \"madbasic_.bpl\")","Found reference to API \"FileTimeToLocalFileTime\" (Indicator: \"FileTimeToLocalFileTime\"; File: \"madbasic_.bpl\")","Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetFileTime\" (Indicator: \"GetFileTime\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FileTimeToLocalFileTime\" (Indicator: \"FileTimeToLocalFileTime\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1070.006","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1070/006","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-89","type":2,"relevance":1,"name":"Contains ability to retrieve information about the current system (API string)","description":"Found reference to API \"GetNativeSystemInfo\" (Indicator: \"GetNativeSystemInfo\"; File: \"madbasic_.bpl\")\n Found reference to API \"NtQuerySystemInformation\" (Indicator: \"QuerySystemInformation\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")\n Found reference to API \"RtlNtStatusToDosError\" (Indicator: \"RtlNtStatusToDosError\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"GetNativeSystemInfo\" (Indicator: \"GetNativeSystemInfo\"; File: \"madbasic_.bpl\")","Found reference to API \"NtQuerySystemInformation\" (Indicator: \"QuerySystemInformation\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API \"RtlNtStatusToDosError\" (Indicator: \"RtlNtStatusToDosError\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetNativeSystemInfo\" (Indicator: \"GetNativeSystemInfo\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"NtQuerySystemInformation\" (Indicator: \"QuerySystemInformation\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"RtlNtStatusToDosError\" (Indicator: \"RtlNtStatusToDosError\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-247","type":2,"relevance":1,"name":"Contains ability to retrieve machine time (API string)","description":"Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTime\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTime\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTime\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1124","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1124","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-171","type":2,"relevance":1,"name":"Contains ability to retrieve the OS information (API string)","description":"Found reference to API \"GetVersionExW\" (Indicator: \"GetVersionExW\"; File: \"madbasic_.bpl\")\n Found reference to API \"GetVersionExW\" (Indicator: \"GetVersion\"; File: \"madbasic_.bpl\")\n Found reference to API \"GetVersionExA\" (Indicator: \"GetVersionExA\"; File: \"madbasic_.bpl\")\n Found reference to API \"GetVersionExA\" (Indicator: \"GetVersion\"; File: \"madbasic_.bpl\")\n Found reference to API \"GetVersion\" (Indicator: \"GetVersion\"; File: \"madbasic_.bpl\")\n Found reference to API \"RtlGetVersion\" (Indicator: \"GetVersion\"; File: \"madbasic_.bpl\")","description_v2":["Found reference to API \"GetVersionExW\" (Indicator: \"GetVersionExW\"; File: \"madbasic_.bpl\")","Found reference to API \"GetVersionExW\" (Indicator: \"GetVersion\"; File: \"madbasic_.bpl\")","Found reference to API \"GetVersionExA\" (Indicator: \"GetVersionExA\"; File: \"madbasic_.bpl\")","Found reference to API \"GetVersionExA\" (Indicator: \"GetVersion\"; File: \"madbasic_.bpl\")","Found reference to API \"GetVersion\" (Indicator: \"GetVersion\"; File: \"madbasic_.bpl\")","Found reference to API \"RtlGetVersion\" (Indicator: \"GetVersion\"; File: \"madbasic_.bpl\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetVersionExW\" (Indicator: \"GetVersionExW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetVersionExW\" (Indicator: \"GetVersion\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetVersionExA\" (Indicator: \"GetVersionExA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetVersionExA\" (Indicator: \"GetVersion\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetVersion\" (Indicator: \"GetVersion\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"RtlGetVersion\" (Indicator: \"GetVersion\"; File: \"madbasic_.bpl\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"registry-35","type":3,"relevance":5,"name":"Reads the active computer name","description":"\"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","description_v2":["\"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")"],"description_v3":[{"type":"text","value":"\"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")"}],"origin":"Registry Access","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"api-175","type":6,"relevance":1,"name":"Calls an API typically used to load libraries","description":"$4d","description_v2":["\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00004440)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00004440)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00004440)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00004440)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003356)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003356)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003356)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00003356)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003236)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003236)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003236)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00003236)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00002964)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00002964)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00002964)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00002964)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00004996)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00004996)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00004996)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00004996)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003744)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003744)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003744)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00003744)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00002820)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00002820)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00002820)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00002820)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00002936)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00002936)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00002936)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00002936)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00008400)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00008400)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00008400)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00008400)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00007640)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00007640)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00007640)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00007640)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00002940)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00002940)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00002940)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00002940)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00009000)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00009000)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00009000)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00009000)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00006388)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00006388)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00006388)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00006388)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00001500)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00001500)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00001500)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00001500)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003552)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003552)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003552)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00003552)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00008040)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00008040)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00008040)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00008040)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00008560)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00008560)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00008560)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00008560)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00006392)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00006392)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00006392)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00006392)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00008688)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00008688)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00008688)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00008688)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003648)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003648)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003648)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00003648)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00001284)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00001284)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00001284)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00001284)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00004324)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00004324)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00004324)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00004324)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00006948)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00006948)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00006948)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00006948)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003628)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003628)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003628)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00003628)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00007512)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00007512)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00007512)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00007512)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00007268)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00007268)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00007268)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00007268)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00007540)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00007540)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00007540)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00007540)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00004412)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00004412)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00004412)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00004412)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00000196)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00000196)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00000196)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00000196)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00005944)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00005944)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00005944)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00005944)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00006112)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00006112)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00006112)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00006112)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00009072)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00009072)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00009072)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00009072)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00001924)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00001924)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00001924)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00001924)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003112)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003112)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003112)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00003112)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00007248)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00007248)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00007248)","\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00007248)"],"description_v3":[{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00004440)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00004440)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00004440)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00004440)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003356)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003356)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003356)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00003356)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003236)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003236)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003236)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00003236)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00002964)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00002964)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00002964)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00002964)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00004996)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00004996)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00004996)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00004996)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003744)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003744)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003744)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00003744)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00002820)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00002820)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00002820)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00002820)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00002936)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00002936)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00002936)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00002936)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00008400)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00008400)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00008400)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00008400)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00007640)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00007640)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00007640)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00007640)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00002940)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00002940)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00002940)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00002940)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00009000)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00009000)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00009000)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00009000)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00006388)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00006388)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00006388)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00006388)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00001500)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00001500)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00001500)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00001500)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003552)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003552)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003552)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00003552)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00008040)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00008040)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00008040)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00008040)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00008560)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00008560)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00008560)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00008560)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00006392)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00006392)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00006392)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00006392)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00008688)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00008688)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00008688)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00008688)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003648)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003648)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003648)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00003648)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00001284)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00001284)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00001284)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00001284)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00004324)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00004324)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00004324)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00004324)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00006948)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00006948)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00006948)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00006948)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003628)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003628)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003628)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00003628)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00007512)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00007512)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00007512)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00007512)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00007268)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00007268)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00007268)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00007268)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00007540)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00007540)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00007540)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00007540)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00004412)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00004412)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00004412)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00004412)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00000196)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00000196)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00000196)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00000196)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00005944)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00005944)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00005944)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00005944)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00006112)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00006112)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00006112)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00006112)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00009072)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00009072)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00009072)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00009072)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00001924)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00001924)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00001924)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00001924)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003112)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003112)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003112)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00003112)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00007248)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00007248)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00007248)"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00007248)"}],"origin":"API Call","attck_id":"T1129","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1129","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"api-176","type":6,"relevance":1,"name":"Calls an API typically used to retrieve function addresses","description":"details too long to display","description_v2":["details too long to display"],"description_v3":[{"type":"text","value":"details too long to display"}],"origin":"API Call","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-204","type":2,"relevance":1,"name":"Contains ability to create a new process (API string)","description":"$4e","description_v2":["Found reference to API \"levateCreateProcess\" (Indicator: \"CreateProcess\"; Source: \"00000000-00000196.00000000.127395.030C0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00000196.00000000.127395.030C0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00000196.00000000.127395.030C0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00000196.00000000.127395.030C0000.00000004.mdmp\")","Found reference to API \"levateCreateProcess\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001284.00000000.123556.03080000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001284.00000000.123556.03080000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001284.00000000.123556.03080000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001284.00000000.123556.03080000.00000004.mdmp\")","Found reference to API \"levateCreateProcess\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001500.00000000.120930.02EA0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001500.00000000.120930.02EA0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001500.00000000.120930.02EA0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001500.00000000.120930.02EA0000.00000004.mdmp\")","Found reference to API \"levateCreateProcess\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001924.00000000.129314.02FF0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001924.00000000.129314.02FF0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001924.00000000.129314.02FF0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001924.00000000.129314.02FF0000.00000004.mdmp\")","Found reference to API \"levateCreateProcess\" (Indicator: \"CreateProcess\"; Source: \"00000000-00002820.00000000.117497.02C90000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00002820.00000000.117497.02C90000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00002820.00000000.117497.02C90000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00002820.00000000.117497.02C90000.00000004.mdmp\")","Found reference to API \"levateCreateProcess\" (Indicator: \"CreateProcess\"; Source: \"00000000-00002936.00000000.118456.033C0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00002936.00000000.118456.033C0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00002936.00000000.118456.033C0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00002936.00000000.118456.033C0000.00000004.mdmp\")","Found reference to API \"levateCreateProcess\" (Indicator: \"CreateProcess\"; Source: \"00000000-00002964.00000000.116532.02490000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"levateCreateProcess\" (Indicator: \"CreateProcess\"; Source: \"00000000-00000196.00000000.127395.030C0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00000196.00000000.127395.030C0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00000196.00000000.127395.030C0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00000196.00000000.127395.030C0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"levateCreateProcess\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001284.00000000.123556.03080000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001284.00000000.123556.03080000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001284.00000000.123556.03080000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001284.00000000.123556.03080000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"levateCreateProcess\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001500.00000000.120930.02EA0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001500.00000000.120930.02EA0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001500.00000000.120930.02EA0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001500.00000000.120930.02EA0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"levateCreateProcess\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001924.00000000.129314.02FF0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001924.00000000.129314.02FF0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001924.00000000.129314.02FF0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00001924.00000000.129314.02FF0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"levateCreateProcess\" (Indicator: \"CreateProcess\"; Source: \"00000000-00002820.00000000.117497.02C90000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00002820.00000000.117497.02C90000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00002820.00000000.117497.02C90000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00002820.00000000.117497.02C90000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"levateCreateProcess\" (Indicator: \"CreateProcess\"; Source: \"00000000-00002936.00000000.118456.033C0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00002936.00000000.118456.033C0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00002936.00000000.118456.033C0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateProcess\"; Source: \"00000000-00002936.00000000.118456.033C0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"levateCreateProcess\" (Indicator: \"CreateProcess\"; Source: \"00000000-00002964.00000000.116532.02490000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-315","type":2,"relevance":1,"name":"Contains ability to create/open files (API string)","description":"Found reference to API \"CreateFileMappingW\" (Indicator: \"CreateFile\"; File: \"madbasic_.bpl\")\n Found reference to API \"CreateFileMappingA\" (Indicator: \"CreateFile\"; File: \"madbasic_.bpl\")\n Found reference to API \"CreateFileW\" (Indicator: \"CreateFile\"; File: \"madbasic_.bpl\")\n Found reference to API \"CreateFileA\" (Indicator: \"CreateFile\"; File: \"madbasic_.bpl\")\n Found reference to API \"CreateFileW\" (Indicator: \"CreateFile\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"CreateFileMappingW\" (Indicator: \"CreateFile\"; File: \"madbasic_.bpl\")","Found reference to API \"CreateFileMappingA\" (Indicator: \"CreateFile\"; File: \"madbasic_.bpl\")","Found reference to API \"CreateFileW\" (Indicator: \"CreateFile\"; File: \"madbasic_.bpl\")","Found reference to API \"CreateFileA\" (Indicator: \"CreateFile\"; File: \"madbasic_.bpl\")","Found reference to API \"CreateFileW\" (Indicator: \"CreateFile\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"CreateFileMappingW\" (Indicator: \"CreateFile\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"CreateFileMappingA\" (Indicator: \"CreateFile\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"CreateFileW\" (Indicator: \"CreateFile\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"CreateFileA\" (Indicator: \"CreateFile\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"CreateFileW\" (Indicator: \"CreateFile\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-101","type":2,"relevance":1,"name":"Contains ability to execute Windows APIs","description":"$4f","description_v2":["Found reference to API (Indicator: \"GetObjectW\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetLastError\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"FileTimeToDosDateTime\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"ReadFile\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"UnmapViewOfFile\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetFileAttributesA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetFileTime\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"WaitForSingleObject\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetVersionExW\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"FreeLibrary\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"LocalAlloc\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetTickCount\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetThreadLocale\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"TlsAlloc\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"VirtualProtect\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetVersionExA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetFileAttributesW\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetModuleFileNameA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"DeleteCriticalSection\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"LeaveCriticalSection\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"EnterCriticalSection\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"SizeofResource\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetLocaleInfoA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetCurrentProcessId\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"LockResource\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"SetFileTime\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"DeleteFileA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"ReleaseMutex\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"TlsGetValue\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"lstrlenW\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"MapViewOfFile\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"DeleteFileW\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetProcAddress\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetLocaleInfoW\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"CreateFileMappingW\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"CreateMutexA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"SetFilePointer\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetTempPathA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"SetFileAttributesW\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetModuleFileNameW\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"TlsFree\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetModuleHandleA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"lstrcmpA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"FindFirstFileA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetTempPathW\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"CloseHandle\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"CreateFileMappingA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"FindFirstFileW\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"WriteFile\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetModuleHandleW\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"FreeResource\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"FileTimeToLocalFileTime\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"SetFileAttributesA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"LoadLibraryExA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"LocalFree\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"FormatMessageW\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetVersion\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"InitializeCriticalSection\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"LoadResource\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"FindResourceW\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"CreateFileW\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"VirtualQuery\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"VirtualFree\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"FindClose\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"InterlockedDecrement\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"FormatMessageA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"SetEndOfFile\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"TlsSetValue\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"CreateFileA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetCurrentThreadId\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"FindResourceA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"VirtualAlloc\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetFileSize\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"SetLastError\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"InterlockedIncrement\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetSystemMetrics\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"CreateWindowExA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"IsWindow\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"UnregisterClassA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"DefWindowProcW\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"DefWindowProcA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"RegisterClassA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"DestroyWindow\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetFileVersionInfoSizeA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetFileVersionInfoA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"VerQueryValueW\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetFileVersionInfoW\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetFileVersionInfoSizeW\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"VerQueryValueA\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"MultiByteToWideChar\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"WideCharToMultiByte\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"TryEnterCriticalSection\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"RtlGetVersion\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"GetNativeSystemInfo\"; File: \"madbasic_.bpl\")","Found reference to API (Indicator: \"InitializeConditionVariable\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")","Found reference to API (Indicator: \"SleepConditionVariableCS\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")","Found reference to API (Indicator: \"WakeAllConditionVariable\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")","Found reference to API (Indicator: \"RtlDllShutdownInProgress\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")","Found reference to API (Indicator: \"MessageBoxW\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")","Found reference to API (Indicator: \"LoadIconW\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")","Found reference to API (Indicator: \"TranslateMessage\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")","Found reference to API (Indicator: \"DispatchMessageW\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")","Found reference to API (Indicator: \"RegisterClassW\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")","Found reference to API (Indicator: \"DestroyWindow\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")","Found reference to API (Indicator: \"CreateWindowExW\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")","Found reference to API (Indicator: \"GetWindow\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")","Found reference to API (Indicator: \"DefWindowProcW\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")","Found reference to API (Indicator: \"LoadCursorW\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")","Found reference to API (Indicator: \"ReadFile\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"GetModuleFileNameA\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"IsWow64Process2\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"CreateSemaphoreExW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"HeapFree\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"SetLastError\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"GetCommandLineW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"GetCurrentProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"ReleaseSemaphore\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"GetModuleHandleExW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"GetSystemWow64Directory2W\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"CoUninitialize\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"CoCreateInstance\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"EncodePointer\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"SetErrorMode\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"SetFilePointer\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"LocalAlloc\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"CreateFileW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"GetCurrentThreadId\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"ReleaseMutex\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"GetSystemDirectoryW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"SetProcessMitigationPolicy\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"CreateEventW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"FormatMessageW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"CoInitializeSecurity\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"GetLastError\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"AttachConsole\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"ReleaseSRWLockExclusive\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"OutputDebugStringW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"SetEvent\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"AcquireSRWLockExclusive\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"WaitForSingleObjectEx\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"OpenSemaphoreW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"CloseHandle\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"ReleaseSRWLockShared\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"FreeConsole\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"HeapSetInformation\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"HeapAlloc\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"LoadStringW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"DecodePointer\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"WriteConsoleW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"GetProcAddress\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"CreateMutexExW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"LocalFree\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"AcquireSRWLockShared\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"CLSIDFromString\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"ExitProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"GetCurrentProcessId\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"GetProcessHeap\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"CreateProcessW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"GetModuleHandleW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"FreeLibrary\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"WideCharToMultiByte\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"CoInitializeEx\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"DebugBreak\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"LoadLibraryExW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"IsDebuggerPresent\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"Sleep\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"GetStartupInfoW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"EnterCriticalSection\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"LeaveCriticalSection\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"DeleteCriticalSection\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"ResetEvent\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"UnhandledExceptionFilter\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"SetUnhandledExceptionFilter\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"TerminateProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"QueryPerformanceCounter\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"GetTickCount\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"InitializeCriticalSectionAndSpinCount\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"IsProcessorFeaturePresent\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"SearchPathW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"CompareStringW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"GetFileAttributesW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"CharNextW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"Wow64EnableWow64FsRedirection\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"CreateActCtxW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"ActivateActCtx\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"DeactivateActCtx\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"ReleaseActCtx\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"QueryActCtxW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"PathIsRelativeW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"NtQuerySystemInformation\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"RtlImageNtHeader\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"NtSetInformationProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"NtQueryInformationToken\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"RtlNtStatusToDosError\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"NtOpenProcessToken\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"NtClose\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API (Indicator: \"DelayLoadFailureHook\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API (Indicator: \"GetObjectW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetLastError\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FileTimeToDosDateTime\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ReadFile\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"UnmapViewOfFile\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetFileAttributesA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetFileTime\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WaitForSingleObject\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetVersionExW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FreeLibrary\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LocalAlloc\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetTickCount\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetThreadLocale\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TlsAlloc\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"VirtualProtect\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetVersionExA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetFileAttributesW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetModuleFileNameA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DeleteCriticalSection\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LeaveCriticalSection\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"EnterCriticalSection\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SizeofResource\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetLocaleInfoA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetCurrentProcessId\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LockResource\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetFileTime\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DeleteFileA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ReleaseMutex\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TlsGetValue\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"lstrlenW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"MapViewOfFile\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DeleteFileW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetProcAddress\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetLocaleInfoW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateFileMappingW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateMutexA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetFilePointer\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetTempPathA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetFileAttributesW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetModuleFileNameW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TlsFree\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetModuleHandleA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"lstrcmpA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FindFirstFileA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetTempPathW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CloseHandle\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateFileMappingA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FindFirstFileW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WriteFile\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetModuleHandleW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FreeResource\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FileTimeToLocalFileTime\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetFileAttributesA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LoadLibraryExA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LocalFree\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FormatMessageW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetVersion\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"InitializeCriticalSection\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LoadResource\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FindResourceW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateFileW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"VirtualQuery\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"VirtualFree\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FindClose\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"InterlockedDecrement\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FormatMessageA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetEndOfFile\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TlsSetValue\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateFileA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetCurrentThreadId\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FindResourceA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"VirtualAlloc\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetFileSize\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetLastError\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"InterlockedIncrement\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetSystemMetrics\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateWindowExA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"IsWindow\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"UnregisterClassA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DefWindowProcW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DefWindowProcA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"RegisterClassA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DestroyWindow\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetFileVersionInfoSizeA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetFileVersionInfoA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"VerQueryValueW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetFileVersionInfoW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetFileVersionInfoSizeW\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"VerQueryValueA\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"MultiByteToWideChar\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WideCharToMultiByte\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TryEnterCriticalSection\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"RtlGetVersion\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetNativeSystemInfo\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"InitializeConditionVariable\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SleepConditionVariableCS\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WakeAllConditionVariable\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"RtlDllShutdownInProgress\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"MessageBoxW\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LoadIconW\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TranslateMessage\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DispatchMessageW\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"RegisterClassW\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DestroyWindow\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateWindowExW\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetWindow\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DefWindowProcW\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LoadCursorW\"; Source: \"00000000-00003552.00000000.121142.00041000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ReadFile\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetModuleFileNameA\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"IsWow64Process2\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateSemaphoreExW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"HeapFree\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetLastError\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetCommandLineW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetCurrentProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ReleaseSemaphore\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetModuleHandleExW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetSystemWow64Directory2W\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CoUninitialize\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CoCreateInstance\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"EncodePointer\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetErrorMode\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetFilePointer\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LocalAlloc\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateFileW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetCurrentThreadId\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ReleaseMutex\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetSystemDirectoryW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetProcessMitigationPolicy\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateEventW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FormatMessageW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CoInitializeSecurity\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetLastError\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"AttachConsole\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ReleaseSRWLockExclusive\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"OutputDebugStringW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetEvent\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"AcquireSRWLockExclusive\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WaitForSingleObjectEx\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"OpenSemaphoreW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CloseHandle\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ReleaseSRWLockShared\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FreeConsole\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"HeapSetInformation\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"HeapAlloc\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LoadStringW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DecodePointer\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WriteConsoleW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetProcAddress\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateMutexExW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LocalFree\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"AcquireSRWLockShared\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CLSIDFromString\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ExitProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetCurrentProcessId\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetProcessHeap\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateProcessW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetModuleHandleW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FreeLibrary\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WideCharToMultiByte\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CoInitializeEx\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DebugBreak\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LoadLibraryExW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"IsDebuggerPresent\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"Sleep\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetStartupInfoW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"EnterCriticalSection\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LeaveCriticalSection\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DeleteCriticalSection\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ResetEvent\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"UnhandledExceptionFilter\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetUnhandledExceptionFilter\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TerminateProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"QueryPerformanceCounter\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetTickCount\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"InitializeCriticalSectionAndSpinCount\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"IsProcessorFeaturePresent\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SearchPathW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CompareStringW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetFileAttributesW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CharNextW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"Wow64EnableWow64FsRedirection\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateActCtxW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ActivateActCtx\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DeactivateActCtx\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ReleaseActCtx\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"QueryActCtxW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"PathIsRelativeW\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"NtQuerySystemInformation\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"RtlImageNtHeader\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"NtSetInformationProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"NtQueryInformationToken\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"RtlNtStatusToDosError\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"NtOpenProcessToken\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"NtClose\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DelayLoadFailureHook\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-240","type":2,"relevance":1,"name":"Contains ability to execute an application (API string)","description":"$50","description_v2":["Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00000196.00000000.127395.030C0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00001284.00000000.123556.03080000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00001500.00000000.120930.02EA0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00001924.00000000.129314.02FF0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00002820.00000000.117497.02C90000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00002936.00000000.118456.033C0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00002964.00000000.116532.02490000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00003112.00000000.129327.029E0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00003236.00000000.116532.024F0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00003356.00000000.116530.02E70000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00003552.00000000.121142.02C10000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00003628.00000000.125470.02E20000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00003648.00000000.123550.02840000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00003744.00000000.117297.02550000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00004324.00000000.123594.032F0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00004412.00000000.127389.03150000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00004440.00000000.116530.02520000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00004996.00000000.117085.02AF0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00005944.00000000.127409.03370000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00006112.00000000.127410.028A0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00006388.00000000.120378.03420000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00006392.00000000.122301.02D70000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00006948.00000000.124223.02680000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00007248.00000000.129343.02EE0000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00007268.00000000.125483.02EE0000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00000196.00000000.127395.030C0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00001284.00000000.123556.03080000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00001500.00000000.120930.02EA0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00001924.00000000.129314.02FF0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00002820.00000000.117497.02C90000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00002936.00000000.118456.033C0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00002964.00000000.116532.02490000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00003112.00000000.129327.029E0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00003236.00000000.116532.024F0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00003356.00000000.116530.02E70000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00003552.00000000.121142.02C10000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00003628.00000000.125470.02E20000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00003648.00000000.123550.02840000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00003744.00000000.117297.02550000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00004324.00000000.123594.032F0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00004412.00000000.127389.03150000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00004440.00000000.116530.02520000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00004996.00000000.117085.02AF0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00005944.00000000.127409.03370000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00006112.00000000.127410.028A0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00006388.00000000.120378.03420000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00006392.00000000.122301.02D70000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00006948.00000000.124223.02680000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00007248.00000000.129343.02EE0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"WinExec\"; Source: \"00000000-00007268.00000000.125483.02EE0000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-550","type":2,"relevance":1,"name":"Contains ability to find and load resources of specific modules (API string)","description":"Found reference to API \"SizeofResource\" (Indicator: \"SizeofResource\"; File: \"madbasic_.bpl\")\n Found reference to API \"LockResource\" (Indicator: \"LockResource\"; File: \"madbasic_.bpl\")\n Found reference to API \"FreeResource\" (Indicator: \"FreeResource\"; File: \"madbasic_.bpl\")\n Found reference to API \"LoadResource\" (Indicator: \"LoadResource\"; File: \"madbasic_.bpl\")\n Found reference to API \"FindResourceW\" (Indicator: \"FindResource\"; File: \"madbasic_.bpl\")\n Found reference to API \"FindResourceA\" (Indicator: \"FindResource\"; File: \"madbasic_.bpl\")","description_v2":["Found reference to API \"SizeofResource\" (Indicator: \"SizeofResource\"; File: \"madbasic_.bpl\")","Found reference to API \"LockResource\" (Indicator: \"LockResource\"; File: \"madbasic_.bpl\")","Found reference to API \"FreeResource\" (Indicator: \"FreeResource\"; File: \"madbasic_.bpl\")","Found reference to API \"LoadResource\" (Indicator: \"LoadResource\"; File: \"madbasic_.bpl\")","Found reference to API \"FindResourceW\" (Indicator: \"FindResource\"; File: \"madbasic_.bpl\")","Found reference to API \"FindResourceA\" (Indicator: \"FindResource\"; File: \"madbasic_.bpl\")"],"description_v3":[{"type":"text","value":"Found reference to API \"SizeofResource\" (Indicator: \"SizeofResource\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"LockResource\" (Indicator: \"LockResource\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FreeResource\" (Indicator: \"FreeResource\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"LoadResource\" (Indicator: \"LoadResource\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FindResourceW\" (Indicator: \"FindResource\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FindResourceA\" (Indicator: \"FindResource\"; File: \"madbasic_.bpl\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-206","type":2,"relevance":1,"name":"Contains ability to retrieve the command-line string for the current process (API string)","description":"Found reference to API \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1059.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1059/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-272","type":2,"relevance":1,"name":"Contains ability to retrieve/open a process (API string)","description":"Found reference to API \"GetProcessHeap\" (Indicator: \"GetProcessHeap\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")\n Found reference to API \"NtOpenProcessToken\" (Indicator: \"OpenProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"GetProcessHeap\" (Indicator: \"GetProcessHeap\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API \"NtOpenProcessToken\" (Indicator: \"OpenProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetProcessHeap\" (Indicator: \"GetProcessHeap\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"NtOpenProcessToken\" (Indicator: \"OpenProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-319","type":2,"relevance":1,"name":"Contains ability to set/get the last-error code for a calling thread (API string)","description":"$51","description_v2":["Found reference to API \"GetLastError\" (Indicator: \"GetLastError\"; File: \"madbasic_.bpl\")","Found reference to API \"SetLastError\" (Indicator: \"SetLastError\"; File: \"madbasic_.bpl\")","Found reference to API \"@Madbasic@TIBasic@GetLastErrorNo$qqrv\" (Indicator: \"GetLastError\"; File: \"madbasic_.bpl\")","Found reference to API \"@Madbasic@TIBasic@GetLastErrorStr$qqrv\" (Indicator: \"GetLastError\"; File: \"madbasic_.bpl\")","Found reference to API \"@Madbasic@TIBasic@SetLastError$qqruix20System@UnicodeString\" (Indicator: \"SetLastError\"; File: \"madbasic_.bpl\")","Found reference to API \"@Madbasic@TIBasic@SetLastErrorNo$qqrui\" (Indicator: \"SetLastError\"; File: \"madbasic_.bpl\")","Found reference to API \"@Madbasic@TIBasic@SetLastErrorStr$qqrx20System@UnicodeString\" (Indicator: \"SetLastError\"; File: \"madbasic_.bpl\")","Found reference to API \"SetLastError\" (Indicator: \"SetLastError\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API \"GetLastError\" (Indicator: \"GetLastError\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetLastError\" (Indicator: \"GetLastError\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SetLastError\" (Indicator: \"SetLastError\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"@Madbasic@TIBasic@GetLastErrorNo$qqrv\" (Indicator: \"GetLastError\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"@Madbasic@TIBasic@GetLastErrorStr$qqrv\" (Indicator: \"GetLastError\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"@Madbasic@TIBasic@SetLastError$qqruix20System@UnicodeString\" (Indicator: \"SetLastError\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"@Madbasic@TIBasic@SetLastErrorNo$qqrui\" (Indicator: \"SetLastError\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"@Madbasic@TIBasic@SetLastErrorStr$qqrx20System@UnicodeString\" (Indicator: \"SetLastError\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SetLastError\" (Indicator: \"SetLastError\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetLastError\" (Indicator: \"GetLastError\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-78","type":0,"relevance":1,"name":"Contains export functions","description":"$52","description_v2":["\"madbasic_.bpl\" contains export function called \"@$xp$12Madtools@TOS\" at ordinal 405","\"madbasic_.bpl\" contains export function called \"@$xp$14Madbasic@IList\" at ordinal 340","\"madbasic_.bpl\" contains export function called \"@$xp$15Madbasic@IBasic\" at ordinal 342","\"madbasic_.bpl\" contains export function called \"@$xp$15Madbasic@TIList\" at ordinal 324","\"madbasic_.bpl\" contains export function called \"@$xp$15Madtypes@TSByte\" at ordinal 36","\"madbasic_.bpl\" contains export function called \"@$xp$15Madtypes@TSChar\" at ordinal 35","\"madbasic_.bpl\" contains export function called \"@$xp$16Madbasic@TIBasic\" at ordinal 326","\"madbasic_.bpl\" contains export function called \"@$xp$16Madtools@TOsEnum\" at ordinal 406","\"madbasic_.bpl\" contains export function called \"@$xp$16Madtypes@TDAByte\" at ordinal 27","\"madbasic_.bpl\" contains export function called \"@$xp$16Madtypes@TDAChar\" at ordinal 25","\"madbasic_.bpl\" contains export function called \"@$xp$16Madtypes@TDAWord\" at ordinal 20","\"madbasic_.bpl\" contains export function called \"@$xp$17Madbasic@TDABasic\" at ordinal 341","\"madbasic_.bpl\" contains export function called \"@$xp$17Madtypes@TAString\" at ordinal 32","\"madbasic_.bpl\" contains export function called \"@$xp$17Madtypes@TDAInt64\" at ordinal 8","\"madbasic_.bpl\" contains export function called \"@$xp$17Madtypes@TExtBool\" at ordinal 37","\"madbasic_.bpl\" contains export function called \"@$xp$18Madtypes@TDAString\" at ordinal 13","\"madbasic_.bpl\" contains export function called \"@$xp$18Madtypes@TSBoolean\" at ordinal 34","\"madbasic_.bpl\" contains export function called \"@$xp$18Madtypes@TSExtBool\" at ordinal 33","\"madbasic_.bpl\" contains export function called \"@$xp$19Madlists@IBasicList\" at ordinal 417","\"madbasic_.bpl\" contains export function called \"@$xp$19Madtypes@TAIUnknown\" at ordinal 28","\"madbasic_.bpl\" contains export function called \"@$xp$19Madtypes@TDABoolean\" at ordinal 22","\"madbasic_.bpl\" contains export function called \"@$xp$19Madtypes@TDAExtBool\" at ordinal 21","\"madbasic_.bpl\" contains export function called \"@$xp$19Madtypes@TDAInteger\" at ordinal 17","\"madbasic_.bpl\" contains export function called \"@$xp$19Madtypes@TDAPointer\" at ordinal 14","\"madbasic_.bpl\" contains export function called \"@$xp$20Madbasic@TChangeType\" at ordinal 343"],"description_v3":[{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$12Madtools@TOS\" at ordinal 405"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$14Madbasic@IList\" at ordinal 340"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$15Madbasic@IBasic\" at ordinal 342"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$15Madbasic@TIList\" at ordinal 324"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$15Madtypes@TSByte\" at ordinal 36"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$15Madtypes@TSChar\" at ordinal 35"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$16Madbasic@TIBasic\" at ordinal 326"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$16Madtools@TOsEnum\" at ordinal 406"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$16Madtypes@TDAByte\" at ordinal 27"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$16Madtypes@TDAChar\" at ordinal 25"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$16Madtypes@TDAWord\" at ordinal 20"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$17Madbasic@TDABasic\" at ordinal 341"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$17Madtypes@TAString\" at ordinal 32"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$17Madtypes@TDAInt64\" at ordinal 8"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$17Madtypes@TExtBool\" at ordinal 37"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$18Madtypes@TDAString\" at ordinal 13"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$18Madtypes@TSBoolean\" at ordinal 34"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$18Madtypes@TSExtBool\" at ordinal 33"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$19Madlists@IBasicList\" at ordinal 417"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$19Madtypes@TAIUnknown\" at ordinal 28"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$19Madtypes@TDABoolean\" at ordinal 22"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$19Madtypes@TDAExtBool\" at ordinal 21"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$19Madtypes@TDAInteger\" at ordinal 17"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$19Madtypes@TDAPointer\" at ordinal 14"},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" contains export function called \"@$xp$20Madbasic@TChangeType\" at ordinal 343"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-120","type":2,"relevance":1,"name":"Contains registry location strings","description":"$53","description_v2":["\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00000196.00000000.127395.030C0000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00000196.00000000.127395.030C0000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00001284.00000000.123556.03080000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00001500.00000000.120930.02EA0000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00001500.00000000.120930.02EA0000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00001924.00000000.129314.02FF0000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00001924.00000000.129314.02FF0000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00002820.00000000.117497.02C90000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00002820.00000000.117497.02C90000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00002936.00000000.118456.033C0000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00002936.00000000.118456.033C0000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00002964.00000000.116532.02490000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00002964.00000000.116532.02490000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00003112.00000000.129327.029E0000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00003112.00000000.129327.029E0000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00003236.00000000.116532.024F0000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00003236.00000000.116532.024F0000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00003356.00000000.116530.02E70000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00003356.00000000.116530.02E70000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00003552.00000000.121142.02C10000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00003552.00000000.121142.02C10000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00003628.00000000.125470.02E20000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00003648.00000000.123550.02840000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00003744.00000000.117297.02550000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00003744.00000000.117297.02550000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00004324.00000000.123594.032F0000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00004324.00000000.123594.032F0000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00004412.00000000.127389.03150000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00004412.00000000.127389.03150000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00004440.00000000.116530.02520000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00004440.00000000.116530.02520000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00004996.00000000.117085.02AF0000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00004996.00000000.117085.02AF0000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00005944.00000000.127409.03370000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00005944.00000000.127409.03370000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00006112.00000000.127410.028A0000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00006112.00000000.127410.028A0000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00006388.00000000.120378.03420000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00006388.00000000.120378.03420000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00006392.00000000.122301.02D70000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00006392.00000000.122301.02D70000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00006948.00000000.124223.02680000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00006948.00000000.124223.02680000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00007248.00000000.129343.02EE0000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00007248.00000000.129343.02EE0000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00007268.00000000.125483.02EE0000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00007268.00000000.125483.02EE0000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00007512.00000000.125476.02C60000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00007512.00000000.125476.02C60000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00007540.00000000.125530.03150000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00007640.00000000.119219.02E00000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00007640.00000000.119219.02E00000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00008040.00000000.121629.03260000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00008040.00000000.121629.03260000.00000004.mdmp","\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00008400.00000000.119007.03370000.00000004.mdmp","\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00008400.00000000.119007.03370000.00000004.mdmp"],"description_v3":[{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00000196.00000000.127395.030C0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00000196.00000000.127395.030C0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00001284.00000000.123556.03080000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00001500.00000000.120930.02EA0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00001500.00000000.120930.02EA0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00001924.00000000.129314.02FF0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00001924.00000000.129314.02FF0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00002820.00000000.117497.02C90000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00002820.00000000.117497.02C90000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00002936.00000000.118456.033C0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00002936.00000000.118456.033C0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00002964.00000000.116532.02490000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00002964.00000000.116532.02490000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00003112.00000000.129327.029E0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00003112.00000000.129327.029E0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00003236.00000000.116532.024F0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00003236.00000000.116532.024F0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00003356.00000000.116530.02E70000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00003356.00000000.116530.02E70000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00003552.00000000.121142.02C10000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00003552.00000000.121142.02C10000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00003628.00000000.125470.02E20000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00003648.00000000.123550.02840000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00003744.00000000.117297.02550000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00003744.00000000.117297.02550000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00004324.00000000.123594.032F0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00004324.00000000.123594.032F0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00004412.00000000.127389.03150000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00004412.00000000.127389.03150000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00004440.00000000.116530.02520000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00004440.00000000.116530.02520000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00004996.00000000.117085.02AF0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00004996.00000000.117085.02AF0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00005944.00000000.127409.03370000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00005944.00000000.127409.03370000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00006112.00000000.127410.028A0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00006112.00000000.127410.028A0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00006388.00000000.120378.03420000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00006388.00000000.120378.03420000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00006392.00000000.122301.02D70000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00006392.00000000.122301.02D70000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00006948.00000000.124223.02680000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00006948.00000000.124223.02680000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00007248.00000000.129343.02EE0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00007248.00000000.129343.02EE0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00007268.00000000.125483.02EE0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00007268.00000000.125483.02EE0000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00007512.00000000.125476.02C60000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00007512.00000000.125476.02C60000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00007540.00000000.125530.03150000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00007640.00000000.119219.02E00000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00007640.00000000.119219.02E00000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00008040.00000000.121629.03260000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00008040.00000000.121629.03260000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"\\REGISTRY\\MACHINE\\Software\\Classes\\PackagedCom\" in Source: 00000000-00008400.00000000.119007.03370000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\"stry\\Machine\\Software\\Classes\\CLSID\\{FA445657-9379-11D6-B41A-00065B83EE53}\" in Source: 00000000-00008400.00000000.119007.03370000.00000004.mdmp"}],"origin":"File/Memory","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1012","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"mutant-0","type":4,"relevance":3,"name":"Creates mutants","description":"\"Local\\SM0:4440:168:WilStaging_02\"\n \"Local\\SM0:3356:168:WilStaging_02\"\n \"Local\\SM0:3236:168:WilStaging_02\"\n \"Local\\SM0:2964:168:WilStaging_02\"\n \"Local\\SM0:4996:168:WilStaging_02\"\n \"Local\\SM0:3744:168:WilStaging_02\"","description_v2":["\"Local\\SM0:4440:168:WilStaging_02\"","\"Local\\SM0:3356:168:WilStaging_02\"","\"Local\\SM0:3236:168:WilStaging_02\"","\"Local\\SM0:2964:168:WilStaging_02\"","\"Local\\SM0:4996:168:WilStaging_02\"","\"Local\\SM0:3744:168:WilStaging_02\""],"description_v3":[{"type":"text","value":"\"Local\\SM0:4440:168:WilStaging_02\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\SM0:3356:168:WilStaging_02\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\SM0:3236:168:WilStaging_02\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\SM0:2964:168:WilStaging_02\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\SM0:4996:168:WilStaging_02\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\SM0:3744:168:WilStaging_02\""}],"origin":"Created Mutant","attck_id":"T1480","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1480","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-400","type":9,"relevance":1,"name":"Executes a DLL using Rundll32 process","description":"$54","description_v2":["Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#1\" (UID: 00000000-00004440)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#2\" (UID: 00000000-00003356)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#3\" (UID: 00000000-00003236)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#4\" (UID: 00000000-00002964)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#5\" (UID: 00000000-00004996)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#6\" (UID: 00000000-00003744)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#7\" (UID: 00000000-00002820)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#8\" (UID: 00000000-00002936)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#9\" (UID: 00000000-00008400)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#10\" (UID: 00000000-00007640)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#11\" (UID: 00000000-00002940)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#12\" (UID: 00000000-00009000)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#13\" (UID: 00000000-00006388)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#14\" (UID: 00000000-00001500)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#15\" (UID: 00000000-00003552)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#16\" (UID: 00000000-00008040)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#17\" (UID: 00000000-00008560)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#18\" (UID: 00000000-00006392)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#19\" (UID: 00000000-00008688)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#20\" (UID: 00000000-00003648)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#21\" (UID: 00000000-00001284)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#22\" (UID: 00000000-00004324)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#23\" (UID: 00000000-00006948)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#24\" (UID: 00000000-00003628)","Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#25\" (UID: 00000000-00007512)"],"description_v3":[{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#1\""},{"type":"process","process_uid":"00000000-00004440","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#2\""},{"type":"process","process_uid":"00000000-00003356","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#3\""},{"type":"process","process_uid":"00000000-00003236","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#4\""},{"type":"process","process_uid":"00000000-00002964","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#5\""},{"type":"process","process_uid":"00000000-00004996","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#6\""},{"type":"process","process_uid":"00000000-00003744","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#7\""},{"type":"process","process_uid":"00000000-00002820","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#8\""},{"type":"process","process_uid":"00000000-00002936","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#9\""},{"type":"process","process_uid":"00000000-00008400","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#10\""},{"type":"process","process_uid":"00000000-00007640","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#11\""},{"type":"process","process_uid":"00000000-00002940","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#12\""},{"type":"process","process_uid":"00000000-00009000","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#13\""},{"type":"process","process_uid":"00000000-00006388","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#14\""},{"type":"process","process_uid":"00000000-00001500","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#15\""},{"type":"process","process_uid":"00000000-00003552","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#16\""},{"type":"process","process_uid":"00000000-00008040","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#17\""},{"type":"process","process_uid":"00000000-00008560","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#18\""},{"type":"process","process_uid":"00000000-00006392","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#19\""},{"type":"process","process_uid":"00000000-00008688","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#20\""},{"type":"process","process_uid":"00000000-00003648","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#21\""},{"type":"process","process_uid":"00000000-00001284","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#22\""},{"type":"process","process_uid":"00000000-00004324","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#23\""},{"type":"process","process_uid":"00000000-00006948","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#24\""},{"type":"process","process_uid":"00000000-00003628","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#25\""},{"type":"process","process_uid":"00000000-00007512","label":"Show Process"}],"origin":"Monitored Target","attck_id":"T1218.011","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1218/011","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"api-22","type":6,"relevance":1,"name":"Fails to load modules at runtime","description":"\"rundll32.exe\" failed to load missing module \"C:\\madbasic_.bpl.dll\" - [base:0; Status:ffffffffc0000135]","description_v2":["\"rundll32.exe\" failed to load missing module \"C:\\madbasic_.bpl.dll\" - [base:0; Status:ffffffffc0000135]"],"description_v3":[{"type":"text","value":"\"rundll32.exe\" failed to load missing module \"C:\\madbasic_.bpl.dll\" - [base:0; Status:ffffffffc0000135]"}],"origin":"API Call","attck_id":"T1574.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1574/002","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"api-7","type":6,"relevance":1,"name":"Loads modules at runtime","description":"$55","description_v2":["\"rundll32.exe\" loaded module \"API-MS-WIN-CORE-SYNCH-L1-2-0\" at base 76f40000","\"rundll32.exe\" loaded module \"API-MS-WIN-CORE-FIBERS-L1-1-1\" at base 76f40000","\"rundll32.exe\" loaded module \"API-MS-WIN-CORE-LOCALIZATION-L1-2-1\" at base 76f40000","\"rundll32.exe\" loaded module \"KERNEL32\" at base 773c0000","\"rundll32.exe\" loaded module \"%WINDIR%\\TEMP\\VXOLE32.DLL\" at base 72ee0000","\"rundll32.exe\" loaded module \"C:\\MADBASIC_.BPL.DLL\" at base 0","\"rundll32.exe\" loaded module \"%WINDIR%\\SYSTEM32\\UXTHEME.DLL\" at base 73ff0000","\"rundll32.exe\" loaded module \"%WINDIR%\\SYSTEM32\\MSCTF.DLL\" at base 76c80000","\"rundll32.exe\" loaded module \"KERNEL32.DLL\" at base 773c0000","\"rundll32.exe\" loaded module \"%WINDIR%\\SYSTEM32\\OLE32.DLL\" at base 75cf0000","\"rundll32.exe\" loaded module \"OLEAUT32.DLL\" at base 764b0000","\"rundll32.exe\" loaded module \"RPCRT4.DLL\" at base 763a0000","\"rundll32.exe\" loaded module \"EXT-MS-WIN-RTCORE-NTUSER-WINDOW-EXT-L1-1-0.DLL\" at base 75df0000","\"rundll32.exe\" loaded module \"EXT-MS-WIN-RTCORE-NTUSER-INTEGRATION-L1-1-0.DLL\" at base 75df0000","\"rundll32.exe\" loaded module \"API-MS-WIN-CORE-COM-L1-1-0.DLL\" at base 76a30000"],"description_v3":[{"type":"text","value":"\"rundll32.exe\" loaded module \"API-MS-WIN-CORE-SYNCH-L1-2-0\" at base 76f40000"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" loaded module \"API-MS-WIN-CORE-FIBERS-L1-1-1\" at base 76f40000"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" loaded module \"API-MS-WIN-CORE-LOCALIZATION-L1-2-1\" at base 76f40000"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" loaded module \"KERNEL32\" at base 773c0000"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" loaded module \"%WINDIR%\\TEMP\\VXOLE32.DLL\" at base 72ee0000"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" loaded module \"C:\\MADBASIC_.BPL.DLL\" at base 0"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" loaded module \"%WINDIR%\\SYSTEM32\\UXTHEME.DLL\" at base 73ff0000"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" loaded module \"%WINDIR%\\SYSTEM32\\MSCTF.DLL\" at base 76c80000"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" loaded module \"KERNEL32.DLL\" at base 773c0000"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" loaded module \"%WINDIR%\\SYSTEM32\\OLE32.DLL\" at base 75cf0000"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" loaded module \"OLEAUT32.DLL\" at base 764b0000"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" loaded module \"RPCRT4.DLL\" at base 763a0000"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" loaded module \"EXT-MS-WIN-RTCORE-NTUSER-WINDOW-EXT-L1-1-0.DLL\" at base 75df0000"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" loaded module \"EXT-MS-WIN-RTCORE-NTUSER-INTEGRATION-L1-1-0.DLL\" at base 75df0000"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" loaded module \"API-MS-WIN-CORE-COM-L1-1-0.DLL\" at base 76a30000"}],"origin":"API Call","attck_id":"T1129","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1129","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"module-9","type":10,"relevance":0,"name":"Loads the Bcrypt module DLL","description":"\"rundll32.exe\" loaded module \"%WINDIR%\\SysWOW64\\bcryptprimitives.dll\" at 745F0000\n \"rundll32.exe\" loaded module \"%WINDIR%\\SysWOW64\\bcrypt.dll\" at 73400000","description_v2":["\"rundll32.exe\" loaded module \"%WINDIR%\\SysWOW64\\bcryptprimitives.dll\" at 745F0000","\"rundll32.exe\" loaded module \"%WINDIR%\\SysWOW64\\bcrypt.dll\" at 73400000"],"description_v3":[{"type":"text","value":"\"rundll32.exe\" loaded module \"%WINDIR%\\SysWOW64\\bcryptprimitives.dll\" at 745F0000"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" loaded module \"%WINDIR%\\SysWOW64\\bcrypt.dll\" at 73400000"}],"origin":"Loaded Module","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"module-10","type":10,"relevance":0,"name":"Loads the RPC (Remote Procedure Call) module DLL","description":"\"rundll32.exe\" loaded module \"%WINDIR%\\SysWOW64\\rpcrt4.dll\" at 763A0000","description_v2":["\"rundll32.exe\" loaded module \"%WINDIR%\\SysWOW64\\rpcrt4.dll\" at 763A0000"],"description_v3":[{"type":"text","value":"\"rundll32.exe\" loaded module \"%WINDIR%\\SysWOW64\\rpcrt4.dll\" at 763A0000"}],"origin":"Loaded Module","attck_id":"T1129","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1129","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-157","type":0,"relevance":0,"name":"Matched Compiler/Packer signature (DIE)","description":"\"madbasic_.bpl\" was detected as \"Borland Delphi\" and name: \"Compiler\"\n \"madbasic_.bpl\" was detected as \"Turbo Linker\" and name: \"Linker\"","description_v2":["\"madbasic_.bpl\" was detected as \"Borland Delphi\" and name: \"Compiler\"","\"madbasic_.bpl\" was detected as \"Turbo Linker\" and name: \"Linker\""],"description_v3":[{"type":"text","value":"\"madbasic_.bpl\" was detected as \"Borland Delphi\" and name: \"Compiler\""},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" was detected as \"Turbo Linker\" and name: \"Linker\""}],"origin":"Static Parser","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-80","type":0,"relevance":1,"name":"PE file contains executable sections","description":"\"madbasic_.bpl\" has an executable section named \".text\"\n \"madbasic_.bpl\" has an executable section named \".itext\"","description_v2":["\"madbasic_.bpl\" has an executable section named \".text\"","\"madbasic_.bpl\" has an executable section named \".itext\""],"description_v3":[{"type":"text","value":"\"madbasic_.bpl\" has an executable section named \".text\""},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" has an executable section named \".itext\""}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-95","type":0,"relevance":0,"name":"PE file contains writable sections","description":"\"madbasic_.bpl\" has an writable section named \".data\"\n \"madbasic_.bpl\" has an writable section named \".bss\"\n \"madbasic_.bpl\" has an writable section named \".idata\"","description_v2":["\"madbasic_.bpl\" has an writable section named \".data\"","\"madbasic_.bpl\" has an writable section named \".bss\"","\"madbasic_.bpl\" has an writable section named \".idata\""],"description_v3":[{"type":"text","value":"\"madbasic_.bpl\" has an writable section named \".data\""},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" has an writable section named \".bss\""},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" has an writable section named \".idata\""}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-96","type":0,"relevance":0,"name":"PE file entrypoint instructions","description":"$56","description_v2":["$57"],"description_v3":[{"type":"text","value":"$58"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-67","type":9,"relevance":10,"name":"Process launched with changed environment","description":"Process \"rundll32.exe\" (UID: 00000000-00004440) was launched with new environment variables: \"PROCESSOR_ARCHITEW6432=\"AMD64\"\"\n Process \"rundll32.exe\" (UID: 00000000-00004440) was launched with modified environment variables: \"PROCESSOR_ARCHITECTURE, CommonProgramFiles, ProgramFiles\"","description_v2":["Process \"rundll32.exe\" (UID: 00000000-00004440) was launched with new environment variables: \"PROCESSOR_ARCHITEW6432=\"AMD64\"\"","Process \"rundll32.exe\" (UID: 00000000-00004440) was launched with modified environment variables: \"PROCESSOR_ARCHITECTURE, CommonProgramFiles, ProgramFiles\""],"description_v3":[{"type":"text","value":"Process \"rundll32.exe\""},{"type":"process","process_uid":"00000000-00004440","label":"Show Process"},{"type":"text","value":"was launched with new environment variables: \"PROCESSOR_ARCHITEW6432=\"AMD64\"\""},{"type":"linebreak"},{"type":"text","value":"Process \"rundll32.exe\""},{"type":"process","process_uid":"00000000-00004440","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"PROCESSOR_ARCHITECTURE, CommonProgramFiles, ProgramFiles\""}],"origin":"Monitored Target","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"registry-25","type":3,"relevance":3,"name":"Reads information about supported languages","description":"\"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CUSTOMLOCALE\"; Key: \"EMPTY\")\n \"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CUSTOMLOCALE\"; Key: \"EN-US\")\n \"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\EXTENDEDLOCALE\"; Key: \"EN-US\")\n \"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","description_v2":["\"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CUSTOMLOCALE\"; Key: \"EMPTY\")","\"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CUSTOMLOCALE\"; Key: \"EN-US\")","\"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\EXTENDEDLOCALE\"; Key: \"EN-US\")","\"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"],"description_v3":[{"type":"text","value":"\"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CUSTOMLOCALE\"; Key: \"EMPTY\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CUSTOMLOCALE\"; Key: \"EN-US\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\EXTENDEDLOCALE\"; Key: \"EN-US\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"}],"origin":"Registry Access","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-25","type":9,"relevance":3,"name":"Spawns new processes","description":"$59","description_v2":["Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#2\" (UID: 00000000-00003356)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#3\" (UID: 00000000-00003236)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#4\" (UID: 00000000-00002964)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#5\" (UID: 00000000-00004996)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#6\" (UID: 00000000-00003744)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#7\" (UID: 00000000-00002820)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#8\" (UID: 00000000-00002936)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#9\" (UID: 00000000-00008400)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#10\" (UID: 00000000-00007640)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#11\" (UID: 00000000-00002940)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#12\" (UID: 00000000-00009000)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#13\" (UID: 00000000-00006388)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#14\" (UID: 00000000-00001500)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#15\" (UID: 00000000-00003552)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#16\" (UID: 00000000-00008040)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#17\" (UID: 00000000-00008560)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#18\" (UID: 00000000-00006392)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#19\" (UID: 00000000-00008688)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#20\" (UID: 00000000-00003648)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#21\" (UID: 00000000-00001284)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#22\" (UID: 00000000-00004324)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#23\" (UID: 00000000-00006948)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#24\" (UID: 00000000-00003628)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#25\" (UID: 00000000-00007512)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#26\" (UID: 00000000-00007268)"],"description_v3":[{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#2\""},{"type":"process","process_uid":"00000000-00003356","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#3\""},{"type":"process","process_uid":"00000000-00003236","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#4\""},{"type":"process","process_uid":"00000000-00002964","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#5\""},{"type":"process","process_uid":"00000000-00004996","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#6\""},{"type":"process","process_uid":"00000000-00003744","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#7\""},{"type":"process","process_uid":"00000000-00002820","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#8\""},{"type":"process","process_uid":"00000000-00002936","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#9\""},{"type":"process","process_uid":"00000000-00008400","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#10\""},{"type":"process","process_uid":"00000000-00007640","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#11\""},{"type":"process","process_uid":"00000000-00002940","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#12\""},{"type":"process","process_uid":"00000000-00009000","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#13\""},{"type":"process","process_uid":"00000000-00006388","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#14\""},{"type":"process","process_uid":"00000000-00001500","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#15\""},{"type":"process","process_uid":"00000000-00003552","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#16\""},{"type":"process","process_uid":"00000000-00008040","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#17\""},{"type":"process","process_uid":"00000000-00008560","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#18\""},{"type":"process","process_uid":"00000000-00006392","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#19\""},{"type":"process","process_uid":"00000000-00008688","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#20\""},{"type":"process","process_uid":"00000000-00003648","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#21\""},{"type":"process","process_uid":"00000000-00001284","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#22\""},{"type":"process","process_uid":"00000000-00004324","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#23\""},{"type":"process","process_uid":"00000000-00006948","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#24\""},{"type":"process","process_uid":"00000000-00003628","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#25\""},{"type":"process","process_uid":"00000000-00007512","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#26\""},{"type":"process","process_uid":"00000000-00007268","label":"Show Process"}],"origin":"Monitored Target","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-103","type":9,"relevance":3,"name":"Spawns new processes that are not known child processes","description":"$5a","description_v2":["Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#2\" (UID: 00000000-00003356)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#3\" (UID: 00000000-00003236)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#4\" (UID: 00000000-00002964)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#5\" (UID: 00000000-00004996)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#6\" (UID: 00000000-00003744)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#7\" (UID: 00000000-00002820)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#8\" (UID: 00000000-00002936)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#9\" (UID: 00000000-00008400)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#10\" (UID: 00000000-00007640)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#11\" (UID: 00000000-00002940)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#12\" (UID: 00000000-00009000)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#13\" (UID: 00000000-00006388)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#14\" (UID: 00000000-00001500)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#15\" (UID: 00000000-00003552)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#16\" (UID: 00000000-00008040)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#17\" (UID: 00000000-00008560)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#18\" (UID: 00000000-00006392)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#19\" (UID: 00000000-00008688)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#20\" (UID: 00000000-00003648)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#21\" (UID: 00000000-00001284)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#22\" (UID: 00000000-00004324)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#23\" (UID: 00000000-00006948)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#24\" (UID: 00000000-00003628)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#25\" (UID: 00000000-00007512)","Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#26\" (UID: 00000000-00007268)"],"description_v3":[{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#2\""},{"type":"process","process_uid":"00000000-00003356","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#3\""},{"type":"process","process_uid":"00000000-00003236","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#4\""},{"type":"process","process_uid":"00000000-00002964","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#5\""},{"type":"process","process_uid":"00000000-00004996","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#6\""},{"type":"process","process_uid":"00000000-00003744","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#7\""},{"type":"process","process_uid":"00000000-00002820","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#8\""},{"type":"process","process_uid":"00000000-00002936","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#9\""},{"type":"process","process_uid":"00000000-00008400","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#10\""},{"type":"process","process_uid":"00000000-00007640","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#11\""},{"type":"process","process_uid":"00000000-00002940","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#12\""},{"type":"process","process_uid":"00000000-00009000","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#13\""},{"type":"process","process_uid":"00000000-00006388","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#14\""},{"type":"process","process_uid":"00000000-00001500","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#15\""},{"type":"process","process_uid":"00000000-00003552","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#16\""},{"type":"process","process_uid":"00000000-00008040","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#17\""},{"type":"process","process_uid":"00000000-00008560","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#18\""},{"type":"process","process_uid":"00000000-00006392","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#19\""},{"type":"process","process_uid":"00000000-00008688","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#20\""},{"type":"process","process_uid":"00000000-00003648","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#21\""},{"type":"process","process_uid":"00000000-00001284","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#22\""},{"type":"process","process_uid":"00000000-00004324","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#23\""},{"type":"process","process_uid":"00000000-00006948","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#24\""},{"type":"process","process_uid":"00000000-00003628","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#25\""},{"type":"process","process_uid":"00000000-00007512","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"rundll32.exe\" with commandline \"\"C:\\\\madbasic_.bpl.dll\",#26\""},{"type":"process","process_uid":"00000000-00007268","label":"Show Process"}],"origin":"Monitored Target","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"certificate-0","type":17,"relevance":10,"name":"The input sample is signed with a certificate","description":"The input sample is signed with a certificate issued by \"CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US\" (SHA1: 5F:B7:EE:06:33:E2:59:DB:AD:0C:4C:9A:E6:D3:8F:1A:61:C7:DC:25; see report for more information)\n The input sample is signed with a certificate issued by \"CN=DigiCert EV Code Signing CA SHA2, OU=www.digicert.com, O=DigiCert Inc, C=US\" (SHA1: 5C:BB:00:84:7F:50:BF:48:0D:E5:76:E6:05:A8:11:C9:FB:E7:7D:DB; see report for more information)\n The input sample is signed with a certificate issued by \"CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US\" (SHA1: 60:EE:3F:C5:3D:4B:DF:D1:69:7A:E5:BE:AE:1C:AB:1C:0F:3A:D4:E3; see report for more information)","description_v2":["The input sample is signed with a certificate issued by \"CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US\" (SHA1: 5F:B7:EE:06:33:E2:59:DB:AD:0C:4C:9A:E6:D3:8F:1A:61:C7:DC:25; see report for more information)","The input sample is signed with a certificate issued by \"CN=DigiCert EV Code Signing CA SHA2, OU=www.digicert.com, O=DigiCert Inc, C=US\" (SHA1: 5C:BB:00:84:7F:50:BF:48:0D:E5:76:E6:05:A8:11:C9:FB:E7:7D:DB; see report for more information)","The input sample is signed with a certificate issued by \"CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US\" (SHA1: 60:EE:3F:C5:3D:4B:DF:D1:69:7A:E5:BE:AE:1C:AB:1C:0F:3A:D4:E3; see report for more information)"],"description_v3":[{"type":"text","value":"The input sample is signed with a certificate issued by \"CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US\" (SHA1: 5F:B7:EE:06:33:E2:59:DB:AD:0C:4C:9A:E6:D3:8F:1A:61:C7:DC:25; see report for more information)"},{"type":"linebreak"},{"type":"text","value":"The input sample is signed with a certificate issued by \"CN=DigiCert EV Code Signing CA SHA2, OU=www.digicert.com, O=DigiCert Inc, C=US\" (SHA1: 5C:BB:00:84:7F:50:BF:48:0D:E5:76:E6:05:A8:11:C9:FB:E7:7D:DB; see report for more information)"},{"type":"linebreak"},{"type":"text","value":"The input sample is signed with a certificate issued by \"CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US\" (SHA1: 60:EE:3F:C5:3D:4B:DF:D1:69:7A:E5:BE:AE:1C:AB:1C:0F:3A:D4:E3; see report for more information)"}],"origin":"Certificate Data","attck_id":"T1553.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1553/002","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"certificate-2","type":17,"relevance":10,"name":"The input sample is signed with a valid certificate","description":"The entire certificate chain of the input sample was validated successfully.","description_v2":["The entire certificate chain of the input sample was validated successfully."],"description_v3":[{"type":"text","value":"The entire certificate chain of the input sample was validated successfully."}],"origin":"Certificate Data","attck_id":"T1553.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1553/002","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-153","type":0,"relevance":0,"name":"Uses 32 bit executable PE","description":"\"madbasic_.bpl\" has flags like IMAGE_FILE_32BIT_MACHINE\n IMAGE_FILE_EXECUTABLE","description_v2":["\"madbasic_.bpl\" has flags like IMAGE_FILE_32BIT_MACHINE","IMAGE_FILE_EXECUTABLE"],"description_v3":[{"type":"text","value":"\"madbasic_.bpl\" has flags like IMAGE_FILE_32BIT_MACHINE"},{"type":"linebreak"},{"type":"text","value":"IMAGE_FILE_EXECUTABLE"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"string-310","type":2,"relevance":1,"name":"Contains ability to load modules (API string)","description":"Found reference to API \"LoadLibraryExA\" (Indicator: \"LoadLibrary\"; File: \"madbasic_.bpl\")\n Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"LoadLibraryExA\" (Indicator: \"LoadLibrary\"; File: \"madbasic_.bpl\")","Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"LoadLibraryExA\" (Indicator: \"LoadLibrary\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"registry-177","type":3,"relevance":1,"name":"Opens registry keys","description":"$5b","description_v2":["\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\"; Key: \"\"; Value: \"\")","\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"\"; Value: \"\")","\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER\\SEGMENT HEAP\"; Key: \"\"; Value: \"\")","\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER\"; Key: \"\"; Value: \"\")","\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WOW64\\X86\"; Key: \"\"; Value: \"\")","\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SAFEBOOT\\OPTION\"; Key: \"\"; Value: \"\")","\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SRP\\GP\\DLL\"; Key: \"\"; Value: \"\")","\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"\"; Value: \"\")","\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"\"; Value: \"\")","\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\FILESYSTEM\"; Key: \"\"; Value: \"\")","\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\"; Key: \"\"; Value: \"\")"],"description_v3":[{"type":"text","value":"\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER\\SEGMENT HEAP\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WOW64\\X86\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SAFEBOOT\\OPTION\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SRP\\GP\\DLL\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\FILESYSTEM\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\"; Key: \"\"; Value: \"\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1012","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"api-235","type":6,"relevance":1,"name":"Queries basic information of the specified process","description":"\"rundll32.exe\" queries basic process information of the \"C:\\Windows\\SysWOW64\\rundll32.exe\" (UID: 4440)","description_v2":["\"rundll32.exe\" queries basic process information of the \"C:\\Windows\\SysWOW64\\rundll32.exe\" (UID: 4440)"],"description_v3":[{"type":"text","value":"\"rundll32.exe\" queries basic process information of the \"%WINDIR%\\SysWOW64\\rundll32.exe\" (UID: 4440)"}],"origin":"API Call","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"registry-172","type":3,"relevance":1,"name":"Queries registry keys","description":"$5c","description_v2":["\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"USEFILTER\"; Value: \"\")","\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"DISABLEHEAPLOOKASIDE\"; Value: \"\")","\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"FRONTENDHEAPDEBUGOPTIONS\"; Value: \"\")","\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"SHUTDOWNFLAGS\"; Value: \"\")","\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"UNLOADEVENTTRACEDEPTH\"; Value: \"\")","\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"MAXLOADERTHREADS\"; Value: \"\")","\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"USEIMPERSONATEDDEVICEMAP\"; Value: \"\")","\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"TRACINGFLAGS\"; Value: \"\")","\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"CFGOPTIONS\"; Value: \"\")","\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"MINIMUMSTACKCOMMITINBYTES\"; Value: \"\")","\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"BREAKONINITIALIZEPROCESSFAILURE\"; Value: \"\")","\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"KEEPACTIVATIONCONTEXTSALIVE\"; Value: \"\")","\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"TRACKACTIVATIONCONTEXTRELEASES\"; Value: \"\")","\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"MAXDEADACTIVATIONCONTEXTS\"; Value: \"\")","\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"GLOBALFLAG\"; Value: \"\")","\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"CWDILLEGALINDLLSEARCH\"; Value: \"\")","\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER\"; Key: \"RESOURCEPOLICIES\"; Value: \"\")","\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"DEBUGPROCESSHEAPONLY\"; Value: \"\")","\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WOW64\\X86\"; Key: \"RUNDLL32.EXE\"; Value: \"\")","\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WOW64\\X86\"; Key: \"\"; Value: \"\")"],"description_v3":[{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"USEFILTER\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"DISABLEHEAPLOOKASIDE\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"FRONTENDHEAPDEBUGOPTIONS\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"SHUTDOWNFLAGS\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"UNLOADEVENTTRACEDEPTH\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"MAXLOADERTHREADS\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"USEIMPERSONATEDDEVICEMAP\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"TRACINGFLAGS\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"CFGOPTIONS\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"MINIMUMSTACKCOMMITINBYTES\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"BREAKONINITIALIZEPROCESSFAILURE\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"KEEPACTIVATIONCONTEXTSALIVE\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"TRACKACTIVATIONCONTEXTRELEASES\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"MAXDEADACTIVATIONCONTEXTS\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"GLOBALFLAG\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"CWDILLEGALINDLLSEARCH\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER\"; Key: \"RESOURCEPOLICIES\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RUNDLL32.EXE\"; Key: \"DEBUGPROCESSHEAPONLY\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WOW64\\X86\"; Key: \"RUNDLL32.EXE\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WOW64\\X86\"; Key: \"\"; Value: \"\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1012","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"api-243","type":6,"relevance":1,"name":"Reads files","description":"\"rundll32.exe\" reads file \"c:\\windows\\fonts\\staticcache.dat\"","description_v2":["\"rundll32.exe\" reads file \"c:\\windows\\fonts\\staticcache.dat\""],"description_v3":[{"type":"text","value":"\"rundll32.exe\" reads file \"%WINDIR%\\fonts\\staticcache.dat\""}],"origin":"API Call","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"summary-29","type":15,"relevance":1,"name":"Shows ability to use execution guardrails","description":"The analysis shows indicators which can be used as execution guardrails to ensure that payload only executes against intended targets/system. Matched sigs: Contains ability to delay execution by waiting for signal/timeout (API string)\n Matched sigs: Contains ability to retrieve the time elapsed since the system was started (API string)\n Matched sigs: Able to identify virtual environment by using API string\n Matched sigs: Able to identify virtual environment by using user activity (API string)","description_v2":["The analysis shows indicators which can be used as execution guardrails to ensure that payload only executes against intended targets/system. Matched sigs: Contains ability to delay execution by waiting for signal/timeout (API string)","Matched sigs: Contains ability to retrieve the time elapsed since the system was started (API string)","Matched sigs: Able to identify virtual environment by using API string","Matched sigs: Able to identify virtual environment by using user activity (API string)"],"description_v3":[{"type":"text","value":"The analysis shows indicators which can be used as execution guardrails to ensure that payload only executes against intended targets/system. Matched sigs: Contains ability to delay execution by waiting for signal/timeout (API string)"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Contains ability to retrieve the time elapsed since the system was started (API string)"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Able to identify virtual environment by using API string"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Able to identify virtual environment by using user activity (API string)"}],"origin":"Indicator Combinations","attck_id":"T1480","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1480","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"api-263","type":6,"relevance":1,"name":"Touches files","description":"\"rundll32.exe\" trying to touch file \"C:\\Windows\\System32\\WOW64LOG.DLL\"\n \"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\apphelp.dll\"\n \"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\rundll32.exe\"\n \"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\ntdll.dll\"\n \"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\kernel32.dll\"\n \"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\KernelBase.dll\"\n \"rundll32.exe\" trying to touch file \"C:\\Windows\\apppatch\\sysmain.sdb\"\n \"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\AcLayers.dll\"\n \"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\mpr.dll\"\n \"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\sfc.dll\"","description_v2":["\"rundll32.exe\" trying to touch file \"C:\\Windows\\System32\\WOW64LOG.DLL\"","\"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\apphelp.dll\"","\"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\rundll32.exe\"","\"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\ntdll.dll\"","\"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\kernel32.dll\"","\"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\KernelBase.dll\"","\"rundll32.exe\" trying to touch file \"C:\\Windows\\apppatch\\sysmain.sdb\"","\"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\AcLayers.dll\"","\"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\mpr.dll\"","\"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\sfc.dll\""],"description_v3":[{"type":"text","value":"\"rundll32.exe\" trying to touch file \"%WINDIR%\\System32\\WOW64LOG.DLL\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\apphelp.dll\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\rundll32.exe\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\ntdll.dll\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\kernel32.dll\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\KernelBase.dll\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to touch file \"C:\\Windows\\apppatch\\sysmain.sdb\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\AcLayers.dll\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\mpr.dll\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to touch file \"C:\\Windows\\SysWOW64\\sfc.dll\""}],"origin":"API Call","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"api-126","type":6,"relevance":3,"name":"Tries to access non-existent files (executable)","description":"\"rundll32.exe\" trying to access non-existent file \"C:\\Windows\\System32\\WOW64LOG.DLL\"\n \"rundll32.exe\" trying to access non-existent file \"C:\\Windows\\SysWOW64\\RPCSS.DLL\"\n \"rundll32.exe\" trying to access non-existent file \"C:\\WINDOWS\\system32\\rpcss.dll\"","description_v2":["\"rundll32.exe\" trying to access non-existent file \"C:\\Windows\\System32\\WOW64LOG.DLL\"","\"rundll32.exe\" trying to access non-existent file \"C:\\Windows\\SysWOW64\\RPCSS.DLL\"","\"rundll32.exe\" trying to access non-existent file \"C:\\WINDOWS\\system32\\rpcss.dll\""],"description_v3":[{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"%WINDIR%\\System32\\WOW64LOG.DLL\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\Windows\\SysWOW64\\RPCSS.DLL\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\WINDOWS\\system32\\rpcss.dll\""}],"origin":"API Call","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"api-161","type":6,"relevance":3,"name":"Tries to access non-existent files (non-executable)","description":"$5d","description_v2":["\"rundll32.exe\" trying to access non-existent file \"C:\\MADBASIC_.BPL.DLL.MANIFEST\"","\"rundll32.exe\" trying to access non-existent file \"C:\\madbasic_.bpl.dll.manifest\"","\"rundll32.exe\" trying to access non-existent file \"C:\\MADBASIC_.BPL.DLL.123.MANIFEST\"","\"rundll32.exe\" trying to access non-existent file \"C:\\MADBASIC_.BPL.DLL.124.MANIFEST\"","\"rundll32.exe\" trying to access non-existent file \"C:\\MADBASIC_.BPL.DLL.2.MANIFEST\"","\"rundll32.exe\" trying to access non-existent file \"C:\\Windows\\SysWOW64\\RUNDLL32.EXE.LOCAL\"","\"rundll32.exe\" trying to access non-existent file \"C:\\WINDOWS\\SysWOW64\\rundll32.exe.Local\\\"","\"rundll32.exe\" trying to access non-existent file \"C:\\RTL120.BPL\"","\"rundll32.exe\" trying to access non-existent file \"C:\\rtl120.bpl\"","\"rundll32.exe\" trying to access non-existent file \"C:\\Windows\\SysWOW64\\RTL120.BPL\"","\"rundll32.exe\" trying to access non-existent file \"C:\\WINDOWS\\SYSTEM32\\rtl120.bpl\"","\"rundll32.exe\" trying to access non-existent file \"C:\\Windows\\System\\RTL120.BPL\"","\"rundll32.exe\" trying to access non-existent file \"C:\\WINDOWS\\system\\rtl120.bpl\"","\"rundll32.exe\" trying to access non-existent file \"C:\\Windows\\RTL120.BPL\"","\"rundll32.exe\" trying to access non-existent file \"C:\\WINDOWS\\rtl120.bpl\"","\"rundll32.exe\" trying to access non-existent file \"C:\\ProgramData\\Oracle\\Java\\javapath_target_114250\\RTL120.BPL\"","\"rundll32.exe\" trying to access non-existent file \"C:\\ProgramData\\Oracle\\Java\\javapath\\rtl120.bpl\"","\"rundll32.exe\" trying to access non-existent file \"C:\\WINDOWS\\system32\\rtl120.bpl\"","\"rundll32.exe\" trying to access non-existent file \"C:\\Windows\\SysWOW64\\wbem\\RTL120.BPL\"","\"rundll32.exe\" trying to access non-existent file \"C:\\WINDOWS\\System32\\Wbem\\rtl120.bpl\""],"description_v3":[{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\MADBASIC_.BPL.DLL.MANIFEST\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\madbasic_.bpl.dll.manifest\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\MADBASIC_.BPL.DLL.123.MANIFEST\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\MADBASIC_.BPL.DLL.124.MANIFEST\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\MADBASIC_.BPL.DLL.2.MANIFEST\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\Windows\\SysWOW64\\RUNDLL32.EXE.LOCAL\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\WINDOWS\\SysWOW64\\rundll32.exe.Local\\\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\RTL120.BPL\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\rtl120.bpl\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\Windows\\SysWOW64\\RTL120.BPL\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\WINDOWS\\SYSTEM32\\rtl120.bpl\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\Windows\\System\\RTL120.BPL\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\WINDOWS\\system\\rtl120.bpl\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\Windows\\RTL120.BPL\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\WINDOWS\\rtl120.bpl\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"%ALLUSERSPROFILE%\\Oracle\\Java\\javapath_target_114250\\RTL120.BPL\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\ProgramData\\Oracle\\Java\\javapath\\rtl120.bpl\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\WINDOWS\\system32\\rtl120.bpl\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\Windows\\SysWOW64\\wbem\\RTL120.BPL\""},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" trying to access non-existent file \"C:\\WINDOWS\\System32\\Wbem\\rtl120.bpl\""}],"origin":"API Call","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-3","type":2,"relevance":3,"name":"Found potential URL in binary/memory","description":"$5e","description_v2":["Pattern match: \"www.madshi.net\"","Pattern match: \"www.madshi.nettpf0tmadexceptmadexcept\"","Pattern match: \"www.digicert.com1+0\"","Pattern match: \"crl3.digicert.com/evcodesigningsha2-g1.crl07\"","Pattern match: \"crl4.digicert.com/evcodesigningsha2-g1.crl0k\"","Pattern match: \"https://www.digicert.com/cps0\"","Pattern match: \"http://ocsp.digicert.com0h\"","Pattern match: \"http://cacerts.digicert.com/digicertevcodesigningca-sha2.crt0\"","Pattern match: \"http://ocsp.digicert.com0i\"","Pattern match: \"http://cacerts.digicert.com/digicerthighassuranceevrootca.crt0\"","Pattern match: \"http://crl3.digicert.com/digicerthighassuranceevrootca.crl0@\"","Pattern match: \"http://crl4.digicert.com/digicerthighassuranceevrootca.crl0\"","Pattern match: \"http://www.digicert.com/ssl-cps-repository.htm0\"","Pattern match: \"www.digicert.com110/\"","Pattern match: \"http://www.digicert.com/cps0\"","Pattern match: \"http://crl3.digicert.com/sha2-assured-ts.crl02\"","Pattern match: \"http://crl4.digicert.com/sha2-assured-ts.crl0\"","Pattern match: \"http://ocsp.digicert.com0o\"","Pattern match: \"cacerts.digicert.com/digicertsha2assuredidtimestampingca.crt0\"","Pattern match: \"www.digicert.com1$0\"","Pattern match: \"http://ocsp.digicert.com0c\"","Pattern match: \"cacerts.digicert.com/digicertassuredidrootca.crt0\"","Pattern match: \"crl4.digicert.com/digicertassuredidrootca.crl0\"","Pattern match: \"crl3.digicert.com/digicertassuredidrootca.crl0p\"","Pattern match: \"http://crl3.digicert.com/evcodesigning-g1.crl03\"","Pattern match: \"http://crl4.digicert.com/evcodesigning-g1.crl0k\"","Pattern match: \"cacerts.digicert.com/digicertevcodesigningca.crt0\"","Pattern match: \"http://www.w3.org/2001/xmlschema-instance\"","Heuristic match: \"e;.ba\"","Heuristic match: \"pathext=.com;.eg\""],"description_v3":[{"type":"text","value":"Pattern match: \"www.madshi.net\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"www.madshi.nettpf0tmadexceptmadexcept\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"www.digicert.com1+0\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"crl3.digicert.com/evcodesigningsha2-g1.crl07\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"crl4.digicert.com/evcodesigningsha2-g1.crl0k\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"https://www.digicert.com/cps0\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://ocsp.digicert.com0h\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://cacerts.digicert.com/digicertevcodesigningca-sha2.crt0\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://ocsp.digicert.com0i\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://cacerts.digicert.com/digicerthighassuranceevrootca.crt0\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://crl3.digicert.com/digicerthighassuranceevrootca.crl0@\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://crl4.digicert.com/digicerthighassuranceevrootca.crl0\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://www.digicert.com/ssl-cps-repository.htm0\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"www.digicert.com110/\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://www.digicert.com/cps0\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://crl3.digicert.com/sha2-assured-ts.crl02\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://crl4.digicert.com/sha2-assured-ts.crl0\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://ocsp.digicert.com0o\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"cacerts.digicert.com/digicertsha2assuredidtimestampingca.crt0\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"www.digicert.com1$0\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://ocsp.digicert.com0c\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"cacerts.digicert.com/digicertassuredidrootca.crt0\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"crl4.digicert.com/digicertassuredidrootca.crl0\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"crl3.digicert.com/digicertassuredidrootca.crl0p\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://crl3.digicert.com/evcodesigning-g1.crl03\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://crl4.digicert.com/evcodesigning-g1.crl0k\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"cacerts.digicert.com/digicertevcodesigningca.crt0\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://www.w3.org/2001/xmlschema-instance\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"e;.ba\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"pathext=.com;.eg\""}],"origin":"File/Memory","attck_id":"T1071","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1071","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"network-55","type":7,"relevance":1,"name":"JA3 SSL client fingerprint","description":"Observed JA3 fingerprint: bd0bf25947d4a37404f0424edf4db9ad\n Observed JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e","description_v2":["Observed JA3 fingerprint: bd0bf25947d4a37404f0424edf4db9ad","Observed JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e"],"description_v3":[{"type":"text","value":"Observed JA3 fingerprint: bd0bf25947d4a37404f0424edf4db9ad"},{"type":"linebreak"},{"type":"text","value":"Observed JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e"}],"origin":"Network Traffic","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"network-54","type":7,"relevance":1,"name":"Making HTTPS connections using secure TLS/SSL version","description":"Connection was made using TLSv1.2 [tls.handshake.version: 0x0303]","description_v2":["Connection was made using TLSv1.2 [tls.handshake.version: 0x0303]"],"description_v3":[{"type":"text","value":"Connection was made using TLSv1.2 [tls.handshake.version: 0x0303]"}],"origin":"Network Traffic","attck_id":"T1573","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1573","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-98","type":2,"relevance":1,"name":"Possibly tries to communicate over SSL connection (HTTPS)","description":"Found HTTPS url \"https://www.digicert.com\"","description_v2":["Found HTTPS url \"https://www.digicert.com\""],"description_v3":[{"type":"text","value":"Found HTTPS url \"https://www.digicert.com\""}],"origin":"File/Memory","attck_id":"T1573","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1573","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"api-105","type":6,"relevance":3,"name":"Calls an API possibly used to take screenshots","description":"\"rundll32.exe\" called \"CreateCompatibleBitmap\" with parameters {\"hdc\": \"4c010885\"\n \"cx\": \"16\"\n \"cy\": \"16\"}\n \"rundll32.exe\" called \"CreateCompatibleBitmap\" with parameters {\"hdc\": \"6401079f\"\n \"cx\": \"16\"\n \"cy\": \"16\"}\n \"rundll32.exe\" called \"CreateCompatibleBitmap\" with parameters {\"hdc\": \"8010952\"\n \"cx\": \"16\"\n \"cy\": \"16\"}\n \"rundll32.exe\" called \"CreateCompatibleBitmap\" with parameters {\"hdc\": \"6010906\"\n \"cx\": \"16\"\n \"cy\": \"16\"}","description_v2":["\"rundll32.exe\" called \"CreateCompatibleBitmap\" with parameters {\"hdc\": \"4c010885\"","\"cx\": \"16\"","\"cy\": \"16\"}","\"rundll32.exe\" called \"CreateCompatibleBitmap\" with parameters {\"hdc\": \"6401079f\"","\"cx\": \"16\"","\"cy\": \"16\"}","\"rundll32.exe\" called \"CreateCompatibleBitmap\" with parameters {\"hdc\": \"8010952\"","\"cx\": \"16\"","\"cy\": \"16\"}","\"rundll32.exe\" called \"CreateCompatibleBitmap\" with parameters {\"hdc\": \"6010906\"","\"cx\": \"16\"","\"cy\": \"16\"}"],"description_v3":[{"type":"text","value":"\"rundll32.exe\" called \"CreateCompatibleBitmap\" with parameters {\"hdc\": \"4c010885\""},{"type":"linebreak"},{"type":"text","value":"\"cx\": \"16\""},{"type":"linebreak"},{"type":"text","value":"\"cy\": \"16\"}"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"CreateCompatibleBitmap\" with parameters {\"hdc\": \"6401079f\""},{"type":"linebreak"},{"type":"text","value":"\"cx\": \"16\""},{"type":"linebreak"},{"type":"text","value":"\"cy\": \"16\"}"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"CreateCompatibleBitmap\" with parameters {\"hdc\": \"8010952\""},{"type":"linebreak"},{"type":"text","value":"\"cx\": \"16\""},{"type":"linebreak"},{"type":"text","value":"\"cy\": \"16\"}"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"CreateCompatibleBitmap\" with parameters {\"hdc\": \"6010906\""},{"type":"linebreak"},{"type":"text","value":"\"cx\": \"16\""},{"type":"linebreak"},{"type":"text","value":"\"cy\": \"16\"}"}],"origin":"API Call","attck_id":"T1113","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1113","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"api-103","type":6,"relevance":3,"name":"Calls an API typically used for taking snapshot of the specified processes","description":"\"rundll32.exe\" called \"CreateToolhelp32Snapshot\" with parameters {\"dwFlags\": \"4\"\n \"th32ProcessID\": \"0\"}","description_v2":["\"rundll32.exe\" called \"CreateToolhelp32Snapshot\" with parameters {\"dwFlags\": \"4\"","\"th32ProcessID\": \"0\"}"],"description_v3":[{"type":"text","value":"\"rundll32.exe\" called \"CreateToolhelp32Snapshot\" with parameters {\"dwFlags\": \"4\""},{"type":"linebreak"},{"type":"text","value":"\"th32ProcessID\": \"0\"}"}],"origin":"API Call","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-83","type":2,"relevance":1,"name":"Contains ability to enumerate files on disk (API string)","description":"Found reference to API \"FindFirstFileA\" (Indicator: \"FindFirstFile\"; File: \"madbasic_.bpl\")\n Found reference to API \"FindFirstFileW\" (Indicator: \"FindFirstFile\"; File: \"madbasic_.bpl\")","description_v2":["Found reference to API \"FindFirstFileA\" (Indicator: \"FindFirstFile\"; File: \"madbasic_.bpl\")","Found reference to API \"FindFirstFileW\" (Indicator: \"FindFirstFile\"; File: \"madbasic_.bpl\")"],"description_v3":[{"type":"text","value":"Found reference to API \"FindFirstFileA\" (Indicator: \"FindFirstFile\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FindFirstFileW\" (Indicator: \"FindFirstFile\"; File: \"madbasic_.bpl\")"}],"origin":"File/Memory","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-85","type":2,"relevance":1,"name":"Contains ability to enumerate process and/or its information (API string)","description":"Found reference to API \"GetCurrentProcessId\" (Indicator: \"GetCurrentProcess\"; File: \"madbasic_.bpl\")\n Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; File: \"madbasic_.bpl\")\n Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; File: \"madbasic_.bpl\")\n Found reference to API \"GetCurrentProcess\" (Indicator: \"GetCurrentProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")\n Found reference to API \"GetModuleHandleExW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")\n Found reference to API \"GetCurrentProcessId\" (Indicator: \"GetCurrentProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")\n Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"GetCurrentProcessId\" (Indicator: \"GetCurrentProcess\"; File: \"madbasic_.bpl\")","Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; File: \"madbasic_.bpl\")","Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; File: \"madbasic_.bpl\")","Found reference to API \"GetCurrentProcess\" (Indicator: \"GetCurrentProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API \"GetModuleHandleExW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API \"GetCurrentProcessId\" (Indicator: \"GetCurrentProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetCurrentProcessId\" (Indicator: \"GetCurrentProcess\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetCurrentProcess\" (Indicator: \"GetCurrentProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleHandleExW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetCurrentProcessId\" (Indicator: \"GetCurrentProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-534","type":2,"relevance":0,"name":"Contains ability to read files (API string)","description":"Found reference to API \"ReadFile\" (Indicator: \"ReadFile\"; File: \"madbasic_.bpl\")\n Found reference to API \"ReadFile\" (Indicator: \"ReadFile\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"ReadFile\" (Indicator: \"ReadFile\"; File: \"madbasic_.bpl\")","Found reference to API \"ReadFile\" (Indicator: \"ReadFile\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"ReadFile\" (Indicator: \"ReadFile\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"ReadFile\" (Indicator: \"ReadFile\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-427","type":2,"relevance":1,"name":"Contains ability to retrieve a module handle (API string)","description":"Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; File: \"madbasic_.bpl\")\n Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; File: \"madbasic_.bpl\")\n Found reference to API \"GetModuleHandleExW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")\n Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; File: \"madbasic_.bpl\")","Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; File: \"madbasic_.bpl\")","Found reference to API \"GetModuleHandleExW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleHandleExW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-317","type":2,"relevance":1,"name":"Contains ability to retrieve address of exported function from a DLL (API string)","description":"Found reference to API \"GetProcAddress\" (Indicator: \"GetProcAddress\"; File: \"madbasic_.bpl\")\n Found reference to API \"GetProcAddress\" (Indicator: \"GetProcAddress\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"GetProcAddress\" (Indicator: \"GetProcAddress\"; File: \"madbasic_.bpl\")","Found reference to API \"GetProcAddress\" (Indicator: \"GetProcAddress\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetProcAddress\" (Indicator: \"GetProcAddress\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetProcAddress\" (Indicator: \"GetProcAddress\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-207","type":2,"relevance":1,"name":"Contains ability to retrieve file and directory information (API string)","description":"$5f","description_v2":["Found reference to API \"GetFileAttributesA\" (Indicator: \"GetFileAttributes\"; File: \"madbasic_.bpl\")","Found reference to API \"GetFileAttributesW\" (Indicator: \"GetFileAttributes\"; File: \"madbasic_.bpl\")","Found reference to API \"GetTempPathA\" (Indicator: \"GetTempPath\"; File: \"madbasic_.bpl\")","Found reference to API \"GetTempPathW\" (Indicator: \"GetTempPath\"; File: \"madbasic_.bpl\")","Found reference to API \"GetFileSize\" (Indicator: \"GetFileSize\"; File: \"madbasic_.bpl\")","Found reference to API \"GetFileVersionInfoSizeA\" (Indicator: \"GetFileVersionInfo\"; File: \"madbasic_.bpl\")","Found reference to API \"GetFileVersionInfoSizeA\" (Indicator: \"GetFileVersionInfoSize\"; File: \"madbasic_.bpl\")","Found reference to API \"GetFileVersionInfoA\" (Indicator: \"GetFileVersionInfo\"; File: \"madbasic_.bpl\")","Found reference to API \"GetFileVersionInfoW\" (Indicator: \"GetFileVersionInfo\"; File: \"madbasic_.bpl\")","Found reference to API \"GetFileVersionInfoSizeW\" (Indicator: \"GetFileVersionInfo\"; File: \"madbasic_.bpl\")","Found reference to API \"GetFileVersionInfoSizeW\" (Indicator: \"GetFileVersionInfoSize\"; File: \"madbasic_.bpl\")","Found reference to API \"GetSystemDirectoryW\" (Indicator: \"GetSystemDirectory\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API \"GetFileAttributesW\" (Indicator: \"GetFileAttributes\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetFileAttributesA\" (Indicator: \"GetFileAttributes\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetFileAttributesW\" (Indicator: \"GetFileAttributes\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetTempPathA\" (Indicator: \"GetTempPath\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetTempPathW\" (Indicator: \"GetTempPath\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetFileSize\" (Indicator: \"GetFileSize\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetFileVersionInfoSizeA\" (Indicator: \"GetFileVersionInfo\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetFileVersionInfoSizeA\" (Indicator: \"GetFileVersionInfoSize\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetFileVersionInfoA\" (Indicator: \"GetFileVersionInfo\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetFileVersionInfoW\" (Indicator: \"GetFileVersionInfo\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetFileVersionInfoSizeW\" (Indicator: \"GetFileVersionInfo\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetFileVersionInfoSizeW\" (Indicator: \"GetFileVersionInfoSize\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetSystemDirectoryW\" (Indicator: \"GetSystemDirectory\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetFileAttributesW\" (Indicator: \"GetFileAttributes\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-86","type":2,"relevance":1,"name":"Contains ability to retrieve information about operating system (API string)","description":"$60","description_v2":["Found reference to API \"RtlGetVersion\" (Indicator: \"RtlGetVersion\"; File: \"madbasic_.bpl\")","Found reference to API \"67,4780,3025,,RtlGetNtProductType,NTDLL.dll,\"00:30:17.296\",RX=0,PX=0\" (Indicator: \"RtlGetNtProductType\"; Source: \"00000000-00002964.00000000.116532.02490000.00000004.mdmp\")","Found reference to API \"97,3240,3025,,RtlGetNtProductType,NTDLL.dll,\"00:30:17.296\",RX=0,PX=0\" (Indicator: \"RtlGetNtProductType\"; Source: \"00000000-00003356.00000000.116530.02E70000.00000004.mdmp\")","Found reference to API \"21,7920,3025,,RtlGetNtProductType,NTDLL.dll,\"00:32:36.609\",RX=0,PX=0\" (Indicator: \"RtlGetNtProductType\"; Source: \"00000000-00003628.00000000.125470.02E20000.00000004.mdmp\")","Found reference to API \"41,8636,3025,,RtlGetNtProductType,NTDLL.dll,\"00:30:17.296\",RX=0,PX=0\" (Indicator: \"RtlGetNtProductType\"; Source: \"00000000-00004440.00000000.116530.02520000.00000004.mdmp\")","Found reference to API \"62,8536,3025,,RtlGetNtProductType,NTDLL.dll,\"00:32:36.609\",RX=0,PX=0\" (Indicator: \"RtlGetNtProductType\"; Source: \"00000000-00007512.00000000.125476.02C60000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"RtlGetVersion\" (Indicator: \"RtlGetVersion\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"67,4780,3025,,RtlGetNtProductType,NTDLL.dll,\"00:30:17.296\",RX=0,PX=0\" (Indicator: \"RtlGetNtProductType\"; Source: \"00000000-00002964.00000000.116532.02490000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"97,3240,3025,,RtlGetNtProductType,NTDLL.dll,\"00:30:17.296\",RX=0,PX=0\" (Indicator: \"RtlGetNtProductType\"; Source: \"00000000-00003356.00000000.116530.02E70000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"21,7920,3025,,RtlGetNtProductType,NTDLL.dll,\"00:32:36.609\",RX=0,PX=0\" (Indicator: \"RtlGetNtProductType\"; Source: \"00000000-00003628.00000000.125470.02E20000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"41,8636,3025,,RtlGetNtProductType,NTDLL.dll,\"00:30:17.296\",RX=0,PX=0\" (Indicator: \"RtlGetNtProductType\"; Source: \"00000000-00004440.00000000.116530.02520000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"62,8536,3025,,RtlGetNtProductType,NTDLL.dll,\"00:32:36.609\",RX=0,PX=0\" (Indicator: \"RtlGetNtProductType\"; Source: \"00000000-00007512.00000000.125476.02C60000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-164","type":2,"relevance":1,"name":"Contains ability to retrieve the fully qualified path of module (API string)","description":"Found reference to API \"GetModuleFileNameA\" (Indicator: \"GetModuleFileName\"; File: \"madbasic_.bpl\")\n Found reference to API \"GetModuleFileNameW\" (Indicator: \"GetModuleFileName\"; File: \"madbasic_.bpl\")\n Found reference to API \"GetModuleFileNameA\" (Indicator: \"GetModuleFileName\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"GetModuleFileNameA\" (Indicator: \"GetModuleFileName\"; File: \"madbasic_.bpl\")","Found reference to API \"GetModuleFileNameW\" (Indicator: \"GetModuleFileName\"; File: \"madbasic_.bpl\")","Found reference to API \"GetModuleFileNameA\" (Indicator: \"GetModuleFileName\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetModuleFileNameA\" (Indicator: \"GetModuleFileName\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleFileNameW\" (Indicator: \"GetModuleFileName\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleFileNameA\" (Indicator: \"GetModuleFileName\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-131","type":2,"relevance":1,"name":"Contains ability to retrieve the specified system metric or system configuration setting (API string)","description":"Found reference to API \"GetSystemMetrics\" (Indicator: \"GetSystemMetrics\"; File: \"madbasic_.bpl\")","description_v2":["Found reference to API \"GetSystemMetrics\" (Indicator: \"GetSystemMetrics\"; File: \"madbasic_.bpl\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetSystemMetrics\" (Indicator: \"GetSystemMetrics\"; File: \"madbasic_.bpl\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-205","type":2,"relevance":1,"name":"Contains ability to retrieve the time elapsed since the system was started (API string)","description":"Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; File: \"madbasic_.bpl\")\n Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; File: \"madbasic_.bpl\")","Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1497.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1497/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-121","type":2,"relevance":1,"name":"Contains ability to retrieve usernames and/or user information (API string)","description":"Found reference to API \"NtQuerySystemInformation\" (Indicator: \"NtQuerySystemInformation\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")\n Found reference to API \"NtQueryInformationToken\" (Indicator: \"NtQueryInformationToken\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")\n Found reference to API \"NtOpenProcessToken\" (Indicator: \"NtOpenProcessToken\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")\n Found reference to API \"NtOpenProcessToken\" (Indicator: \"OpenProcessToken\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"NtQuerySystemInformation\" (Indicator: \"NtQuerySystemInformation\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API \"NtQueryInformationToken\" (Indicator: \"NtQueryInformationToken\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API \"NtOpenProcessToken\" (Indicator: \"NtOpenProcessToken\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API \"NtOpenProcessToken\" (Indicator: \"OpenProcessToken\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"NtQuerySystemInformation\" (Indicator: \"NtQuerySystemInformation\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"NtQueryInformationToken\" (Indicator: \"NtQueryInformationToken\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"NtOpenProcessToken\" (Indicator: \"NtOpenProcessToken\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"NtOpenProcessToken\" (Indicator: \"OpenProcessToken\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1033","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1033","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-474","type":2,"relevance":1,"name":"Contains ability to access device drivers","description":"$61","description_v2":["Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00000196.00000000.127395.030C0000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00000196.00000000.127395.030C0000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00001284.00000000.123556.03080000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00001284.00000000.123556.03080000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00001500.00000000.120930.02EA0000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00001500.00000000.120930.02EA0000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00001924.00000000.129314.02FF0000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00001924.00000000.129314.02FF0000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00002820.00000000.117497.02C90000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00002820.00000000.117497.02C90000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00002936.00000000.118456.033C0000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00002936.00000000.118456.033C0000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00002964.00000000.116532.02490000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00002964.00000000.116532.02490000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003112.00000000.129327.029E0000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003112.00000000.129327.029E0000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003236.00000000.116532.024F0000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003236.00000000.116532.024F0000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003356.00000000.116530.02E70000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003356.00000000.116530.02E70000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003552.00000000.121142.02C10000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003552.00000000.121142.02C10000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003628.00000000.125470.02E20000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003628.00000000.125470.02E20000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003648.00000000.123550.02840000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found string %WINDIR%\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00000196.00000000.127395.030C0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00000196.00000000.127395.030C0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00001284.00000000.123556.03080000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00001284.00000000.123556.03080000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00001500.00000000.120930.02EA0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00001500.00000000.120930.02EA0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00001924.00000000.129314.02FF0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00001924.00000000.129314.02FF0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00002820.00000000.117497.02C90000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00002820.00000000.117497.02C90000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00002936.00000000.118456.033C0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00002936.00000000.118456.033C0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00002964.00000000.116532.02490000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00002964.00000000.116532.02490000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003112.00000000.129327.029E0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003112.00000000.129327.029E0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003236.00000000.116532.024F0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003236.00000000.116532.024F0000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003356.00000000.116530.02E70000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003356.00000000.116530.02E70000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003552.00000000.121142.02C10000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003552.00000000.121142.02C10000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003628.00000000.125470.02E20000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003628.00000000.125470.02E20000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \":\\WINDOWS\\system32\\DriverStore\\FileRepository\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00003648.00000000.123550.02840000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1543.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1543/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-308","type":2,"relevance":1,"name":"Contains ability to delete files/directories (API string)","description":"Found reference to API \"DeleteFileA\" (Indicator: \"DeleteFile\"; File: \"madbasic_.bpl\")\n Found reference to API \"DeleteFileW\" (Indicator: \"DeleteFile\"; File: \"madbasic_.bpl\")","description_v2":["Found reference to API \"DeleteFileA\" (Indicator: \"DeleteFile\"; File: \"madbasic_.bpl\")","Found reference to API \"DeleteFileW\" (Indicator: \"DeleteFile\"; File: \"madbasic_.bpl\")"],"description_v3":[{"type":"text","value":"Found reference to API \"DeleteFileA\" (Indicator: \"DeleteFile\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"DeleteFileW\" (Indicator: \"DeleteFile\"; File: \"madbasic_.bpl\")"}],"origin":"File/Memory","attck_id":"T1070.004","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1070/004","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-426","type":2,"relevance":1,"name":"Contains ability to modify file attributes (API string)","description":"Found reference to API \"SetFileAttributesW\" (Indicator: \"SetFileAttributes\"; File: \"madbasic_.bpl\")\n Found reference to API \"SetFileAttributesA\" (Indicator: \"SetFileAttributes\"; File: \"madbasic_.bpl\")","description_v2":["Found reference to API \"SetFileAttributesW\" (Indicator: \"SetFileAttributes\"; File: \"madbasic_.bpl\")","Found reference to API \"SetFileAttributesA\" (Indicator: \"SetFileAttributes\"; File: \"madbasic_.bpl\")"],"description_v3":[{"type":"text","value":"Found reference to API \"SetFileAttributesW\" (Indicator: \"SetFileAttributes\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SetFileAttributesA\" (Indicator: \"SetFileAttributes\"; File: \"madbasic_.bpl\")"}],"origin":"File/Memory","attck_id":"T1222","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1222","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-402","type":2,"relevance":1,"name":"Contains ability to modify process attributes (API string)","description":"Found reference to API \"SetProcessMitigationPolicy\" (Indicator: \"SetProcessMitigationPolicy\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"SetProcessMitigationPolicy\" (Indicator: \"SetProcessMitigationPolicy\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"SetProcessMitigationPolicy\" (Indicator: \"SetProcessMitigationPolicy\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1562.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1562/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-316","type":2,"relevance":1,"name":"Contains ability to terminate a process (API string)","description":"Found reference to API \"ExitProcess\" (Indicator: \"ExitProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")\n Found reference to API \"TerminateProcess\" (Indicator: \"TerminateProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"ExitProcess\" (Indicator: \"ExitProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API \"TerminateProcess\" (Indicator: \"TerminateProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"ExitProcess\" (Indicator: \"ExitProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"TerminateProcess\" (Indicator: \"TerminateProcess\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1489","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1489","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-535","type":2,"relevance":0,"name":"Contains ability to write files (API string)","description":"Found reference to API \"WriteFile\" (Indicator: \"WriteFile\"; File: \"madbasic_.bpl\")","description_v2":["Found reference to API \"WriteFile\" (Indicator: \"WriteFile\"; File: \"madbasic_.bpl\")"],"description_v3":[{"type":"text","value":"Found reference to API \"WriteFile\" (Indicator: \"WriteFile\"; File: \"madbasic_.bpl\")"}],"origin":"File/Memory","attck_id":"T1105","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1105","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"string-354","type":2,"relevance":1,"name":"Contains reference to mutex-related activity (API string)","description":"Found reference to API \"ReleaseMutex\" (Indicator: \"ReleaseMutex\"; File: \"madbasic_.bpl\")\n Found reference to API \"CreateMutexA\" (Indicator: \"CreateMutex\"; File: \"madbasic_.bpl\")\n Found reference to API \"ReleaseMutex\" (Indicator: \"ReleaseMutex\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")\n Found reference to API \"CreateMutexExW\" (Indicator: \"CreateMutex\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","description_v2":["Found reference to API \"ReleaseMutex\" (Indicator: \"ReleaseMutex\"; File: \"madbasic_.bpl\")","Found reference to API \"CreateMutexA\" (Indicator: \"CreateMutex\"; File: \"madbasic_.bpl\")","Found reference to API \"ReleaseMutex\" (Indicator: \"ReleaseMutex\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")","Found reference to API \"CreateMutexExW\" (Indicator: \"CreateMutex\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"ReleaseMutex\" (Indicator: \"ReleaseMutex\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"CreateMutexA\" (Indicator: \"CreateMutex\"; File: \"madbasic_.bpl\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"ReleaseMutex\" (Indicator: \"ReleaseMutex\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"CreateMutexExW\" (Indicator: \"CreateMutex\"; Source: \"00000000-00003628.00000000.125470.00049000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"static-18","type":0,"relevance":10,"name":"Matched Compiler/Packer signature","description":"\"madbasic_.bpl\" was detected as \"Morphine v1.2 (DLL)\"","description_v2":["\"madbasic_.bpl\" was detected as \"Morphine v1.2 (DLL)\""],"description_v3":[{"type":"text","value":"\"madbasic_.bpl\" was detected as \"Morphine v1.2 (DLL)\""}],"origin":"Static Parser","attck_id":"T1027.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027/002","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"registry-26","type":3,"relevance":2,"name":"Reads the windows installation language","description":"\"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LANGUAGE\"; Key: \"INSTALLLANGUAGEFALLBACK\")\n \"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LANGUAGE GROUPS\"; Key: \"1\")","description_v2":["\"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LANGUAGE\"; Key: \"INSTALLLANGUAGEFALLBACK\")","\"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LANGUAGE GROUPS\"; Key: \"1\")"],"description_v3":[{"type":"text","value":"\"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LANGUAGE\"; Key: \"INSTALLLANGUAGEFALLBACK\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LANGUAGE GROUPS\"; Key: \"1\")"}],"origin":"Registry Access","attck_id":"T1614.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1614/001","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Reverse Engineering","identifier":"static-6","type":0,"relevance":1,"name":"Section contains high entropy","description":"\"madbasic_.bpl\" has section name .text with entropy \"6.53428825089\"\n \"madbasic_.bpl\" has section name .data with entropy \"6.70478027853\"\n \"madbasic_.bpl\" has section name .reloc with entropy \"6.39861427757\"\n \"madbasic_.bpl\" has section name .rsrc with entropy \"7.67064044564\"","description_v2":["\"madbasic_.bpl\" has section name .text with entropy \"6.53428825089\"","\"madbasic_.bpl\" has section name .data with entropy \"6.70478027853\"","\"madbasic_.bpl\" has section name .reloc with entropy \"6.39861427757\"","\"madbasic_.bpl\" has section name .rsrc with entropy \"7.67064044564\""],"description_v3":[{"type":"text","value":"\"madbasic_.bpl\" has section name .text with entropy \"6.53428825089\""},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" has section name .data with entropy \"6.70478027853\""},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" has section name .reloc with entropy \"6.39861427757\""},{"type":"linebreak"},{"type":"text","value":"\"madbasic_.bpl\" has section name .rsrc with entropy \"7.67064044564\""}],"origin":"Static Parser","attck_id":"T1027.009","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027/009","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"General","identifier":"static-92","type":0,"relevance":5,"name":"PE file has unusual entropy resources","description":"\"madbasic_.bpl\" has resource with unusual entropy \"MAD:7.97132520499\"","description_v2":["\"madbasic_.bpl\" has resource with unusual entropy \"MAD:7.97132520499\""],"description_v3":[{"type":"text","value":"\"madbasic_.bpl\" has resource with unusual entropy \"MAD:7.97132520499\""}],"origin":"Static Parser","attck_id":"T1027.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027/002","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Spyware/Information Retrieval","identifier":"api-40","type":6,"relevance":10,"name":"Calls an API typically used for keylogging","description":"\"rundll32.exe\" called \"GetKeyState\" with parameters {\"nVirtKey\": \"18\"}\n \"rundll32.exe\" called \"GetKeyState\" with parameters {\"nVirtKey\": \"17\"}\n \"rundll32.exe\" called \"GetKeyState\" with parameters {\"nVirtKey\": \"16\"}\n \"rundll32.exe\" called \"GetKeyState\" with parameters {\"nVirtKey\": \"91\"}\n \"rundll32.exe\" called \"GetKeyState\" with parameters {\"nVirtKey\": \"92\"}","description_v2":["\"rundll32.exe\" called \"GetKeyState\" with parameters {\"nVirtKey\": \"18\"}","\"rundll32.exe\" called \"GetKeyState\" with parameters {\"nVirtKey\": \"17\"}","\"rundll32.exe\" called \"GetKeyState\" with parameters {\"nVirtKey\": \"16\"}","\"rundll32.exe\" called \"GetKeyState\" with parameters {\"nVirtKey\": \"91\"}","\"rundll32.exe\" called \"GetKeyState\" with parameters {\"nVirtKey\": \"92\"}"],"description_v3":[{"type":"text","value":"\"rundll32.exe\" called \"GetKeyState\" with parameters {\"nVirtKey\": \"18\"}"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"GetKeyState\" with parameters {\"nVirtKey\": \"17\"}"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"GetKeyState\" with parameters {\"nVirtKey\": \"16\"}"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"GetKeyState\" with parameters {\"nVirtKey\": \"91\"}"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" called \"GetKeyState\" with parameters {\"nVirtKey\": \"92\"}"}],"origin":"API Call","attck_id":"T1056.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1056/001","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"System Security","identifier":"registry-136","type":3,"relevance":3,"name":"Writes registry keys","description":"\"rundll32.exe\" (Access type: \"SETVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\NOTIFICATIONS\\DATA\"; Key: \"418A073AA3BC1C75\"; Value: \"401E0000000000000400040001001C00020000000D78790016DDA4001E8D520021777A00259960002C3D81003E3383004AAA8100560A8500726E4A0075A37E00799C39008106950087DE83009D9D9200A736A800B1CE9800B3F1A200BC6EB400C046AD00C36D8100CF74AA00D3E88D00E1C97700E7997F00EBBF8400F1FC6000F7D36F0006000600000019C398001C4452007140A30091508A00A522A400C45F7F00\")\n \"rundll32.exe\" (Access type: \"SETVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\NOTIFICATIONS\\DATA\"; Key: \"418A073AA3BC1C75\"; Value: \"441E0000000000000400040001002400020000000D78790016DDA4001E8D520021777A00259960002C3D81003E3383004AAA8100560A8500726E4A0075A37E00799C39008106950087DE83008E78A200938661009D9D9200A736A800B1CE9800B3F1A200BC6EB400C046AD00C0CC9900C36D8100CA23B700CC495600CF74AA00CFC29400D3826100D3E88D00E1C97700E7997F00EBBF8400F1FC6000F7125E00F7D36F0006000600000019C398001C4452007140A30091508A00A522A400C45F7F00\")","description_v2":["\"rundll32.exe\" (Access type: \"SETVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\NOTIFICATIONS\\DATA\"; Key: \"418A073AA3BC1C75\"; Value: \"401E0000000000000400040001001C00020000000D78790016DDA4001E8D520021777A00259960002C3D81003E3383004AAA8100560A8500726E4A0075A37E00799C39008106950087DE83009D9D9200A736A800B1CE9800B3F1A200BC6EB400C046AD00C36D8100CF74AA00D3E88D00E1C97700E7997F00EBBF8400F1FC6000F7D36F0006000600000019C398001C4452007140A30091508A00A522A400C45F7F00\")","\"rundll32.exe\" (Access type: \"SETVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\NOTIFICATIONS\\DATA\"; Key: \"418A073AA3BC1C75\"; Value: \"441E0000000000000400040001002400020000000D78790016DDA4001E8D520021777A00259960002C3D81003E3383004AAA8100560A8500726E4A0075A37E00799C39008106950087DE83008E78A200938661009D9D9200A736A800B1CE9800B3F1A200BC6EB400C046AD00C0CC9900C36D8100CA23B700CC495600CF74AA00CFC29400D3826100D3E88D00E1C97700E7997F00EBBF8400F1FC6000F7125E00F7D36F0006000600000019C398001C4452007140A30091508A00A522A400C45F7F00\")"],"description_v3":[{"type":"text","value":"\"rundll32.exe\" (Access type: \"SETVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\NOTIFICATIONS\\DATA\"; Key: \"418A073AA3BC1C75\"; Value: \"401E0000000000000400040001001C00020000000D78790016DDA4001E8D520021777A00259960002C3D81003E3383004AAA8100560A8500726E4A0075A37E00799C39008106950087DE83009D9D9200A736A800B1CE9800B3F1A200BC6EB400C046AD00C36D8100CF74AA00D3E88D00E1C97700E7997F00EBBF8400F1FC6000F7D36F0006000600000019C398001C4452007140A30091508A00A522A400C45F7F00\")"},{"type":"linebreak"},{"type":"text","value":"\"rundll32.exe\" (Access type: \"SETVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\NOTIFICATIONS\\DATA\"; Key: \"418A073AA3BC1C75\"; Value: \"441E0000000000000400040001002400020000000D78790016DDA4001E8D520021777A00259960002C3D81003E3383004AAA8100560A8500726E4A0075A37E00799C39008106950087DE83008E78A200938661009D9D9200A736A800B1CE9800B3F1A200BC6EB400C046AD00C0CC9900C36D8100CA23B700CC495600CF74AA00CFC29400D3826100D3E88D00E1C97700E7997F00EBBF8400F1FC6000F7125E00F7D36F0006000600000019C398001C4452007140A30091508A00A522A400C45F7F00\")"}],"origin":"Registry Access","attck_id":"T1112","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1112","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"static-1","type":0,"relevance":1,"name":"Imports suspicious APIs","description":"GetFileAttributesA\n GetVersionExW\n GetTickCount\n VirtualProtect\n GetVersionExA\n GetFileAttributesW\n GetModuleFileNameA\n LockResource\n DeleteFileA\n MapViewOfFile\n DeleteFileW\n GetProcAddress\n CreateFileMappingW\n GetTempPathA\n GetModuleFileNameW\n GetModuleHandleA\n FindFirstFileA\n GetTempPathW\n CreateFileMappingA\n FindFirstFileW\n WriteFile\n GetModuleHandleW\n LoadLibraryExA\n FindResourceW\n CreateFileW\n CreateFileA\n FindResourceA\n VirtualAlloc\n GetFileSize","description_v2":["GetFileAttributesA","GetVersionExW","GetTickCount","VirtualProtect","GetVersionExA","GetFileAttributesW","GetModuleFileNameA","LockResource","DeleteFileA","MapViewOfFile","DeleteFileW","GetProcAddress","CreateFileMappingW","GetTempPathA","GetModuleFileNameW","GetModuleHandleA","FindFirstFileA","GetTempPathW","CreateFileMappingA","FindFirstFileW","WriteFile","GetModuleHandleW","LoadLibraryExA","FindResourceW","CreateFileW","CreateFileA","FindResourceA","VirtualAlloc","GetFileSize"],"description_v3":[{"type":"text","value":"GetFileAttributesA"},{"type":"linebreak"},{"type":"text","value":"GetVersionExW"},{"type":"linebreak"},{"type":"text","value":"GetTickCount"},{"type":"linebreak"},{"type":"text","value":"VirtualProtect"},{"type":"linebreak"},{"type":"text","value":"GetVersionExA"},{"type":"linebreak"},{"type":"text","value":"GetFileAttributesW"},{"type":"linebreak"},{"type":"text","value":"GetModuleFileNameA"},{"type":"linebreak"},{"type":"text","value":"LockResource"},{"type":"linebreak"},{"type":"text","value":"DeleteFileA"},{"type":"linebreak"},{"type":"text","value":"MapViewOfFile"},{"type":"linebreak"},{"type":"text","value":"DeleteFileW"},{"type":"linebreak"},{"type":"text","value":"GetProcAddress"},{"type":"linebreak"},{"type":"text","value":"CreateFileMappingW"},{"type":"linebreak"},{"type":"text","value":"GetTempPathA"},{"type":"linebreak"},{"type":"text","value":"GetModuleFileNameW"},{"type":"linebreak"},{"type":"text","value":"GetModuleHandleA"},{"type":"linebreak"},{"type":"text","value":"FindFirstFileA"},{"type":"linebreak"},{"type":"text","value":"GetTempPathW"},{"type":"linebreak"},{"type":"text","value":"CreateFileMappingA"},{"type":"linebreak"},{"type":"text","value":"FindFirstFileW"},{"type":"linebreak"},{"type":"text","value":"WriteFile"},{"type":"linebreak"},{"type":"text","value":"GetModuleHandleW"},{"type":"linebreak"},{"type":"text","value":"LoadLibraryExA"},{"type":"linebreak"},{"type":"text","value":"FindResourceW"},{"type":"linebreak"},{"type":"text","value":"CreateFileW"},{"type":"linebreak"},{"type":"text","value":"CreateFileA"},{"type":"linebreak"},{"type":"text","value":"FindResourceA"},{"type":"linebreak"},{"type":"text","value":"VirtualAlloc"},{"type":"linebreak"},{"type":"text","value":"GetFileSize"}],"origin":"Static Parser","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"static-60","type":0,"relevance":10,"name":"PE file contains unusual section name","description":"\"madbasic_.bpl\" has a section named \".itext\"","description_v2":["\"madbasic_.bpl\" has a section named \".itext\""],"description_v3":[{"type":"text","value":"\"madbasic_.bpl\" has a section named \".itext\""}],"origin":"Static Parser","attck_id":"T1027.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027/002","stream_data":null}],"detonation_parameters":{"action_script":"default","experimental_anti_evasion":true,"script_logging":true,"allow_sample_tampering":true,"network_mode":"default","custom_system_date_time":null,"custom_commandline":null,"document_password":null,"document_password_exists":false,"environment_variable":null,"dynamic_analysis_time":180,"comment":null},"falcon_mal_query_results":[],"falcon_intelligence_data":null,"search_tags":[],"execution_mode":"KERNELMODE","monitor_script":"default.au3","monitor_script_description":"Default analysis","windows_version_name":"Windows 10","windows_version_edition":"Professional","windows_version_service_pack":null,"windows_version_version":"10.0 (build 16299)","windows_version_bitness":"64","custom_date_time":null,"sandbox_version":"12.0.0","report_generator_version":null,"signature_engine_version":null,"mitre_version":null,"office_analysis":false,"office_version":null,"incidents":[{"name":"Spyware","details":["Found a string that may be used as part of an injection method"]},{"name":"Fingerprint","details":["Queries process information"]}],"icon":"$62","visualization":"$63","classification":["94.3% (.BPL) Borland Package Library","2.1% (.DLL) Win32 Dynamic Link Library (generic)","1.4% (.EXE) Win32 Executable (generic)","0.6% (.EXE) OS/2 Executable (generic)","0.6% (.EXE) Generic Win/DOS Executable"],"dns_requests":[],"contacted_hosts":[],"contacted_countries":{"countries":[],"coordinates":[]},"port_infos":[],"extracted_strings":{"all":[{"value":"ISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0+P0BhYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5eltcXV5fYGFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6e3x9fg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"IW1hZEdyYXBoaWNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Ijw7PSEhJXsxOTk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMQ==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTA=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTE=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTI=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTM=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTQ=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTU=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTY=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTc=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTg=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTk=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMg==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjA=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjE=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjI=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjM=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjQ=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjU=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjY=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjc=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjg=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjk=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMw==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMzA=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMzE=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMzI=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMzM=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMzQ=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMzU=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjNA==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjNQ==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjNg==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjNw==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjOA==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjOQ==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkRpZ2lDZXJ0IEVWIENvZGUgU2lnbmluZyBDQSAoU0hBMik=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"IkRpZ2lDZXJ0IEVWIENvZGUgU2lnbmluZyBDQSAoU0hBMikw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"IkRpZ2lDZXJ0IEhpZ2ggQXNzdXJhbmNlIEVWIFJvb3QgQ0Ew","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"JzAzMEAwVDBgMGQwcDB0MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"KERpZ2lDZXJ0IFNIQTIgQXNzdXJlZCBJRCBUaW1lc3RhbXBpbmcgQ0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"KERpZ2lDZXJ0IFNIQTIgQXNzdXJlZCBJRCBUaW1lc3RhbXBpbmcgQ0Ew","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"LGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWFzc3VyZWQtdHMuY3JsMDI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"LGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWFzc3VyZWQtdHMuY3JsMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"LWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9FVkNvZGVTaWduaW5nLWcxLmNybDAz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"LWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9FVkNvZGVTaWduaW5nLWcxLmNybDBL","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Lmh0dHA6Ly93d3cuZGlnaWNlcnQuY29tL3NzbC1jcHMtcmVwb3NpdG9yeS5odG0w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"LzEoMCYwJDAi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MCAwJDAoMCwwMDA0MDgwPDBAMEQwSDBMMFAwVDBYMFwwYDBkMGgwbDBwMHQweDB8MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MCIwKjAyMDowQjBKMFIwWjBiMGowcjB6MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MCYwLjA7MEcwVTBmMG4wdjB+MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MC8wQDBQMHQw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MDYxMTEwMDAwMDAwWg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MDswSDBdMGow","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MEgzTDNQM1QzWDNcM2AzZDNoM2wzcDN0M3gzfDM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MSAxJDEoMSwxMDE0MTgxPDFAMUQxSDFMMVAxVDFYMVwxYDFkMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MSAxJDEwMTQxWTFhMW0x","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MSIxKjEyMToxQjFKMVIxWjFiMWoxcjF6MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MSgxMDE0MTgxPDFAMUQxSDFMMVAxVDFYMVwxYDFkMWgxbDFwMXQxeDF8MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MTIwNDE4MTIwMDAwWg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MTYwMTA3MTIwMDAwWg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MTkyXzNjM2czazNvM3MzdzN7Mw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MUgxWDFgMWwxdDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9FVkNvZGVTaWduaW5nU0hBMi1nMS5jcmwwNw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9FVkNvZGVTaWduaW5nU0hBMi1nMS5jcmwwSw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MiIyKjIyMjoyQjJKMlIyWjJiMmoycjJ6Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MioyQTJPMlwydDJ5Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjAxMDE5MDAwMDAwWg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjAyMjAxMTIwMjMxMTda","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjAyMjAxMTIwMjMxMjJa","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjEwMTAxMDAwMDAwWg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjIwMTEyMDIzMTE3WjAr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjIwMTEyMDIzMTIyWjAr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjMxMDIyMjM1OTU5WjA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjQ0ODQ8NEA0RDRINEw0UDRUNFg0XDRgNGQ0aDRsNHA0dDR4NHw0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjcwNDE4MTIwMDAwWjBlMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjcwNDE4MTIwMDAwWjBsMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Mm4zZDRfNSQ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MyIzKjMyMzozQjNKM1IzWjNiM2ozcjN6Mw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MyszODNNM1oz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MzEwMTA2MDAwMDAwWjBIMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MzEwMTA3MTIwMDAwWjByMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MzExMTEwMDAwMDAwWjBsMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"M20zcTN1M3kzfTM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NCA0JDQoNCw0MDQ0NDg0PDRANEQ0XDRoNGw0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NCA0JDQoNCw0MDQ0NDg0PDRANEQ0SDRMNFA0VDR8NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NCE0LDRCNE80aTRuNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NCQ0NDRENFQ0ZDR0NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NCg1JDwtPGA8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NC80NzRONGw0dDQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NDE4QTA3M0FBM0JDMUM3NQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"NDY4Njw2QDZENkg2TDZQNlQ2WDZcNmA2ZDZoNg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwUA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NSA1KDVCNUo1XDV0NQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NSE1LDVCNUo1UjVaNWI1ajVyNQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NSM1MTU8NUw1VzVpNXU1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NSg1NDU4NUA1VDVcNWA1ZDVoNWw1cDV0NXg1fDU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NSw1QTVNNVY1XjVrNXs1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NSw1RzVUNXs1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NUM1XzUzN2c3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NiI2KjYyNjo2QjZKNlI2WjZiNmo2cjZ6Ng==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NiI2NDZBNnc2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NiM2MjY+NlM2XzZqNg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NiM2ODZFNlo2ZzY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Nko3ZDdtN3I3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NnZjbDEyMC5icGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NyM3RzdaN2Y3bzd1Nw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NyY3Ljc2Nz43RjdON1Y3XjdmN243djd+Nw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Nyk3MDc/N003WzdnN2w3cTc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"N2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcnQw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"N2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEVWQ29kZVNpZ25pbmdDQS5jcnQw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"N1g4XDhgOGQ4aDhsOHA4dDh4OHw4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OCE5LzlcOWc5cjl9OQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OCY4Ljg2OD44RjhOOFY4XjhmOG44djh+OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OCo4Lzg6OE04UjhdOGU4ajh1OH44","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OCs5Uzk+PHo8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OSM5Kzk+OUw5Yzk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OSQ5ODlAOUQ5SDlMOVA5VDlYOVw5YDlkOWg5bDlwOXQ5eDk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OSc5MjlZOW05","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OiY6LDpJOlA6aDpsOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Ois6Mzo7Okg6bTp2Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OjFGMU4xWDFlMXAx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OjM6RDpVOls6YzppOng6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OkFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Omh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEhpZ2hBc3N1cmFuY2VFVlJvb3RDQS5jcmwwQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Omh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEhpZ2hBc3N1cmFuY2VFVlJvb3RDQS5jcmww","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Om47WD1mPXE9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OlRDb250cmlidXRvclBpeGVscy46MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OlRJQmFzaWMuOjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OlRJQ3VzdG9tQmFzaWNMaXN0Ljox","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OlRJQ3VzdG9tQmFzaWNMaXN0Ljoy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OlRJQ3VzdG9tQmFzaWNMaXN0Ljoz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OlRJQ3VzdG9tQmFzaWNMaXN0Ljo0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OyExOTl7MTk5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OyU7RTtVO3s7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OzAhOCYyezE5OQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OzE7QDtcO2w7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Oz87SztYO2o7cjt6Ow==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"O0I8aTx9PHs9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PCA8JDwoPCw8MDxIPFQ8WDxgPHQ8fDw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PCE8KTw0PEg8TjxWPGE8aTx0PA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PDQ8RDxjPHA8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PDsxOiImdTAnJzondTsgODcwJw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PEI8ZTxJPmw+dT4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PEg8XTxiPHI8eDw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEVWQ29kZVNpZ25pbmdDQS1TSEEyLmNydDA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PSA9JD0oPSw9MD00PTg9PD1APUQ9SD1MPVA9VD1YPVw9YD1kPWg9bD1wPXQ9eD18PQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PSA9JD0oPSw9MD00PUw9WD1cPXg9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PSc9Nj08PUQ9Tz1XPWI9cz15PQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PTM9Oz1IPWI9aj14PQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PTU9Uj1wPXk9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PTw+ST5iPmg+","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEhpZ2hBc3N1cmFuY2VFVlJvb3RDQS5jcnQw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PiA+JD4oPiw+MD40Pjg+PD5APkQ+SD5MPlA+VD5YPlw+YD5kPmg+bD5wPnQ+eD4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PiA+Lj5EPlY+Wj5xPns+","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PiQ+KD4sPjA+ND44Pjw+QD5EPkg+TD5QPlQ+WD5cPmA+ZD5oPmw+cD50Png+fD4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"P0g/Uz9iP20/fD8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"P2hmZmZmaDMz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"P2hVVVVVaFVV","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"P8Ovwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxMVN5c3RlbUBCeXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxMVN5c3RlbUBDaGFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxMVN5c3RlbUBXb3Jk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxMk1hZHRvb2xzQFRPUw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxM1N5c3RlbUBzdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNE1hZGJhc2ljQElMaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNFN5c3RlbUBUT2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNU1hZGJhc2ljQElCYXNpYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNU1hZGJhc2ljQFRJTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNU1hZHR5cGVzQFRTQnl0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNU1hZHR5cGVzQFRTQ2hhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNVN5c3RlbUBTaG9ydEludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNk1hZGJhc2ljQFRJQmFzaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNk1hZHRvb2xzQFRPc0VudW0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNk1hZHR5cGVzQFREQUJ5dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNk1hZHR5cGVzQFREQUNoYXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNk1hZHR5cGVzQFREQVdvcmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxN01hZGJhc2ljQFREQUJhc2lj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxN01hZHR5cGVzQFRBU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxN01hZHR5cGVzQFREQUludDY0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxN01hZHR5cGVzQFRFeHRCb29s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxN1N5c3RlbUBBbnNpU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxN1N5c3RlbUBJSW50ZXJmYWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxN1N5c3RlbUBXaWRlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxOE1hZHR5cGVzQFREQVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxOE1hZHR5cGVzQFRTQm9vbGVhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxOE1hZHR5cGVzQFRTRXh0Qm9vbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxOU1hZGxpc3RzQElCYXNpY0xpc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxOU1hZHR5cGVzQFRBSVVua25vd24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxOU1hZHR5cGVzQFREQUJvb2xlYW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxOU1hZHR5cGVzQFREQUV4dEJvb2w=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxOU1hZHR5cGVzQFREQUludGVnZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxOU1hZHR5cGVzQFREQVBvaW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyME1hZGJhc2ljQF9USUJhc2ljQF8x","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyME1hZGJhc2ljQFRDaGFuZ2VUeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyME1hZHR5cGVzQFREQUFuc2lDaGFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyME1hZHR5cGVzQFREQUNhcmRpbmFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyME1hZHR5cGVzQFREQUlVbmtub3du","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyME1hZHR5cGVzQFREQVNob3J0SW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyME1hZHR5cGVzQFREQVNtYWxsSW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyME1hZHR5cGVzQFREQVdpZGVDaGFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyMU1hZGxpc3RzQElQb2ludGVyTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyMU1hZHR5cGVzQE1hZEV4Y2VwdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyMU1hZHR5cGVzQFRBQW5zaVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyMU1hZHR5cGVzQFRBV2lkZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyMU1hZHR5cGVzQFREQU5hdGl2ZUludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyMk1hZHRvb2xzQFRNc2dIYW5kbGVyT08=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyMk1hZHR5cGVzQFREQUFuc2lTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyMk1hZHR5cGVzQFREQU5hdGl2ZVVJbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyMk1hZHR5cGVzQFREQVdpZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyM01hZGxpc3RzQElJbnRlcmZhY2VMaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyNE1hZGdyYXBoaWNzQFRHcmF5UGVyY2VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyNE1hZHR5cGVzQFRBVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyNU1hZGJhc2ljQElDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyNU1hZGJhc2ljQElDdXN0b21CYXNpY0xpc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyNU1hZHR5cGVzQFREQVVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyNk1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyN01hZGJhc2ljQFREYXRhRGVzdHJveVByb2NPTw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyN01hZGdyYXBoaWNzQFRTdHJldGNoUXVhbGl0eQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyOE1hZGJhc2ljQElCYXNpY0xpc3RTZWxlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyOE1hZGJhc2ljQFRJTGlzdENoYW5nZUV2ZW50T08=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyOU1hZGJhc2ljQFRJQmFzaWNMaXN0U2VsZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQzME1hZGJhc2ljQF9USUN1c3RvbUJhc2ljTGlzdEBfMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQzME1hZGJhc2ljQF9USUN1c3RvbUJhc2ljTGlzdEBfMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQzME1hZGJhc2ljQF9USUN1c3RvbUJhc2ljTGlzdEBfMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQzME1hZGJhc2ljQF9USUN1c3RvbUJhc2ljTGlzdEBfNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQ1SW50NjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQ2RG91Ymxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQ3Qm9vbGVhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQ3SW50ZWdlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQ4QW5zaUNoYXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQ4Q2FyZGluYWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQ4U21hbGxJbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QENsYXNzZXNARmluYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QENsYXNzZXNAaW5pdGlhbGl6YXRpb24kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QENsYXNzZXNAUmVjdCRxcXJpaWlp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdldFBhY2thZ2VJbmZvVGFibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRCaXRtYXBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRCaXRtYXBAJGJjdHIkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRCaXRtYXBAR2V0Q2FudmFzJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRCaXRtYXBAR2V0UGl4ZWxGb3JtYXQkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRCaXRtYXBAR2V0U2NhbmxpbmUkcXFyaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRCaXRtYXBAU2V0UGl4ZWxGb3JtYXQkcXFyMjFHcmFwaGljc0BUUGl4ZWxGb3JtYXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRDYW52YXNAR2V0SGFuZGxlJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRDYW52YXNAU3RyZXRjaERyYXckcXFycngxMVR5cGVzQFRSZWN0cDE3R3JhcGhpY3NAVEdyYXBoaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEluaWZpbGVzQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEluaWZpbGVzQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9BbUludmFsaWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9JbmRleE91dE9mUmFuZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9JbnZhbGlkQ2xhc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9JbnZhbGlkSW5kZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9TZWN0aW9uQmxvY2tlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9TZWN0aW9uTGVhdmVFcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9Vbmtub3du","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQE5ld0NyaXRpY2FsU2VjdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAJGJjdHIkcXFyb3VpeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAJGJkdHIkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAX0FkZFJlZiRxcXN2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAX1JlbGVhc2UkcXFzdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAQWRkUGFyZW50JHFxcnAyNk1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAQWZ0ZXJDb25zdHJ1Y3Rpb24kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAQmVmb3JlRGVzdHJ1Y3Rpb24kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAQ2hlY2tWYWxpZCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNARGVsUGFyZW50JHFxcnAyNk1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0Q2hlY2tlZCRxcXJ4NTNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MjVNYWRiYXNpY0BJQ3VzdG9tQmFzaWNMaXN0JQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0RGF0YSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0Rm9jdXNlZCRxcXJ4NTNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MjVNYWRiYXNpY0BJQ3VzdG9tQmFzaWNMaXN0JQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0SW5kZXgkcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0TGFzdENoYW5nZVR5cGUkcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0TGFzdEVycm9yTm8kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0TGFzdEVycm9yU3RyJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0T2xkSW5kZXgkcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0U2VsZWN0ZWQkcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0U3RyQnVmJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0U3RyQnVmQSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0U3RyQnVmVyRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNASXNWYWxpZCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNATmV3SW5zdGFuY2UkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAUXVlcnlJbnRlcmZhY2UkcXFzcng1X0dVSURwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2VsZkFzVE9iamVjdCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0Q2hlY2tlZCRxcXJ4NTNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MjVNYWRiYXNpY0BJQ3VzdG9tQmFzaWNMaXN0JTE3TWFkdHlwZXNAVEV4dEJvb2w=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0RGF0YSRxcXJwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0RGF0YSRxcXJwdnBxcXJycHYkdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0RGF0YSRxcXJwdnlucHFxcnJwdiR2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0Rm9jdXNlZCRxcXJ4NTNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MjVNYWRiYXNpY0BJQ3VzdG9tQmFzaWNMaXN0JW8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0TGFzdENoYW5nZVR5cGUkcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCUyME1hZGJhc2ljQFRDaGFuZ2VUeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0TGFzdEVycm9yJHFxcnVpeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0TGFzdEVycm9yTm8kcXFydWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0TGFzdEVycm9yU3RyJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0U2VsZWN0ZWQkcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCVv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0U3RyQnVmJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0U3RyQnVmJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0U3RyQnVmQSRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0U3RyQnVmVyRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU3VjY2VzcyRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU3VwcG9ydHMkcXFycng1X0dVSUQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNMaXN0U2VsZWN0aW9uQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNMaXN0U2VsZWN0aW9uQCRiY3RyJHFxcm91aXgyMFN5c3RlbUBVbmljb2RlU3RyaW5neDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCVv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNMaXN0U2VsZWN0aW9uQCRiZHRyJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNMaXN0U2VsZWN0aW9uQEdldFBhcmVudExpc3QkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNMaXN0U2VsZWN0aW9uQFBhcmVudExpc3RDaGFuZ2VkJHFxcng1M1N5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQyNU1hZGJhc2ljQElDdXN0b21CYXNpY0xpc3QleDQzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE1TWFkYmFzaWNASUJhc2ljJW8yME1hZGJhc2ljQFRDaGFuZ2VUeXBlaWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QCRiZHRyJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEFkZEl0ZW0kcXFyeDQzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE1TWFkYmFzaWNASUJhc2ljJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEFkZEl0ZW1zJHFxcnB4NDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMleGk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEJhc2ljSXRlbSRxcXJp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEJlZ2luUmVmcmVzaCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QENoYW5nZSRxcXJ4NDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMlbzIwTWFkYmFzaWNAVENoYW5nZVR5cGVpaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QERlbGV0ZUl0ZW0kcXFyaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEVuZFJlZnJlc2gkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEdldFNvcnREb3duJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEdldFNvcnRJbmZvJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEdldFNvcnRQYXJhbXMkcXFycnBxcXJ4NDJTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTRNYWRiYXNpY0BJTGlzdCV4NDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMldDJpJGlyb3Jp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEdldFNvcnRQcm9jJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEluc2VydEl0ZW0kcXFyeDQzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE1TWFkYmFzaWNASUJhc2ljJWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFBhY2skcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFJlZ2lzdGVyQ2hhbmdlRXZlbnQkcXFycHFxcng1M1N5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQyNU1hZGJhc2ljQElDdXN0b21CYXNpY0xpc3QleDQzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE1TWFkYmFzaWNASUJhc2ljJW8yME1hZGJhc2ljQFRDaGFuZ2VUeXBlaWkkdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFJlZ2lzdGVyQ2hhbmdlRXZlbnQkcXFyeW5wcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCV4NDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMlbzIwTWFkYmFzaWNAVENoYW5nZVR5cGVpaSR2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFNldENhcGFjaXR5JHFxcmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFNldFNvcnREb3duJHFxcm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFNldFNvcnRJbmZvJHFxcmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFNldFNvcnRQYXJhbXMkcXFycHFxcng0MlN5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQxNE1hZGJhc2ljQElMaXN0JXg0M1N5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQxNU1hZGJhc2ljQElCYXNpYyV0MmkkaW9p","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFNldFNvcnRQcm9jJHFxcnBxcXJ4NDJTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTRNYWRiYXNpY0BJTGlzdCV4NDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMldDJpJGk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFNvcnRJdGVtJHFxcmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFVucmVnaXN0ZXJDaGFuZ2VFdmVudCRxcXJwcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCV4NDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMlbzIwTWFkYmFzaWNAVENoYW5nZVR5cGVpaSR2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFVucmVnaXN0ZXJDaGFuZ2VFdmVudCRxcXJ5bnBxcXJ4NTNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MjVNYWRiYXNpY0BJQ3VzdG9tQmFzaWNMaXN0JXg0M1N5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQxNU1hZGJhc2ljQElCYXNpYyVvMjBNYWRiYXNpY0BUQ2hhbmdlVHlwZWlpJHY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEAkYmN0ciRxcXJvdWl4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEAkYmR0ciRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBDbGVhciRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBHZXRDYXBhY2l0eSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBHZXRGb2N1c2VkSXRlbSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBHZXRJdGVtQ291bnQkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBHZXRMYXN0Rm9jdXNlZEl0ZW0kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBHZXRTZWxlY3RlZENvdW50JHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBHcm93JHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBMb2NrJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBRdWlja1NvcnQkcXFycHZ0MWlpdDFvaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBTZXRMYXN0Rm9jdXNlZEl0ZW0kcXFyNDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBVbmxvY2skcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljX0BAR2V0UGFja2FnZUluZm9UYWJsZSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljX0BAUGFja2FnZUxvYWQkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljX0BAUGFja2FnZVVubG9hZCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljX0Bpbml0aWFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY29kZSRxcXJwdmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY29kZSRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY29kZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY29kZVckcXFycHZp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY29kZVckcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY3J5cHQkcXFycHZ1aXgyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJWo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY3J5cHQkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmd4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY3J5cHQkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQleDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQlag==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY3J5cHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY3J5cHRX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY29kZSRxcXJwdmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY29kZSRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY29kZSRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY29kZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY29kZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY3J5cHQkcXFycHZ1aXgyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJWo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY3J5cHQkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmd4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY3J5cHQkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQleDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQlag==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY3J5cHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY3J5cHRX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QE9sZERlY3J5cHQkcXFycHZ1aXgyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QE9sZERlY3J5cHQkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQleDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QE9sZEVuY3J5cHQkcXFycHZ1aXgyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QE9sZEVuY3J5cHQkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQleDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQEFscGhhQmxlbmQkcXFycDE2R3JhcGhpY3NAVEJpdG1hcHQxdDF1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQEFscGhhQmxlbmQkcXFycDE2R3JhcGhpY3NAVEJpdG1hcHQxdWl0MWlp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQERyYXckcXFycDE2R3JhcGhpY3NAVEJpdG1hcHQxdDFpaWlpMjRNYWRncmFwaGljc0BUR3JheVBlcmNlbnR1aTI3TWFkZ3JhcGhpY3NAVFN0cmV0Y2hRdWFsaXR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQERyYXckcXFydWl1aXAxNkdyYXBoaWNzQFRCaXRtYXBpaWlpMjRNYWRncmFwaGljc0BUR3JheVBlcmNlbnR1aTI3TWFkZ3JhcGhpY3NAVFN0cmV0Y2hRdWFsaXR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQEdyYXlTY2FsZSRxcXJwMTZHcmFwaGljc0BUQml0bWFwMjRNYWRncmFwaGljc0BUR3JheVBlcmNlbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQFN0cmV0Y2hCaXRtYXAkcXFycDE2R3JhcGhpY3NAVEJpdG1hcHQxaWkyN01hZGdyYXBoaWNzQFRTdHJldGNoUXVhbGl0eQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQFN0cmV0Y2hCaXRtYXAkcXFycDE2R3JhcGhpY3NAVEJpdG1hcHQxdDF0MTI3TWFkZ3JhcGhpY3NAVFN0cmV0Y2hRdWFsaXR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGxpc3RzQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGxpc3RzQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGxpc3RzQE5ld0Jhc2ljTGlzdCRxcXJweDQzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE1TWFkYmFzaWNASUJhc2ljJXhp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGxpc3RzQE5ld0Jhc2ljTGlzdCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGxpc3RzQE5ld0ludGVyZmFjZUxpc3QkcXFycHg0NVN5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQxN1N5c3RlbUBJSW50ZXJmYWNlJXhp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGxpc3RzQE5ld0ludGVyZmFjZUxpc3QkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGxpc3RzQE5ld1BvaW50ZXJMaXN0JHFxcnB4cHZ4aXBxcXJycHYkdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGxpc3RzQE5ld1BvaW50ZXJMaXN0JHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BCZWdpblVwZGF0ZVJlc291cmNlRXhXJHFxc3VpcDlfRklMRVRJTUVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BCZWdpblVwZGF0ZVJlc291cmNlVyRxcXNwYmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BEZWxldGVJY29uR3JvdXBSZXNvdXJjZVckcXFzdWlwYnVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BEb250U2hyaW5rUmVzb3VyY2VTZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BFbmRVcGRhdGVSZXNvdXJjZVckcXFzdWlp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BGaW5hbGl6YXRpb24kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BHZXRJY29uR3JvdXBSZXNvdXJjZVckcXFzdWlwYnVzcnAxN01hZHJlc0BUSWNvbkdyb3Vw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BHZXRSZXNvdXJjZVckcXFzdWlwYnQydXNycHZydWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0Bpbml0aWFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BMb2FkQml0bWFwUmVzb3VyY2VXJHFxc3VpcGJ1c3Qy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BMb2FkSWNvbkdyb3VwUmVzb3VyY2VXJHFxc3VpcGJ1c3Qy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BTYXZlQml0bWFwUmVzb3VyY2VXJHFxc3VpcGJ1c3Qy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BTYXZlSWNvbkdyb3VwUmVzb3VyY2VXJHFxc3VpcGJ1c3Qy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BVcGRhdGVSZXNvdXJjZVckcXFzdWlwYnQydXNwdnVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQW5zaVRvV2lkZUV4JHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJW8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQm9vbGVhblRvQ2hhciRxcXJv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQm9vbGVhblRvQ2hhckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQm9vbGVhblRvQ2hhclckcXFybw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ050RGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVN0ciRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Qx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVN0ciRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVN0ckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVN0clc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVRleHQkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVRleHQkcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQldDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVRleHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVRleHRX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29weVIkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29weVIkcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQldWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29weVJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29weVJX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARGVjb2RlVXRmOCRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARGVjcnlwdFN0ciRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARGVsZXRlUiRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Vp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARGVsZXRlUiRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARGVsZXRlUkE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARGVsZXRlUlc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARW5jb2RlVXRmOCRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARXJyb3JDb2RlVG9TdHIkcXFydWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARXJyb3JDb2RlVG9TdHJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARXJyb3JDb2RlVG9TdHJXJHFxcnVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARXh0cmFjdEZpbGVEcml2ZVckcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARXh0cmFjdEZpbGVFeHRXJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARXh0cmFjdEZpbGVOYW1lVyRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARXh0cmFjdEZpbGVQYXRoVyRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARmlsZU1hdGNoJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5ndDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARmlsZU1hdGNoJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXQx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARmlsZU1hdGNoQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARmlsZU1hdGNoVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARmlsbFN0ciRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ2li","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARmlsbFN0ciRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVpYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARmlsbFN0ckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARmlsbFN0clc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARmluYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARm9ybWF0U3ViU3RycyRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARm9ybWF0U3ViU3RycyRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARm9ybWF0U3ViU3Ryc0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARm9ybWF0U3ViU3Ryc1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAaW5pdGlhbGl6YXRpb24kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50ZXJuYWxTdHJNYXRjaFckcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd0MW8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeCRxcXJpaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeCRxcXJqaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeCRxcXJ1aWlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeEEkcXFyaWlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeEEkcXFyamlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeEEkcXFydWlpYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeFckcXFyaWli","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeFckcXFyamli","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeFckcXFydWlpYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9TdHJFeCRxcXJpaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9TdHJFeCRxcXJqaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9TdHJFeCRxcXJ1aWlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9TdHJFeEEkcXFyaWlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9TdHJFeEEkcXFyamlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9TdHJFeEEkcXFydWlpYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9TdHJFeFckcXFyaWli","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9TdHJFeFckcXFyamli","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9TdHJFeFckcXFydWlpYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASXNUZXh0RXF1YWwkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASXNUZXh0RXF1YWwkcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQldDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASXNUZXh0RXF1YWxB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASXNUZXh0RXF1YWxX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASXNWYWxpZElkZW50VyRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2VlcCRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3VpdWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2VlcCRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV1aXVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2VlcEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2VlcFIkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmd1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2VlcFIkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQldWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2VlcFJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2VlcFJX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2VlcFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbENoYXIkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmdi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbENoYXIkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQlYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbENoYXJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbENoYXJzJHFxcnIyMFN5c3RlbUBVbmljb2RlU3RyaW5ncngyOVN5c3RlbUAlU2V0JHRjJGl1YyQwJGl1YyQyNTUl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbENoYXJzJHFxcnIyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXJ4MjlTeXN0ZW1AJVNldCR0YyRpdWMkMCRpdWMkMjU1JQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbENoYXJzQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbENoYXJzVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbENoYXJX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbFN0ciRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3gyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbFN0ciRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbFN0ckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbFN0clc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATG93Q2hhciRxcXJ4Yg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATG93Q2hhciRxcXJ4Yw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATG93Q2hhckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATG93Q2hhclc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATG93U3RyJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATG93U3RyJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATG93U3RyQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATG93U3RyVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATXNUb1N0ciRxcXJ1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATXNUb1N0ckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATXNUb1N0clckcXFydWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zQ2hhcnMkcXFycngyOVN5c3RlbUAlU2V0JHRjJGl1YyQwJGl1YyQyNTUleDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd1aXVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zQ2hhcnMkcXFycngyOVN5c3RlbUAlU2V0JHRjJGl1YyQwJGl1YyQyNTUleDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQldWl1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zQ2hhcnNB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zQ2hhcnNX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zTm90Q2hhcnNXJHFxcnJ4MjlTeXN0ZW1AJVNldCR0YyRpdWMkMCRpdWMkMjU1JXgyMFN5c3RlbUBVbmljb2RlU3RyaW5ndWl1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zUENoYXIkcXFycGJ0MXVpdWlvdWl1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zUENoYXIkcXFycGN0MXVpdWlvdWl1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zUENoYXJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zUENoYXJX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zU3RyJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5ndDF1aXVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zU3RyJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXQxdWl1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zU3RyQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zU3RySXMxJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5ndDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zU3RySXMxJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXQx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zU3RySXMxQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zU3RySXMxVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zU3RyVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dCRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3QxdWl1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dCRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV0MXVpdWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dElzMSRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Qx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dElzMSRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dElzMUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dElzMVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVN0ciRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3gyMFN5c3RlbUBVbmljb2RlU3RyaW5ndDJv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVN0ciRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV0Mm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVN0ckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVN0clc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVRleHQkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmd4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Qybw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVRleHQkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQleDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQldDJv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVRleHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVRleHRX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0RGVsZXRlJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5ndWl1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0RGVsZXRlJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXVpdWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0RGVsZXRlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0RGVsZXRlUiRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Vp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0RGVsZXRlUiRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0RGVsZXRlUkE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0RGVsZXRlUlc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0RGVsZXRlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0VHJpbVN0ciRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0VHJpbVN0ciRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0VHJpbVN0ckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0VHJpbVN0clc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU2l6ZVRvU3RyJHFxcmo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU2l6ZVRvU3RyQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU2l6ZVRvU3RyVyRxcXJq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyTWF0Y2gkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyTWF0Y2gkcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQldDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyTWF0Y2hB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyTWF0Y2hFeCRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyTWF0Y2hFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyTWF0Y2hX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyVG9JbnRFeCRxcXJvcGJp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyVG9JbnRFeCRxcXJvcGNp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyVG9JbnRFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyVG9JbnRFeFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5ndWlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXVpYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyQ291bnQkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmdj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyQ291bnQkcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQlYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyQ291bnRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyQ291bnRX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyRXhpc3RzJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5ndDFj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyRXhpc3RzJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXQxYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyRXhpc3RzQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyRXhpc3RzVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViVGV4dEV4aXN0cyRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3QxYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViVGV4dEV4aXN0cyRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV0MWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViVGV4dEV4aXN0c0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViVGV4dEV4aXN0c1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVGV4dE1hdGNoJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5ndDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVGV4dE1hdGNoJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXQx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVGV4dE1hdGNoQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVGV4dE1hdGNoRXgkcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQldDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVGV4dE1hdGNoRXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVGV4dE1hdGNoVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVHJpbVN0ciRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVHJpbVN0ciRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVHJpbVN0ckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVHJpbVN0clc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVXBDaGFyJHFxcnhi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVXBDaGFyJHFxcnhj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVXBDaGFyQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVXBDaGFyVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVXBTdHIkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVXBTdHIkcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVXBTdHJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVXBTdHJX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAV2lkZVRvQW5zaUV4JHFxcnBi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEFkZE1zZ0hhbmRsZXIkcXFycHFxcnA2SFdORF9fdWlpaXJpJHZ1aXVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEFkZE1zZ0hhbmRsZXIkcXFyeW5wcXFycDZIV05EX191aWlpcmkkdnVpdWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQENoZWNrUHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQENPc0Rlc2Ny","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQERlbE1zZ0hhbmRsZXIkcXFycHFxcnA2SFdORF9fdWlpaXJpJHZ1aXVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQERlbE1zZ0hhbmRsZXIkcXFyeW5wcXFycDZIV05EX191aWlpcmkkdnVpdWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEZpbGVWZXJzaW9uVG9TdHIkcXFyag==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEZpbGVWZXJzaW9uVG9TdHJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEZpbGVWZXJzaW9uVG9TdHJXJHFxcmo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEZpbmRNb2R1bGUkcXFycHZydWlyMjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEZpbmRNb2R1bGUkcXFycHZydWlyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEZpbmRNb2R1bGVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEZpbmRNb2R1bGVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uU3RyJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uU3RyJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uU3RyQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uU3RyVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZyZWVTeXN0ZW1SZXNvdXJjZXMkcXFydXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlRXhwb3J0RGlyZWN0b3J5JHFxcnVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlSW1wb3J0RGlyZWN0b3J5JHFxcnVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlTnRIZWFkZXJzJHFxcnVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlUHJvY0FkZHJlc3MkcXFydWlp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlUHJvY0FkZHJlc3MkcXFydWl4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlUHJvY05hbWUkcXFydWlwdm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlUHJvY05hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlUHJvY05hbWVXJHFxcnVpcHZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldExvbmdGaWxlTmFtZSRxcXIyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldExvbmdGaWxlTmFtZSRxcXIyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldExvbmdGaWxlTmFtZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldExvbmdGaWxlTmFtZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldFNob3J0RmlsZU5hbWUkcXFyMjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldFNob3J0RmlsZU5hbWUkcXFyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldFNob3J0RmlsZU5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldFNob3J0RmlsZU5hbWVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldFNpemVPZkltYWdlJHFxcnAxN19JTUFHRV9OVF9IRUFERVJT","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEhpZGVMZWFrXw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEluaXRUcnlFeGNlcHRGaW5hbGx5JHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQElzNjRiaXRNb2R1bGUkcXFzcGI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQElzQmFkUmVhZFB0cjIkcXFycHZ1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQElzQmFkV3JpdGVQdHIyJHFxcnB2dWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQElzV2luZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQE1ldGhvZFRvUHJvY2VkdXJlJHFxcnAxNFN5c3RlbUBUT2JqZWN0cHZp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQE1ldGhvZFRvUHJvY2VkdXJlJHFxcnJ4MTZNYWR0eXBlc0BUTWV0aG9kaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQE1zZ0hhbmRsZXJXaW5kb3ckcXFydWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQE5lZWRNb2R1bGVGaWxlTWFwJHFxcnVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQE5lZWRNb2R1bGVGaWxlTWFwRXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQE9TJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQFByb2NlZHVyZVRvTWV0aG9kJHFxcnAxNFN5c3RlbUBUT2JqZWN0cHY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQFJlc1RvU3RyJHFxcnVpcGJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQFRpY2tEaWYkcXFydWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQFVubWFuZ2xlQSRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQFVubWFuZ2xlVyRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Qx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQFZpcnR1YWxUb1JhdyRxcXJwMTdfSU1BR0VfTlRfSEVBREVSU3Vp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHR5cGVzQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHR5cGVzQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHR5cGVzQE1hZEV4Y2VwdGlvbkA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHR5cGVzQE1hZEV4Y2VwdGlvbkAkYmR0ciRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHR5cGVzQE1hZEV4Y2VwdGlvbkBDbGVhblVwU3RhY2tJbmZvUHJvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHR5cGVzQE1hZEV4Y2VwdGlvbkBDcmVhdGUkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBDb21wcmVzcyRxcXJwdnQxaWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBDb21wcmVzcyRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Qxbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBDb21wcmVzcyRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBGaW5hbGl6YXRpb24kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBHZXRDb21wcmVzc2VkRmlsZUluZm8kcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmdyanJ1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBHZXRVbmNvbXByZXNzZWRGaWxlSW5mbyRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3JqcnVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBpbml0aWFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBJc0NvbXByZXNzZWRGaWxlRXF1YWwkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBVbmNvbXByZXNzJHFxcnB2dDFpaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBVbmNvbXByZXNzJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5ndDFqdWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBVbmNvbXByZXNzJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBVcGRhdGVDcmMzMiRxcXJ1aXB4dmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBaaXAkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmdweDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd4aXg0NVN5c3RlbUAlRHluYW1pY0FycmF5JHQyMFN5c3RlbUBVbmljb2RlU3RyaW5nJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hdGhAQ2VpbCRxcXJ4Zw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hdGhATWluJHFxcnhpeGk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFJlZ2lzdHJ5QEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFJlZ2lzdHJ5QGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAX2xsZGl2JHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAX2xsbW9kJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAX2xsbXVsJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAQWJzdHJhY3RFcnJvciRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAQWZ0ZXJDb25zdHJ1Y3Rpb24kcXFycDE0U3lzdGVtQFRPYmplY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAQmVmb3JlRGVzdHJ1Y3Rpb24kcXFycDE0U3lzdGVtQFRPYmplY3R6Yw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAQ2xhc3NDcmVhdGUkcXFycDE3U3lzdGVtQFRNZXRhQ2xhc3Nv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAQ2xhc3NEZXN0cm95JHFxcnAxNFN5c3RlbUBUT2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAQ29weVJlY29yZCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARGlzcG9zZSRxcXJwdnQx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARG9uZUV4Y2VwdCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARHluQXJyYXlBc2ckcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARHluQXJyYXlDbGVhciRxcXJycHZwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARHluQXJyYXlDb3B5JHFxcnB2dDFycHY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARHluQXJyYXlIaWdoJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARHluQXJyYXlMZW5ndGgkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARHluQXJyYXlTZXRMZW5ndGgkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARW5zdXJlQW5zaVN0cmluZyRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARW5zdXJlVW5pY29kZVN0cmluZyRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARmlsbENoYXIkcXFycHZpYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARmluYWxpemVBcnJheSRxcXJwdnQxdWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARmluYWxpemVSZWNvcmQkcXFycHZ0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARnJlZU1lbSRxcXJwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAR2V0TWVtJHFxcmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBASGFuZGxlQW55RXhjZXB0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBASGFuZGxlRmluYWxseSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBASW50ZkFkZFJlZiRxcXJ4NDVTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTdTeXN0ZW1ASUludGVyZmFjZSU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBASW50ZkNsZWFyJHFxcnI0NVN5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQxN1N5c3RlbUBJSW50ZXJmYWNlJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBASW50ZkNvcHkkcXFycjQ1U3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE3U3lzdGVtQElJbnRlcmZhY2UleDQ1U3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE3U3lzdGVtQElJbnRlcmZhY2Ul","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckFkZFJlZiRxcXJwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckFycmF5Q2xyJHFxcnB2aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckFzZyRxcXJwdnB4dg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckNhdCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckNhdDMkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckNhdE4kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckNsciRxcXJwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckNvcHkkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckRlbGV0ZSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckVxdWFsJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckZyb21BcnJheSRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVwY2l1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckZyb21DaGFyJHFxcnIyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJWN1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckZyb21QQ2hhciRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVwY3Vz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckZyb21QQ2hhckxlbiRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVwY2l1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckZyb21QV0NoYXIkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQlcGJ1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckZyb21VU3RyJHFxcnIyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXgyMFN5c3RlbUBVbmljb2RlU3RyaW5ndXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckluc2VydCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckxBc2ckcXFycHZweHY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckxlbiRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0clNldExlbmd0aCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0clRvUENoYXIkcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATmV3JHFxcmlwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAUGFja2FnZUxvYWQkcXFycHgyM1N5c3RlbUBQYWNrYWdlSW5mb1RhYmxlcDE3U3lzdGVtQFRMaWJNb2R1bGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAUGFja2FnZVVubG9hZCRxcXJweDIzU3lzdGVtQFBhY2thZ2VJbmZvVGFibGVwMTdTeXN0ZW1AVExpYk1vZHVsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAUmFpc2VBZ2FpbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAUmFpc2VFeGNlcHQkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAUk9VTkQkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAUnVuRXJyb3IkcXFydWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAU2V0U3ViJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAU2V0VW5pb24kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVHJ5RmluYWxseUV4aXQkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVW5pcXVlU3RyaW5nQSRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVW5pcXVlU3RyaW5nVSRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckFkZFJlZiRxcXJwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckFycmF5Q2xyJHFxcnB2aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckFzZyRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3gyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckNhdCRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3gyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckNhdDMkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmd4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Qy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckNhdE4kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckNsciRxcXJwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckNvcHkkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmdpaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckRlbGV0ZSRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ2lp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckVxdWFsJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckZyb21MU3RyJHFxcnIyMFN5c3RlbUBVbmljb2RlU3RyaW5neDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckZyb21QQ2hhciRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Bj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckZyb21QV0NoYXIkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmdwYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckZyb21XQXJyYXkkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmdwYmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckZyb21XQ2hhciRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ2I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckluc2VydCRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3IyMFN5c3RlbUBVbmljb2RlU3RyaW5naQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckxBc2ckcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmd4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckxlbiRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0clNldExlbmd0aCRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ2k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0clRvUFdDaGFyJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAV1N0ckNsciRxcXJwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAV1N0ckZyb21VU3RyJHFxcnIxN1N5c3RlbUBXaWRlU3RyaW5neDIwU3lzdGVtQFVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAV1N0clRvUFdDaGFyJHFxcngxN1N5c3RlbUBXaWRlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBBbGxvY01lbSRxcXJ1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBFeGNlcHRpb25DbGFzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBFeGNlcHRPYmpQcm9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBGaW5hbGl6YXRpb24kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBHZXQ4MDg3Q1ckcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBpbml0aWFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBNb3ZlJHFxcnB4dnB2aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBSZWdpc3Rlck1vZHVsZSRxcXJwMTdTeXN0ZW1AVExpYk1vZHVsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBTZXQ4MDg3Q1ckcXFydXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBTaW4kcXFyeGc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QCRiY3RyJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QCRiZHRyJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QEFmdGVyQ29uc3RydWN0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QEJlZm9yZURlc3RydWN0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QERlZmF1bHRIYW5kbGVyJHFxcnB2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QERpc3BhdGNoJHFxcnB2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QEVxdWFscyRxcXJwMTRTeXN0ZW1AVE9iamVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QEZyZWUkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QEZyZWVJbnN0YW5jZSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QEdldEhhc2hDb2RlJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QEdldEludGVyZmFjZSRxcXJyeDVfR1VJRHB2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QE5ld0luc3RhbmNlJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QFNhZmVDYWxsRXhjZXB0aW9uJHFxcnAxNFN5c3RlbUBUT2JqZWN0cHY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QFRvU3RyaW5nJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBVbmlxdWVTdHJpbmckcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBVbmlxdWVTdHJpbmckcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBVbnJlZ2lzdGVyTW9kdWxlJHFxcnAxN1N5c3RlbUBUTGliTW9kdWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3V0aWxzQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3V0aWxzQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFR5cGluZm9ARmluYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFR5cGluZm9AaW5pdGlhbGl6YXRpb24kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFZhcmlhbnRzQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFZhcmlhbnRzQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFZhcnV0aWxzQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFZhcnV0aWxzQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"XEZpbGVWZXJzaW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"XFN0cmluZ0ZpbGVJbmZvXA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"XFZhckZpbGVJbmZvXFRyYW5zbGF0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QWNxdWlyZVNSV0xvY2tFeGNsdXNpdmU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWdncmVzc2l2ZU1UQVRlc3Rpbmc=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWx0ZXJuYXRlQ29kZVBhZ2U=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWZpYmVycy1sMS0xLTE=","type":"Unicode","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWxvY2FsaXphdGlvbi1sMS0yLTE=","type":"Unicode","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXN5bmNoLWwxLTItMA==","type":"Unicode","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXN5bmNoLWwxLTItMC5kbGw=","type":"Unicode","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXJlRmlsZUFwaXNBTlNJ","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YmVmb3JlQ2hhbmdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QmljdWJpYzUw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QmljdWJpYzYw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QmljdWJpYzc1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QnJlYWtPbkluaXRpYWxpemVQcm9jZXNzRmFpbHVyZQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q0ZHT3B0aW9ucw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Y2hhbmdlVHlwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q2hhbmdlV2luZG93TWVzc2FnZUZpbHRlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q2hhbmdlV2luZG93TWVzc2FnZUZpbHRlckV4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJBc3N1cmVkSURUaW1lc3RhbXBpbmdDQS5jcnQw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VUaHJlYWRwb29sVGltZXI=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VUaHJlYWRwb29sV2FpdA==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VUaHJlYWRwb29sV29yaw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29DcmVhdGVJbnN0YW5jZQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29DcmVhdGVJbnN0YW5jZUV4","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29HZXRDbGFzc09iamVjdA==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Y29tY3RsMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZVN0cmluZ0V4","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRXZlbnRFeFc=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZU1hcHBpbmdB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZU1hcHBpbmdX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlTXV0ZXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU2VtYXBob3JlRXhX","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU2VtYXBob3JlVw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU3ltYm9saWNMaW5rVw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFkcG9vbFRpbWVy","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFkcG9vbFdhaXQ=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFkcG9vbFdvcms=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlV2luZG93RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q1dESWxsZWdhbEluRExMU2VhcmNo","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGF0YUZpbGVQYXRo","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdQcm9jZXNzSGVhcE9ubHk=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVmV2luZG93UHJvY0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGVmV2luZG93UHJvY1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZWdhdGVkTnRkbGw=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlQ3JpdGljYWxTZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlRmlsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlRmlsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"REVTQ1JJUFRJT04=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGVzdHJveVdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlRm9ybQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlnaUNlcnQgQXNzdXJlZCBJRCBSb290IENBMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGlnaUNlcnQgRVYgQ29kZSBTaWduaW5nIENB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGlnaUNlcnQgRVYgQ29kZSBTaWduaW5nIENBMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGlnaUNlcnQgSW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGlnaUNlcnQgVGltZXN0YW1wIDIwMjEw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGlnaUNlcnQsIEluYy4xIDA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUV4Y2VwdGlvbkNoYWluVmFsaWRhdGlvbg==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUhlYXBMb29rYXNpZGU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1ldGFGaWxlcw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHBpQXdhcmVuZXNz","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlQW5jaG9yQ29udGV4dA==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlUGVyUHJvY2Vzc1N5c3RlbURQSQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXJDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RXhlY3V0ZU9wdGlvbnM=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVRpbWVUb0Rvc0RhdGVUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVRpbWVUb0xvY2FsRmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmluZENsb3Nl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0RmlsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0RmlsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmluZFJlc291cmNlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmluZFJlc291cmNlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Rmlwc0FsZ29yaXRobVBvbGljeQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RmxzR2V0VmFsdWU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RmxzU2V0VmFsdWU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rmx1c2hQcm9jZXNzV3JpdGVCdWZmZXJz","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9ybWF0TWVzc2FnZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Rm9ybWF0TWVzc2FnZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUxpYnJhcnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUxpYnJhcnlXaGVuQ2FsbGJhY2tSZXR1cm5z","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJlZVJlc291cmNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RnJvbnRFbmRIZWFwRGVidWdPcHRpb25z","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Z2RpMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2RpU2NhbGluZw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFBhY2thZ2VJZA==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3NJZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3Nvck51bWJlcg==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZElk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUF0dHJpYnV0ZXNB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUF0dHJpYnV0ZXNX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGVFeA==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvU2l6ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvU2l6ZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RnJlZVN5c3RlbVJlc291cmNlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9jYWxlSW5mb0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9jYWxlSW5mb0V4","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9jYWxlSW5mb1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TmF0aXZlU3lzdGVtSW5mbw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0T2JqZWN0Vw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtTWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZVByZWNpc2VBc0ZpbGVUaW1l","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcFBhdGhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcFBhdGhX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGhyZWFkTG9jYWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50NjQ=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbkV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbkV4Vw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsRmxhZw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SEstMjc3MDg1MjA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL29jc3AuZGlnaWNlcnQuY29tME8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SFdpblR5cGVzPVdpbmRvd3M7V2luUHJvY3M9V2luZG93cztEYmlUeXBlcz1CREU7RGJpUHJvY3M9QkRFO0RiaUVycnM9QkRFOyFtYWRCYXNpYyAxLjIuNSAgLSAgd3d3Lm1hZHNoaS5uZXRUUEYwVE1hZEV4Y2VwdG1hZEV4Y2VwdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SUJhc2ljTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SUJhc2ljTGlzdFNlbGVjdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SUNyaXRpY2FsU2VjdGlvbmw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SUN1c3RvbUJhc2ljTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SWRsZVRpbWVyV2luZG93","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUludGVyZmFjZUxpc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2VMaXN0X0RyYXc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2VMaXN0X0dldEltYWdlSW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW5kZXggb3V0IG9mIHJhbmdlLg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNvbmRpdGlvblZhcmlhYmxl","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbkV4","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZVNSV0xvY2s=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdE9uY2VFeGVjdXRlT25jZQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbExhbmd1YWdlRmFsbGJhY2s=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJmYWNlIHdpdGggcmVmZXJlbmNlIGNvdW50ID4wIGRlc3Ryb3llZC4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJsb2NrZWREZWNyZW1lbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJsb2NrZWRJbmNyZW1lbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBjbGFzcy4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBpbmRleC4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SVBvaW50ZXJMaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SXNXaW5kb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SXNXaW5kb3dVbmljb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"S2VlcEFjdGl2YXRpb25Db250ZXh0c0FsaXZl","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"a2VybmVsMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"S21hZFR5cGVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TGFuY3pvczM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TGFuY3pvczQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TGFuZ3VhZ2UgSG90a2V5","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGF5b3V0IEhvdGtleQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TENNYXBTdHJpbmdFeA==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGN0TmV3bGN0RGVsZXRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bGN0VW5jaGFuZ2VkbGN0Q2hhbmdlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TGVhdmVDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEFwcEluaXRfRExMcw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZFJlc291cmNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxBbGxvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxGcmVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TG9ja1Jlc291cmNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TG9uZ1BhdGhzRW5hYmxlZA==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bHNhcG9saWN5bG9va3Vw","type":"Unicode","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNtcEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmxlblc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVByZWZlcnJlZFVJTGFuZ3VhZ2Vz","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bWFkQmFzaWMgMS4yLjUgIC0gIHd3dy5tYWRzaGkubmV0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkQmFzaWMk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkQmFzaWNf","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkQmFzaWNfLmJwbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkQmFzaWNs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TUFEQ0FMSUJSQVRF","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkQ3J5cHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TWFkRXhjZXB0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TWFkRXhjZXB0aW9uJA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkR3JhcGhpY3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkU3RyaW5ncw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkVG9vbHNNc2dIYW5kbGVyV2luZG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkVHlwZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkVHlwZXNM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkVHlwZXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TWFwVmlld09mRmlsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TWF4RGVhZEFjdGl2YXRpb25Db250ZXh0cw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4aW11bUFsbG93ZWRBbGxvY2F0aW9uU2l6ZQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4TG9hZGVyVGhyZWFkcw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4UmVzeW5jQXR0ZW1wdHM=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4UnBjU2l6ZQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3hTSGFzaENvdW50","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TURNRW5hYmxlZA==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWVkaWEgQ2VudGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TWluaW11bVN0YWNrQ29tbWl0SW5CeXRlcw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TXVsdGlCeXRlVG9XaWRlQ2hhcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bmNhbHJwYzpbbHNhcG9saWN5bG9va3VwXQ==","type":"Unicode","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9TZXR0aW5ncw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bnRkbGwuZGxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"T1JBTkdFIFZJRVcgTElNSVRFRDA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"T1JBTkdFIFZJRVcgTElNSVRFRDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"b3NXaW4xMG9zV2luTnROZXc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"b3NXaW4yMDA4cjI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"b3NXaW4yMDEycjI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"b3NXaW44b3NXaW4yMDEy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"b3NXaW45NW9zcjI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"b3NXaW45OG9zV2luOThzZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"b3NXaW5NRW9zV2luOXhOZXdvc1dpbk50T2xk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"b3NXaW5OdDQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"b3NXaW5YUG9zV2luMjAwM29zV2luVmlzdGFvc1dpbjIwMDg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UEFDS0FHRUlORk8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UEFDS0FHRU9QVElPTlNUTUFERVhDRVBU","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclN5c3RlbUhlYXBJc1ByaXZhdGU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclVzZVN5c3RlbUhlYXA=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UG9zdE1lc3NhZ2VX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVycmVkVUlMYW5ndWFnZXM=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZSBPcmdhbml6YXRpb24x","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UVFRUVFRUVFTVlc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UkFueSB1c2Ugb2YgdGhpcyBDZXJ0aWZpY2F0ZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBEaWdpQ2VydCBDUC9DUFMgYW5kIHRoZSBSZWx5aW5nIFBhcnR5IEFncmVlbWVudCB3aGljaCBsaW1pdCBsaWFiaWxpdHkgYW5kIGFyZSBpbmNvcnBvcmF0ZWQgaGVyZWluIGJ5IHJlZmVyZW5jZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZEZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJDbGFzc0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UmVsZWFzZU11dGV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UmVsZWFzZVNSV0xvY2tFeGNsdXNpdmU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVzb3VyY2VQb2xpY2llcw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVzeW5jUmVzZXRUaW1l","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UnBjUnVudGltZUNvbmZpZ0ZsYWdz","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cnQjSHQ7SHRT","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"cnRsMTIwLmJwbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UnRsR2V0VmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"cnVuZGxsMzIuZXhl","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZURsbFNlYXJjaE1vZGU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VhcmNoUGF0aE1vZGU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2V0RW5kT2ZGaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUF0dHJpYnV0ZXNB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUF0dHJpYnV0ZXNX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVBvaW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGhyZWFkcG9vbFRpbWVy","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGhyZWFkcG9vbFdhaXQ=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0RlYnVnSW5mbw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2h1dGRvd25GbGFncw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2l6ZW9mUmVzb3VyY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2xlZXBDb25kaXRpb25WYXJpYWJsZUNT","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2xlZXBDb25kaXRpb25WYXJpYWJsZVNSVw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U29mdEN1YmljMTAw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U29mdEN1YmljNTA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U29mdEN1YmljNjA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U29mdEN1YmljNzA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U29mdEN1YmljODA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U09QTUlKR0NEVFFSTktMSEVGXnFy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U3BsaW5lMzY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U3BsaW5lNjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"c3FIaWdoc3FWZXJ5SGlnaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtIHdyaXRlIGVycm9yLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U3VibWl0VGhyZWFkcG9vbFdvcms=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VEFBbnNpU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGFibGV0IFBD","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VEFTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VEFVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VEFXaWRlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VENoYW5nZVR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VENvbnRyaWJ1dG9yTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VENvbnRyaWJ1dG9yUGl4ZWxz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBQW5zaUNoYXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBQW5zaVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBQmFzaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBQm9vbGVhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBQ2FyZGluYWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBRG91Ymxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBRXh0Qm9vbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBSW50NjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBSW50ZWdlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBSVVua25vd24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBTmF0aXZlSW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBTmF0aXZlVUludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBUG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBU2hvcnRJbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBU21hbGxJbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERhdGFEZXN0cm95UHJvY09P","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBV2lkZUNoYXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBV2lkZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VEdyYXlQZXJjZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIGNyaXRpY2FsIHNlY3Rpb24gaXMgYWxyZWFkeSBvd25lZCBieSBhbm90aGVyIHRocmVhZC4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIGNyaXRpY2FsIHNlY3Rpb24gaXMgb3duZWQgYnkgYW5vdGhlciB0aHJlYWQu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBvYmplY3QgaXMgaW52YWxpZC4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBwcm9ncmFtIG11c3QgYmUgcnVuIHVuZGVyIFdpbjMyJDc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VElCYXNpY0xpc3RTZWxlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VElCYXNpY0xpc3RV","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VElCYXNpY3A=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VElDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VElDdXN0b21CYXNpY0xpc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VElDdXN0b21CYXNpY0xpc3Rg","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VElJbnRlcmZhY2VMaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VElMaXN0Q2hhbmdlRXZlbnRPTw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VElQb2ludGVyTGlzdFU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGxzQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGxzRnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGxzR2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGxzU2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VE1zZ0hhbmRsZXJPTw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VE1zZ0hhbmRsZXJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2luZ0ZsYWdz","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2tBY3RpdmF0aW9uQ29udGV4dFJlbGVhc2Vz","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwYXJlbnRFbmFibGVk","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VFJlc0l0ZW0s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VHJ5QWNxdWlyZVNSV0xvY2tFeGNsdXNpdmU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJ5RW50ZXJDcml0aWNhbFNlY3Rpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VFNCb29sZWFu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VFNjYWxlTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VFNFeHRCb29s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VFN0cmV0Y2hRdWFsaXR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VW5rbm93biBlcnJvci4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VW5rbm93biBleGNlcHRpb24uIElmIHlvdSB3YW50IHRvIGtub3cgbW9yZSwgeW91IGhhdmUgdG8gYWRkIFN5c1V0aWxzIHRvIHlvdXIgcHJvamVjdC4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VW5sb2FkRXZlbnRUcmFjZURlcHRo","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VW5tYXBWaWV3T2ZGaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VW5yZWdpc3RlckNsYXNzQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VXNlRmlsdGVy","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlSW1wZXJzb25hdGVkRGV2aWNlTWFw","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dXNlcjMyLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"dmNsMTIwLmJwbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VmVyUXVlcnlWYWx1ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VmVyUXVlcnlWYWx1ZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"dmVyc2lvbi5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbEFsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbEZyZWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbFByb3RlY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbFF1ZXJ5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvclNpbmdsZU9iamVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvclRocmVhZHBvb2xUaW1lckNhbGxiYWNrcw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FrZUFsbENvbmRpdGlvblZhcmlhYmxl","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FrZUNvbmRpdGlvblZhcmlhYmxl","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2lkZUNoYXJUb011bHRpQnl0ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyAxMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyAyMDAw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyAyMDAz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyAyMDA4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyAyMDA4IFIy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyAyMDEy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyAyMDEyIFIy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyA3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyA4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyA4LjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyA5NQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyA5NSBPU1ItMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyA5OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyA5OCBTRQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyA5eCBOZXc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyBNRQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyBOVCAz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyBOVCA0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyBOVCBOZXc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyBWaXN0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyBYUA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVGaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V1RBSVVua25vd24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"d3d3LmRpZ2ljZXJ0LmNvbTEkMCI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"d3d3LmRpZ2ljZXJ0LmNvbTErMCk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"d3d3LmRpZ2ljZXJ0LmNvbTExMC8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"d3d3Lm1hZHNoaS5uZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"eXhWSVotbXc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"w6LCgMKZSFlCUklE","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null}],"interesting":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMQ==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTA=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTE=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTI=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTM=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTQ=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTU=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTY=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTc=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTg=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTk=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMg==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjA=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjE=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjI=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjM=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjQ=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjU=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjY=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjc=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjg=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjk=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMw==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMzA=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMzE=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMzI=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMzM=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMzQ=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMzU=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjNA==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjNQ==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjNg==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjNw==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjOA==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjOQ==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"LGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWFzc3VyZWQtdHMuY3JsMDI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"LGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWFzc3VyZWQtdHMuY3JsMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"LWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9FVkNvZGVTaWduaW5nLWcxLmNybDAz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"LWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9FVkNvZGVTaWduaW5nLWcxLmNybDBL","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Lmh0dHA6Ly93d3cuZGlnaWNlcnQuY29tL3NzbC1jcHMtcmVwb3NpdG9yeS5odG0w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9FVkNvZGVTaWduaW5nU0hBMi1nMS5jcmwwNw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9FVkNvZGVTaWduaW5nU0hBMi1nMS5jcmwwSw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwUA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"N2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcnQw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"N2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEVWQ29kZVNpZ25pbmdDQS5jcnQw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OCE5LzlcOWc5cjl9OQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OiY6LDpJOlA6aDpsOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Ois6Mzo7Okg6bTp2Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OjM6RDpVOls6YzppOng6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Omh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEhpZ2hBc3N1cmFuY2VFVlJvb3RDQS5jcmwwQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Omh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEhpZ2hBc3N1cmFuY2VFVlJvb3RDQS5jcmww","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEVWQ29kZVNpZ25pbmdDQS1TSEEyLmNydDA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEhpZ2hBc3N1cmFuY2VFVlJvb3RDQS5jcnQw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyME1hZGJhc2ljQFRDaGFuZ2VUeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdldFBhY2thZ2VJbmZvVGFibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRCaXRtYXBAR2V0Q2FudmFzJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRCaXRtYXBAR2V0UGl4ZWxGb3JtYXQkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRCaXRtYXBAR2V0U2NhbmxpbmUkcXFyaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRCaXRtYXBAU2V0UGl4ZWxGb3JtYXQkcXFyMjFHcmFwaGljc0BUUGl4ZWxGb3JtYXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRDYW52YXNAR2V0SGFuZGxlJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRDYW52YXNAU3RyZXRjaERyYXckcXFycngxMVR5cGVzQFRSZWN0cDE3R3JhcGhpY3NAVEdyYXBoaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9BbUludmFsaWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9JbmRleE91dE9mUmFuZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9JbnZhbGlkQ2xhc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9JbnZhbGlkSW5kZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9TZWN0aW9uQmxvY2tlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9TZWN0aW9uTGVhdmVFcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9Vbmtub3du","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAJGJjdHIkcXFyb3VpeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAQWRkUGFyZW50JHFxcnAyNk1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNARGVsUGFyZW50JHFxcnAyNk1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0Q2hlY2tlZCRxcXJ4NTNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MjVNYWRiYXNpY0BJQ3VzdG9tQmFzaWNMaXN0JQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0RGF0YSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0Rm9jdXNlZCRxcXJ4NTNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MjVNYWRiYXNpY0BJQ3VzdG9tQmFzaWNMaXN0JQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0SW5kZXgkcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0TGFzdENoYW5nZVR5cGUkcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0TGFzdEVycm9yTm8kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0TGFzdEVycm9yU3RyJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0T2xkSW5kZXgkcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0U2VsZWN0ZWQkcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0U3RyQnVmJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0U3RyQnVmQSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0U3RyQnVmVyRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNATmV3SW5zdGFuY2UkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0Q2hlY2tlZCRxcXJ4NTNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MjVNYWRiYXNpY0BJQ3VzdG9tQmFzaWNMaXN0JTE3TWFkdHlwZXNAVEV4dEJvb2w=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0Rm9jdXNlZCRxcXJ4NTNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MjVNYWRiYXNpY0BJQ3VzdG9tQmFzaWNMaXN0JW8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0TGFzdENoYW5nZVR5cGUkcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCUyME1hZGJhc2ljQFRDaGFuZ2VUeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0TGFzdEVycm9yJHFxcnVpeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0TGFzdEVycm9yTm8kcXFydWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0TGFzdEVycm9yU3RyJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0U2VsZWN0ZWQkcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCVv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0U3RyQnVmJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0U3RyQnVmJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0U3RyQnVmQSRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0U3RyQnVmVyRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU3VwcG9ydHMkcXFycng1X0dVSUQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNMaXN0U2VsZWN0aW9uQCRiY3RyJHFxcm91aXgyMFN5c3RlbUBVbmljb2RlU3RyaW5neDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCVv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNMaXN0U2VsZWN0aW9uQEdldFBhcmVudExpc3QkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNMaXN0U2VsZWN0aW9uQFBhcmVudExpc3RDaGFuZ2VkJHFxcng1M1N5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQyNU1hZGJhc2ljQElDdXN0b21CYXNpY0xpc3QleDQzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE1TWFkYmFzaWNASUJhc2ljJW8yME1hZGJhc2ljQFRDaGFuZ2VUeXBlaWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEFkZEl0ZW0kcXFyeDQzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE1TWFkYmFzaWNASUJhc2ljJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEFkZEl0ZW1zJHFxcnB4NDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMleGk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QENoYW5nZSRxcXJ4NDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMlbzIwTWFkYmFzaWNAVENoYW5nZVR5cGVpaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEdldFNvcnREb3duJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEdldFNvcnRJbmZvJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEdldFNvcnRQYXJhbXMkcXFycnBxcXJ4NDJTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTRNYWRiYXNpY0BJTGlzdCV4NDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMldDJpJGlyb3Jp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEdldFNvcnRQcm9jJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEluc2VydEl0ZW0kcXFyeDQzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE1TWFkYmFzaWNASUJhc2ljJWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFJlZ2lzdGVyQ2hhbmdlRXZlbnQkcXFycHFxcng1M1N5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQyNU1hZGJhc2ljQElDdXN0b21CYXNpY0xpc3QleDQzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE1TWFkYmFzaWNASUJhc2ljJW8yME1hZGJhc2ljQFRDaGFuZ2VUeXBlaWkkdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFJlZ2lzdGVyQ2hhbmdlRXZlbnQkcXFyeW5wcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCV4NDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMlbzIwTWFkYmFzaWNAVENoYW5nZVR5cGVpaSR2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFNldFNvcnRJbmZvJHFxcmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFNldFNvcnRQYXJhbXMkcXFycHFxcng0MlN5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQxNE1hZGJhc2ljQElMaXN0JXg0M1N5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQxNU1hZGJhc2ljQElCYXNpYyV0MmkkaW9p","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFNldFNvcnRQcm9jJHFxcnBxcXJ4NDJTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTRNYWRiYXNpY0BJTGlzdCV4NDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMldDJpJGk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFVucmVnaXN0ZXJDaGFuZ2VFdmVudCRxcXJwcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCV4NDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMlbzIwTWFkYmFzaWNAVENoYW5nZVR5cGVpaSR2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFVucmVnaXN0ZXJDaGFuZ2VFdmVudCRxcXJ5bnBxcXJ4NTNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MjVNYWRiYXNpY0BJQ3VzdG9tQmFzaWNMaXN0JXg0M1N5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQxNU1hZGJhc2ljQElCYXNpYyVvMjBNYWRiYXNpY0BUQ2hhbmdlVHlwZWlpJHY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEAkYmN0ciRxcXJvdWl4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBHZXRDYXBhY2l0eSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBHZXRGb2N1c2VkSXRlbSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBHZXRJdGVtQ291bnQkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBHZXRMYXN0Rm9jdXNlZEl0ZW0kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBHZXRTZWxlY3RlZENvdW50JHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBTZXRMYXN0Rm9jdXNlZEl0ZW0kcXFyNDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljX0BAR2V0UGFja2FnZUluZm9UYWJsZSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY3J5cHQkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmd4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY3J5cHQkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQleDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQlag==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY3J5cHQkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmd4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY3J5cHQkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQleDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQlag==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QE9sZERlY3J5cHQkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQleDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QE9sZEVuY3J5cHQkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQleDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQERyYXckcXFycDE2R3JhcGhpY3NAVEJpdG1hcHQxdDFpaWlpMjRNYWRncmFwaGljc0BUR3JheVBlcmNlbnR1aTI3TWFkZ3JhcGhpY3NAVFN0cmV0Y2hRdWFsaXR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQERyYXckcXFydWl1aXAxNkdyYXBoaWNzQFRCaXRtYXBpaWlpMjRNYWRncmFwaGljc0BUR3JheVBlcmNlbnR1aTI3TWFkZ3JhcGhpY3NAVFN0cmV0Y2hRdWFsaXR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQEdyYXlTY2FsZSRxcXJwMTZHcmFwaGljc0BUQml0bWFwMjRNYWRncmFwaGljc0BUR3JheVBlcmNlbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQFN0cmV0Y2hCaXRtYXAkcXFycDE2R3JhcGhpY3NAVEJpdG1hcHQxaWkyN01hZGdyYXBoaWNzQFRTdHJldGNoUXVhbGl0eQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQFN0cmV0Y2hCaXRtYXAkcXFycDE2R3JhcGhpY3NAVEJpdG1hcHQxdDF0MTI3TWFkZ3JhcGhpY3NAVFN0cmV0Y2hRdWFsaXR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGxpc3RzQE5ld0Jhc2ljTGlzdCRxcXJweDQzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE1TWFkYmFzaWNASUJhc2ljJXhp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGxpc3RzQE5ld0ludGVyZmFjZUxpc3QkcXFycHg0NVN5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQxN1N5c3RlbUBJSW50ZXJmYWNlJXhp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BHZXRJY29uR3JvdXBSZXNvdXJjZVckcXFzdWlwYnVzcnAxN01hZHJlc0BUSWNvbkdyb3Vw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BHZXRSZXNvdXJjZVckcXFzdWlwYnQydXNycHZydWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVN0ciRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Qx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVN0ciRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVN0ckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVN0clc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVRleHQkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVRleHQkcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQldDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVRleHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVRleHRX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARXJyb3JDb2RlVG9TdHIkcXFydWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARXJyb3JDb2RlVG9TdHJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARXJyb3JDb2RlVG9TdHJXJHFxcnVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeCRxcXJpaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeCRxcXJqaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeCRxcXJ1aWlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeEEkcXFyaWlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeEEkcXFyamlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeEEkcXFydWlpYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeFckcXFyaWli","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeFckcXFyamli","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeFckcXFydWlpYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbENoYXJzJHFxcnIyMFN5c3RlbUBVbmljb2RlU3RyaW5ncngyOVN5c3RlbUAlU2V0JHRjJGl1YyQwJGl1YyQyNTUl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbENoYXJzJHFxcnIyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXJ4MjlTeXN0ZW1AJVNldCR0YyRpdWMkMCRpdWMkMjU1JQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbFN0ciRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3gyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbFN0ciRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATXNUb1N0ciRxcXJ1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATXNUb1N0ckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATXNUb1N0clckcXFydWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zQ2hhcnMkcXFycngyOVN5c3RlbUAlU2V0JHRjJGl1YyQwJGl1YyQyNTUleDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd1aXVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zQ2hhcnMkcXFycngyOVN5c3RlbUAlU2V0JHRjJGl1YyQwJGl1YyQyNTUleDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQldWl1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zTm90Q2hhcnNXJHFxcnJ4MjlTeXN0ZW1AJVNldCR0YyRpdWMkMCRpdWMkMjU1JXgyMFN5c3RlbUBVbmljb2RlU3RyaW5ndWl1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dCRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3QxdWl1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dCRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV0MXVpdWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dElzMSRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Qx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dElzMSRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dElzMUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dElzMVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVN0ciRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3gyMFN5c3RlbUBVbmljb2RlU3RyaW5ndDJv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVN0ciRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV0Mm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVRleHQkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmd4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Qybw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVRleHQkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQleDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQldDJv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0VHJpbVN0ciRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0VHJpbVN0ciRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0VHJpbVN0ckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0VHJpbVN0clc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVHJpbVN0ciRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVHJpbVN0ciRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVHJpbVN0ckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVHJpbVN0clc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQENoZWNrUHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQENPc0Rlc2Ny","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEZpbGVWZXJzaW9uVG9TdHIkcXFyag==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEZpbGVWZXJzaW9uVG9TdHJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEZpbGVWZXJzaW9uVG9TdHJXJHFxcmo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uU3RyJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uU3RyJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uU3RyQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uU3RyVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZyZWVTeXN0ZW1SZXNvdXJjZXMkcXFydXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlRXhwb3J0RGlyZWN0b3J5JHFxcnVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlSW1wb3J0RGlyZWN0b3J5JHFxcnVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlTnRIZWFkZXJzJHFxcnVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlUHJvY0FkZHJlc3MkcXFydWlp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlUHJvY0FkZHJlc3MkcXFydWl4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlUHJvY05hbWUkcXFydWlwdm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlUHJvY05hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlUHJvY05hbWVXJHFxcnVpcHZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldExvbmdGaWxlTmFtZSRxcXIyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldExvbmdGaWxlTmFtZSRxcXIyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldExvbmdGaWxlTmFtZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldExvbmdGaWxlTmFtZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldFNob3J0RmlsZU5hbWUkcXFyMjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldFNob3J0RmlsZU5hbWUkcXFyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldFNob3J0RmlsZU5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldFNob3J0RmlsZU5hbWVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldFNpemVPZkltYWdlJHFxcnAxN19JTUFHRV9OVF9IRUFERVJT","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHR5cGVzQE1hZEV4Y2VwdGlvbkBDbGVhblVwU3RhY2tJbmZvUHJvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHR5cGVzQE1hZEV4Y2VwdGlvbkBDcmVhdGUkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBDb21wcmVzcyRxcXJwdnQxaWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBDb21wcmVzcyRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Qxbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBDb21wcmVzcyRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBHZXRDb21wcmVzc2VkRmlsZUluZm8kcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmdyanJ1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBHZXRVbmNvbXByZXNzZWRGaWxlSW5mbyRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3JqcnVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBJc0NvbXByZXNzZWRGaWxlRXF1YWwkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBVbmNvbXByZXNzJHFxcnB2dDFpaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBVbmNvbXByZXNzJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5ndDFqdWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBVbmNvbXByZXNzJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBaaXAkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmdweDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd4aXg0NVN5c3RlbUAlRHluYW1pY0FycmF5JHQyMFN5c3RlbUBVbmljb2RlU3RyaW5nJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFJlZ2lzdHJ5QEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFJlZ2lzdHJ5QGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAQWJzdHJhY3RFcnJvciRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAQWZ0ZXJDb25zdHJ1Y3Rpb24kcXFycDE0U3lzdGVtQFRPYmplY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAQmVmb3JlRGVzdHJ1Y3Rpb24kcXFycDE0U3lzdGVtQFRPYmplY3R6Yw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAQ2xhc3NDcmVhdGUkcXFycDE3U3lzdGVtQFRNZXRhQ2xhc3Nv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAQ2xhc3NEZXN0cm95JHFxcnAxNFN5c3RlbUBUT2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARW5zdXJlQW5zaVN0cmluZyRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARW5zdXJlVW5pY29kZVN0cmluZyRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAR2V0TWVtJHFxcmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBASW50ZkFkZFJlZiRxcXJ4NDVTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTdTeXN0ZW1ASUludGVyZmFjZSU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBASW50ZkNsZWFyJHFxcnI0NVN5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQxN1N5c3RlbUBJSW50ZXJmYWNlJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBASW50ZkNvcHkkcXFycjQ1U3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE3U3lzdGVtQElJbnRlcmZhY2UleDQ1U3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE3U3lzdGVtQElJbnRlcmZhY2Ul","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckZyb21BcnJheSRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVwY2l1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckZyb21DaGFyJHFxcnIyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJWN1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckZyb21QQ2hhciRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVwY3Vz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckZyb21QQ2hhckxlbiRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVwY2l1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckZyb21QV0NoYXIkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQlcGJ1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckZyb21VU3RyJHFxcnIyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXgyMFN5c3RlbUBVbmljb2RlU3RyaW5ndXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckluc2VydCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckxlbiRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0clRvUENoYXIkcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAUGFja2FnZUxvYWQkcXFycHgyM1N5c3RlbUBQYWNrYWdlSW5mb1RhYmxlcDE3U3lzdGVtQFRMaWJNb2R1bGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAUGFja2FnZVVubG9hZCRxcXJweDIzU3lzdGVtQFBhY2thZ2VJbmZvVGFibGVwMTdTeXN0ZW1AVExpYk1vZHVsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAUnVuRXJyb3IkcXFydWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVW5pcXVlU3RyaW5nQSRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVW5pcXVlU3RyaW5nVSRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckFzZyRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3gyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckNhdCRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3gyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckNhdDMkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmd4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Qy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckNvcHkkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmdpaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckRlbGV0ZSRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ2lp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckZyb21MU3RyJHFxcnIyMFN5c3RlbUBVbmljb2RlU3RyaW5neDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckZyb21QQ2hhciRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Bj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckZyb21QV0NoYXIkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmdwYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckZyb21XQXJyYXkkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmdwYmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckZyb21XQ2hhciRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ2I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckluc2VydCRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3IyMFN5c3RlbUBVbmljb2RlU3RyaW5naQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckxBc2ckcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmd4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckxlbiRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0clNldExlbmd0aCRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ2k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0clRvUFdDaGFyJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAV1N0ckZyb21VU3RyJHFxcnIxN1N5c3RlbUBXaWRlU3RyaW5neDIwU3lzdGVtQFVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAV1N0clRvUFdDaGFyJHFxcngxN1N5c3RlbUBXaWRlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBHZXQ4MDg3Q1ckcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBSZWdpc3Rlck1vZHVsZSRxcXJwMTdTeXN0ZW1AVExpYk1vZHVsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QEVxdWFscyRxcXJwMTRTeXN0ZW1AVE9iamVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QEZyZWVJbnN0YW5jZSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QEdldEhhc2hDb2RlJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QEdldEludGVyZmFjZSRxcXJyeDVfR1VJRHB2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QE5ld0luc3RhbmNlJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QFNhZmVDYWxsRXhjZXB0aW9uJHFxcnAxNFN5c3RlbUBUT2JqZWN0cHY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBVbnJlZ2lzdGVyTW9kdWxlJHFxcnAxN1N5c3RlbUBUTGliTW9kdWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFR5cGluZm9ARmluYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFR5cGluZm9AaW5pdGlhbGl6YXRpb24kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"XEZpbGVWZXJzaW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"XFN0cmluZ0ZpbGVJbmZvXA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"XFZhckZpbGVJbmZvXFRyYW5zbGF0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWZpYmVycy1sMS0xLTE=","type":"Unicode","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWxvY2FsaXphdGlvbi1sMS0yLTE=","type":"Unicode","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXN5bmNoLWwxLTItMA==","type":"Unicode","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXN5bmNoLWwxLTItMC5kbGw=","type":"Unicode","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QnJlYWtPbkluaXRpYWxpemVQcm9jZXNzRmFpbHVyZQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Y2hhbmdlVHlwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJBc3N1cmVkSURUaW1lc3RhbXBpbmdDQS5jcnQw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q29DcmVhdGVJbnN0YW5jZQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29DcmVhdGVJbnN0YW5jZUV4","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29HZXRDbGFzc09iamVjdA==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Y29tY3RsMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZVN0cmluZ0V4","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZU1hcHBpbmdB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZU1hcHBpbmdX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlTXV0ZXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlV2luZG93RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdQcm9jZXNzSGVhcE9ubHk=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVmV2luZG93UHJvY0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGVmV2luZG93UHJvY1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlQ3JpdGljYWxTZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlRmlsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlRmlsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"REVTQ1JJUFRJT04=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGVzdHJveVdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlUGVyUHJvY2Vzc1N5c3RlbURQSQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXJDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RXhlY3V0ZU9wdGlvbnM=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVRpbWVUb0Rvc0RhdGVUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVRpbWVUb0xvY2FsRmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmluZENsb3Nl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0RmlsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0RmlsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmluZFJlc291cmNlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmluZFJlc291cmNlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmxzR2V0VmFsdWU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rmx1c2hQcm9jZXNzV3JpdGVCdWZmZXJz","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9ybWF0TWVzc2FnZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Rm9ybWF0TWVzc2FnZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUxpYnJhcnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZVJlc291cmNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFBhY2thZ2VJZA==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3NJZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3Nvck51bWJlcg==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZElk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUF0dHJpYnV0ZXNB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUF0dHJpYnV0ZXNX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGVFeA==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvU2l6ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvU2l6ZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RnJlZVN5c3RlbVJlc291cmNlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9jYWxlSW5mb0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9jYWxlSW5mb0V4","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9jYWxlSW5mb1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TmF0aXZlU3lzdGVtSW5mbw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0T2JqZWN0Vw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtTWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZVByZWNpc2VBc0ZpbGVUaW1l","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcFBhdGhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcFBhdGhX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGhyZWFkTG9jYWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50NjQ=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbkV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbkV4Vw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL29jc3AuZGlnaWNlcnQuY29tME8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SFdpblR5cGVzPVdpbmRvd3M7V2luUHJvY3M9V2luZG93cztEYmlUeXBlcz1CREU7RGJpUHJvY3M9QkRFO0RiaUVycnM9QkRFOyFtYWRCYXNpYyAxLjIuNSAgLSAgd3d3Lm1hZHNoaS5uZXRUUEYwVE1hZEV4Y2VwdG1hZEV4Y2VwdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2VMaXN0X0dldEltYWdlSW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdE9uY2VFeGVjdXRlT25jZQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbExhbmd1YWdlRmFsbGJhY2s=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJsb2NrZWREZWNyZW1lbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJsb2NrZWRJbmNyZW1lbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SXNXaW5kb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TGFuZ3VhZ2UgSG90a2V5","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGF5b3V0IEhvdGtleQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGVhdmVDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZFJlc291cmNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxBbGxvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxGcmVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TG9ja1Jlc291cmNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bHNhcG9saWN5bG9va3Vw","type":"Unicode","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNtcEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmxlblc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkQmFzaWMgMS4yLjUgIC0gIHd3dy5tYWRzaGkubmV0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TWFwVmlld09mRmlsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TWluaW11bVN0YWNrQ29tbWl0SW5CeXRlcw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TXVsdGlCeXRlVG9XaWRlQ2hhcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bmNhbHJwYzpbbHNhcG9saWN5bG9va3VwXQ==","type":"Unicode","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"b3NXaW5YUG9zV2luMjAwM29zV2luVmlzdGFvc1dpbjIwMDg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UEFDS0FHRUlORk8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdE1lc3NhZ2VX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZEZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJDbGFzc0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UmVsZWFzZU11dGV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UnRsR2V0VmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"cnVuZGxsMzIuZXhl","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2V0RW5kT2ZGaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUF0dHJpYnV0ZXNB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUF0dHJpYnV0ZXNX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVBvaW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0RlYnVnSW5mbw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2l6ZW9mUmVzb3VyY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtIHdyaXRlIGVycm9yLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VENoYW5nZVR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGxzQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGxzRnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGxzR2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGxzU2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VHJ5RW50ZXJDcml0aWNhbFNlY3Rpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VW5rbm93biBlcnJvci4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VW5tYXBWaWV3T2ZGaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VW5yZWdpc3RlckNsYXNzQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VmVyUXVlcnlWYWx1ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VmVyUXVlcnlWYWx1ZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"dmVyc2lvbi5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbEFsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbEZyZWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbFByb3RlY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbFF1ZXJ5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvclNpbmdsZU9iamVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2lkZUNoYXJUb011bHRpQnl0ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyBOVCAz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyBOVCA0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyBOVCBOZXc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVGaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"d3d3LmRpZ2ljZXJ0LmNvbTEkMCI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"d3d3LmRpZ2ljZXJ0LmNvbTErMCk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"d3d3LmRpZ2ljZXJ0LmNvbTExMC8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"d3d3Lm1hZHNoaS5uZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null}],"targets":[{"name":"madbasic_.bpl","strings":[{"value":"ISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0+P0BhYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5eltcXV5fYGFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6e3x9fg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"IW1hZEdyYXBoaWNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Ijw7PSEhJXsxOTk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"IkRpZ2lDZXJ0IEVWIENvZGUgU2lnbmluZyBDQSAoU0hBMik=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"IkRpZ2lDZXJ0IEVWIENvZGUgU2lnbmluZyBDQSAoU0hBMikw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"IkRpZ2lDZXJ0IEhpZ2ggQXNzdXJhbmNlIEVWIFJvb3QgQ0Ew","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"JzAzMEAwVDBgMGQwcDB0MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"KERpZ2lDZXJ0IFNIQTIgQXNzdXJlZCBJRCBUaW1lc3RhbXBpbmcgQ0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"KERpZ2lDZXJ0IFNIQTIgQXNzdXJlZCBJRCBUaW1lc3RhbXBpbmcgQ0Ew","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"LGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWFzc3VyZWQtdHMuY3JsMDI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"LGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWFzc3VyZWQtdHMuY3JsMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"LWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9FVkNvZGVTaWduaW5nLWcxLmNybDAz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"LWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9FVkNvZGVTaWduaW5nLWcxLmNybDBL","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Lmh0dHA6Ly93d3cuZGlnaWNlcnQuY29tL3NzbC1jcHMtcmVwb3NpdG9yeS5odG0w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"LzEoMCYwJDAi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MCAwJDAoMCwwMDA0MDgwPDBAMEQwSDBMMFAwVDBYMFwwYDBkMGgwbDBwMHQweDB8MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MCIwKjAyMDowQjBKMFIwWjBiMGowcjB6MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MCYwLjA7MEcwVTBmMG4wdjB+MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MC8wQDBQMHQw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MDYxMTEwMDAwMDAwWg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MDswSDBdMGow","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MEgzTDNQM1QzWDNcM2AzZDNoM2wzcDN0M3gzfDM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MSAxJDEoMSwxMDE0MTgxPDFAMUQxSDFMMVAxVDFYMVwxYDFkMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MSAxJDEwMTQxWTFhMW0x","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MSIxKjEyMToxQjFKMVIxWjFiMWoxcjF6MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MSgxMDE0MTgxPDFAMUQxSDFMMVAxVDFYMVwxYDFkMWgxbDFwMXQxeDF8MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MTIwNDE4MTIwMDAwWg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MTYwMTA3MTIwMDAwWg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MTkyXzNjM2czazNvM3MzdzN7Mw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MUgxWDFgMWwxdDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9FVkNvZGVTaWduaW5nU0hBMi1nMS5jcmwwNw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9FVkNvZGVTaWduaW5nU0hBMi1nMS5jcmwwSw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MiIyKjIyMjoyQjJKMlIyWjJiMmoycjJ6Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MioyQTJPMlwydDJ5Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjAxMDE5MDAwMDAwWg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjAyMjAxMTIwMjMxMTda","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjAyMjAxMTIwMjMxMjJa","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjEwMTAxMDAwMDAwWg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjIwMTEyMDIzMTE3WjAr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjIwMTEyMDIzMTIyWjAr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjMxMDIyMjM1OTU5WjA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjQ0ODQ8NEA0RDRINEw0UDRUNFg0XDRgNGQ0aDRsNHA0dDR4NHw0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjcwNDE4MTIwMDAwWjBlMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MjcwNDE4MTIwMDAwWjBsMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Mm4zZDRfNSQ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MyIzKjMyMzozQjNKM1IzWjNiM2ozcjN6Mw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MyszODNNM1oz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MzEwMTA2MDAwMDAwWjBIMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MzEwMTA3MTIwMDAwWjByMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"MzExMTEwMDAwMDAwWjBsMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"M20zcTN1M3kzfTM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NCA0JDQoNCw0MDQ0NDg0PDRANEQ0XDRoNGw0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NCA0JDQoNCw0MDQ0NDg0PDRANEQ0SDRMNFA0VDR8NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NCE0LDRCNE80aTRuNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NCQ0NDRENFQ0ZDR0NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NCg1JDwtPGA8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NC80NzRONGw0dDQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NDY4Njw2QDZENkg2TDZQNlQ2WDZcNmA2ZDZoNg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwUA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NSA1KDVCNUo1XDV0NQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NSE1LDVCNUo1UjVaNWI1ajVyNQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NSM1MTU8NUw1VzVpNXU1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NSg1NDU4NUA1VDVcNWA1ZDVoNWw1cDV0NXg1fDU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NSw1QTVNNVY1XjVrNXs1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NSw1RzVUNXs1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NUM1XzUzN2c3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NiI2KjYyNjo2QjZKNlI2WjZiNmo2cjZ6Ng==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NiI2NDZBNnc2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NiM2MjY+NlM2XzZqNg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NiM2ODZFNlo2ZzY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Nko3ZDdtN3I3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NnZjbDEyMC5icGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NyM3RzdaN2Y3bzd1Nw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"NyY3Ljc2Nz43RjdON1Y3XjdmN243djd+Nw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Nyk3MDc/N003WzdnN2w3cTc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"N2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcnQw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"N2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEVWQ29kZVNpZ25pbmdDQS5jcnQw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"N1g4XDhgOGQ4aDhsOHA4dDh4OHw4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OCE5LzlcOWc5cjl9OQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OCY4Ljg2OD44RjhOOFY4XjhmOG44djh+OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OCo4Lzg6OE04UjhdOGU4ajh1OH44","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OCs5Uzk+PHo8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OSM5Kzk+OUw5Yzk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OSQ5ODlAOUQ5SDlMOVA5VDlYOVw5YDlkOWg5bDlwOXQ5eDk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OSc5MjlZOW05","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OiY6LDpJOlA6aDpsOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Ois6Mzo7Okg6bTp2Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OjFGMU4xWDFlMXAx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OjM6RDpVOls6YzppOng6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OkFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Omh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEhpZ2hBc3N1cmFuY2VFVlJvb3RDQS5jcmwwQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Omh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEhpZ2hBc3N1cmFuY2VFVlJvb3RDQS5jcmww","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Om47WD1mPXE9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OlRDb250cmlidXRvclBpeGVscy46MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OlRJQmFzaWMuOjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OlRJQ3VzdG9tQmFzaWNMaXN0Ljox","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OlRJQ3VzdG9tQmFzaWNMaXN0Ljoy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OlRJQ3VzdG9tQmFzaWNMaXN0Ljoz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OlRJQ3VzdG9tQmFzaWNMaXN0Ljo0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OyExOTl7MTk5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OyU7RTtVO3s7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OzAhOCYyezE5OQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"OzE7QDtcO2w7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Oz87SztYO2o7cjt6Ow==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"O0I8aTx9PHs9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PCA8JDwoPCw8MDxIPFQ8WDxgPHQ8fDw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PCE8KTw0PEg8TjxWPGE8aTx0PA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PDQ8RDxjPHA8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PDsxOiImdTAnJzondTsgODcwJw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PEI8ZTxJPmw+dT4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PEg8XTxiPHI8eDw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEVWQ29kZVNpZ25pbmdDQS1TSEEyLmNydDA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PSA9JD0oPSw9MD00PTg9PD1APUQ9SD1MPVA9VD1YPVw9YD1kPWg9bD1wPXQ9eD18PQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PSA9JD0oPSw9MD00PUw9WD1cPXg9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PSc9Nj08PUQ9Tz1XPWI9cz15PQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PTM9Oz1IPWI9aj14PQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PTU9Uj1wPXk9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PTw+ST5iPmg+","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEhpZ2hBc3N1cmFuY2VFVlJvb3RDQS5jcnQw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PiA+JD4oPiw+MD40Pjg+PD5APkQ+SD5MPlA+VD5YPlw+YD5kPmg+bD5wPnQ+eD4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PiA+Lj5EPlY+Wj5xPns+","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"PiQ+KD4sPjA+ND44Pjw+QD5EPkg+TD5QPlQ+WD5cPmA+ZD5oPmw+cD50Png+fD4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"P0g/Uz9iP20/fD8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"P2hmZmZmaDMz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"P2hVVVVVaFVV","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxMVN5c3RlbUBCeXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxMVN5c3RlbUBDaGFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxMVN5c3RlbUBXb3Jk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxMk1hZHRvb2xzQFRPUw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxM1N5c3RlbUBzdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNE1hZGJhc2ljQElMaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNFN5c3RlbUBUT2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNU1hZGJhc2ljQElCYXNpYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNU1hZGJhc2ljQFRJTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNU1hZHR5cGVzQFRTQnl0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNU1hZHR5cGVzQFRTQ2hhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNVN5c3RlbUBTaG9ydEludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNk1hZGJhc2ljQFRJQmFzaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNk1hZHRvb2xzQFRPc0VudW0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNk1hZHR5cGVzQFREQUJ5dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNk1hZHR5cGVzQFREQUNoYXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxNk1hZHR5cGVzQFREQVdvcmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxN01hZGJhc2ljQFREQUJhc2lj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxN01hZHR5cGVzQFRBU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxN01hZHR5cGVzQFREQUludDY0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxN01hZHR5cGVzQFRFeHRCb29s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxN1N5c3RlbUBBbnNpU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxN1N5c3RlbUBJSW50ZXJmYWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxN1N5c3RlbUBXaWRlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxOE1hZHR5cGVzQFREQVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxOE1hZHR5cGVzQFRTQm9vbGVhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxOE1hZHR5cGVzQFRTRXh0Qm9vbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxOU1hZGxpc3RzQElCYXNpY0xpc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxOU1hZHR5cGVzQFRBSVVua25vd24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxOU1hZHR5cGVzQFREQUJvb2xlYW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxOU1hZHR5cGVzQFREQUV4dEJvb2w=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxOU1hZHR5cGVzQFREQUludGVnZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQxOU1hZHR5cGVzQFREQVBvaW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyME1hZGJhc2ljQF9USUJhc2ljQF8x","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyME1hZGJhc2ljQFRDaGFuZ2VUeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyME1hZHR5cGVzQFREQUFuc2lDaGFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyME1hZHR5cGVzQFREQUNhcmRpbmFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyME1hZHR5cGVzQFREQUlVbmtub3du","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyME1hZHR5cGVzQFREQVNob3J0SW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyME1hZHR5cGVzQFREQVNtYWxsSW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyME1hZHR5cGVzQFREQVdpZGVDaGFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyMU1hZGxpc3RzQElQb2ludGVyTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyMU1hZHR5cGVzQE1hZEV4Y2VwdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyMU1hZHR5cGVzQFRBQW5zaVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyMU1hZHR5cGVzQFRBV2lkZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyMU1hZHR5cGVzQFREQU5hdGl2ZUludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyMk1hZHRvb2xzQFRNc2dIYW5kbGVyT08=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyMk1hZHR5cGVzQFREQUFuc2lTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyMk1hZHR5cGVzQFREQU5hdGl2ZVVJbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyMk1hZHR5cGVzQFREQVdpZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyM01hZGxpc3RzQElJbnRlcmZhY2VMaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyNE1hZGdyYXBoaWNzQFRHcmF5UGVyY2VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyNE1hZHR5cGVzQFRBVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyNU1hZGJhc2ljQElDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyNU1hZGJhc2ljQElDdXN0b21CYXNpY0xpc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyNU1hZHR5cGVzQFREQVVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyNk1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyN01hZGJhc2ljQFREYXRhRGVzdHJveVByb2NPTw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyN01hZGdyYXBoaWNzQFRTdHJldGNoUXVhbGl0eQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyOE1hZGJhc2ljQElCYXNpY0xpc3RTZWxlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyOE1hZGJhc2ljQFRJTGlzdENoYW5nZUV2ZW50T08=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQyOU1hZGJhc2ljQFRJQmFzaWNMaXN0U2VsZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQzME1hZGJhc2ljQF9USUN1c3RvbUJhc2ljTGlzdEBfMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQzME1hZGJhc2ljQF9USUN1c3RvbUJhc2ljTGlzdEBfMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQzME1hZGJhc2ljQF9USUN1c3RvbUJhc2ljTGlzdEBfMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQzME1hZGJhc2ljQF9USUN1c3RvbUJhc2ljTGlzdEBfNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQ1SW50NjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQ2RG91Ymxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQ3Qm9vbGVhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQ3SW50ZWdlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQ4QW5zaUNoYXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQ4Q2FyZGluYWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QCR4cCQ4U21hbGxJbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QENsYXNzZXNARmluYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QENsYXNzZXNAaW5pdGlhbGl6YXRpb24kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QENsYXNzZXNAUmVjdCRxcXJpaWlp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdldFBhY2thZ2VJbmZvVGFibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRCaXRtYXBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRCaXRtYXBAJGJjdHIkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRCaXRtYXBAR2V0Q2FudmFzJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRCaXRtYXBAR2V0UGl4ZWxGb3JtYXQkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRCaXRtYXBAR2V0U2NhbmxpbmUkcXFyaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRCaXRtYXBAU2V0UGl4ZWxGb3JtYXQkcXFyMjFHcmFwaGljc0BUUGl4ZWxGb3JtYXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRDYW52YXNAR2V0SGFuZGxlJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEdyYXBoaWNzQFRDYW52YXNAU3RyZXRjaERyYXckcXFycngxMVR5cGVzQFRSZWN0cDE3R3JhcGhpY3NAVEdyYXBoaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEluaWZpbGVzQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QEluaWZpbGVzQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9BbUludmFsaWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9JbmRleE91dE9mUmFuZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9JbnZhbGlkQ2xhc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9JbnZhbGlkSW5kZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9TZWN0aW9uQmxvY2tlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9TZWN0aW9uTGVhdmVFcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQENFcnJvclN0cl9Vbmtub3du","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQE5ld0NyaXRpY2FsU2VjdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAJGJjdHIkcXFyb3VpeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAJGJkdHIkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAX0FkZFJlZiRxcXN2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAX1JlbGVhc2UkcXFzdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAQWRkUGFyZW50JHFxcnAyNk1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAQWZ0ZXJDb25zdHJ1Y3Rpb24kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAQmVmb3JlRGVzdHJ1Y3Rpb24kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAQ2hlY2tWYWxpZCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNARGVsUGFyZW50JHFxcnAyNk1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0Q2hlY2tlZCRxcXJ4NTNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MjVNYWRiYXNpY0BJQ3VzdG9tQmFzaWNMaXN0JQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0RGF0YSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0Rm9jdXNlZCRxcXJ4NTNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MjVNYWRiYXNpY0BJQ3VzdG9tQmFzaWNMaXN0JQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0SW5kZXgkcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0TGFzdENoYW5nZVR5cGUkcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0TGFzdEVycm9yTm8kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0TGFzdEVycm9yU3RyJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0T2xkSW5kZXgkcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0U2VsZWN0ZWQkcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0U3RyQnVmJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0U3RyQnVmQSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAR2V0U3RyQnVmVyRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNASXNWYWxpZCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNATmV3SW5zdGFuY2UkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAUXVlcnlJbnRlcmZhY2UkcXFzcng1X0dVSURwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2VsZkFzVE9iamVjdCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0Q2hlY2tlZCRxcXJ4NTNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MjVNYWRiYXNpY0BJQ3VzdG9tQmFzaWNMaXN0JTE3TWFkdHlwZXNAVEV4dEJvb2w=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0RGF0YSRxcXJwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0RGF0YSRxcXJwdnBxcXJycHYkdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0RGF0YSRxcXJwdnlucHFxcnJwdiR2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0Rm9jdXNlZCRxcXJ4NTNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MjVNYWRiYXNpY0BJQ3VzdG9tQmFzaWNMaXN0JW8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0TGFzdENoYW5nZVR5cGUkcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCUyME1hZGJhc2ljQFRDaGFuZ2VUeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0TGFzdEVycm9yJHFxcnVpeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0TGFzdEVycm9yTm8kcXFydWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0TGFzdEVycm9yU3RyJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0U2VsZWN0ZWQkcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCVv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0U3RyQnVmJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0U3RyQnVmJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0U3RyQnVmQSRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU2V0U3RyQnVmVyRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU3VjY2VzcyRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNAU3VwcG9ydHMkcXFycng1X0dVSUQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNMaXN0U2VsZWN0aW9uQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNMaXN0U2VsZWN0aW9uQCRiY3RyJHFxcm91aXgyMFN5c3RlbUBVbmljb2RlU3RyaW5neDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCVv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNMaXN0U2VsZWN0aW9uQCRiZHRyJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNMaXN0U2VsZWN0aW9uQEdldFBhcmVudExpc3QkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQmFzaWNMaXN0U2VsZWN0aW9uQFBhcmVudExpc3RDaGFuZ2VkJHFxcng1M1N5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQyNU1hZGJhc2ljQElDdXN0b21CYXNpY0xpc3QleDQzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE1TWFkYmFzaWNASUJhc2ljJW8yME1hZGJhc2ljQFRDaGFuZ2VUeXBlaWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QCRiZHRyJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEFkZEl0ZW0kcXFyeDQzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE1TWFkYmFzaWNASUJhc2ljJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEFkZEl0ZW1zJHFxcnB4NDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMleGk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEJhc2ljSXRlbSRxcXJp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEJlZ2luUmVmcmVzaCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QENoYW5nZSRxcXJ4NDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMlbzIwTWFkYmFzaWNAVENoYW5nZVR5cGVpaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QERlbGV0ZUl0ZW0kcXFyaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEVuZFJlZnJlc2gkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEdldFNvcnREb3duJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEdldFNvcnRJbmZvJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEdldFNvcnRQYXJhbXMkcXFycnBxcXJ4NDJTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTRNYWRiYXNpY0BJTGlzdCV4NDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMldDJpJGlyb3Jp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEdldFNvcnRQcm9jJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QEluc2VydEl0ZW0kcXFyeDQzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE1TWFkYmFzaWNASUJhc2ljJWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFBhY2skcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFJlZ2lzdGVyQ2hhbmdlRXZlbnQkcXFycHFxcng1M1N5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQyNU1hZGJhc2ljQElDdXN0b21CYXNpY0xpc3QleDQzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE1TWFkYmFzaWNASUJhc2ljJW8yME1hZGJhc2ljQFRDaGFuZ2VUeXBlaWkkdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFJlZ2lzdGVyQ2hhbmdlRXZlbnQkcXFyeW5wcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCV4NDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMlbzIwTWFkYmFzaWNAVENoYW5nZVR5cGVpaSR2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFNldENhcGFjaXR5JHFxcmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFNldFNvcnREb3duJHFxcm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFNldFNvcnRJbmZvJHFxcmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFNldFNvcnRQYXJhbXMkcXFycHFxcng0MlN5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQxNE1hZGJhc2ljQElMaXN0JXg0M1N5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQxNU1hZGJhc2ljQElCYXNpYyV0MmkkaW9p","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFNldFNvcnRQcm9jJHFxcnBxcXJ4NDJTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTRNYWRiYXNpY0BJTGlzdCV4NDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMldDJpJGk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFNvcnRJdGVtJHFxcmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFVucmVnaXN0ZXJDaGFuZ2VFdmVudCRxcXJwcXFyeDUzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDI1TWFkYmFzaWNASUN1c3RvbUJhc2ljTGlzdCV4NDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMlbzIwTWFkYmFzaWNAVENoYW5nZVR5cGVpaSR2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJQ3VzdG9tQmFzaWNMaXN0QFVucmVnaXN0ZXJDaGFuZ2VFdmVudCRxcXJ5bnBxcXJ4NTNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MjVNYWRiYXNpY0BJQ3VzdG9tQmFzaWNMaXN0JXg0M1N5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQxNU1hZGJhc2ljQElCYXNpYyVvMjBNYWRiYXNpY0BUQ2hhbmdlVHlwZWlpJHY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEAkYmN0ciRxcXJvdWl4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEAkYmR0ciRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBDbGVhciRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBHZXRDYXBhY2l0eSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBHZXRGb2N1c2VkSXRlbSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBHZXRJdGVtQ291bnQkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBHZXRMYXN0Rm9jdXNlZEl0ZW0kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBHZXRTZWxlY3RlZENvdW50JHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBHcm93JHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBMb2NrJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBRdWlja1NvcnQkcXFycHZ0MWlpdDFvaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBTZXRMYXN0Rm9jdXNlZEl0ZW0kcXFyNDNTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTVNYWRiYXNpY0BJQmFzaWMl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljQFRJTGlzdEBVbmxvY2skcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljX0BAR2V0UGFja2FnZUluZm9UYWJsZSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljX0BAUGFja2FnZUxvYWQkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljX0BAUGFja2FnZVVubG9hZCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGJhc2ljX0Bpbml0aWFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY29kZSRxcXJwdmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY29kZSRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY29kZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY29kZVckcXFycHZp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY29kZVckcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY3J5cHQkcXFycHZ1aXgyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJWo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY3J5cHQkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmd4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY3J5cHQkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQleDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQlag==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY3J5cHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QERlY3J5cHRX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY29kZSRxcXJwdmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY29kZSRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY29kZSRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY29kZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY29kZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY3J5cHQkcXFycHZ1aXgyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJWo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY3J5cHQkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmd4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY3J5cHQkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQleDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQlag==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY3J5cHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEVuY3J5cHRX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QE9sZERlY3J5cHQkcXFycHZ1aXgyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QE9sZERlY3J5cHQkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQleDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QE9sZEVuY3J5cHQkcXFycHZ1aXgyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGNyeXB0QE9sZEVuY3J5cHQkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQleDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQEFscGhhQmxlbmQkcXFycDE2R3JhcGhpY3NAVEJpdG1hcHQxdDF1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQEFscGhhQmxlbmQkcXFycDE2R3JhcGhpY3NAVEJpdG1hcHQxdWl0MWlp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQERyYXckcXFycDE2R3JhcGhpY3NAVEJpdG1hcHQxdDFpaWlpMjRNYWRncmFwaGljc0BUR3JheVBlcmNlbnR1aTI3TWFkZ3JhcGhpY3NAVFN0cmV0Y2hRdWFsaXR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQERyYXckcXFydWl1aXAxNkdyYXBoaWNzQFRCaXRtYXBpaWlpMjRNYWRncmFwaGljc0BUR3JheVBlcmNlbnR1aTI3TWFkZ3JhcGhpY3NAVFN0cmV0Y2hRdWFsaXR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQEdyYXlTY2FsZSRxcXJwMTZHcmFwaGljc0BUQml0bWFwMjRNYWRncmFwaGljc0BUR3JheVBlcmNlbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQFN0cmV0Y2hCaXRtYXAkcXFycDE2R3JhcGhpY3NAVEJpdG1hcHQxaWkyN01hZGdyYXBoaWNzQFRTdHJldGNoUXVhbGl0eQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGdyYXBoaWNzQFN0cmV0Y2hCaXRtYXAkcXFycDE2R3JhcGhpY3NAVEJpdG1hcHQxdDF0MTI3TWFkZ3JhcGhpY3NAVFN0cmV0Y2hRdWFsaXR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGxpc3RzQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGxpc3RzQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGxpc3RzQE5ld0Jhc2ljTGlzdCRxcXJweDQzU3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE1TWFkYmFzaWNASUJhc2ljJXhp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGxpc3RzQE5ld0Jhc2ljTGlzdCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGxpc3RzQE5ld0ludGVyZmFjZUxpc3QkcXFycHg0NVN5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQxN1N5c3RlbUBJSW50ZXJmYWNlJXhp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGxpc3RzQE5ld0ludGVyZmFjZUxpc3QkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGxpc3RzQE5ld1BvaW50ZXJMaXN0JHFxcnB4cHZ4aXBxcXJycHYkdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZGxpc3RzQE5ld1BvaW50ZXJMaXN0JHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BCZWdpblVwZGF0ZVJlc291cmNlRXhXJHFxc3VpcDlfRklMRVRJTUVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BCZWdpblVwZGF0ZVJlc291cmNlVyRxcXNwYmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BEZWxldGVJY29uR3JvdXBSZXNvdXJjZVckcXFzdWlwYnVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BEb250U2hyaW5rUmVzb3VyY2VTZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BFbmRVcGRhdGVSZXNvdXJjZVckcXFzdWlp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BGaW5hbGl6YXRpb24kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BHZXRJY29uR3JvdXBSZXNvdXJjZVckcXFzdWlwYnVzcnAxN01hZHJlc0BUSWNvbkdyb3Vw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BHZXRSZXNvdXJjZVckcXFzdWlwYnQydXNycHZydWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0Bpbml0aWFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BMb2FkQml0bWFwUmVzb3VyY2VXJHFxc3VpcGJ1c3Qy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BMb2FkSWNvbkdyb3VwUmVzb3VyY2VXJHFxc3VpcGJ1c3Qy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BTYXZlQml0bWFwUmVzb3VyY2VXJHFxc3VpcGJ1c3Qy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BTYXZlSWNvbkdyb3VwUmVzb3VyY2VXJHFxc3VpcGJ1c3Qy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHJlc0BVcGRhdGVSZXNvdXJjZVckcXFzdWlwYnQydXNwdnVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQW5zaVRvV2lkZUV4JHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJW8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQm9vbGVhblRvQ2hhciRxcXJv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQm9vbGVhblRvQ2hhckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQm9vbGVhblRvQ2hhclckcXFybw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ050RGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVN0ciRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Qx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVN0ciRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVN0ckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVN0clc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVRleHQkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVRleHQkcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQldDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVRleHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29tcGFyZVRleHRX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29weVIkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29weVIkcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQldWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29weVJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAQ29weVJX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARGVjb2RlVXRmOCRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARGVjcnlwdFN0ciRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARGVsZXRlUiRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Vp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARGVsZXRlUiRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARGVsZXRlUkE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARGVsZXRlUlc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARW5jb2RlVXRmOCRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARXJyb3JDb2RlVG9TdHIkcXFydWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARXJyb3JDb2RlVG9TdHJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARXJyb3JDb2RlVG9TdHJXJHFxcnVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARXh0cmFjdEZpbGVEcml2ZVckcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARXh0cmFjdEZpbGVFeHRXJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARXh0cmFjdEZpbGVOYW1lVyRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARXh0cmFjdEZpbGVQYXRoVyRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARmlsZU1hdGNoJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5ndDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARmlsZU1hdGNoJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXQx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARmlsZU1hdGNoQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARmlsZU1hdGNoVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARmlsbFN0ciRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ2li","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARmlsbFN0ciRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVpYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARmlsbFN0ckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARmlsbFN0clc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARmluYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARm9ybWF0U3ViU3RycyRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARm9ybWF0U3ViU3RycyRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARm9ybWF0U3ViU3Ryc0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NARm9ybWF0U3ViU3Ryc1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAaW5pdGlhbGl6YXRpb24kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50ZXJuYWxTdHJNYXRjaFckcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd0MW8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeCRxcXJpaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeCRxcXJqaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeCRxcXJ1aWlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeEEkcXFyaWlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeEEkcXFyamlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeEEkcXFydWlpYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeFckcXFyaWli","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeFckcXFyamli","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9IZXhFeFckcXFydWlpYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9TdHJFeCRxcXJpaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9TdHJFeCRxcXJqaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9TdHJFeCRxcXJ1aWlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9TdHJFeEEkcXFyaWlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9TdHJFeEEkcXFyamlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9TdHJFeEEkcXFydWlpYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9TdHJFeFckcXFyaWli","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9TdHJFeFckcXFyamli","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASW50VG9TdHJFeFckcXFydWlpYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASXNUZXh0RXF1YWwkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASXNUZXh0RXF1YWwkcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQldDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASXNUZXh0RXF1YWxB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASXNUZXh0RXF1YWxX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NASXNWYWxpZElkZW50VyRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2VlcCRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3VpdWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2VlcCRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV1aXVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2VlcEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2VlcFIkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmd1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2VlcFIkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQldWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2VlcFJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2VlcFJX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2VlcFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbENoYXIkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmdi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbENoYXIkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQlYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbENoYXJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbENoYXJzJHFxcnIyMFN5c3RlbUBVbmljb2RlU3RyaW5ncngyOVN5c3RlbUAlU2V0JHRjJGl1YyQwJGl1YyQyNTUl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbENoYXJzJHFxcnIyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXJ4MjlTeXN0ZW1AJVNldCR0YyRpdWMkMCRpdWMkMjU1JQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbENoYXJzQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbENoYXJzVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbENoYXJX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbFN0ciRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3gyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbFN0ciRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbFN0ckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAS2lsbFN0clc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATG93Q2hhciRxcXJ4Yg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATG93Q2hhciRxcXJ4Yw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATG93Q2hhckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATG93Q2hhclc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATG93U3RyJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATG93U3RyJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATG93U3RyQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATG93U3RyVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATXNUb1N0ciRxcXJ1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATXNUb1N0ckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NATXNUb1N0clckcXFydWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zQ2hhcnMkcXFycngyOVN5c3RlbUAlU2V0JHRjJGl1YyQwJGl1YyQyNTUleDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd1aXVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zQ2hhcnMkcXFycngyOVN5c3RlbUAlU2V0JHRjJGl1YyQwJGl1YyQyNTUleDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQldWl1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zQ2hhcnNB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zQ2hhcnNX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zTm90Q2hhcnNXJHFxcnJ4MjlTeXN0ZW1AJVNldCR0YyRpdWMkMCRpdWMkMjU1JXgyMFN5c3RlbUBVbmljb2RlU3RyaW5ndWl1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zUENoYXIkcXFycGJ0MXVpdWlvdWl1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zUENoYXIkcXFycGN0MXVpdWlvdWl1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zUENoYXJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zUENoYXJX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zU3RyJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5ndDF1aXVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zU3RyJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXQxdWl1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zU3RyQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zU3RySXMxJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5ndDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zU3RySXMxJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXQx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zU3RySXMxQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zU3RySXMxVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zU3RyVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dCRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3QxdWl1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dCRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV0MXVpdWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dElzMSRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Qx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dElzMSRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dElzMUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dElzMVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUG9zVGV4dFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVN0ciRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3gyMFN5c3RlbUBVbmljb2RlU3RyaW5ndDJv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVN0ciRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV0Mm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVN0ckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVN0clc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVRleHQkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmd4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Qybw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVRleHQkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQleDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQldDJv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVRleHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmVwbGFjZVRleHRX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0RGVsZXRlJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5ndWl1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0RGVsZXRlJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXVpdWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0RGVsZXRlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0RGVsZXRlUiRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Vp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0RGVsZXRlUiRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0RGVsZXRlUkE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0RGVsZXRlUlc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0RGVsZXRlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0VHJpbVN0ciRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0VHJpbVN0ciRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0VHJpbVN0ckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAUmV0VHJpbVN0clc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU2l6ZVRvU3RyJHFxcmo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU2l6ZVRvU3RyQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU2l6ZVRvU3RyVyRxcXJq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyTWF0Y2gkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyTWF0Y2gkcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQldDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyTWF0Y2hB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyTWF0Y2hFeCRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyTWF0Y2hFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyTWF0Y2hX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyVG9JbnRFeCRxcXJvcGJp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyVG9JbnRFeCRxcXJvcGNp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyVG9JbnRFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3RyVG9JbnRFeFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5ndWlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXVpYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyQ291bnQkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmdj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyQ291bnQkcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQlYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyQ291bnRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyQ291bnRX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyRXhpc3RzJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5ndDFj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyRXhpc3RzJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXQxYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyRXhpc3RzQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyRXhpc3RzVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViU3RyVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViVGV4dEV4aXN0cyRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3QxYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViVGV4dEV4aXN0cyRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV0MWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViVGV4dEV4aXN0c0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAU3ViVGV4dEV4aXN0c1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVGV4dE1hdGNoJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5ndDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVGV4dE1hdGNoJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXQx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVGV4dE1hdGNoQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVGV4dE1hdGNoRXgkcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQldDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVGV4dE1hdGNoRXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVGV4dE1hdGNoVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVHJpbVN0ciRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVHJpbVN0ciRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVHJpbVN0ckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVHJpbVN0clc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVXBDaGFyJHFxcnhi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVXBDaGFyJHFxcnhj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVXBDaGFyQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVXBDaGFyVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVXBTdHIkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVXBTdHIkcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVXBTdHJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAVXBTdHJX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHN0cmluZ3NAV2lkZVRvQW5zaUV4JHFxcnBi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEFkZE1zZ0hhbmRsZXIkcXFycHFxcnA2SFdORF9fdWlpaXJpJHZ1aXVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEFkZE1zZ0hhbmRsZXIkcXFyeW5wcXFycDZIV05EX191aWlpcmkkdnVpdWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQENoZWNrUHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQENPc0Rlc2Ny","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQERlbE1zZ0hhbmRsZXIkcXFycHFxcnA2SFdORF9fdWlpaXJpJHZ1aXVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQERlbE1zZ0hhbmRsZXIkcXFyeW5wcXFycDZIV05EX191aWlpcmkkdnVpdWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEZpbGVWZXJzaW9uVG9TdHIkcXFyag==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEZpbGVWZXJzaW9uVG9TdHJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEZpbGVWZXJzaW9uVG9TdHJXJHFxcmo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEZpbmRNb2R1bGUkcXFycHZydWlyMjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEZpbmRNb2R1bGUkcXFycHZydWlyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEZpbmRNb2R1bGVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEZpbmRNb2R1bGVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uU3RyJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uU3RyJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uU3RyQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uU3RyVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZpbGVWZXJzaW9uVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEZyZWVTeXN0ZW1SZXNvdXJjZXMkcXFydXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlRXhwb3J0RGlyZWN0b3J5JHFxcnVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlSW1wb3J0RGlyZWN0b3J5JHFxcnVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlTnRIZWFkZXJzJHFxcnVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlUHJvY0FkZHJlc3MkcXFydWlp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlUHJvY0FkZHJlc3MkcXFydWl4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlUHJvY05hbWUkcXFydWlwdm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlUHJvY05hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldEltYWdlUHJvY05hbWVXJHFxcnVpcHZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldExvbmdGaWxlTmFtZSRxcXIyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldExvbmdGaWxlTmFtZSRxcXIyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldExvbmdGaWxlTmFtZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldExvbmdGaWxlTmFtZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldFNob3J0RmlsZU5hbWUkcXFyMjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldFNob3J0RmlsZU5hbWUkcXFyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldFNob3J0RmlsZU5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldFNob3J0RmlsZU5hbWVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEdldFNpemVPZkltYWdlJHFxcnAxN19JTUFHRV9OVF9IRUFERVJT","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEhpZGVMZWFrXw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQEluaXRUcnlFeGNlcHRGaW5hbGx5JHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQElzNjRiaXRNb2R1bGUkcXFzcGI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQElzQmFkUmVhZFB0cjIkcXFycHZ1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQElzQmFkV3JpdGVQdHIyJHFxcnB2dWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQElzV2luZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQE1ldGhvZFRvUHJvY2VkdXJlJHFxcnAxNFN5c3RlbUBUT2JqZWN0cHZp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQE1ldGhvZFRvUHJvY2VkdXJlJHFxcnJ4MTZNYWR0eXBlc0BUTWV0aG9kaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQE1zZ0hhbmRsZXJXaW5kb3ckcXFydWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQE5lZWRNb2R1bGVGaWxlTWFwJHFxcnVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQE5lZWRNb2R1bGVGaWxlTWFwRXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQE9TJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQFByb2NlZHVyZVRvTWV0aG9kJHFxcnAxNFN5c3RlbUBUT2JqZWN0cHY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQFJlc1RvU3RyJHFxcnVpcGJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQFRpY2tEaWYkcXFydWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQFVubWFuZ2xlQSRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQFVubWFuZ2xlVyRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Qx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHRvb2xzQFZpcnR1YWxUb1JhdyRxcXJwMTdfSU1BR0VfTlRfSEVBREVSU3Vp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHR5cGVzQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHR5cGVzQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHR5cGVzQE1hZEV4Y2VwdGlvbkA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHR5cGVzQE1hZEV4Y2VwdGlvbkAkYmR0ciRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHR5cGVzQE1hZEV4Y2VwdGlvbkBDbGVhblVwU3RhY2tJbmZvUHJvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHR5cGVzQE1hZEV4Y2VwdGlvbkBDcmVhdGUkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBDb21wcmVzcyRxcXJwdnQxaWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBDb21wcmVzcyRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Qxbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBDb21wcmVzcyRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBGaW5hbGl6YXRpb24kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBHZXRDb21wcmVzc2VkRmlsZUluZm8kcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmdyanJ1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBHZXRVbmNvbXByZXNzZWRGaWxlSW5mbyRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3JqcnVp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBpbml0aWFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBJc0NvbXByZXNzZWRGaWxlRXF1YWwkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBVbmNvbXByZXNzJHFxcnB2dDFpaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBVbmNvbXByZXNzJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5ndDFqdWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBVbmNvbXByZXNzJHFxcngyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBVcGRhdGVDcmMzMiRxcXJ1aXB4dmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hZHppcEBaaXAkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmdweDIwU3lzdGVtQFVuaWNvZGVTdHJpbmd4aXg0NVN5c3RlbUAlRHluYW1pY0FycmF5JHQyMFN5c3RlbUBVbmljb2RlU3RyaW5nJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hdGhAQ2VpbCRxcXJ4Zw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QE1hdGhATWluJHFxcnhpeGk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFJlZ2lzdHJ5QEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFJlZ2lzdHJ5QGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAX2xsZGl2JHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAX2xsbW9kJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAX2xsbXVsJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAQWJzdHJhY3RFcnJvciRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAQWZ0ZXJDb25zdHJ1Y3Rpb24kcXFycDE0U3lzdGVtQFRPYmplY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAQmVmb3JlRGVzdHJ1Y3Rpb24kcXFycDE0U3lzdGVtQFRPYmplY3R6Yw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAQ2xhc3NDcmVhdGUkcXFycDE3U3lzdGVtQFRNZXRhQ2xhc3Nv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAQ2xhc3NEZXN0cm95JHFxcnAxNFN5c3RlbUBUT2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAQ29weVJlY29yZCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARGlzcG9zZSRxcXJwdnQx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARG9uZUV4Y2VwdCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARHluQXJyYXlBc2ckcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARHluQXJyYXlDbGVhciRxcXJycHZwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARHluQXJyYXlDb3B5JHFxcnB2dDFycHY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARHluQXJyYXlIaWdoJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARHluQXJyYXlMZW5ndGgkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARHluQXJyYXlTZXRMZW5ndGgkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARW5zdXJlQW5zaVN0cmluZyRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCV1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARW5zdXJlVW5pY29kZVN0cmluZyRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARmlsbENoYXIkcXFycHZpYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARmluYWxpemVBcnJheSRxcXJwdnQxdWk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARmluYWxpemVSZWNvcmQkcXFycHZ0MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBARnJlZU1lbSRxcXJwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAR2V0TWVtJHFxcmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBASGFuZGxlQW55RXhjZXB0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBASGFuZGxlRmluYWxseSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBASW50ZkFkZFJlZiRxcXJ4NDVTeXN0ZW1AJURlbHBoaUludGVyZmFjZSR0MTdTeXN0ZW1ASUludGVyZmFjZSU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBASW50ZkNsZWFyJHFxcnI0NVN5c3RlbUAlRGVscGhpSW50ZXJmYWNlJHQxN1N5c3RlbUBJSW50ZXJmYWNlJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBASW50ZkNvcHkkcXFycjQ1U3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE3U3lzdGVtQElJbnRlcmZhY2UleDQ1U3lzdGVtQCVEZWxwaGlJbnRlcmZhY2UkdDE3U3lzdGVtQElJbnRlcmZhY2Ul","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckFkZFJlZiRxcXJwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckFycmF5Q2xyJHFxcnB2aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckFzZyRxcXJwdnB4dg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckNhdCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckNhdDMkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckNhdE4kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckNsciRxcXJwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckNvcHkkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckRlbGV0ZSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckVxdWFsJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckZyb21BcnJheSRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVwY2l1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckZyb21DaGFyJHFxcnIyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJWN1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckZyb21QQ2hhciRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVwY3Vz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckZyb21QQ2hhckxlbiRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCVwY2l1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckZyb21QV0NoYXIkcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQlcGJ1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckZyb21VU3RyJHFxcnIyN1N5c3RlbUAlQW5zaVN0cmluZ1QkdXMkaTAkJXgyMFN5c3RlbUBVbmljb2RlU3RyaW5ndXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckluc2VydCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckxBc2ckcXFycHZweHY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0ckxlbiRxcXJ4MjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0clNldExlbmd0aCRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATFN0clRvUENoYXIkcXFyeDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBATmV3JHFxcmlwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAUGFja2FnZUxvYWQkcXFycHgyM1N5c3RlbUBQYWNrYWdlSW5mb1RhYmxlcDE3U3lzdGVtQFRMaWJNb2R1bGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAUGFja2FnZVVubG9hZCRxcXJweDIzU3lzdGVtQFBhY2thZ2VJbmZvVGFibGVwMTdTeXN0ZW1AVExpYk1vZHVsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAUmFpc2VBZ2FpbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAUmFpc2VFeGNlcHQkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAUk9VTkQkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAUnVuRXJyb3IkcXFydWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAU2V0U3ViJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAU2V0VW5pb24kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVHJ5RmluYWxseUV4aXQkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVW5pcXVlU3RyaW5nQSRxcXJyMjdTeXN0ZW1AJUFuc2lTdHJpbmdUJHVzJGkwJCU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVW5pcXVlU3RyaW5nVSRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckFkZFJlZiRxcXJwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckFycmF5Q2xyJHFxcnB2aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckFzZyRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3gyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckNhdCRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3gyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckNhdDMkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmd4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Qy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckNhdE4kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckNsciRxcXJwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckNvcHkkcXFyeDIwU3lzdGVtQFVuaWNvZGVTdHJpbmdpaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckRlbGV0ZSRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ2lp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckVxdWFsJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckZyb21MU3RyJHFxcnIyMFN5c3RlbUBVbmljb2RlU3RyaW5neDI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckZyb21QQ2hhciRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ3Bj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckZyb21QV0NoYXIkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmdwYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckZyb21XQXJyYXkkcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmdwYmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckZyb21XQ2hhciRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ2I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckluc2VydCRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZ3IyMFN5c3RlbUBVbmljb2RlU3RyaW5naQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckxBc2ckcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmd4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0ckxlbiRxcXJ4MjBTeXN0ZW1AVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0clNldExlbmd0aCRxcXJyMjBTeXN0ZW1AVW5pY29kZVN0cmluZ2k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAVVN0clRvUFdDaGFyJHFxcngyMFN5c3RlbUBVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAV1N0ckNsciRxcXJwdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAV1N0ckZyb21VU3RyJHFxcnIxN1N5c3RlbUBXaWRlU3RyaW5neDIwU3lzdGVtQFVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBAV1N0clRvUFdDaGFyJHFxcngxN1N5c3RlbUBXaWRlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBBbGxvY01lbSRxcXJ1aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBFeGNlcHRpb25DbGFzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBFeGNlcHRPYmpQcm9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBGaW5hbGl6YXRpb24kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBHZXQ4MDg3Q1ckcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBpbml0aWFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBNb3ZlJHFxcnB4dnB2aQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBSZWdpc3Rlck1vZHVsZSRxcXJwMTdTeXN0ZW1AVExpYk1vZHVsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBTZXQ4MDg3Q1ckcXFydXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBTaW4kcXFyeGc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QCRiY3RyJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QCRiZHRyJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QEFmdGVyQ29uc3RydWN0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QEJlZm9yZURlc3RydWN0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QERlZmF1bHRIYW5kbGVyJHFxcnB2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QERpc3BhdGNoJHFxcnB2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QEVxdWFscyRxcXJwMTRTeXN0ZW1AVE9iamVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QEZyZWUkcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QEZyZWVJbnN0YW5jZSRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QEdldEhhc2hDb2RlJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QEdldEludGVyZmFjZSRxcXJyeDVfR1VJRHB2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QE5ld0luc3RhbmNlJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QFNhZmVDYWxsRXhjZXB0aW9uJHFxcnAxNFN5c3RlbUBUT2JqZWN0cHY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBUT2JqZWN0QFRvU3RyaW5nJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBVbmlxdWVTdHJpbmckcXFycjIwU3lzdGVtQFVuaWNvZGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBVbmlxdWVTdHJpbmckcXFycjI3U3lzdGVtQCVBbnNpU3RyaW5nVCR1cyRpMCQl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3RlbUBVbnJlZ2lzdGVyTW9kdWxlJHFxcnAxN1N5c3RlbUBUTGliTW9kdWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3V0aWxzQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFN5c3V0aWxzQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFR5cGluZm9ARmluYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFR5cGluZm9AaW5pdGlhbGl6YXRpb24kcXFydg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFZhcmlhbnRzQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFZhcmlhbnRzQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFZhcnV0aWxzQEZpbmFsaXphdGlvbiRxcXJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QFZhcnV0aWxzQGluaXRpYWxpemF0aW9uJHFxcnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"XEZpbGVWZXJzaW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"XFN0cmluZ0ZpbGVJbmZvXA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"XFZhckZpbGVJbmZvXFRyYW5zbGF0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"YmVmb3JlQ2hhbmdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QmljdWJpYzUw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QmljdWJpYzYw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"QmljdWJpYzc1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Y2hhbmdlVHlwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q2hhbmdlV2luZG93TWVzc2FnZUZpbHRlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q2hhbmdlV2luZG93TWVzc2FnZUZpbHRlckV4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJBc3N1cmVkSURUaW1lc3RhbXBpbmdDQS5jcnQw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Y29tY3RsMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZU1hcHBpbmdB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZU1hcHBpbmdX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlTXV0ZXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlV2luZG93RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGVmV2luZG93UHJvY0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGVmV2luZG93UHJvY1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlQ3JpdGljYWxTZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlRmlsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlRmlsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"REVTQ1JJUFRJT04=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGVzdHJveVdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGlnaUNlcnQgQXNzdXJlZCBJRCBSb290IENBMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGlnaUNlcnQgRVYgQ29kZSBTaWduaW5nIENB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGlnaUNlcnQgRVYgQ29kZSBTaWduaW5nIENBMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGlnaUNlcnQgSW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGlnaUNlcnQgVGltZXN0YW1wIDIwMjEw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RGlnaUNlcnQsIEluYy4xIDA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXJDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVRpbWVUb0Rvc0RhdGVUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVRpbWVUb0xvY2FsRmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmluZENsb3Nl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0RmlsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0RmlsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmluZFJlc291cmNlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RmluZFJlc291cmNlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Rm9ybWF0TWVzc2FnZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Rm9ybWF0TWVzc2FnZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUxpYnJhcnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZVJlc291cmNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Z2RpMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3NJZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZElk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUF0dHJpYnV0ZXNB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUF0dHJpYnV0ZXNX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvU2l6ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvU2l6ZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RnJlZVN5c3RlbVJlc291cmNlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9jYWxlSW5mb0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9jYWxlSW5mb1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TmF0aXZlU3lzdGVtSW5mbw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0T2JqZWN0Vw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtTWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcFBhdGhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcFBhdGhX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGhyZWFkTG9jYWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbkV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbkV4Vw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SEstMjc3MDg1MjA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL29jc3AuZGlnaWNlcnQuY29tME8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SFdpblR5cGVzPVdpbmRvd3M7V2luUHJvY3M9V2luZG93cztEYmlUeXBlcz1CREU7RGJpUHJvY3M9QkRFO0RiaUVycnM9QkRFOyFtYWRCYXNpYyAxLjIuNSAgLSAgd3d3Lm1hZHNoaS5uZXRUUEYwVE1hZEV4Y2VwdG1hZEV4Y2VwdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SUJhc2ljTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SUJhc2ljTGlzdFNlbGVjdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SUNyaXRpY2FsU2VjdGlvbmw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SUN1c3RvbUJhc2ljTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SUludGVyZmFjZUxpc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2VMaXN0X0RyYXc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2VMaXN0X0dldEltYWdlSW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW5kZXggb3V0IG9mIHJhbmdlLg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJmYWNlIHdpdGggcmVmZXJlbmNlIGNvdW50ID4wIGRlc3Ryb3llZC4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJsb2NrZWREZWNyZW1lbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJsb2NrZWRJbmNyZW1lbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBjbGFzcy4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBpbmRleC4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SVBvaW50ZXJMaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SXNXaW5kb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"SXNXaW5kb3dVbmljb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"a2VybmVsMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"S21hZFR5cGVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TGFuY3pvczM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TGFuY3pvczQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bGN0TmV3bGN0RGVsZXRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bGN0VW5jaGFuZ2VkbGN0Q2hhbmdlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TGVhdmVDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZFJlc291cmNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxBbGxvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxGcmVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TG9ja1Jlc291cmNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNtcEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmxlblc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkQmFzaWMgMS4yLjUgIC0gIHd3dy5tYWRzaGkubmV0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkQmFzaWMk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkQmFzaWNf","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkQmFzaWNfLmJwbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkQmFzaWNs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TUFEQ0FMSUJSQVRF","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkQ3J5cHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TWFkRXhjZXB0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TWFkRXhjZXB0aW9uJA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkR3JhcGhpY3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkU3RyaW5ncw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkVG9vbHNNc2dIYW5kbGVyV2luZG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkVHlwZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkVHlwZXNM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bWFkVHlwZXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TWFwVmlld09mRmlsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TWVkaWEgQ2VudGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"TXVsdGlCeXRlVG9XaWRlQ2hhcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"Tm9TZXR0aW5ncw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"bnRkbGwuZGxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"T1JBTkdFIFZJRVcgTElNSVRFRDA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"T1JBTkdFIFZJRVcgTElNSVRFRDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"b3NXaW4xMG9zV2luTnROZXc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"b3NXaW4yMDA4cjI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"b3NXaW4yMDEycjI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"b3NXaW44b3NXaW4yMDEy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"b3NXaW45NW9zcjI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"b3NXaW45OG9zV2luOThzZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"b3NXaW5NRW9zV2luOXhOZXdvc1dpbk50T2xk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"b3NXaW5OdDQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"b3NXaW5YUG9zV2luMjAwM29zV2luVmlzdGFvc1dpbjIwMDg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UEFDS0FHRUlORk8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UEFDS0FHRU9QVElPTlNUTUFERVhDRVBU","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdE1lc3NhZ2VX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZSBPcmdhbml6YXRpb24x","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UVFRUVFRUVFTVlc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UkFueSB1c2Ugb2YgdGhpcyBDZXJ0aWZpY2F0ZSBjb25zdGl0dXRlcyBhY2NlcHRhbmNlIG9mIHRoZSBEaWdpQ2VydCBDUC9DUFMgYW5kIHRoZSBSZWx5aW5nIFBhcnR5IEFncmVlbWVudCB3aGljaCBsaW1pdCBsaWFiaWxpdHkgYW5kIGFyZSBpbmNvcnBvcmF0ZWQgaGVyZWluIGJ5IHJlZmVyZW5jZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZEZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJDbGFzc0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UmVsZWFzZU11dGV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"cnQjSHQ7SHRT","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"cnRsMTIwLmJwbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"UnRsR2V0VmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RW5kT2ZGaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUF0dHJpYnV0ZXNB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUF0dHJpYnV0ZXNX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVBvaW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U2l6ZW9mUmVzb3VyY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U29mdEN1YmljMTAw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U29mdEN1YmljNTA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U29mdEN1YmljNjA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U29mdEN1YmljNzA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U29mdEN1YmljODA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U09QTUlKR0NEVFFSTktMSEVGXnFy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U3BsaW5lMzY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U3BsaW5lNjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"c3FIaWdoc3FWZXJ5SGlnaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtIHdyaXRlIGVycm9yLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VEFBbnNpU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGFibGV0IFBD","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VEFTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VEFVbmljb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VEFXaWRlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VENoYW5nZVR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VENvbnRyaWJ1dG9yTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VENvbnRyaWJ1dG9yUGl4ZWxz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBQW5zaUNoYXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBQW5zaVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBQmFzaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBQm9vbGVhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBQ2FyZGluYWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBRG91Ymxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBRXh0Qm9vbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBSW50NjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBSW50ZWdlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBSVVua25vd24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBTmF0aXZlSW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBTmF0aXZlVUludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBUG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBU2hvcnRJbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBU21hbGxJbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERhdGFEZXN0cm95UHJvY09P","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBVW5pY29kZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBV2lkZUNoYXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VERBV2lkZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VEdyYXlQZXJjZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIGNyaXRpY2FsIHNlY3Rpb24gaXMgYWxyZWFkeSBvd25lZCBieSBhbm90aGVyIHRocmVhZC4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIGNyaXRpY2FsIHNlY3Rpb24gaXMgb3duZWQgYnkgYW5vdGhlciB0aHJlYWQu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBvYmplY3QgaXMgaW52YWxpZC4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBwcm9ncmFtIG11c3QgYmUgcnVuIHVuZGVyIFdpbjMyJDc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VElCYXNpY0xpc3RTZWxlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VElCYXNpY0xpc3RV","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VElCYXNpY3A=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VElDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VElDdXN0b21CYXNpY0xpc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VElDdXN0b21CYXNpY0xpc3Rg","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VElJbnRlcmZhY2VMaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VElMaXN0Q2hhbmdlRXZlbnRPTw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VElQb2ludGVyTGlzdFU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGxzQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGxzRnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGxzR2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VGxzU2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VE1zZ0hhbmRsZXJPTw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VE1zZ0hhbmRsZXJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VFJlc0l0ZW0s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VHJ5RW50ZXJDcml0aWNhbFNlY3Rpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VFNCb29sZWFu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VFNjYWxlTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VFNFeHRCb29s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VFN0cmV0Y2hRdWFsaXR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VW5rbm93biBlcnJvci4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VW5rbm93biBleGNlcHRpb24uIElmIHlvdSB3YW50IHRvIGtub3cgbW9yZSwgeW91IGhhdmUgdG8gYWRkIFN5c1V0aWxzIHRvIHlvdXIgcHJvamVjdC4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VW5tYXBWaWV3T2ZGaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VW5yZWdpc3RlckNsYXNzQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"dXNlcjMyLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"dmNsMTIwLmJwbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VmVyUXVlcnlWYWx1ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VmVyUXVlcnlWYWx1ZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"dmVyc2lvbi5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbEFsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbEZyZWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbFByb3RlY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbFF1ZXJ5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvclNpbmdsZU9iamVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2lkZUNoYXJUb011bHRpQnl0ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyAxMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyAyMDAw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyAyMDAz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyAyMDA4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyAyMDA4IFIy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyAyMDEy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyAyMDEyIFIy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyA3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyA4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyA4LjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyA5NQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyA5NSBPU1ItMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyA5OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyA5OCBTRQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyA5eCBOZXc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyBNRQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyBOVCAz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyBOVCA0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyBOVCBOZXc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyBWaXN0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cyBYUA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVGaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"V1RBSVVua25vd24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"d3d3LmRpZ2ljZXJ0LmNvbTEkMCI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"d3d3LmRpZ2ljZXJ0LmNvbTErMCk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"d3d3LmRpZ2ljZXJ0LmNvbTExMC8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"d3d3Lm1hZHNoaS5uZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null},{"value":"eXhWSVotbXc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"madbasic_.bpl","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:4440","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMQ==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"QWNxdWlyZVNSV0xvY2tFeGNsdXNpdmU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWdncmVzc2l2ZU1UQVRlc3Rpbmc=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWx0ZXJuYXRlQ29kZVBhZ2U=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWZpYmVycy1sMS0xLTE=","type":"Unicode","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWxvY2FsaXphdGlvbi1sMS0yLTE=","type":"Unicode","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXN5bmNoLWwxLTItMA==","type":"Unicode","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXN5bmNoLWwxLTItMC5kbGw=","type":"Unicode","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXJlRmlsZUFwaXNBTlNJ","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QnJlYWtPbkluaXRpYWxpemVQcm9jZXNzRmFpbHVyZQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q0ZHT3B0aW9ucw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VUaHJlYWRwb29sVGltZXI=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VUaHJlYWRwb29sV2FpdA==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VUaHJlYWRwb29sV29yaw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29DcmVhdGVJbnN0YW5jZQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29DcmVhdGVJbnN0YW5jZUV4","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29HZXRDbGFzc09iamVjdA==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZVN0cmluZ0V4","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRXZlbnRFeFc=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU2VtYXBob3JlRXhX","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU2VtYXBob3JlVw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU3ltYm9saWNMaW5rVw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFkcG9vbFRpbWVy","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFkcG9vbFdhaXQ=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFkcG9vbFdvcms=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q1dESWxsZWdhbEluRExMU2VhcmNo","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGF0YUZpbGVQYXRo","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdQcm9jZXNzSGVhcE9ubHk=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVsZWdhdGVkTnRkbGw=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlRm9ybQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUV4Y2VwdGlvbkNoYWluVmFsaWRhdGlvbg==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUhlYXBMb29rYXNpZGU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1ldGFGaWxlcw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHBpQXdhcmVuZXNz","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlQW5jaG9yQ29udGV4dA==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlUGVyUHJvY2Vzc1N5c3RlbURQSQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXhlY3V0ZU9wdGlvbnM=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rmlwc0FsZ29yaXRobVBvbGljeQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RmxzR2V0VmFsdWU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RmxzU2V0VmFsdWU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rmx1c2hQcm9jZXNzV3JpdGVCdWZmZXJz","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUxpYnJhcnlXaGVuQ2FsbGJhY2tSZXR1cm5z","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJvbnRFbmRIZWFwRGVidWdPcHRpb25z","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2RpU2NhbGluZw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFBhY2thZ2VJZA==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3Nvck51bWJlcg==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGVFeA==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9jYWxlSW5mb0V4","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZVByZWNpc2VBc0ZpbGVUaW1l","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50NjQ=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsRmxhZw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SWRsZVRpbWVyV2luZG93","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNvbmRpdGlvblZhcmlhYmxl","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbkV4","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZVNSV0xvY2s=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdE9uY2VFeGVjdXRlT25jZQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbExhbmd1YWdlRmFsbGJhY2s=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"S2VlcEFjdGl2YXRpb25Db250ZXh0c0FsaXZl","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TENNYXBTdHJpbmdFeA==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEFwcEluaXRfRExMcw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9uZ1BhdGhzRW5hYmxlZA==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bHNhcG9saWN5bG9va3Vw","type":"Unicode","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVByZWZlcnJlZFVJTGFuZ3VhZ2Vz","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4RGVhZEFjdGl2YXRpb25Db250ZXh0cw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4aW11bUFsbG93ZWRBbGxvY2F0aW9uU2l6ZQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4TG9hZGVyVGhyZWFkcw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4UmVzeW5jQXR0ZW1wdHM=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4UnBjU2l6ZQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3hTSGFzaENvdW50","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TURNRW5hYmxlZA==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWluaW11bVN0YWNrQ29tbWl0SW5CeXRlcw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bmNhbHJwYzpbbHNhcG9saWN5bG9va3VwXQ==","type":"Unicode","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclN5c3RlbUhlYXBJc1ByaXZhdGU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclVzZVN5c3RlbUhlYXA=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVycmVkVUlMYW5ndWFnZXM=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVsZWFzZVNSV0xvY2tFeGNsdXNpdmU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVzb3VyY2VQb2xpY2llcw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVzeW5jUmVzZXRUaW1l","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UnBjUnVudGltZUNvbmZpZ0ZsYWdz","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cnVuZGxsMzIuZXhl","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZURsbFNlYXJjaE1vZGU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VhcmNoUGF0aE1vZGU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGhyZWFkcG9vbFRpbWVy","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGhyZWFkcG9vbFdhaXQ=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0RlYnVnSW5mbw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2h1dGRvd25GbGFncw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2xlZXBDb25kaXRpb25WYXJpYWJsZUNT","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2xlZXBDb25kaXRpb25WYXJpYWJsZVNSVw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3VibWl0VGhyZWFkcG9vbFdvcms=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2luZ0ZsYWdz","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2tBY3RpdmF0aW9uQ29udGV4dFJlbGVhc2Vz","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwYXJlbnRFbmFibGVk","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJ5QWNxdWlyZVNSV0xvY2tFeGNsdXNpdmU=","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VW5sb2FkRXZlbnRUcmFjZURlcHRo","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlRmlsdGVy","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlSW1wZXJzb25hdGVkRGV2aWNlTWFw","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvclRocmVhZHBvb2xUaW1lckNhbGxiYWNrcw==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FrZUFsbENvbmRpdGlvblZhcmlhYmxl","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FrZUNvbmRpdGlvblZhcmlhYmxl","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:7640","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTA=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:2940","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTE=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:9000","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTI=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:6388","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTM=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:1500","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTQ=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:3552","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTU=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:8040","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTY=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:8560","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTc=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:6392","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTg=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:8688","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMTk=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:3356","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMg==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"NDE4QTA3M0FBM0JDMUM3NQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:3648","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjA=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:1284","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjE=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:4324","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjI=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:6948","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjM=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:3628","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjQ=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:7512","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjU=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:7268","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjY=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:7540","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjc=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"P8Ovwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:4412","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjg=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:196","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMjk=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:3236","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMw==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:5944","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMzA=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:6112","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMzE=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:9072","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMzI=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:1924","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMzM=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:3112","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMzQ=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:7248","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjMzU=","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:2964","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjNA==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:4996","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjNQ==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:3744","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjNg==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null},{"value":"TGFuZ3VhZ2UgSG90a2V5","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGF5b3V0IEhvdGtleQ==","type":"Ansi","source":"Runtime Data","process":"rundll32.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:2820","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjNw==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:2936","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjOA==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"rundll32.exe:8400","strings":[{"value":"IkM6XG1hZGJhc2ljXy5icGwuZGxsIiwjOQ==","type":"Ansi","source":"Process Commandline","process":"rundll32.exe","filename":"rundll32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"screen_0.png","strings":[{"value":"w6LCgMKZSFlCUklE","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null}]}],"image":[]},"http_requests":[],"ftp_requests":[],"irc_requests":[],"strings_resources":["http://cacerts.digicert.com/digicertevcodesigningca-sha2.crt0","http://cacerts.digicert.com/digicerthighassuranceevrootca.crt0","http://www.digicert.com/cps0","http://www.madshi.net","https://www.digicert.com/cps0"],"tags_details":[],"sample_flags":["Multi-Process"],"suricata_alerts":[],"version_info":[],"apk_info":null,"apps_info":[{"name":"Access","product":"Microsoft Office 2010","version":"14.0.6024.1000"},{"name":"Acrobat Reader","product":"Adobe Reader","version":"11.0.20.17"},{"name":"Chrome","product":"Google Chrome","version":"122.0.6261.112"},{"name":"Excel","product":"Microsoft Office 2010","version":"14.0.6024.1000"},{"name":"Firefox","product":null,"version":null},{"name":"Flash","product":"Shockwave Flash","version":"32,0,0,114"},{"name":"Hancom Office Hancell","product":null,"version":null},{"name":"Internet Explorer","product":"Internet Explorer","version":"11.00.16299.15"},{"name":"Java","product":"Java(TM) Platform SE 8","version":"8.0.1610.12"},{"name":"OneNote","product":"Microsoft OneNote","version":"14.0.6022.1000"},{"name":"PowerPoint","product":"Microsoft Office 2010","version":"14.0.6009.1000"},{"name":"Word","product":"Microsoft Office 2010","version":"14.0.6024.1000"}],"architecture":"32 Bit","document":{"author":null,"creator":null,"producer":null,"title":null,"subject":null,"pages":0},"packer":"Morphine v1.2 (DLL)","file_imports":[{"module":"comctl32.dll","functions":["ImageList_Draw","ImageList_GetImageInfo"]},{"module":"gdi32.dll","functions":["GetObjectW"]},{"module":"kernel32.dll","functions":["CloseHandle","CreateFileA","CreateFileMappingA","CreateFileMappingW","CreateFileW","CreateMutexA","DeleteCriticalSection","DeleteFileA","DeleteFileW","EnterCriticalSection","FileTimeToDosDateTime","FileTimeToLocalFileTime","FindClose","FindFirstFileA","FindFirstFileW","FindResourceA","FindResourceW","FormatMessageA","FormatMessageW","FreeLibrary","FreeResource","GetCurrentProcessId","GetCurrentThreadId","GetFileAttributesA","GetFileAttributesW","GetFileSize","GetFileTime","GetLastError","GetLocaleInfoA","GetLocaleInfoW","GetModuleFileNameA","GetModuleFileNameW","GetModuleHandleA","GetModuleHandleW","GetProcAddress","GetTempPathA","GetTempPathW","GetThreadLocale","GetTickCount","GetVersion","GetVersionExA","GetVersionExW","InitializeCriticalSection","InterlockedDecrement","InterlockedIncrement","LeaveCriticalSection","LoadLibraryExA","LoadResource","LocalAlloc","LocalFree","LockResource","lstrcmpA","lstrlenW","MapViewOfFile","ReadFile","ReleaseMutex","SetEndOfFile","SetFileAttributesA","SetFileAttributesW","SetFilePointer","SetFileTime","SetLastError","SizeofResource","TlsAlloc","TlsFree","TlsGetValue","TlsSetValue","UnmapViewOfFile","VirtualAlloc","VirtualFree","VirtualProtect","VirtualQuery","WaitForSingleObject","WriteFile"]},{"module":"rtl120.bpl","functions":["@$xp$11System@Byte","@$xp$11System@Char","@$xp$11System@Word","@$xp$13System@string","@$xp$14System@TObject","@$xp$15System@ShortInt","@$xp$17System@AnsiString","@$xp$17System@IInterface","@$xp$17System@WideString","@$xp$5Int64","@$xp$6Double","@$xp$7Boolean","@$xp$7Integer","@$xp$8AnsiChar","@$xp$8Cardinal","@$xp$8SmallInt","@Classes@Finalization$qqrv","@Classes@initialization$qqrv","@Classes@Rect$qqriiii","@Inifiles@Finalization$qqrv","@Inifiles@initialization$qqrv","@Math@Ceil$qqrxg","@Math@Min$qqrxixi","@Registry@Finalization$qqrv","@Registry@initialization$qqrv","@System@@_lldiv$qqrv","@System@@_llmod$qqrv","@System@@_llmul$qqrv","@System@@AbstractError$qqrv","@System@@AfterConstruction$qqrp14System@TObject","@System@@BeforeDestruction$qqrp14System@TObjectzc","@System@@ClassCreate$qqrp17System@TMetaClasso","@System@@ClassDestroy$qqrp14System@TObject","@System@@CopyRecord$qqrv","@System@@Dispose$qqrpvt1","@System@@DoneExcept$qqrv","@System@@DynArrayAsg$qqrv","@System@@DynArrayClear$qqrrpvpv","@System@@DynArrayCopy$qqrpvt1rpv","@System@@DynArrayHigh$qqrv","@System@@DynArrayLength$qqrv","@System@@DynArraySetLength$qqrv","@System@@EnsureUnicodeString$qqrr20System@UnicodeString","@System@@FillChar$qqrpvib","@System@@FinalizeArray$qqrpvt1ui","@System@@FinalizeRecord$qqrpvt1","@System@@FreeMem$qqrpv","@System@@GetMem$qqri","@System@@HandleAnyException$qqrv","@System@@HandleFinally$qqrv","@System@@LStrAddRef$qqrpv","@System@@LStrArrayClr$qqrpvi","@System@@LStrAsg$qqrpvpxv","@System@@LStrCat$qqrv","@System@@LStrCat3$qqrv","@System@@LStrCatN$qqrv","@System@@LStrClr$qqrpv","@System@@LStrCopy$qqrv","@System@@LStrDelete$qqrv","@System@@LStrEqual$qqrv","@System@@LStrInsert$qqrv","@System@@LStrLAsg$qqrpvpxv","@System@@LStrSetLength$qqrv","@System@@New$qqripv","@System@@PackageLoad$qqrpx23System@PackageInfoTablep17System@TLibModule","@System@@PackageUnload$qqrpx23System@PackageInfoTablep17System@TLibModule","@System@@RaiseAgain$qqrv","@System@@RaiseExcept$qqrv","@System@@ROUND$qqrv","@System@@RunError$qqruc","@System@@SetSub$qqrv","@System@@SetUnion$qqrv","@System@@TryFinallyExit$qqrv","@System@@UniqueStringU$qqrr20System@UnicodeString","@System@@UStrAddRef$qqrpv","@System@@UStrArrayClr$qqrpvi","@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString","@System@@UStrCat$qqrr20System@UnicodeStringx20System@UnicodeString","@System@@UStrCat3$qqrr20System@UnicodeStringx20System@UnicodeStringt2","@System@@UStrCatN$qqrv","@System@@UStrClr$qqrpv","@System@@UStrCopy$qqrx20System@UnicodeStringii","@System@@UStrDelete$qqrr20System@UnicodeStringii","@System@@UStrEqual$qqrv","@System@@UStrFromPChar$qqrr20System@UnicodeStringpc","@System@@UStrFromPWChar$qqrr20System@UnicodeStringpb","@System@@UStrFromWArray$qqrr20System@UnicodeStringpbi","@System@@UStrFromWChar$qqrr20System@UnicodeStringb","@System@@UStrInsert$qqrx20System@UnicodeStringr20System@UnicodeStringi","@System@@UStrLAsg$qqrr20System@UnicodeStringx20System@UnicodeString","@System@@UStrLen$qqrx20System@UnicodeString","@System@@UStrSetLength$qqrr20System@UnicodeStringi","@System@@UStrToPWChar$qqrx20System@UnicodeString","@System@@WStrClr$qqrpv","@System@@WStrFromUStr$qqrr17System@WideStringx20System@UnicodeString","@System@@WStrToPWChar$qqrx17System@WideString","@System@AllocMem$qqrui","@System@ExceptionClass","@System@ExceptObjProc","@System@Finalization$qqrv","@System@Get8087CW$qqrv","@System@initialization$qqrv","@System@Move$qqrpxvpvi","@System@RegisterModule$qqrp17System@TLibModule","@System@Set8087CW$qqrus","@System@Sin$qqrxg","@System@TObject@","@System@TObject@$bctr$qqrv","@System@TObject@$bdtr$qqrv","@System@TObject@AfterConstruction$qqrv","@System@TObject@BeforeDestruction$qqrv","@System@TObject@DefaultHandler$qqrpv","@System@TObject@Dispatch$qqrpv","@System@TObject@Equals$qqrp14System@TObject","@System@TObject@Free$qqrv","@System@TObject@FreeInstance$qqrv","@System@TObject@GetHashCode$qqrv","@System@TObject@GetInterface$qqrrx5_GUIDpv","@System@TObject@NewInstance$qqrv","@System@TObject@SafeCallException$qqrp14System@TObjectpv","@System@TObject@ToString$qqrv","@System@UniqueString$qqrr20System@UnicodeString","@System@UnregisterModule$qqrp17System@TLibModule","@Sysutils@Finalization$qqrv","@Sysutils@initialization$qqrv","@Typinfo@Finalization$qqrv","@Typinfo@initialization$qqrv","@Variants@Finalization$qqrv","@Variants@initialization$qqrv","@Varutils@Finalization$qqrv","@Varutils@initialization$qqrv"]},{"module":"user32.dll","functions":["CreateWindowExA","DefWindowProcA","DefWindowProcW","DestroyWindow","GetSystemMetrics","IsWindow","IsWindowUnicode","PostMessageW","RegisterClassA","UnregisterClassA"]},{"module":"vcl120.bpl","functions":["@Graphics@Finalization$qqrv","@Graphics@initialization$qqrv","@Graphics@TBitmap@","@Graphics@TBitmap@$bctr$qqrv","@Graphics@TBitmap@GetCanvas$qqrv","@Graphics@TBitmap@GetPixelFormat$qqrv","@Graphics@TBitmap@GetScanline$qqri","@Graphics@TBitmap@SetPixelFormat$qqr21Graphics@TPixelFormat","@Graphics@TCanvas@GetHandle$qqrv","@Graphics@TCanvas@StretchDraw$qqrrx11Types@TRectp17Graphics@TGraphic"]},{"module":"version.dll","functions":["GetFileVersionInfoA","GetFileVersionInfoSizeA","GetFileVersionInfoSizeW","GetFileVersionInfoW","VerQueryValueA","VerQueryValueW"]}],"osint_tags":[],"osint_references":[],"memory_forensics":[],"language":"NEUTRAL","authentihash":"3c842ae337a99f251445022b540dd9c7b5d9a5cb3e61ba2c3b694ad3c100d771","entrypoint_bytes":null,"pdb_timestamp":null,"pdb_pathway":null,"pdb_guid":null,"file_sections":[{"name":".text","entropy":6.53428825089,"virtual_address":"0x1000","virtual_size":"0x21178","raw_size":"0x21200","md5":"f18f0993d075f8c608edd249154c6f77","characteristics":["IMAGE_SCN_MEM_EXECUTE","IMAGE_SCN_CNT_CODE","IMAGE_SCN_MEM_READ"]},{"name":".itext","entropy":3.54891888798,"virtual_address":"0x23000","virtual_size":"0xfc","raw_size":"0x200","md5":"a576ea88e123e30b507045d3cea3173c","characteristics":["IMAGE_SCN_MEM_EXECUTE","IMAGE_SCN_CNT_CODE","IMAGE_SCN_MEM_READ"]},{"name":".data","entropy":6.70478027853,"virtual_address":"0x24000","virtual_size":"0x266c","raw_size":"0x2800","md5":"2f22677b99d9594e4dabfc7ee9bd37a4","characteristics":["IMAGE_SCN_CNT_INITIALIZED_DATA","IMAGE_SCN_MEM_WRITE","IMAGE_SCN_MEM_READ"]},{"name":".bss","entropy":0,"virtual_address":"0x27000","virtual_size":"0x8ee4","raw_size":"0x0","md5":"d41d8cd98f00b204e9800998ecf8427e","characteristics":["IMAGE_SCN_MEM_WRITE","IMAGE_SCN_MEM_READ"]},{"name":".idata","entropy":5.2571603582,"virtual_address":"0x30000","virtual_size":"0x2860","raw_size":"0x2a00","md5":"8fa65995deb0dd26359bc675329841cb","characteristics":["IMAGE_SCN_CNT_INITIALIZED_DATA","IMAGE_SCN_MEM_WRITE","IMAGE_SCN_MEM_READ"]},{"name":".edata","entropy":5.62406693446,"virtual_address":"0x33000","virtual_size":"0x64c0","raw_size":"0x6600","md5":"e44b070bf7964a4525670b8ab74b7783","characteristics":["IMAGE_SCN_CNT_INITIALIZED_DATA","IMAGE_SCN_MEM_READ"]},{"name":".rdata","entropy":0.597502305495,"virtual_address":"0x3a000","virtual_size":"0x22","raw_size":"0x200","md5":"ce2df35bbad0e468d5655f8e1ca40d83","characteristics":["IMAGE_SCN_CNT_INITIALIZED_DATA","IMAGE_SCN_MEM_READ"]},{"name":".reloc","entropy":6.39861427757,"virtual_address":"0x3b000","virtual_size":"0x1614","raw_size":"0x1800","md5":"0aba5fd1b3367b81bee596f0c3e3ede6","characteristics":["IMAGE_SCN_CNT_INITIALIZED_DATA","IMAGE_SCN_MEM_DISCARDABLE","IMAGE_SCN_MEM_READ"]},{"name":".rsrc","entropy":7.67064044564,"virtual_address":"0x3d000","virtual_size":"0x1978","raw_size":"0x1a00","md5":"b9a896ed80c72a61621ede112c349c76","characteristics":["IMAGE_SCN_CNT_INITIALIZED_DATA","IMAGE_SCN_MEM_READ"]}],"file_exports":[{"name":null,"ordinal":1,"address":"0x5702301c"},{"name":null,"ordinal":2,"address":"0x57001ef4"},{"name":null,"ordinal":3,"address":"0x57001eac"},{"name":null,"ordinal":4,"address":"0x57001e6c"},{"name":"@$xp$21Madtypes@MadException","ordinal":5,"address":"0x57001e48"},{"name":null,"ordinal":6,"address":"0x57001e24"},{"name":null,"ordinal":7,"address":"0x57027014"},{"name":"@$xp$17Madtypes@TDAInt64","ordinal":8,"address":"0x57001da8"},{"name":"@$xp$20Madtypes@TDAIUnknown","ordinal":9,"address":"0x57001d7c"},{"name":"@$xp$25Madtypes@TDAUnicodeString","ordinal":10,"address":"0x57001d4c"},{"name":"@$xp$22Madtypes@TDAWideString","ordinal":11,"address":"0x57001d20"},{"name":"@$xp$22Madtypes@TDAAnsiString","ordinal":12,"address":"0x57001cf4"},{"name":"@$xp$18Madtypes@TDAString","ordinal":13,"address":"0x57001ccc"},{"name":"@$xp$19Madtypes@TDAPointer","ordinal":14,"address":"0x57001ca0"},{"name":"@$xp$21Madtypes@TDANativeInt","ordinal":15,"address":"0x57001c74"},{"name":"@$xp$22Madtypes@TDANativeUInt","ordinal":16,"address":"0x57001c48"},{"name":"@$xp$19Madtypes@TDAInteger","ordinal":17,"address":"0x57001c1c"},{"name":"@$xp$20Madtypes@TDACardinal","ordinal":18,"address":"0x57001bf0"},{"name":"@$xp$20Madtypes@TDASmallInt","ordinal":19,"address":"0x57001bc4"},{"name":"@$xp$16Madtypes@TDAWord","ordinal":20,"address":"0x57001b9c"},{"name":"@$xp$19Madtypes@TDAExtBool","ordinal":21,"address":"0x57001b70"},{"name":"@$xp$19Madtypes@TDABoolean","ordinal":22,"address":"0x57001b44"},{"name":"@$xp$20Madtypes@TDAWideChar","ordinal":23,"address":"0x57001b18"},{"name":"@$xp$20Madtypes@TDAAnsiChar","ordinal":24,"address":"0x57001aec"},{"name":"@$xp$16Madtypes@TDAChar","ordinal":25,"address":"0x57001ac4"},{"name":"@$xp$20Madtypes@TDAShortInt","ordinal":26,"address":"0x57001a98"},{"name":"@$xp$16Madtypes@TDAByte","ordinal":27,"address":"0x57001a70"},{"name":"@$xp$19Madtypes@TAIUnknown","ordinal":28,"address":"0x57001a54"},{"name":"@$xp$24Madtypes@TAUnicodeString","ordinal":29,"address":"0x57001a30"},{"name":"@$xp$21Madtypes@TAWideString","ordinal":30,"address":"0x57001a10"},{"name":"@$xp$21Madtypes@TAAnsiString","ordinal":31,"address":"0x570019f0"},{"name":"@$xp$17Madtypes@TAString","ordinal":32,"address":"0x570019d4"},{"name":"@$xp$18Madtypes@TSExtBool","ordinal":33,"address":"0x570019c0"},{"name":"@$xp$18Madtypes@TSBoolean","ordinal":34,"address":"0x570019ac"},{"name":"@$xp$15Madtypes@TSChar","ordinal":35,"address":"0x57001998"},{"name":"@$xp$15Madtypes@TSByte","ordinal":36,"address":"0x57001984"},{"name":"@$xp$17Madtypes@TExtBool","ordinal":37,"address":"0x57001950"},{"name":null,"ordinal":38,"address":"0x57023024"},{"name":null,"ordinal":39,"address":"0x57008368"},{"name":null,"ordinal":40,"address":"0x570082e0"},{"name":null,"ordinal":41,"address":"0x570081ec"},{"name":null,"ordinal":42,"address":"0x570081a4"},{"name":null,"ordinal":43,"address":"0x57008164"},{"name":null,"ordinal":44,"address":"0x57008088"},{"name":null,"ordinal":45,"address":"0x57007e94"},{"name":null,"ordinal":46,"address":"0x57007c04"},{"name":null,"ordinal":47,"address":"0x57007b14"},{"name":null,"ordinal":48,"address":"0x57007a58"},{"name":null,"ordinal":49,"address":"0x57007a24"},{"name":null,"ordinal":50,"address":"0x570077ec"},{"name":null,"ordinal":51,"address":"0x5700750c"},{"name":null,"ordinal":52,"address":"0x57007248"},{"name":null,"ordinal":53,"address":"0x5700701c"},{"name":null,"ordinal":54,"address":"0x57006d40"},{"name":null,"ordinal":55,"address":"0x57006a88"},{"name":null,"ordinal":56,"address":"0x57006910"},{"name":null,"ordinal":57,"address":"0x5700681c"},{"name":null,"ordinal":58,"address":"0x57006728"},{"name":null,"ordinal":59,"address":"0x57006634"},{"name":null,"ordinal":60,"address":"0x57006574"},{"name":null,"ordinal":61,"address":"0x570064b4"},{"name":null,"ordinal":62,"address":"0x57006424"},{"name":null,"ordinal":63,"address":"0x57006394"},{"name":null,"ordinal":64,"address":"0x570061c8"},{"name":null,"ordinal":65,"address":"0x57005fec"},{"name":null,"ordinal":66,"address":"0x57005f78"},{"name":null,"ordinal":67,"address":"0x57005f00"},{"name":null,"ordinal":68,"address":"0x57005e50"},{"name":null,"ordinal":69,"address":"0x57005d9c"},{"name":null,"ordinal":70,"address":"0x57005d58"},{"name":null,"ordinal":71,"address":"0x57005d0c"},{"name":null,"ordinal":72,"address":"0x57005c58"},{"name":null,"ordinal":73,"address":"0x57005c10"},{"name":null,"ordinal":74,"address":"0x57005bec"},{"name":null,"ordinal":75,"address":"0x57005bc8"},{"name":null,"ordinal":76,"address":"0x57005ba4"},{"name":null,"ordinal":77,"address":"0x57005b80"},{"name":null,"ordinal":78,"address":"0x57005b5c"},{"name":null,"ordinal":79,"address":"0x57005b38"},{"name":null,"ordinal":80,"address":"0x57005a90"},{"name":null,"ordinal":81,"address":"0x570059e4"},{"name":null,"ordinal":82,"address":"0x570059a0"},{"name":null,"ordinal":83,"address":"0x57005954"},{"name":null,"ordinal":84,"address":"0x570058a8"},{"name":null,"ordinal":85,"address":"0x57005860"},{"name":null,"ordinal":86,"address":"0x570051bc"},{"name":null,"ordinal":87,"address":"0x57005174"},{"name":null,"ordinal":88,"address":"0x57004e28"},{"name":null,"ordinal":89,"address":"0x57004ccc"},{"name":null,"ordinal":90,"address":"0x57004b40"},{"name":null,"ordinal":91,"address":"0x570049d0"},{"name":null,"ordinal":92,"address":"0x570046e8"},{"name":null,"ordinal":93,"address":"0x57004620"},{"name":null,"ordinal":94,"address":"0x57004618"},{"name":null,"ordinal":95,"address":"0x570044fc"},{"name":null,"ordinal":96,"address":"0x57004450"},{"name":null,"ordinal":97,"address":"0x57004368"},{"name":null,"ordinal":98,"address":"0x57004280"},{"name":null,"ordinal":99,"address":"0x570041b4"},{"name":null,"ordinal":100,"address":"0x570040e0"},{"name":null,"ordinal":101,"address":"0x57004004"},{"name":null,"ordinal":102,"address":"0x57003f30"},{"name":null,"ordinal":103,"address":"0x57003e54"},{"name":null,"ordinal":104,"address":"0x57003b50"},{"name":null,"ordinal":105,"address":"0x570038f4"},{"name":null,"ordinal":106,"address":"0x57003834"},{"name":null,"ordinal":107,"address":"0x57003788"},{"name":null,"ordinal":108,"address":"0x570036e0"},{"name":null,"ordinal":109,"address":"0x57003634"},{"name":null,"ordinal":110,"address":"0x5700354c"},{"name":null,"ordinal":111,"address":"0x57003484"},{"name":null,"ordinal":112,"address":"0x5700344c"},{"name":null,"ordinal":113,"address":"0x57003414"},{"name":null,"ordinal":114,"address":"0x57003320"},{"name":null,"ordinal":115,"address":"0x5700326c"},{"name":null,"ordinal":116,"address":"0x57003228"},{"name":null,"ordinal":117,"address":"0x570031e4"},{"name":null,"ordinal":118,"address":"0x5700313c"},{"name":null,"ordinal":119,"address":"0x5700309c"},{"name":null,"ordinal":120,"address":"0x5700308c"},{"name":null,"ordinal":121,"address":"0x57003080"},{"name":null,"ordinal":122,"address":"0x57002fd8"},{"name":null,"ordinal":123,"address":"0x57002f38"},{"name":null,"ordinal":124,"address":"0x57002f14"},{"name":null,"ordinal":125,"address":"0x57002ef8"},{"name":null,"ordinal":126,"address":"0x57002e90"},{"name":null,"ordinal":127,"address":"0x57002e28"},{"name":null,"ordinal":128,"address":"0x57002e00"},{"name":null,"ordinal":129,"address":"0x57002dd8"},{"name":null,"ordinal":130,"address":"0x57002dbc"},{"name":null,"ordinal":131,"address":"0x57002da0"},{"name":null,"ordinal":132,"address":"0x57002d3c"},{"name":null,"ordinal":133,"address":"0x57002cd4"},{"name":null,"ordinal":134,"address":"0x57002cac"},{"name":null,"ordinal":135,"address":"0x57002c84"},{"name":null,"ordinal":136,"address":"0x57002c54"},{"name":null,"ordinal":137,"address":"0x57002c24"},{"name":null,"ordinal":138,"address":"0x57002c0c"},{"name":null,"ordinal":139,"address":"0x57002bf4"},{"name":null,"ordinal":140,"address":"0x57002bdc"},{"name":null,"ordinal":141,"address":"0x57002bc4"},{"name":null,"ordinal":142,"address":"0x5700242c"},{"name":null,"ordinal":143,"address":"0x57002300"},{"name":null,"ordinal":144,"address":"0x57002270"},{"name":null,"ordinal":145,"address":"0x570021f0"},{"name":null,"ordinal":146,"address":"0x5700217c"},{"name":null,"ordinal":147,"address":"0x57002114"},{"name":null,"ordinal":148,"address":"0x5700209c"},{"name":null,"ordinal":149,"address":"0x57002024"},{"name":null,"ordinal":150,"address":"0x57001fb0"},{"name":null,"ordinal":151,"address":"0x57001f3c"},{"name":null,"ordinal":152,"address":"0x57024164"},{"name":null,"ordinal":153,"address":"0x57024160"},{"name":null,"ordinal":154,"address":"0x5702415c"},{"name":null,"ordinal":155,"address":"0x57024158"},{"name":null,"ordinal":156,"address":"0x57024154"},{"name":null,"ordinal":157,"address":"0x57024150"},{"name":null,"ordinal":158,"address":"0x5702414c"},{"name":null,"ordinal":159,"address":"0x57024148"},{"name":null,"ordinal":160,"address":"0x57024144"},{"name":null,"ordinal":161,"address":"0x57024140"},{"name":null,"ordinal":162,"address":"0x5702413c"},{"name":null,"ordinal":163,"address":"0x57024138"},{"name":null,"ordinal":164,"address":"0x57024134"},{"name":null,"ordinal":165,"address":"0x57024130"},{"name":null,"ordinal":166,"address":"0x5702412c"},{"name":null,"ordinal":167,"address":"0x57024128"},{"name":null,"ordinal":168,"address":"0x57024124"},{"name":null,"ordinal":169,"address":"0x57024120"},{"name":null,"ordinal":170,"address":"0x5702411c"},{"name":null,"ordinal":171,"address":"0x57024118"},{"name":null,"ordinal":172,"address":"0x57024114"},{"name":null,"ordinal":173,"address":"0x57024110"},{"name":null,"ordinal":174,"address":"0x5702410c"},{"name":null,"ordinal":175,"address":"0x57024108"},{"name":null,"ordinal":176,"address":"0x57024104"},{"name":null,"ordinal":177,"address":"0x57024100"},{"name":null,"ordinal":178,"address":"0x570240fc"},{"name":null,"ordinal":179,"address":"0x570240f8"},{"name":null,"ordinal":180,"address":"0x570240f4"},{"name":null,"ordinal":181,"address":"0x570240f0"},{"name":null,"ordinal":182,"address":"0x570240ec"},{"name":null,"ordinal":183,"address":"0x570240e8"},{"name":null,"ordinal":184,"address":"0x570240e4"},{"name":null,"ordinal":185,"address":"0x570240e0"},{"name":null,"ordinal":186,"address":"0x570240dc"},{"name":null,"ordinal":187,"address":"0x570240d8"},{"name":null,"ordinal":188,"address":"0x570240d4"},{"name":null,"ordinal":189,"address":"0x570240d0"},{"name":null,"ordinal":190,"address":"0x570240cc"},{"name":null,"ordinal":191,"address":"0x570240c8"},{"name":null,"ordinal":192,"address":"0x570240c4"},{"name":null,"ordinal":193,"address":"0x570240c0"},{"name":null,"ordinal":194,"address":"0x570240bc"},{"name":null,"ordinal":195,"address":"0x570240b8"},{"name":null,"ordinal":196,"address":"0x570240b4"},{"name":null,"ordinal":197,"address":"0x570240b0"},{"name":null,"ordinal":198,"address":"0x570240ac"},{"name":null,"ordinal":199,"address":"0x570240a8"},{"name":null,"ordinal":200,"address":"0x570240a4"},{"name":null,"ordinal":201,"address":"0x570240a0"},{"name":null,"ordinal":202,"address":"0x5702409c"},{"name":null,"ordinal":203,"address":"0x57024098"},{"name":null,"ordinal":204,"address":"0x57024094"},{"name":null,"ordinal":205,"address":"0x57024090"},{"name":null,"ordinal":206,"address":"0x5702408c"},{"name":null,"ordinal":207,"address":"0x57024088"},{"name":null,"ordinal":208,"address":"0x57024084"},{"name":null,"ordinal":209,"address":"0x57024080"},{"name":null,"ordinal":210,"address":"0x5702407c"},{"name":null,"ordinal":211,"address":"0x57024078"},{"name":null,"ordinal":212,"address":"0x57024074"},{"name":null,"ordinal":213,"address":"0x57024070"},{"name":null,"ordinal":214,"address":"0x5702406c"},{"name":null,"ordinal":215,"address":"0x57024068"},{"name":null,"ordinal":216,"address":"0x57024064"},{"name":null,"ordinal":217,"address":"0x57024060"},{"name":null,"ordinal":218,"address":"0x5702405c"},{"name":null,"ordinal":219,"address":"0x57024058"},{"name":null,"ordinal":220,"address":"0x57024054"},{"name":null,"ordinal":221,"address":"0x57024050"},{"name":null,"ordinal":222,"address":"0x5702404c"},{"name":null,"ordinal":223,"address":"0x57024048"},{"name":null,"ordinal":224,"address":"0x57024044"},{"name":null,"ordinal":225,"address":"0x57024040"},{"name":null,"ordinal":226,"address":"0x5702403c"},{"name":null,"ordinal":227,"address":"0x57024038"},{"name":null,"ordinal":228,"address":"0x57024034"},{"name":null,"ordinal":229,"address":"0x57024030"},{"name":null,"ordinal":230,"address":"0x5702402c"},{"name":null,"ordinal":231,"address":"0x5702302c"},{"name":"@Madbasic@Finalization$qqrv","ordinal":232,"address":"0x5700c088"},{"name":"@Madbasic@NewCriticalSection$qqrv","ordinal":233,"address":"0x5700c064"},{"name":null,"ordinal":234,"address":"0x5700ba14"},{"name":null,"ordinal":235,"address":"0x5700ba00"},{"name":null,"ordinal":236,"address":"0x5700b9c4"},{"name":null,"ordinal":237,"address":"0x5700b838"},{"name":null,"ordinal":238,"address":"0x5700b554"},{"name":null,"ordinal":239,"address":"0x5700b524"},{"name":null,"ordinal":240,"address":"0x5700b504"},{"name":null,"ordinal":241,"address":"0x5700b418"},{"name":null,"ordinal":242,"address":"0x5700b198"},{"name":null,"ordinal":243,"address":"0x5700af28"},{"name":null,"ordinal":244,"address":"0x5700ae98"},{"name":null,"ordinal":245,"address":"0x5700ac28"},{"name":null,"ordinal":246,"address":"0x5700ab60"},{"name":null,"ordinal":247,"address":"0x5700aa74"},{"name":null,"ordinal":248,"address":"0x5700a9a0"},{"name":null,"ordinal":249,"address":"0x5700a8d0"},{"name":null,"ordinal":250,"address":"0x5700a818"},{"name":null,"ordinal":251,"address":"0x5700a704"},{"name":null,"ordinal":252,"address":"0x5700a680"},{"name":null,"ordinal":253,"address":"0x5700a670"},{"name":null,"ordinal":254,"address":"0x5700a65c"},{"name":null,"ordinal":255,"address":"0x5700a64c"},{"name":null,"ordinal":256,"address":"0x5700a648"},{"name":null,"ordinal":257,"address":"0x5700a640"},{"name":null,"ordinal":258,"address":"0x5700a63c"},{"name":null,"ordinal":259,"address":"0x5700a5b8"},{"name":null,"ordinal":260,"address":"0x5700a4f8"},{"name":null,"ordinal":261,"address":"0x5700a4b4"},{"name":null,"ordinal":262,"address":"0x5700a43c"},{"name":null,"ordinal":263,"address":"0x5700a220"},{"name":null,"ordinal":264,"address":"0x5700a218"},{"name":null,"ordinal":265,"address":"0x5700a1cc"},{"name":null,"ordinal":266,"address":"0x5700a1b8"},{"name":null,"ordinal":267,"address":"0x5700a1a4"},{"name":null,"ordinal":268,"address":"0x5700a1a0"},{"name":null,"ordinal":269,"address":"0x5700a194"},{"name":null,"ordinal":270,"address":"0x5700a188"},{"name":null,"ordinal":271,"address":"0x5700a184"},{"name":null,"ordinal":272,"address":"0x5700a180"},{"name":null,"ordinal":273,"address":"0x5700a104"},{"name":null,"ordinal":274,"address":"0x5700a080"},{"name":"@Madbasic@TIBasic@CheckValid$qqrv","ordinal":275,"address":"0x57009ffc"},{"name":"@Madbasic@TIBasic@DelParent$qqrp26Madbasic@TICustomBasicList","ordinal":276,"address":"0x57009f34"},{"name":"@Madbasic@TIBasic@AddParent$qqrp26Madbasic@TICustomBasicList","ordinal":277,"address":"0x57009ecc"},{"name":null,"ordinal":278,"address":"0x57009e78"},{"name":null,"ordinal":279,"address":"0x57009d98"},{"name":null,"ordinal":280,"address":"0x57009d2c"},{"name":null,"ordinal":281,"address":"0x57009cd8"},{"name":null,"ordinal":282,"address":"0x57009c88"},{"name":null,"ordinal":283,"address":"0x57009c38"},{"name":null,"ordinal":284,"address":"0x57009be8"},{"name":null,"ordinal":285,"address":"0x57009b98"},{"name":null,"ordinal":286,"address":"0x57009b48"},{"name":null,"ordinal":287,"address":"0x57009af8"},{"name":null,"ordinal":288,"address":"0x57009aa4"},{"name":null,"ordinal":289,"address":"0x57009a58"},{"name":null,"ordinal":290,"address":"0x57009a1c"},{"name":null,"ordinal":291,"address":"0x57009a18"},{"name":null,"ordinal":292,"address":"0x570099f4"},{"name":null,"ordinal":293,"address":"0x570099ec"},{"name":null,"ordinal":294,"address":"0x570099cc"},{"name":null,"ordinal":295,"address":"0x570099c4"},{"name":null,"ordinal":296,"address":"0x57009998"},{"name":null,"ordinal":297,"address":"0x57009964"},{"name":null,"ordinal":298,"address":"0x57009950"},{"name":null,"ordinal":299,"address":"0x57009930"},{"name":null,"ordinal":300,"address":"0x57009908"},{"name":null,"ordinal":301,"address":"0x570098e4"},{"name":null,"ordinal":302,"address":"0x5700987c"},{"name":null,"ordinal":303,"address":"0x57009878"},{"name":null,"ordinal":304,"address":"0x57009870"},{"name":null,"ordinal":305,"address":"0x57009860"},{"name":null,"ordinal":306,"address":"0x5700985c"},{"name":null,"ordinal":307,"address":"0x570097f0"},{"name":null,"ordinal":308,"address":"0x570097c8"},{"name":null,"ordinal":309,"address":"0x570097b4"},{"name":null,"ordinal":310,"address":"0x57009778"},{"name":null,"ordinal":311,"address":"0x57009768"},{"name":"@Madbasic@TIBasic@BeforeDestruction$qqrv","ordinal":312,"address":"0x570096e4"},{"name":"@Madbasic@TIBasic@AfterConstruction$qqrv","ordinal":313,"address":"0x570096d8"},{"name":"@Madbasic@TIBasic@$bdtr$qqrv","ordinal":314,"address":"0x570096a8"},{"name":"@Madbasic@TIBasic@$bctr$qqrouix20System@UnicodeString","ordinal":315,"address":"0x57009644"},{"name":"@$xp$29Madbasic@TIBasicListSelection","ordinal":316,"address":"0x57009618"},{"name":null,"ordinal":317,"address":"0x5700958c"},{"name":"@$xp$26Madbasic@TICustomBasicList","ordinal":318,"address":"0x570091fc"},{"name":null,"ordinal":319,"address":"0x57009160"},{"name":"@$xp$30Madbasic@_TICustomBasicList@_4","ordinal":320,"address":"0x57008dd4"},{"name":"@$xp$30Madbasic@_TICustomBasicList@_3","ordinal":321,"address":"0x57008da0"},{"name":"@$xp$30Madbasic@_TICustomBasicList@_2","ordinal":322,"address":"0x57008d6c"},{"name":"@$xp$30Madbasic@_TICustomBasicList@_1","ordinal":323,"address":"0x57008d38"},{"name":"@$xp$15Madbasic@TIList","ordinal":324,"address":"0x57008d14"},{"name":null,"ordinal":325,"address":"0x57008cac"},{"name":"@$xp$16Madbasic@TIBasic","ordinal":326,"address":"0x570089b4"},{"name":"@Madbasic@TIBasic@","ordinal":327,"address":"0x57008970"},{"name":"@$xp$20Madbasic@_TIBasic@_1","ordinal":328,"address":"0x57008718"},{"name":"@Madbasic@CErrorStr_IndexOutOfRange","ordinal":329,"address":"0x570243c4"},{"name":"@Madbasic@CErrorStr_Unknown","ordinal":330,"address":"0x570243c0"},{"name":"@Madbasic@CErrorStr_SectionLeaveError","ordinal":331,"address":"0x570243bc"},{"name":"@Madbasic@CErrorStr_SectionBlocked","ordinal":332,"address":"0x570243b8"},{"name":"@Madbasic@CErrorStr_InvalidIndex","ordinal":333,"address":"0x570243b4"},{"name":"@Madbasic@CErrorStr_AmInvalid","ordinal":334,"address":"0x570243b0"},{"name":"@Madbasic@CErrorStr_InvalidClass","ordinal":335,"address":"0x570243ac"},{"name":"@$xp$25Madbasic@ICriticalSection","ordinal":336,"address":"0x57008614"},{"name":"@$xp$28Madbasic@IBasicListSelection","ordinal":337,"address":"0x570085d8"},{"name":"@$xp$25Madbasic@ICustomBasicList","ordinal":338,"address":"0x570085a0"},{"name":"@$xp$28Madbasic@TIListChangeEventOO","ordinal":339,"address":"0x570084f8"},{"name":"@$xp$14Madbasic@IList","ordinal":340,"address":"0x570084c8"},{"name":"@$xp$17Madbasic@TDABasic","ordinal":341,"address":"0x570084a0"},{"name":"@$xp$15Madbasic@IBasic","ordinal":342,"address":"0x57008470"},{"name":"@$xp$20Madbasic@TChangeType","ordinal":343,"address":"0x5700841c"},{"name":"@$xp$27Madbasic@TDataDestroyProcOO","ordinal":344,"address":"0x570083ec"},{"name":null,"ordinal":345,"address":"0x57023034"},{"name":null,"ordinal":346,"address":"0x5700ffe8"},{"name":null,"ordinal":347,"address":"0x5700ffc4"},{"name":null,"ordinal":348,"address":"0x5700fedc"},{"name":null,"ordinal":349,"address":"0x5700fe90"},{"name":null,"ordinal":350,"address":"0x5700fe44"},{"name":null,"ordinal":351,"address":"0x5700faac"},{"name":null,"ordinal":352,"address":"0x5700f730"},{"name":null,"ordinal":353,"address":"0x5700f604"},{"name":null,"ordinal":354,"address":"0x5700f49c"},{"name":null,"ordinal":355,"address":"0x5700f314"},{"name":null,"ordinal":356,"address":"0x5700f2c4"},{"name":null,"ordinal":357,"address":"0x5700f1b0"},{"name":null,"ordinal":358,"address":"0x5700efd4"},{"name":null,"ordinal":359,"address":"0x5700eeec"},{"name":null,"ordinal":360,"address":"0x5700eed8"},{"name":null,"ordinal":361,"address":"0x5700ee70"},{"name":null,"ordinal":362,"address":"0x5700ed90"},{"name":null,"ordinal":363,"address":"0x5700ed84"},{"name":null,"ordinal":364,"address":"0x5700ecf0"},{"name":null,"ordinal":365,"address":"0x5700ebe0"},{"name":null,"ordinal":366,"address":"0x5700ead4"},{"name":null,"ordinal":367,"address":"0x5700eaa4"},{"name":null,"ordinal":368,"address":"0x5700ea98"},{"name":null,"ordinal":369,"address":"0x5700e860"},{"name":null,"ordinal":370,"address":"0x5700e854"},{"name":null,"ordinal":371,"address":"0x5700e350"},{"name":null,"ordinal":372,"address":"0x5700e114"},{"name":null,"ordinal":373,"address":"0x5700e0f0"},{"name":null,"ordinal":374,"address":"0x5700e094"},{"name":null,"ordinal":375,"address":"0x5700ddf8"},{"name":null,"ordinal":376,"address":"0x5700dbdc"},{"name":null,"ordinal":377,"address":"0x5700dadc"},{"name":null,"ordinal":378,"address":"0x5700d9e4"},{"name":null,"ordinal":379,"address":"0x5700d8d0"},{"name":null,"ordinal":380,"address":"0x5700d7f4"},{"name":null,"ordinal":381,"address":"0x5700d4d8"},{"name":null,"ordinal":382,"address":"0x5700d220"},{"name":null,"ordinal":383,"address":"0x5700cef8"},{"name":null,"ordinal":384,"address":"0x5700cc30"},{"name":null,"ordinal":385,"address":"0x5700c9f0"},{"name":null,"ordinal":386,"address":"0x5700c384"},{"name":null,"ordinal":387,"address":"0x57024464"},{"name":null,"ordinal":388,"address":"0x57024460"},{"name":null,"ordinal":389,"address":"0x5702445c"},{"name":null,"ordinal":390,"address":"0x57024458"},{"name":null,"ordinal":391,"address":"0x57024454"},{"name":null,"ordinal":392,"address":"0x57024450"},{"name":null,"ordinal":393,"address":"0x5702444c"},{"name":"@$xp$22Madtools@TMsgHandlerOO","ordinal":394,"address":"0x5700c310"},{"name":null,"ordinal":395,"address":"0x57024448"},{"name":null,"ordinal":396,"address":"0x57024444"},{"name":null,"ordinal":397,"address":"0x57024440"},{"name":null,"ordinal":398,"address":"0x5702443c"},{"name":null,"ordinal":399,"address":"0x57024438"},{"name":null,"ordinal":400,"address":"0x57024434"},{"name":null,"ordinal":401,"address":"0x57024430"},{"name":null,"ordinal":402,"address":"0x5702442c"},{"name":null,"ordinal":403,"address":"0x57024428"},{"name":null,"ordinal":404,"address":"0x570243d0"},{"name":"@$xp$12Madtools@TOS","ordinal":405,"address":"0x5700c1b0"},{"name":"@$xp$16Madtools@TOsEnum","ordinal":406,"address":"0x5700c0bc"},{"name":null,"ordinal":407,"address":"0x57023064"},{"name":null,"ordinal":408,"address":"0x57012b38"},{"name":null,"ordinal":409,"address":"0x57012ae8"},{"name":null,"ordinal":410,"address":"0x57012abc"},{"name":null,"ordinal":411,"address":"0x57011a78"},{"name":null,"ordinal":412,"address":"0x57011a50"},{"name":null,"ordinal":413,"address":"0x57010a68"},{"name":null,"ordinal":414,"address":"0x57010a40"},{"name":"@$xp$21Madlists@IPointerList","ordinal":415,"address":"0x570100b0"},{"name":"@$xp$23Madlists@IInterfaceList","ordinal":416,"address":"0x57010078"},{"name":"@$xp$19Madlists@IBasicList","ordinal":417,"address":"0x57010044"},{"name":null,"ordinal":418,"address":"0x570230ac"},{"name":null,"ordinal":419,"address":"0x570194c8"},{"name":null,"ordinal":420,"address":"0x57019440"},{"name":null,"ordinal":421,"address":"0x57019254"},{"name":null,"ordinal":422,"address":"0x57019238"},{"name":null,"ordinal":423,"address":"0x57019220"},{"name":null,"ordinal":424,"address":"0x5701803c"},{"name":null,"ordinal":425,"address":"0x57017ee0"},{"name":null,"ordinal":426,"address":"0x5701324c"},{"name":"@$xp$27Madgraphics@TStretchQuality","ordinal":427,"address":"0x57012c4c"},{"name":"@$xp$24Madgraphics@TGrayPercent","ordinal":428,"address":"0x57012c0c"},{"name":null,"ordinal":429,"address":"0x570230dc"},{"name":null,"ordinal":430,"address":"0x5701eafc"},{"name":null,"ordinal":431,"address":"0x5701e500"},{"name":null,"ordinal":432,"address":"0x5701e4a0"},{"name":null,"ordinal":433,"address":"0x5701e2e4"},{"name":null,"ordinal":434,"address":"0x5701e1f4"},{"name":null,"ordinal":435,"address":"0x5701e19c"},{"name":null,"ordinal":436,"address":"0x5701dd70"},{"name":null,"ordinal":437,"address":"0x5701d980"},{"name":null,"ordinal":438,"address":"0x5701d89c"},{"name":null,"ordinal":439,"address":"0x5701d77c"},{"name":null,"ordinal":440,"address":"0x5701d748"},{"name":null,"ordinal":441,"address":"0x5701d714"},{"name":null,"ordinal":442,"address":"0x570230e4"},{"name":null,"ordinal":443,"address":"0x5701faac"},{"name":null,"ordinal":444,"address":"0x5701f9f0"},{"name":null,"ordinal":445,"address":"0x5701f994"},{"name":null,"ordinal":446,"address":"0x5701f8f8"},{"name":null,"ordinal":447,"address":"0x5701f7a4"},{"name":null,"ordinal":448,"address":"0x5701f748"},{"name":null,"ordinal":449,"address":"0x5701f6ec"},{"name":null,"ordinal":450,"address":"0x5701f5b4"},{"name":null,"ordinal":451,"address":"0x5701f584"},{"name":null,"ordinal":452,"address":"0x5701f554"},{"name":null,"ordinal":453,"address":"0x5701f544"},{"name":null,"ordinal":454,"address":"0x5701f534"},{"name":null,"ordinal":455,"address":"0x5701f464"},{"name":null,"ordinal":456,"address":"0x5701f3a8"},{"name":null,"ordinal":457,"address":"0x5701f2f4"},{"name":null,"ordinal":458,"address":"0x5701f260"},{"name":null,"ordinal":459,"address":"0x5701f22c"},{"name":null,"ordinal":460,"address":"0x5701f210"},{"name":null,"ordinal":461,"address":"0x570255a4"},{"name":null,"ordinal":462,"address":"0x570255a0"},{"name":null,"ordinal":463,"address":"0x5702559c"},{"name":null,"ordinal":464,"address":"0x57025598"},{"name":null,"ordinal":465,"address":"0x57025594"},{"name":null,"ordinal":466,"address":"0x57025590"},{"name":null,"ordinal":467,"address":"0x5702558c"},{"name":null,"ordinal":468,"address":"0x570230ec"},{"name":null,"ordinal":469,"address":"0x57022020"},{"name":null,"ordinal":470,"address":"0x57021f28"},{"name":null,"ordinal":471,"address":"0x57021e38"},{"name":null,"ordinal":472,"address":"0x57021d98"},{"name":null,"ordinal":473,"address":"0x57021ac0"},{"name":null,"ordinal":474,"address":"0x5702180c"},{"name":null,"ordinal":475,"address":"0x570217e4"},{"name":null,"ordinal":476,"address":"0x57021750"},{"name":null,"ordinal":477,"address":"0x570215f8"},{"name":null,"ordinal":478,"address":"0x57020ae0"},{"name":null,"ordinal":479,"address":"0x57020a10"},{"name":null,"ordinal":480,"address":"0x570207cc"},{"name":null,"ordinal":481,"address":"0x57026630"},{"name":null,"ordinal":482,"address":"0x570230f4"},{"name":null,"ordinal":483,"address":"0x5702216c"},{"name":null,"ordinal":484,"address":"0x57022160"},{"name":null,"ordinal":485,"address":"0x57022158"},{"name":null,"ordinal":486,"address":"0x5702216c"},{"name":null,"ordinal":487,"address":"0x57022160"},{"name":"@GetPackageInfoTable","ordinal":488,"address":"0x57022158"}],"error":null,"yara_hits":[],"intelligence_mitre_mappings":[],"entrypoint_preview_count":48,"entrypoint_preview_instructions":["jmp 0x570014b0","lea eax, [eax]","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al","add byte ptr [eax], al"],"file_resources":[{"name":"MAD","rva":"0x3d1f0","size":"0x14","type":"data","language":"neutral"},{"name":"MAD","rva":"0x3d204","size":"0x15c8","type":"data","language":"neutral"},{"name":"RT_RCDATA","rva":"0x3e7cc","size":"0x44","type":"data","language":"neutral"},{"name":"RT_RCDATA","rva":"0x3e810","size":"0xa0","type":"data","language":"neutral"},{"name":"RT_RCDATA","rva":"0x3e8b0","size":"0x98","type":"data","language":"neutral"},{"name":"RT_RCDATA","rva":"0x3e948","size":"0x30","type":"Delphi compiled form 'TMadExcept'","language":"neutral"}],"file_permissions":[],"file_activities":[],"file_receivers":[],"file_data_directories":[{"name":"IMAGE_DIRECTORY_ENTRY_EXPORT","virtual_address":"0x33000","virtual_size":"0x64c0","is_in_section":".edata"},{"name":"IMAGE_DIRECTORY_ENTRY_IMPORT","virtual_address":"0x30000","virtual_size":"0x2860","is_in_section":".idata"},{"name":"IMAGE_DIRECTORY_ENTRY_RESOURCE","virtual_address":"0x3d000","virtual_size":"0x1978","is_in_section":".rsrc"},{"name":"IMAGE_DIRECTORY_ENTRY_EXCEPTION","virtual_address":"0x0","virtual_size":"0x0","is_in_section":null},{"name":"IMAGE_DIRECTORY_ENTRY_SECURITY","virtual_address":"0x30400","virtual_size":"0x4000","is_in_section":".edata"},{"name":"IMAGE_DIRECTORY_ENTRY_BASERELOC","virtual_address":"0x3b000","virtual_size":"0x1614","is_in_section":".reloc"},{"name":"IMAGE_DIRECTORY_ENTRY_DEBUG","virtual_address":"0x0","virtual_size":"0x0","is_in_section":null},{"name":"IMAGE_DIRECTORY_ENTRY_COPYRIGHT","virtual_address":"0x3a000","virtual_size":"0x22","is_in_section":".rdata"},{"name":"IMAGE_DIRECTORY_ENTRY_GLOBALPTR","virtual_address":"0x0","virtual_size":"0x0","is_in_section":null},{"name":"IMAGE_DIRECTORY_ENTRY_TLS","virtual_address":"0x0","virtual_size":"0x0","is_in_section":null},{"name":"IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG","virtual_address":"0x0","virtual_size":"0x0","is_in_section":null},{"name":"IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT","virtual_address":"0x0","virtual_size":"0x0","is_in_section":null},{"name":"IMAGE_DIRECTORY_ENTRY_IAT","virtual_address":"0x30584","virtual_size":"0x430","is_in_section":".idata"},{"name":"IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT","virtual_address":"0x0","virtual_size":"0x0","is_in_section":null},{"name":"IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR","virtual_address":"0x0","virtual_size":"0x0","is_in_section":null},{"name":"IMAGE_DIRECTORY_ENTRY_RESERVED","virtual_address":"0x0","virtual_size":"0x0","is_in_section":null}],"elf_headers":[],"elf_static_symbols":null,"vba_macros":[],"verdict_source":null,"user_comments":[],"email_headers":null,"classification_tags":[],"tags":[],"submissions":[{"submission_id":"67b5e643ef57b0d1f706e92a","filename":"madbasic_.bpl","url":null,"created_at":"2025-02-19T14:10:11+00:00"}],"crowdstrike_ai":{"executable_process_memory_analysis":[{"filename":"00000000-00008688.00000000.122852.02900000.00000040.mdmp","address":"02900000","flags":"00000040","file_process":"rundll32.exe","file_process_pid":8688,"file_process_sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","file_process_disc_pathway":"%WINDIR%\\SysWOW64\\rundll32.exe","verdict":"malicious"},{"filename":"00000000-00008040.00000000.121629.03620000.00000040.mdmp","address":"03620000","flags":"00000040","file_process":"rundll32.exe","file_process_pid":8040,"file_process_sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","file_process_disc_pathway":"%WINDIR%\\SysWOW64\\rundll32.exe","verdict":"malicious"},{"filename":"00000000-00004440.00000000.116530.027F0000.00000040.mdmp","address":"027F0000","flags":"00000040","file_process":"rundll32.exe","file_process_pid":4440,"file_process_sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","file_process_disc_pathway":"%WINDIR%\\SysWOW64\\rundll32.exe","verdict":"malicious"},{"filename":"00000000-00003356.00000000.116530.031D0000.00000040.mdmp","address":"031D0000","flags":"00000040","file_process":"rundll32.exe","file_process_pid":3356,"file_process_sha256":"de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81","file_process_disc_pathway":"%WINDIR%\\SysWOW64\\rundll32.exe","verdict":"suspicious"}],"analysis_related_urls":[]},"warnings":["Some low-level data is hidden, as this is only a slim report","Not all sources for indicator ID \"string-204\" are available in the report","Not all sources for indicator ID \"string-474\" are available in the report","Not all sources for indicator ID \"string-240\" are available in the report","Not all sources for indicator ID \"api-126\" are available in the report","Not all sources for indicator ID \"api-9\" are available in the report","Not all sources for indicator ID \"api-263\" are available in the report","Not all sources for indicator ID \"string-4\" are available in the report","Not all sources for indicator ID \"api-235\" are available in the report","Not all sources for indicator ID \"api-103\" are available in the report","Not all sources for indicator ID \"api-124\" are available in the report","Not all sources for indicator ID \"module-10\" are available in the report","Not all sources for indicator ID \"registry-172\" are available in the report","Not all sources for indicator ID \"api-161\" are available in the report","Not all sources for indicator ID \"registry-25\" are available in the report","Not all sources for indicator ID \"api-40\" are available in the report","Not all sources for indicator ID \"api-125\" are available in the report","Not all sources for indicator ID \"target-400\" are available in the report","Not all sources for indicator ID \"registry-26\" are available in the report","Not all sources for indicator ID \"target-103\" are available in the report","Not all sources for indicator ID \"target-25\" are available in the report","Not all sources for indicator ID \"api-243\" are available in the report","Not all sources for indicator ID \"api-12\" are available in the report","Not all sources for indicator ID \"api-105\" are available in the report","Not all sources for indicator ID \"module-9\" are available in the report","Not all sources for indicator ID \"mutant-0\" are available in the report","Not all sources for indicator ID \"registry-177\" are available in the report","Not all sources for indicator ID \"registry-78\" are available in the report","Not all sources for indicator ID \"target-411\" are available in the report","Not all sources for indicator ID \"static-78\" are available in the report","Enforcing suspicious verdict, as suspicious MalQuery verdict was found"],"report_related_files":{"report_json":{"file_name":"report.json","download_url":"/bff/report/67b5e643ef57b0d1f706e929/download/files/report_json","file_size":6833533},"memory_strings":{"file_name":"mstrings.zip","download_url":"/bff/report/67b5e643ef57b0d1f706e929/download/files/memory_strings","file_size":43560},"certificate":{"file_name":"certificate.crt","download_url":"/bff/report/67b5e643ef57b0d1f706e929/download/files/certificate","file_size":16376},"network_pcap":{"file_name":"network.pcap","download_url":"/bff/report/67b5e643ef57b0d1f706e929/download/files/network_pcap","file_size":137702},"memory_dumps":{"file_name":"memory_dumps_all.zip","download_url":"/bff/report/67b5e643ef57b0d1f706e929/download/files/memory_dumps","file_size":4180090}},"system_resource_monitor":{"cpu_usage":[{"x":0,"y":46.113},{"x":1,"y":28.3595},{"x":2,"y":15.2346},{"x":3,"y":18.2034},{"x":4,"y":33.5938},{"x":5,"y":17.8127},{"x":6,"y":18.5159},{"x":7,"y":29.1406},{"x":8,"y":22.1095},{"x":9,"y":19.6097},{"x":10,"y":21.8752}],"memory_usage":[{"x":0,"y":16.5757},{"x":1,"y":16.566},{"x":2,"y":16.3161},{"x":3,"y":16.2844},{"x":4,"y":16.3037},{"x":5,"y":16.0866},{"x":6,"y":16.1214},{"x":7,"y":16.1478},{"x":8,"y":16.0793},{"x":9,"y":16.0688},{"x":10,"y":16.1673}],"disk_read":[{"x":0,"y":1917410},{"x":1,"y":6604.82},{"x":2,"y":716.776},{"x":3,"y":3737.56},{"x":4,"y":153.6},{"x":5,"y":262093},{"x":6,"y":3635.17},{"x":7,"y":0},{"x":8,"y":16383.5},{"x":9,"y":0},{"x":10,"y":11566.3}],"disk_write":[{"x":0,"y":15257100},{"x":1,"y":10295200},{"x":2,"y":1645970},{"x":3,"y":7025640},{"x":4,"y":9340150},{"x":5,"y":4115360},{"x":6,"y":6607820},{"x":7,"y":6060780},{"x":8,"y":7099910},{"x":9,"y":6595460},{"x":10,"y":2910210}],"network_packets":[{"x":0,"y":1.17075},{"x":1,"y":0.700002},{"x":2,"y":0},{"x":3,"y":0.0999989},{"x":4,"y":0},{"x":5,"y":2},{"x":6,"y":0.199998},{"x":7,"y":0.100001},{"x":8,"y":0},{"x":9,"y":0},{"x":10,"y":0.199916}],"page_file":[{"x":0,"y":862609000},{"x":1,"y":861340000},{"x":2,"y":836264000},{"x":3,"y":835346000},{"x":4,"y":833212000},{"x":5,"y":812974000},{"x":6,"y":816697000},{"x":7,"y":812560000},{"x":8,"y":809746000},{"x":9,"y":805241000},{"x":10,"y":804520000}]},"external_reports":null,"available_buttons":{"report_false_positive":true},"hashes_to_context_check":["16126ff5daa3787a159cf4a39aa040b8050ebb66ab90dbb97c503110ef72824a","de51bae08fd7318c988ef54511b5c08d8c3d9bbb2fc03d76d97116a79afb9e81"]}}]]}] 20:null 24:[["$","title","0",{"children":"Clean — Falcon Sandbox Report 67b5e643ef57… — Sample 16126ff5daa3… | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Clean verdict for sandbox report 67b5e643ef57…. 0 malicious and 6 suspicious behavioral indicators across 98 signatures. Detonated in Windows 10 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/16126ff5daa3787a159cf4a39aa040b8050ebb66ab90dbb97c503110ef72824a/67b5e643ef57b0d1f706e929"}],["$","meta","4",{"property":"og:title","content":"Clean — Falcon Sandbox Report 67b5e643ef57… — Sample 16126ff5daa3… | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Clean verdict for sandbox report 67b5e643ef57…. 0 malicious and 6 suspicious behavioral indicators across 98 signatures. Detonated in Windows 10 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/16126ff5daa3787a159cf4a39aa040b8050ebb66ab90dbb97c503110ef72824a/67b5e643ef57b0d1f706e929"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Clean — Falcon Sandbox Report 67b5e643ef57… — Sample 16126ff5daa3… | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Clean verdict for sandbox report 67b5e643ef57…. 0 malicious and 6 suspicious behavioral indicators across 98 signatures. Detonated in Windows 10 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L64","11",{}]]