Static | ZeroBOX
No static analysis available.
;;B&F7B
B4FhD&B
E(?(E8B
?dA/B6H
C1A5G~A
DrDhD7H
ExE(;2D
C1A5G~A
;;B&F7B
B4FhD&B
@H??wElDj>
@H??wElDj;
Installer
Intel;1033
{1C5EF8E5-DA7D-4C22-B46E-4733276034BD}
QFX Software Corporation
KeyScrambler - UNREGISTERED - Wrapped using MSI Wrapper from www.exemsi.com 3.17.0.4
KeyScrambler - UNREGISTERED - Wrapped using MSI Wrapper from www.exemsi.com
MSI Wrapper (10.0.51.0)
crambler - UNREG
!This program cannot be run in DOS mode.
NameTableTypeColumn_ValidationValueNPropertyId_SummaryInformationDescriptionSetCategoryKeyColumnMaxValueNullableKeyTableMinValueIdentifierName of tableName of columnY;NWhether the column is nullableYMinimum value allowedMaximum value allowedFor foreign key, Name of table to which data must linkColumn to which foreign key connectsText;Formatted;Template;Condition;Guid;Path;Version;Language;Identifier;Binary;UpperCase;LowerCase;Filename;Paths;AnyPath;WildCardFilename;RegPath;CustomSource;Property;Cabinet;Shortcut;FormattedSDDLText;Integer;DoubleInteger;TimeDate;DefaultDirString categoryTextSet of values that are permittedDescription of columnAdminExecuteSequenceActionName of action to invoke, either in the engine or the handler DLL.ConditionOptional expression which skips the action if evaluates to expFalse.If the expression syntax is invalid, the engine will terminate, returning iesBadActionData.SequenceNumber that determines the sort order in which the actions are to be executed. Leave blank to suppress acti
!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
F09^(u
D$XSVW
9t$Hr?
L$P9t$ds
L$(j@Q
L$(j@Q
T$,j@R
T$,j@R
T$`jlR
t$HWSPQV
T$`jlR
t$HWSPQV
U(VjeS
<+t'<-t#<0u
D$8SP3
VWVVVh
PWWj%W
0WWWWW
0WWWWW
PPPPPPPP
^SSSSS
^SSSSS
u)jAXf;
0WWWWW
AAFFf;
0SSSSS
8VVVVV
0A@@Ju
j@j ^V
>=Yt1j
URPQQh
C PjPV
C$PjQV
C*PjTV
C+PjUV
C,PjVV
C-PjWV
C.PjRV
C/PjSV
0SSSSS
0SSSSS
PPPPPPPP
^SSSSS
j"^SSSSS
HHtYHHt
tZj"[f;
0WWWWW
AAFFf;
utSSSSS
:u#f9tx
>=Yt1j
t"SS9]
uL9=$0
;t$,v-
UQPXY]Y[
^SSSSS
^SSSSS
t+WWVPV
u8VVVVj
u,VVWV
t VV9u
QQSVWd
HtHu4j
s[S;7|G;w
tR99u2
_VVVVV
^WWWWW
0SSSSS
_VVVVV
<+t(<-t$:
+t HHt
Unknown exception
LC_TIME
LC_NUMERIC
LC_MONETARY
LC_CTYPE
LC_COLLATE
LC_ALL
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
EncodePointer
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
(null)
`h````
xpxxxx
CorExitProcess
runtime error
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
united-states
united-kingdom
trinidad & tobago
south-korea
south-africa
south korea
south africa
slovak
puerto-rico
pr-china
pr china
new-zealand
hong-kong
holland
great britain
england
britain
america
swedish-finland
spanish-venezuela
spanish-uruguay
spanish-puerto rico
spanish-peru
spanish-paraguay
spanish-panama
spanish-nicaragua
spanish-modern
spanish-mexican
spanish-honduras
spanish-guatemala
spanish-el salvador
spanish-ecuador
spanish-dominican republic
spanish-costa rica
spanish-colombia
spanish-chile
spanish-bolivia
spanish-argentina
portuguese-brazilian
norwegian-nynorsk
norwegian-bokmal
norwegian
italian-swiss
irish-english
german-swiss
german-luxembourg
german-lichtenstein
german-austrian
french-swiss
french-luxembourg
french-canadian
french-belgian
english-usa
english-us
english-uk
english-trinidad y tobago
english-south africa
english-nz
english-jamaica
english-ire
english-caribbean
english-can
english-belize
english-aus
english-american
dutch-belgian
chinese-traditional
chinese-singapore
chinese-simplified
chinese-hongkong
chinese
canadian
belgian
australian
american-english
american english
american
Norwegian-Nynorsk
`h`hhh
xppwpp
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
CONOUT$
string too long
invalid string position
bad exception
bad allocation
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
vector<T> too long
bad cast
." /SETINTEGRITYLEVEL (CI)(OI)HIGH
always
administrators
." /SETINTEGRITYLEVEL (CI)(OI)LOW
RegDeleteKeyExW
GAIsProcessorFeaturePresent
KERNEL32
1#QNAN
1#SNAN
C:\ss2\Projects\MsiWrapper\MsiCustomActions\Release\MsiCustomActions.pdb
UuidCreate
UuidToStringW
RpcStringFreeW
RPCRT4.dll
msi.dll
MultiByteToWideChar
LoadResource
LockResource
SizeofResource
FindResourceW
FindResourceExW
GetLastError
CloseHandle
WaitForSingleObject
FindFirstFileW
FindNextFileW
FindClose
GetExitCodeProcess
CreateFileW
GetFileSize
ReadFile
WriteFile
GetModuleHandleW
GetTempPathW
VerSetConditionMask
VerifyVersionInfoW
GetCurrentProcess
GetProcAddress
GetCurrentThreadId
KERNEL32.dll
DefWindowProcW
RegisterClassExW
CreateWindowExW
ShowWindow
UpdateWindow
BringWindowToTop
IsWindow
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SystemParametersInfoW
AllowSetForegroundWindow
SetForegroundWindow
USER32.dll
CryptDestroyHash
CryptReleaseContext
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
GetUserNameW
OpenProcessToken
GetTokenInformation
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
ADVAPI32.dll
ShellExecuteExW
SHGetFolderPathW
SHELL32.dll
PathFileExistsW
PathAppendW
PathFindExtensionW
SHLWAPI.dll
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteFileW
RemoveDirectoryW
CreateDirectoryW
GetCommandLineA
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
InterlockedIncrement
InterlockedDecrement
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
RaiseException
GetFileAttributesW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
CreateProcessW
LCMapStringA
LCMapStringW
InterlockedExchange
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetLocaleInfoW
CreateFileA
FlushFileBuffers
InitializeCriticalSection
GetProcessHeap
GetModuleHandleA
MsiCustomActions.dll
_CheckReboot@4
_InstallFinish1@4
_InstallFinish2@4
_InstallMain@4
_InstallPrepare@4
_InstallRollback@4
_SubstWrappedArguments@4
_UninstallFinish1@4
_UninstallFinish2@4
_UninstallPrepare@4
.?AVtype_info@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AV_Locimp@locale@std@@
.?AVout_of_range@std@@
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
.?AVbad_exception@std@@
.?AV?$numpunct@D@std@@
.?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AV?$ctype@D@std@@
.?AUctype_base@std@@
.?AVfacet@locale@std@@
.?AV?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AV?$_Iosb@H@std@@
.?AVios_base@std@@
.?AVruntime_error@std@@
.?AVexception@std@@
.?AVlogic_error@std@@
.?AVfailure@ios_base@std@@
.?AVCAtlException@ATL@@
.?AVlength_error@std@@
.?AVbad_cast@std@@
.?AVbad_alloc@std@@
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD
0(0V0d0
;%;L;P;T;X;
=&=8=W=
3"385X5
0*151y1
7*717F7N7T7Y7g7
8)969M9
4&585M5m5
7+8J8p9{9
9&:7:Q:_:v:
?!?7?I?l?
11/1Z2
3#3I3R3W3i3{3
4"474C4
:4:I:U:|:
;4;B;b;r;
<6= >.>T>
5#6-6D6V6`6h6o6
67<7B7a7
8T8H9s9
<+<3<D?L?
8F8T8o8w8
:c:n:z:
>$>;>}>
020@0}0
5@6V6c6i6s6
6Q7d7m7
:+:::I:V:
;+;2;<;B;L;R;_;d;
=&><>v>
?,?f?|?
1@1G1L1Z1b1p1
2$3C3j3
8)8>8n8
:&;8;o;
;1<K<R<\<
>#>/>6>@>V>\>
606I6i6n6
788J8\8n8
9X9f9z9
60H0e0
676<6C6R6m6t6
6;7Y7s7
80868Y8y8F:X:o:
?2?:?@?I?P?U?[?a?|?
6%636R6e6l6
7$777A7N7Y7_7q7x7
:$:4:H:\:p:
;B<N<Y<q<
<7=I=`=
>!>/>X>f>x>
2(2:2G2V2]2
7#8A8z8
9 9&9,92989>9D9J9P9V9
;";q;w;
?#?0?K?R?j?
5-656J6U6
:X;];g;
<(<X<t<
>>+>0>@>E>K>Q>g>n>
>*?_?x?
0 0$0n0t0x0|0
1 1A1k1
3O3h3o3w3|3
4^4d4h4l4p4
7;7I7O7r7y7
;%;*;9;B;O;Z;l;
<%<,<1<:<G<M<g<x<~<
0/1t1G3R3Z3m3
5)6/6O6
:);@;Q;
1[2>4n4
6=6E6o7
8'8W8a8m8v8
91989_9e9p9|9
:!:':3:9:F:P:W:o:~:
:0;6;`;f;
;:<]<g<
=+=1=F=T=_=f=
>.>9>>>I>N>Y>^>k>y>
.0;0m0
123g4N5]5x5
Q0M1e1
1Q1Y1j1v1
5?5L5V5d5m5w5
99%9.939B9i9
;9<K<T<]<k<X=a=m=
>D>M>Y>}>
0$090y0
4&454m4w4
6A7G7]7h7
7%888j8
060i0u0
1H2M2_2}2
8B9`9r9
2!2+252`2h2
2T4j4{4
9#:i:r:
2'2?2F2P2X2e2l2
0$0>0M0Z0f0v0}0
1.1a1p1y1
2&212\3z3v4
0"0&0*0.02060C0d0
556=6g6w6
4'5-5~5
637>7i7t7
7%8*8o8t8{8
<(<1<@<E<O<]<
==>W>`>
606>6M6[6c6p6
6>7_7k7
<9>F?x?
1>2T2^2i2u2
586S6]6d6
?$?3?@?F?P?_?~?
)040E0Q0Y0_0n0w0
101A1r1
2#272|2
7&7C7c7}7
8$9@9\9t9
:5:B:@<
6`719:9f9l9u9|9
3N4D5L5
7"8(888
;}=E?R?`?
0.0[0~0
>#?R?z?
5%515;5G5S5]5j5o5u5y5~5
3 3$3(3X3\3
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
`1h1p1x1
2 2(20282@2H2P2X2`2h2p2x2
3 3(30383@3H3P3X3`3h3p3x3
6 6$6(6,6064686<6
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
<(=,=<=@=P=T=X=`=x=
> >0>4>8><>D>\>l>p>
? ?(?@?P?T?d?h?l?p?x?
0(0,0<0@0H0`0p0t0
1 1$1(101H1X1\1l1p1t1|1
2 20242D2H2L2T2l2|2
3$3(383<3D3\3l3p3
4,404H4
606P6p6|6
7 7@7`7
8 8@8`8
9 9@9`9
:(:H:P:\:|:
;,;0;P;X;\;t;x;
<4<8<@<H<P<T<\<p<x<
=$=4=<=P=X=\=`=h=p=x=
> >(>@>L>l>t>|>
>,?<?P?d?p?x?
0 0@0H0P0X0`0l0
181@1H1P1\1|1
2<2H2h2t2
3(343T3`3
4$4,444<4H4h4p4x4
545<5D5L5T5\5d5l5x5
6(6H6P6p6
747<7D7L7T7\7d7l7t7
848<8D8L8T8`8
9$9,949<9D9L9T9`9
:$:D:L:T:\:h:
;,;4;@;`;h;t;
<$<,<8<X<d<
=$=,=4=<=D=L=T=\=h=
>$>,>4><>D>L>T>\>d>l>t>|>
?(?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0|0
0$0(0,0004080<0@0D0H0T0X0
4 4$4044484<4h8`9
:$:,:4:<:D:L:T:\:d:l:p:t:x:|:
; ;0;@;H;
>D?H?l?t?x?
1 2X2t2
383X3t3
using MSI Wrapper from www.exemsi.comProductVersionWIX_DOWNGRADE_DETECTEDWIX_UPGRADE_DETECTEDSecureCustomPropertiesWIX_DOWNGRADE_DETECTED;WIX_UPGRADE_DETECTEDSOFTWARE\[BZ.COMPANYNAME]\MSI Wrapper\Installed\[BZ.WRAPPED_APPID]LogonUser[LogonUser]regUserNameUSERNAME[USERNAME]regDateDate[Date]regTimeTime[Time]regArgumentsWRAPPED_ARGUMENTS[WRAPPED_ARGUMENTS]3.17.0.4QFX Software Corporation{B5A24110-1710-4BC4-AF19-40312A2BC565}-
Y11-1-
1U1111--
743`420
9223%]Ze
sIV\d`
_XacUJ
pbYNA8
e8.Yf8.
e7-Lf8.
E[TT\WTS
E[VTTP\V
ETTPVSTS
L\SS\\\
$%#%##"
TT\\TT
MWTffk
yvyn\F
yyfTF:;
vynT\D;;8
T`VFD2;;;
CB8;;288
Q4=?826;
4822;;8
/2==68
A=26;;
1URRRRRR]
e7-`e7-
e7-ae8-
QFX Software Corporation
_DirectoryRequired key of a Directory table record. ISTERED - Wrapped using MSI Wrapper from www.exemsi.com
MSI Wrapper (10.0.51.0)
from www.exemsi.com
with the default setting obtained from the Directory table.AttributesRemote execution option, one of irsEnumA conditional statement that will disable this component if the specified condition evaluates to the 'True' state. If a component is disabled, it will not be installed, regardless of the 'Action' state associated with the component.KeyPathFile;Registry;ODBCDataSourceEither the primary key into the File table, Registry table, or ODBCDataSource table. This extract path is stored when the component is installed, and is used to detect the presence of the component and to return the path to it.CustomActionPrimary key, name of action, normally appears in sequence table unless private use.The numeric custom action type, consisting of source location, code type, entry, option flags.SourceCustomSourceThe table reference of the source of the code.TargetFormattedExcecution parameter, depends on the type of custom actionExtendedTypeA numeric custom action type that extends code type or option flags of the Type col
e8-Ge8-
f8.Oe7-
ETUUUU_
UUEUUU
EUUUTU!"!!
UUUUU!
EUEUU"!"
efff ~
Vfff ~
fffh >
ffhh!>
feUUT!
UUUD! >
feeUTDD!!>
YeUUDDD!
UUDDDD!
DDDDDD!!
DDDDDD!
DDDDDD!"
DDDDD!
DDDDD!!
DDDDD!
#333332
"""""""""""!!!!!!!$O
W[\dddd\\d\
Pa\[\__[_[_da
Q\[\_\\a\a\\\
P[a___\[\_[[
Wjd\\_[d_[`
gW\[_Y_\\[d
!!!!!!!!!
`Y_a[a\[dn
P[\\\djjk
ka\[akjkv
Pdkklvxz
aknlxyz
yvk[ZR
|ykkRZNHH
|y\kZSNAAA
vvv\\RNHB?BH
rvidRRLAAAAAA
kZRRLAABBBBBH
CNLA?BAAAAAA
^<ABDLABBBBH
=?AA<DAAAAA
6A?BAADDBH
^:AABBAAAA
<ABDAADDH
6AABDAAA
^=BBAA?A
=?ABDAB
'3-1111111112'
<ADAAB
e7-vf7-
f8.ye7-
f8.{e8.
f8.{f8-
4R(7'+
i8+m&+
ow`|Wr
;:z100
EEy().`5|
HOg~ q
&}Nz"{
Y2tcZ [
S!bT52^
eIeL-G
n|T1~}
 gIrvT
j Bx+9
FyY?};
(/+DA~n
QPs82rg
f)Bt\AT
Fz6!8#
+DA:WQ
\t<k5\
^q:k5\
>s%kU\
bphmlfy
keyscrambler.ico
keyscrambler.sys
KeyScramblerIE.dll
KeyScramblerLogon.dll
KeyScramblerLogon.exe
toxyletp
Uninstall.exe
]7]RF]!
R5fx-+
4J%j?"
dt6j#6B#
Pu_Dc<J
?MzAOK5
~DhZ}p
NJ$PY_
G^8XWB~<p?,!,?U
1/n1'y
(?<F]"q
i"26b(
{m6Y6|]
W:;T*.s
I=*7"l
463-F&
7<_mX[
`>rc+9f
H_^_,S4
uS`/wP@
U]K';A
w1A}+I}
e-<!9x&o
b>=d_3
H/c,Q 5
jsn03;N
I"00Ba#.!p
-wFqm
v]=IdK
uD%_c"
m)]Yq@
_&:}&{TP?
G@i}S2oa
qz\6X)
uQ6oMw?
xtEqMO/
"]HQPl
X$07>Az
,~G@1EYbOOLd
jU%zEh
bd"YdP
z[$)D5
+!\UXop
0.#Z:
|;K]r2
F=*yH"{g.`
":{/EU
=Jrnr_
@r'r8y
DWqCDhz
z;h,\S
i[J~+W
o56=pQL
pS;o:h
"CB1uh}
6 .L,
nA~rv
1HkI?s
xA,e0Q
43rWN!
`2,<*/
K};U)6
sGlf&j
2)YPcW
|^r-sE9
gpmzBX&
'\n[uAS
\-70~S
<@&Mpr
:ma%mY6
U]9eT{
LsF\E!
XaOPS%
)ahC,b
dtM'?Z
s|E[ v
O(;(3Fx
m7,JOYd
8fH}l;
{`iBbs
t7yw[m
:P-ya(
bKmuV:
?1quBc
d7.3 +
{ pYPT
2/5r:
{u`t^m
/x17:s
SwEnR.e
~`$2=Xx 9
%~zKHb
y7J*U9
sIIU`xgF
pop0rcP
$#I/T$rUG
A#2<t+
SV(K#!
AW$r:M
=1Fg(P
u;&-7^w
6>bzoag^
C#ik <
Qdd:AXX
\)G8<8
y`%u<?Nz
_GpwgN2Z
"s\TS
&Z>D-n
(,yL&2K
R}2,:"
"/R:Jk
ph?K}u
e'~iQk
,J>IK.
ICC23_
(toH L1k
q/vksA-+
ijHLNu
nPQu,h)G
QQuS~bYn
Uq3EcD
T){)A~VE6
3Dc4'PH
2}'y+J
Crr}|L
-q/d_~
O|!"4!
{z+ru3
RdJA+E
VlXf^f,
(!|C\B
5+5[5s5
6+6K6S0{rv
M#M+McMkN
\3\C\[\
mKm[mkm
n+n;n{nthP%B
{+|C|S|
}+}S}{}
X'YWYgY
-PI=H=f
6wHXB^
*&&(2\e)@A
qj<}zO%
J*2Y::^dX
``\89N
i0nGjV
)`C~",
Y}s*,X
,C]qLF
}q2?Y=
fy8B)P
L)jrkfn
TwGqAuuGTGIwH
2DS,Oi
WD,D`DaDbDd"
+/y?"w%
qe"+"XbX
*zB#P=
%''u?T
QeI'i'
1#tRZ"3
1Ch*dAQ
l{<Ztc
T_P?+NU
'do0~A
6!|Aag
b+e70w2r
WMe*_E(O
0J}!Y!~
]K%(*J
,_R"QK%
s|FN%oL
("w199
~E%@Kh
_V>j0i>
b[gN/Z
-fWFP4
F/ufX^K
mXcXPG
NA{gHy
Go#*|%c
8GZ,O&
xO`xlu
v+5Z$"8
,?(v@Cs
~0W#}+
w-]_x3
E,=`d[
@_Q}c:
0;c4FP}+z
d?l>i|i
"<GwEH
kjk[L
#mmkk1Emmk
ij[[kkVLv
g8gDap
./7M+,
@$qtm{'M
funD'N3>_
}Gpm-L
qqqaDY
%5|o1!
rfrNHO
|2},OYf
UD*isF
Z_;N8[;iT
og~-]
*s9H0Wq
xH$C*0
I|WkW?
dG%#4-
`~KIl
<2nvz\
/S:4U'
ydt~|pWi|
Ch6b<~
/dR\!=
-SO\7s
S}+T4.
~xz"Wh
-tq_n{
OMO/|")
iyg$ h
Mk)S9_
MvnvHiZ
YdVVg/
@oR\:Z
C>Agz\
#ep#>y
rdW0++Y
Kf.%N1n
@CK!S]
YwvKsA
&XkL|8
'!pqF9
|6D8p>
OJ_qgx
+(Ac/v
vyxb5CQ
HP\@%S
})#Gi~
GJ!eyf?
*/!S[.
TN;')yh
6(fD0f
!hXfQb
2'eImn3%
Y_N:asr
75E">
5rE~efm
@vy=3,
Jr%]YvD
l<E5lq
uhMyaV
L^jfsP
J#cl0O-8
@)-KR"7
3[MEIc
G,?NZ
[dd`Gp
uu}OZt
*6*hz[
j Cn(5[
4D}!;Q
Y&j**k=Q
H@k7$g
0j81cR
_:VcbG^
Eo|~Y0
u7k%"Fs#
@|l7+!
f9o+(1
_(xV|M
|*quW-
?wj8Z!1
[DfW]X3
i:0^g+M&
#:Nhr(
Sk9|=B%l
^dmC"d
@HxH=$
noY.3^nA
8UGQ'j
&!YzJJ~
S!T Aj
VF4kc9
_h6<VZ
#kNxELx?z@
u^0K3>7
t&xJgTw
lxxJAMPt
%wh,@F
NK'+N>
Cs~u?J
K-H[*;
E1"e53
&C^k]t
rB.w9@K
ax#dUL
/x.`Vj;*
:S*N9#$
%Qw[kD
npE]g&T
IZ#TWXb
=1iF,F
&>z}z(TZ6
{=Ov,Z
=Db"7y
K?-WGS
\wF~wl,
Y"4ck^
jb%$B%}
u1"a`Nl.
s VZdj
Y_6EFV
%xEIq
s8,}ck
gTuia
0IV`S@
>P';O5|p
a{t{m1
I[fM-&
*hd1w%k
s/7P6t
[LKQ^b
{JMA|m
WC?{eV
Swb~x2
}x\L^5
"YE?.I
6.;~U8JUC
[f1N$[
ss3!5k"x<h
e_G*2"
f,#D2`#
.ZdmdX1E
_EOi?m
rJ8B2Gog
>X0Xj.
,2c:#1
q*XGPZ
fC$eJ
<Nn>BM
\N.V6y`U
t.}spgV
KGbB]EZ
,i%]V]u h
*UWhBu1+k
Q/(K*;
0{Cpx
Izl6W!
j4-+iG
D*D:Q^
c^(qj
^.*<&s
Au[z#?6
Z],~I+m
Z4,]g"
m{azt2
G@~>oLU
we+(c&o
ECw YL
kD\*W5
_2*GK8
hXvc/J
LcRo8
S~B*JS
9SP!NK
H>GClp
,2x>y<
LtNHc`
lGYR.6
iy7/kW_
a9r7wD
O-Q$od^a
3~vRg=
9@}HiY
,[&bX+
6zZ-WO
p&x?jm
8V_lmL
l>'azG
nOlt:%
QQAH(D
/jmhu/
d2BuEU
qOIj;o
-JvW U5}
:.[%r3
XzAmX#
Mp-~/`
ln:a)z
g#t<h~
4+u:h h3
YO1Zjg
`['h&au
zjqQIO
kemKN\
<z+PMWp
h(2RY)
$xYFsO
I16K`
NB*p(w
ILbMQ
?+U/Mc
?:}fuT
4sHe1{fV
-7eAV%
QHl#iWE
u*vJxs
|xd6zSn
GlTr3$
%k6lXV
0+/_,9
oe)R,Q%
lsMg]6V
3 %=ey:
Ih@qOo
N0LZd9#N>
)e.[Cv
o|CkK1
A@n5:
1"~Lq=
${^ci
ns#kNRL
{DzM2Oz
484547
g<I21.
[BHTdc
K.k!dI
s$g;Xw
EDie9p
)e78_,
O,t^2@c
^S.=_P$
f?Ol6h
BcHD.b
>0~[c
pQ=[1J
:8h7d_1
n^&9f[
Z8_%5z
StWN2b
buS}2*
grvr8Fc
[<s[(@
S^S}tD\
_?^Kn:
_:}SzG
$s^y;'5
i^Im2)d
k6:+Rb
S!s.tqtwkg
M$4>E%
g5c1dVBC+|
xB862T
60}UM<
Ra!#rU0
+jx`1q
!k.`5Bn
NP9}uRH
).\}L;
SY#=xBHb
w*4;x
V?Nc%W
8B. u&
)%4kKM
+rk?7w
R-)Lkw
.6:g*
xj`T<}~"
b<S<%
|VExl!
,BvDU,
zBE(tTD
Kyzae3Y3"
u@3Z$M
tB]n87
"(xd4
VVkN%F
Q4-5-6-0,
[l-m-n-
)P}YhqX
d|^:R7
sb2VSy
N{dAZl
y<;+=?
z]FOJUik-
%BrCjT
*QD}cg
Y-\=Pi
]N6tMT
<2gUMF
2z0XcUv
)Q"'Ar
82|\G.
t#N0_`~
_m08Iw
D,S6fk
Z>r%WB
?UY9;w
gqcha$Tna
K9:!K,6
f3e:vu
A9RlN{
O]jDOM{
#P;4'b
4F"G<q
x|(3{3
53lv*v
fM9vh99
5BL"xz'
NY``[c_B
3n%})S
G/N!y"
@Qg}e6
o&3HBy?O$4^I1
sc9*j*u
*>#!0H
TaP:ZB
_w+<>X
d\[cID
oW|~1f
#nz1fq
XLKZLfx81
\?+}x.
0C7f)&q
N'p'x'
+@\`\
M>9C'L
y3.)^`_
/ ?*?2?
U71W0Tj
X]^wLv
x%ko>=}
M4.3[ln
848T-t6JP
"Q5jVq
h..`%YY
_`Pps]`
X[Pj#n.u
4^<^E^
/D/H-JI
6SS]r+)
0<u~g
7WH-b@
q=(K3.
'&&cNdN
&$mDnS{
]AM6a^
W.(bA(
e5U<B$dy
Tk41k?p?
k6lBi[
^>zN$3
h@G-7e
*lVhmWU8
v]H`u
EO-ZR3
f,8BT,
FZ.O},
7ak;q:l#
";rOf^
a0H6t3
O!:TO$
,NA>432
j|Pq7L
B)IPRJ
xuDLPJ
P4d9Pp
t3)!So
EL)LZm
LEM-X[@
Xo-jx[
QHXv4B
R</H~NPL
Y2!8G"Iv;
SL)LEv90
ENOId"
MbJa*jj
av5&Qu
EL1L\M
SV{$ b{
SV{$ b{
)L)LEm'
XoSOR>
bJa*jy
9I4hN"
Au!vB5
axT#"x$o
w=Xzw=Xzw=
F"MO5~
d!yG"I
]{$ktR
]h,20ZK
XoS\f4
bJa*jy
D_lzcb
MZJm*b\a
JU*bya
D_lzc<
MZJm*b\a
#`-pO;
{LGc:C
g e&4s
GiPLp!
5K*4TAX5
wKH^BC
7nl<tp
-YVWkN
!Q}YKx
KXbB3
iYM0nB
+_]+sC_
F3,T#TM\5
AXLC`0BXi
tz`\ZO
x}N^z
Q3GM$5
d *Mdc
}>DX1M&
D!%55+T
uiRK``
:Xp3R1
n 0~eOd
MJytF%
PE#COX4C
`FcGOh4
YnfqIh
5]8gD*
{eiM3y
RrtN[1LjD`y
h-0FkG`
5Im{5U:
hox".v
c!(yQF
ajmiE-
lL't99
"b6h+dNH;z
5an(~h
qBT;|>L~
i6_93f
a-'/ek/b
ew-{5|
#;-r9 (
\qyk$l'q
1^qkgW
BlI*a)$l
AK-]Yu?J
otUM6d
gc0HKP
,Qejdu
Ye%vd5v
kC"YEo
rdyW
]&}iyy
CjY)?v
lE}X~
eN-r.$
h@yl;';
q:.da1^
g)fiE.
Ak-<@o"
{ap-r5C
!i-9'(
zqkj<-
;#?,j
J:*kx9
.e,-k-P
[!(OlRPL
niZam.
{`X1WJ
a"l]3G
g#,gg-
jmDBI1nZ
H~P~X~ao
~a'Vwsr}
|72'R
wf>3)zJ
Av"Yw&
$h30d,T
9+~Rf5
J|dEYn
yJ|MO(
<>4Dsz
yuy{Y_Q
b:4u>A
a(3FXZn
+sq<ci
ryA{45
;@sf` `L
faLBuG
{1dH$KC
-WFiAcF
-Ivjr}
,0$jrK
m#h-! MD
ZU5CZ?o
ftQ1WY
fp3cQ]
7&QsA;
v`u;^#
=g[6Jd>
1j8[J7x%
:s,;{E
<D/WaF
,@M !^"3
PS9uXR
mW#\IXh:
"*I}EZ
3bITN
4j]jL
EF`q:{
K^Q$]J
-w]r]8
&g37=
:#hku#F
-Os|Bk
sEu]Ym
(e)pIf
zbD`EF
43\ftyo
Z:QQ$%
dV4Fx6
g#R}ya
6;U5cU
AB9o\{
7T@q6|
ALVU7q
+=_S/;
i&Y.P'7
fxV1)esdO
j8ZHy6
n>uZ8bG
W"%n'RK,
]RlIEs
z:[UL6
`o|yf,
xh>`^S<
u8$<7(8G
pg:/|H
8;hYP@
`]_PZZe
NDm7~m
xwCO".
z2a=i?
`/7LQH
@1a}"?2
uAIYpv
pD/pxX
qde1~e>!Q7
^V-kxG.2
2-/8Xvg
!je$FP3
k5j1b#p(
c\6fe7
h)_]8{?x7
TOYHv30<*kf
T]Q^9Y)
!5s{&k
x)8(|P
oa_q),
LU@V1o
4|q.*o[
t]i~OWK
zLy5M;{v&
_EQ5-{c
2`mN=z<
7}#3F
IPq:;L
q:6C3kZ)
>;a,H=,
Of%^u_
E4WgTu
-|B\X&U
AB:_9xMH3-
I@^U=m
2IEwbm
(3o(H$
sK4^j_$
S\HzPW
I.`h)u
0u/5/Y
}y8q&q
&QATJ[/
i~Z"K
ddGuy<,.FPZ8
:R^<Ge
U2#})|
+8>_\T
GsWJO(_7
#a>Yx!g
t!(i6}
F5yxpjf
@\E8pD
kVRowo
T/BNiL
RbUJDw.
=U*3'h
[s)VF
yvJ,^o
-OXMA8
z}ao*D
7n+[Yur
,]zm7(
_ %O%'
9$=AUd
s]Z`EgL
]2mF)TdVm
p_0 3^
]Hd:;O
B-q^m)
a;|t:/F
50/Uj0
BozUY
+eJ5e[
>T<,S
w<y@&O
DP+E"H
/DLv ?1
jj}Tse'
1bLR&<d
H4|2?l
P=|}z8m
q~g~/tl
k^U35/F
SlxX5
eN]Nxp
apYSf?JcY
Ia_:+VR
vvmJPjR
m"JBi
$G$[)&
s6+f>)
S57i Pzz
D*-Dmt:
/vM/TT
!+]5*G
T5f!M(v
[_eP8/
rAxUG5
'fs5K<z
Ai.{{>
e@YOS1
YC092ae
crK=<[
[AkM}d!
u+Ju3_
$8}Fkm
b%dtN|J
@.pOON
kn#,g!;
NQFe i
dq"h;%
%qQy]ZVt
35cQAQ
"g$#o\3
tn%U4OM
;T66jx)
S.>%(b
g6E-Xt<
2|^eh6J
B/lb\,
fk}fb=
4aI8MPS
TI@`3.
Q ,0Ai(
i]P3\<
nl=py>
_quCxA
20ohNyD
KqT^EyA
=1uQ0!
R)n?f
QJajC[
>ju{G<
6#dtR$e
~=H)^J{
Psg[A@
rUdYE{"7G
ejL>X
OIdY]Z
sy@NFk
6x}zxZ
$:Zei@
;R^X{;
V75"ia
"J9z`+:
aqv:O-
Ei.${z>
?T:G55
ytk;>6
qAuArAgAmA
]/.Oa?V
s54;@]
s-AV:N,
V;>JCI.}
rt7a<A;
./YYEZ+
X.Ji1q
!`iTK1
~Zp@XR
KfJ'tmk
Gi5ht`9[
B$Lk:D+U
cf]Wy@f
zbHuD-
/VQIkO
#>hbd9N
<Oc5aM
UQ]UU DE
rUP1u\
@/AZ#??
/E/E.C^
^x^t\py
$C}Qe]F
L!Ujz^\Ua\]"XT
kD'b6"
\,"x{
/cJ+\]
#2"bd8
*`4V+4
@R'NFK
re&qH>3
5;'%&8
G3foXs
s(PS4RP
YKwYZv(
+6:yH#D
zfqs"B
4-s8j0
\ \N)VB
2F))Kl
9toUsl
OK(|b|
''=*4j_
x>0S@]
2xEDFT.9
ijWZXC
u-v*6w
1ZPFis
vi:qPMsup
yOd%r?
3[?U*NzA
/S0N_
(Z5|]EU
+=ncR4W
AG57F#
pEw,tu
=d3O1u
jYgLc~e
n*8LQhR!
=WWNX^LTV
z.O(@<
>A;P'7x
%yo7yf
Z9K=6Y
|Z.^$f^|Es
!{yuBtt$
R2RT9QZ
&(m=}Ekw&
aJX~pM
/o3R0c
_q>0Qj
i":S+f[?{
{E<'efHe36
4'I#En
b$Ue%j
Ph$F
57C+HA:
f)w7rzL
O@}-O0f
e ?9Q~L:{
yA+02)
Rp#K~9
NgOOMF
RMJ?WP[Yx|#w
<f,l44
))2%0Hp
xIV$If
W5@63|
xQ5uisU
-*/E!89i
O@x)Y+V6
<=<V:7X
*)y o|FV:WR
@i??^MDc
O3wo5@XM
x?;H?{g
`UHf{w
pLN;K
h=9B@iL
sN]]H*
DcX:[u
?Pv]3gy
@)s[1#w
3}1F"-
,%0E9E&
-=ET+[
"xuk[#
BB ycE,
9ie3i+
Y"dS\T
q8KwUY
KQDE1M
bo5n7e5
5z-18-
D!m5+N
D_RNPJ
1bdC^-=
8ivo}s
FHKTPOCAUTNN@2UND
U}7l,~
~#+/&|
RSP'fs
yx(yQ
m5p((MS~
(RFgNVK
X\wn+x
P~bpJ}F;\
uEaemm2[r
=DH[SfC
rP2r%F
ml2?B0
k!|aq-
8zsjRNRAEw*?
oNjWpg
8sISby
~V=I7&R
OzCT+;
QPDPQM
d5$s3@
Nz6c.;1
M55UKx
Y2:8Sr
eZ-%71
0pQP:#
cWJPNa
dbFN]K
Kbw`1y
O`vJop!
aql'4L
#t!os0
N6,u!s
}u7=ZF
b}Qc( Xb
s{LjmG
Le=@-K
}=-UP*
yt]V }Gv
tBbP:$6
Pp(64
@tbKt_
<vx>H?9N
<F1iJk
,xpy_d|c
\P$4P$=
KP:/c0
}c[lQ*
0S*%s\?
DUO%QB
B9DS3%U
Ut%WB%`
9wK!__
d&B"U+
A,)"1F,
]5'<W
0@+7%x
by0;:p:
FDL2:ndP
9:PB&C
k"%4~+
@cS|#
jNY!Ou
peXT\fL
.jRF">
/5z>iN{L.
8jSojS tC
mpNB?(}
@?hCwO
S-t7]y
yqBaY$
h`mie+vj
nw;ENO
HFfUZ+
q:x6kT
|9< mn
*+B*Tc
F_#%]
3eKZ#(H
DWVa:U0
&U/kxLj
G%cc!x
Lbe>u;b
d^,(We
zp"U/^Q
/N{kwjp_
4vX<mC
?ZF<2F
sDlCA&
z]:.)A
'3~38B
?BlTpX
g#MD*TR
gRUUGS
7=/^rzZ
%bWtpA
?.?6>t~h
gPgngzf
VS839L#
o:oLoXofnj
rpe+etb
4@9pc
#H;Q)0I
Q@|*Llj
gM\5rH
TK_\Vw)
G2RfhG
'aGdvf2s
&BTh0K
N-C's<
Ja7y y*
g52BoT
f9jDz(
+%2j$^t
XE`<BR"
bBa2<GB#
Z04.`)M
uMko&?
sstZv}Y
G5dp@@
qE]q}l
JGprLX
?dbd^H
R#B"NU
l10-@;
;b1|zM
kw@xQy4
g.!8v|fN
F|3k3IJ
r+&7(j?
YY]8rp
/,Pjcj
gPRW9
km A'e
b'ej9VC2[
k7+PJ
+5[[[T
bba8-W
94tE:Et. Y
^V6_,xi
@NtP\gg
A56L7P
V8Wl'
-;(h~f
MG!`rO
3<cOb.
Kqm?(`
v]Qj,)W;"
91!<M)v
G0us *
jf2$6Nzd
WPWX%I
x{Gn/M5^
oi@RJU
8f6W)g
rfkHmA
`ggHzF2xV
)4,)sB
t;8$oH
'*87r5
OE&)+U
Aj~n)6y
?s)\or
~>EL$!G
`Fi]Tf
fW~Qg#j
M,\aVJH
ZhZfZeZdZc-
DoDwL{
Z~ZaZ]e
Z^~.6y
Lel(_(
}i}U}Q~M
6f"i{=-
u|23FCs3u
a!{~=WK
sJ@@,O;Fr
k',2(62
!1!#aJ
iv t]G
2U omTW
7iK2C+e
E~H"|/O
#YU]P~
-5-^52f
`LFyW
]Y|u$K>
?U3"w;
vo/)i:
)$b_nrK
APB=1@
:CvcoL
L=Ofnh
Kk(05[@
L^/+w6
\j/Aj`c
23`pl3X
<6pbU5Z
W Q9lm
x9c?F&
{MHk -
hK@tdf
Y{VlY|+l
8hk!'w[
Y|**xy
_yV~m*+
ULBIuv[&
gX2bH.
8xr#C"
H2dXil
z^wrtN9%
g J"<Q3
`EpgnfI3O
t/%`z@S
Y;qdsX
n9ql2a
{$x:2/G\
Antivirus Signature
Bkav Clean
Lionic Trojan.Win32.Agent.Y!c
DrWeb Trojan.Loader.1743
ClamAV Clean
FireEye Trojan.GenericKD.69742679
CAT-QuickHeal Trojan.Darkgate
Skyhigh Artemis!Trojan
ALYac Trojan.GenericKD.69742679
Malwarebytes Clean
VIPRE Trojan.GenericKD.69742679
Sangfor Clean
K7AntiVirus Trojan ( 005a5c941 )
K7GW Trojan ( 005a5c941 )
BitDefenderTheta Clean
VirIT Clean
Symantec Trojan.Gen.MBT
ESET-NOD32 a variant of Win32/Delf.UZB
TrendMicro-HouseCall Clean
Avast Win32:MalwareX-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky HEUR:Trojan.Win32.Agent.gen
BitDefender Trojan.GenericKD.69742679
NANO-Antivirus Trojan.Win32.Loader.kbkkex
ViRobot Clean
MicroWorld-eScan Trojan.GenericKD.69742679
Rising Trojan.Delf!8.67 (TFE:5:qzAIoaE4utI)
Sophos Troj/Loader-BF
F-Secure Trojan.TR/Redcap.mnhls
Baidu Clean
Zillya Clean
TrendMicro TROJ_GEN.R002C0DJ623
CMC Clean
Emsisoft Trojan.GenericKD.69742679 (B)
SentinelOne Clean
GData Trojan.GenericKD.69742679
Jiangmin Clean
Google Detected
Avira TR/Loader.mfwsa
MAX malware (ai score=84)
Antiy-AVL Trojan/Win32.Delf
Kingsoft Clean
Gridinsoft Malware.U.Gen.bot
Xcitium Clean
Arcabit Trojan.Generic.D4283057
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan.Win32.Agent.gen
Microsoft Trojan:Win32/DarkGate.A!MTB
Varist ABRisk.JAAQ-0
AhnLab-V3 Dropper/Win.Generic.C5480921
Acronis Clean
McAfee Artemis!8F94193B1D8D
TACHYON Clean
VBA32 Clean
Zoner Clean
Tencent Malware.Win32.Gencirc.11b6ea23
Yandex Clean
Ikarus Virus.Win32.DelfInject
MaxSecure Clean
Fortinet W32/Delf.UZB!tr
AVG Win32:MalwareX-gen [Trj]
Panda Clean
No IRMA results available.