Static | ZeroBOX
No static analysis available.
;;B&F7B
B4FhD&B
E(?(E8B
?dA/B6H
C1A5G~A
DrDhD7H
ExE(;2D
C1A5G~A
;;B&F7B
B4FhD&B
@H??wElDj>
@H??wElDj;
Installer
Intel;1033
{1DC4396F-850B-4AEB-85E2-631DF9EE87B9}
AUE INC
aue - UNREGISTERED - Wrapped using MSI Wrapper from www.exemsi.com 1.4.7.7
aue - UNREGISTERED - Wrapped using MSI Wrapper from www.exemsi.com
MSI Wrapper (11.0.53.0)
aue - UNREGISTERED - Wrapped using MSI Wrapper from
!This program cannot be run in DOS mode.
NameTableTypeColumn_ValidationValueNPropertyId_SummaryInformationDescriptionSetCategoryKeyColumnMaxValueNullableKeyTableMinValueIdentifierName of tableName of columnY;NWhether the column is nullableYMinimum value allowedMaximum value allowedFor foreign key, Name of table to which data must linkColumn to which foreign key connectsText;Formatted;Template;Condition;Guid;Path;Version;Language;Identifier;Binary;UpperCase;LowerCase;Filename;Paths;AnyPath;WildCardFilename;RegPath;CustomSource;Property;Cabinet;Shortcut;FormattedSDDLText;Integer;DoubleInteger;TimeDate;DefaultDirString categoryTextSet of values that are permittedDescription of columnAdminExecuteSequenceActionName of action to invoke, either in the engine or the handler DLL.ConditionOptional expression which skips the action if evaluates to expFalse.If the expression syntax is invalid, the engine will terminate, returning iesBadActionData.SequenceNumber that determines the sort order in which the actions are to be executed. Leave blank to suppress acti
!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
F09^(u
D$XSVW
9t$Hr?
L$P9t$ds
L$(j@Q
L$(j@Q
T$,j@R
T$,j@R
T$`jlR
t$HWSPQV
T$`jlR
t$HWSPQV
U(VjeS
<+t'<-t#<0u
D$8SP3
VWVVVh
PWWj%W
0WWWWW
0WWWWW
PPPPPPPP
^SSSSS
^SSSSS
u)jAXf;
0WWWWW
AAFFf;
0SSSSS
8VVVVV
0A@@Ju
j@j ^V
>=Yt1j
URPQQh
C PjPV
C$PjQV
C*PjTV
C+PjUV
C,PjVV
C-PjWV
C.PjRV
C/PjSV
0SSSSS
0SSSSS
PPPPPPPP
^SSSSS
j"^SSSSS
HHtYHHt
tZj"[f;
0WWWWW
AAFFf;
utSSSSS
:u#f9tx
>=Yt1j
t"SS9]
uL9=$0
;t$,v-
UQPXY]Y[
^SSSSS
^SSSSS
t+WWVPV
u8VVVVj
u,VVWV
t VV9u
QQSVWd
HtHu4j
s[S;7|G;w
tR99u2
_VVVVV
^WWWWW
0SSSSS
_VVVVV
<+t(<-t$:
+t HHt
Unknown exception
LC_TIME
LC_NUMERIC
LC_MONETARY
LC_CTYPE
LC_COLLATE
LC_ALL
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
EncodePointer
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
(null)
`h````
xpxxxx
CorExitProcess
runtime error
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
united-states
united-kingdom
trinidad & tobago
south-korea
south-africa
south korea
south africa
slovak
puerto-rico
pr-china
pr china
new-zealand
hong-kong
holland
great britain
england
britain
america
swedish-finland
spanish-venezuela
spanish-uruguay
spanish-puerto rico
spanish-peru
spanish-paraguay
spanish-panama
spanish-nicaragua
spanish-modern
spanish-mexican
spanish-honduras
spanish-guatemala
spanish-el salvador
spanish-ecuador
spanish-dominican republic
spanish-costa rica
spanish-colombia
spanish-chile
spanish-bolivia
spanish-argentina
portuguese-brazilian
norwegian-nynorsk
norwegian-bokmal
norwegian
italian-swiss
irish-english
german-swiss
german-luxembourg
german-lichtenstein
german-austrian
french-swiss
french-luxembourg
french-canadian
french-belgian
english-usa
english-us
english-uk
english-trinidad y tobago
english-south africa
english-nz
english-jamaica
english-ire
english-caribbean
english-can
english-belize
english-aus
english-american
dutch-belgian
chinese-traditional
chinese-singapore
chinese-simplified
chinese-hongkong
chinese
canadian
belgian
australian
american-english
american english
american
Norwegian-Nynorsk
`h`hhh
xppwpp
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
CONOUT$
string too long
invalid string position
bad exception
bad allocation
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
vector<T> too long
bad cast
." /SETINTEGRITYLEVEL (CI)(OI)HIGH
always
administrators
." /SETINTEGRITYLEVEL (CI)(OI)LOW
RegDeleteKeyExW
GAIsProcessorFeaturePresent
KERNEL32
1#QNAN
1#SNAN
RSDSD:
C:\ss2\Projects\MsiWrapper\MsiCustomActions\Release\MsiCustomActions.pdb
UuidCreate
UuidToStringW
RpcStringFreeW
RPCRT4.dll
msi.dll
MultiByteToWideChar
LoadResource
LockResource
SizeofResource
FindResourceW
FindResourceExW
GetLastError
CloseHandle
WaitForSingleObject
FindFirstFileW
FindNextFileW
FindClose
GetExitCodeProcess
CreateFileW
GetFileSize
ReadFile
WriteFile
GetModuleHandleW
GetTempPathW
VerSetConditionMask
VerifyVersionInfoW
GetCurrentProcess
GetProcAddress
GetCurrentThreadId
KERNEL32.dll
DefWindowProcW
RegisterClassExW
CreateWindowExW
ShowWindow
UpdateWindow
BringWindowToTop
IsWindow
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SystemParametersInfoW
AllowSetForegroundWindow
SetForegroundWindow
USER32.dll
CryptDestroyHash
CryptReleaseContext
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
GetUserNameW
OpenProcessToken
GetTokenInformation
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
ADVAPI32.dll
ShellExecuteExW
SHGetFolderPathW
SHELL32.dll
PathFileExistsW
PathAppendW
PathFindExtensionW
SHLWAPI.dll
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteFileW
RemoveDirectoryW
CreateDirectoryW
GetCommandLineA
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
InterlockedIncrement
InterlockedDecrement
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
RaiseException
GetFileAttributesW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
CreateProcessW
LCMapStringA
LCMapStringW
InterlockedExchange
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetLocaleInfoW
CreateFileA
FlushFileBuffers
InitializeCriticalSection
GetProcessHeap
GetModuleHandleA
MsiCustomActions.dll
_CheckReboot@4
_InstallFinish1@4
_InstallFinish2@4
_InstallMain@4
_InstallPrepare@4
_InstallRollback@4
_SubstWrappedArguments@4
_UninstallFinish1@4
_UninstallFinish2@4
_UninstallPrepare@4
.?AVtype_info@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AV_Locimp@locale@std@@
.?AVout_of_range@std@@
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
.?AVbad_exception@std@@
.?AV?$numpunct@D@std@@
.?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AV?$ctype@D@std@@
.?AUctype_base@std@@
.?AVfacet@locale@std@@
.?AV?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AV?$_Iosb@H@std@@
.?AVios_base@std@@
.?AVruntime_error@std@@
.?AVexception@std@@
.?AVlogic_error@std@@
.?AVfailure@ios_base@std@@
.?AVCAtlException@ATL@@
.?AVlength_error@std@@
.?AVbad_cast@std@@
.?AVbad_alloc@std@@
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD
0(0V0d0
;%;L;P;T;X;
=&=8=W=
3"385X5
0*151y1
7*717F7N7T7Y7g7
8)969M9
4&585M5m5
7+8J8p9{9
9&:7:Q:_:v:
?!?7?I?l?
11/1Z2
3#3I3R3W3i3{3
4"474C4
:4:I:U:|:
;4;B;b;r;
<6= >.>T>
5#6-6D6V6`6h6o6
67<7B7a7
8T8H9s9
<+<3<D?L?
8F8T8o8w8
:c:n:z:
>$>;>}>
020@0}0
5@6V6c6i6s6
6Q7d7m7
:+:::I:V:
;+;2;<;B;L;R;_;d;
=&><>v>
?,?f?|?
1@1G1L1Z1b1p1
2$3C3j3
8)8>8n8
:&;8;o;
;1<K<R<\<
>#>/>6>@>V>\>
606I6i6n6
788J8\8n8
9X9f9z9
60H0e0
676<6C6R6m6t6
6;7Y7s7
80868Y8y8F:X:o:
?2?:?@?I?P?U?[?a?|?
6%636R6e6l6
7$777A7N7Y7_7q7x7
:$:4:H:\:p:
;B<N<Y<q<
<7=I=`=
>!>/>X>f>x>
2(2:2G2V2]2
7#8A8z8
9 9&9,92989>9D9J9P9V9
;";q;w;
?#?0?K?R?j?
5-656J6U6
:X;];g;
<(<X<t<
>>+>0>@>E>K>Q>g>n>
>*?_?x?
0 0$0n0t0x0|0
1 1A1k1
3O3h3o3w3|3
4^4d4h4l4p4
7;7I7O7r7y7
;%;*;9;B;O;Z;l;
<%<,<1<:<G<M<g<x<~<
0/1t1G3R3Z3m3
5)6/6O6
:);@;Q;
1[2>4n4
6=6E6o7
8'8W8a8m8v8
91989_9e9p9|9
:!:':3:9:F:P:W:o:~:
:0;6;`;f;
;:<]<g<
=+=1=F=T=_=f=
>.>9>>>I>N>Y>^>k>y>
.0;0m0
123g4N5]5x5
Q0M1e1
1Q1Y1j1v1
5?5L5V5d5m5w5
99%9.939B9i9
;9<K<T<]<k<X=a=m=
>D>M>Y>}>
0$090y0
4&454m4w4
6A7G7]7h7
7%888j8
060i0u0
1H2M2_2}2
8B9`9r9
2!2+252`2h2
2T4j4{4
9#:i:r:
2'2?2F2P2X2e2l2
0$0>0M0Z0f0v0}0
1.1a1p1y1
2&212\3z3v4
0"0&0*0.02060C0d0
556=6g6w6
4'5-5~5
637>7i7t7
7%8*8o8t8{8
<(<1<@<E<O<]<
==>W>`>
606>6M6[6c6p6
6>7_7k7
<9>F?x?
1>2T2^2i2u2
586S6]6d6
?$?3?@?F?P?_?~?
)040E0Q0Y0_0n0w0
101A1r1
2#272|2
7&7C7c7}7
8$9@9\9t9
:5:B:@<
6`719:9f9l9u9|9
3N4D5L5
7"8(888
;}=E?R?`?
0.0[0~0
>#?R?z?
5%515;5G5S5]5j5o5u5y5~5
3 3$3(3X3\3
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
`1h1p1x1
2 2(20282@2H2P2X2`2h2p2x2
3 3(30383@3H3P3X3`3h3p3x3
6 6$6(6,6064686<6
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
<(=,=<=@=P=T=X=`=x=
> >0>4>8><>D>\>l>p>
? ?(?@?P?T?d?h?l?p?x?
0(0,0<0@0H0`0p0t0
1 1$1(101H1X1\1l1p1t1|1
2 20242D2H2L2T2l2|2
3$3(383<3D3\3l3p3
4,404H4
606P6p6|6
7 7@7`7
8 8@8`8
9 9@9`9
:(:H:P:\:|:
;,;0;P;X;\;t;x;
<4<8<@<H<P<T<\<p<x<
=$=4=<=P=X=\=`=h=p=x=
> >(>@>L>l>t>|>
>,?<?P?d?p?x?
0 0@0H0P0X0`0l0
181@1H1P1\1|1
2<2H2h2t2
3(343T3`3
4$4,444<4H4h4p4x4
545<5D5L5T5\5d5l5x5
6(6H6P6p6
747<7D7L7T7\7d7l7t7
848<8D8L8T8`8
9$9,949<9D9L9T9`9
:$:D:L:T:\:h:
;,;4;@;`;h;t;
<$<,<8<X<d<
=$=,=4=<=D=L=T=\=h=
>$>,>4><>D>L>T>\>d>l>t>|>
?(?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0|0
0$0(0,0004080<0@0D0H0T0X0
4 4$4044484<4h8`9
:$:,:4:<:D:L:T:\:d:l:p:t:x:|:
; ;0;@;H;
>D?H?l?t?x?
1 2X2t2
383X3t3
apper from www.exemsi.comProductVersionWIX_DOWNGRADE_DETECTEDWIX_UPGRADE_DETECTEDSecureCustomPropertiesWIX_DOWNGRADE_DETECTED;WIX_UPGRADE_DETECTEDSOFTWARE\[BZ.COMPANYNAME]\MSI Wrapper\Installed\[BZ.WRAPPED_APPID]LogonUser[LogonUser]regUserNameUSERNAME[USERNAME]regDateDate[Date]regTimeTime[Time]regArgumentsWRAPPED_ARGUMENTS[WRAPPED_ARGUMENTS]ARPSYSTEMCOMPONENT1.4.7.7AUE INC{459F1C58-C9BB-41D5-95C8-B44C8D353EA5}
Y11-1-
1U1111--
743`420
AUE INC
d languawww.exemsi.com
MSI Wrapper (11.0.53.0)
rom www.exemsi.com
is actually a property name whose value contains the actual path, set either by the AppSearch action or with the default setting obtained from the Directory table.AttributesRemote execution option, one of irsEnumA conditional statement that will disable this component if the specified condition evaluates to the 'True' state. If a component is disabled, it will not be installed, regardless of the 'Action' state associated with the component.KeyPathFile;Registry;ODBCDataSourceEither the primary key into the File table, Registry table, or ODBCDataSource table. This extract path is stored when the component is installed, and is used to detect the presence of the component and to return the path to it.CustomActionPrimary key, name of action, normally appears in sequence table unless private use.The numeric custom action type, consisting of source location, code type, entry, option flags.SourceCustomSourceThe table reference of the source of the code.TargetFormattedExcecution parameter, depends on the type of cust
1488.exe
He(di5Y
ek_q\E
{~R. k8
O2Jlt{u
cH{dAkR
de|/lD}
eyO?[C=c
jJK/5[
QZ5KLp)D
lg2VIVRI
afy}p`
Root Entry
SummaryInformation
DocumentSummaryInformation
""")))***++//////555=====MMMMMMMM\\aaaaaaaaoorrrsssttwwwwww
#%'#%'#%'
-%/147:5IK
47MOQTV]_'7_adgik
-#%'#%'
%@xz|~
k2DX
$&($&($&(,.90368<HJL?>BEGSY[NPRUW^`nmcbfhjlpq$&($&(vu
cmd.exe
COMSPEC
KERNEL32.DLL
mscoree.dll
((((( H
h(((( H
H
SystemRoot
BZ.INIFILE
CustomActionData
Ini file is
Unable to get ini file name from BZ.INIFILE or CustomActionData
Cleanup
Cleanup is skipped because the debug mode is active.
SetupFileName
Setup file name is
Unable to get wrapped setup file name from ini file
Remove setup file
Error removing temp executable.
Remove ini file
Session directory
rd /s /q "
Clean up files. Command:
files.cab
Remove cabinet file
GetParameters: Start.
BZ.FIXED_INSTALL_ARGUMENTS
UILevel
WRAPPED_ARGUMENTS
BZ.UINONE_INSTALL_ARGUMENTS
BZ.UIBASIC_INSTALL_ARGUMENTS
BZ.UIREDUCED_INSTALL_ARGUMENTS
BZ.UIFULL_INSTALL_ARGUMENTS
GetParameters: Done.
InstallPrepareInternal.
BZ.ELEVATE_EXECUTABLE
Unable to create GUID.
Unable to create session directory.
msiwrapper.ini
BZ.WRAPPED_APPID
WrappedApplicationId
BZ.WRAPPED_REGISTRATION
WrappedRegistration
BZ.INSTALL_SUCCESS_CODES
InstallSuccessCodes
ElevationMode
BZ.BASENAME
Unable to get base name of wrapped setup.
BaseName
Unable to export wrapped setup.
CabHash
SetupParameters
[SourceDir]
WorkingDir
BZ.CURRENTDIR
CurrentDir
SessionDir
FilesDir
BZ.RUN_BEFORE_INSTALL_FILE
RunBeforeInstallFile
BZ.RUN_BEFORE_INSTALL_PARAMETERS
RunBeforeInstallParameters
BZ.RUN_AFTER_INSTALL_FILE
RunAfterInstallFile
BZ.RUN_AFTER_INSTALL_PARAMETERS
RunAfterInstallParameters
CustomActionData:
Valid exit codes are
Unable to get valid exit codes from ini file:
Base name is
Unable to get base name from ini file:
Setup parameters are
Working directory is
Current directory is
Focus is
Elevation mode is
Run before install file:
Run before install parameters:
Run after install file:
Run after install parameters:
Unpacked files directory:
Session directory:
UILevel:
Check if security must be applied.
Protect folder:
Protection failed.
No protection required
Check session folder integrity
Unable to check directory for files.
Entry:
Session directory is not empty. Someone may try to hack the installation.
Unable to create session file directory.
Validate cabinet file.
Unable to get cabinet security attributes value.
Integrity of cabinet file may be compromised. Too risky to continue.
Unable to extract the cabinet file.
[FilesDir]
Stop because the action run before the installer exited with an exit code.
Run wrapped setup
*FILESDIR*
*SOURCEDIR*
OS supports elevation
Elevate executable installer
Do not elevate executable installer
OS does not support elevation
Wait for finish
Success running wrapped setup. Exit code %d
Error running wrapped setup
ShellExecuteEx failed (%d).
File: %s
Parameters: %s
Check exit code mapping
Exit code %ld is mapped to %ld using the map '%s'.
ExitCode
Stop because the action run after the installer exited with an exit code.
Cleanup because an error occurred.
Check if security must be removed.
Remove protection from folder:
Removal of protection failed.
-- CUSTOM ACTION --
(null)
Elevated
Not elevated
User name is
The user is a member of the Administrators group.
The user is not a member of the Administrators group.
BZ.VER
ProductCode
ProductName
- UNREGISTERED - Wrapped using MSI Wrapper from www.exemsi.com
InstallPrepare
Invalid ProductName property
InstallFinish1
CheckReboot
Exit code is
BZ.EXITCODE
InstallFinish2
Wrapped application id is
Visible mode is
Hidden
Modify registry
Error modifying registry.
InstallMain
InstallPrepareInternal returned successfully
Settings were written to
InstallFinish1Internal returned successfully
Wrapped setup was installed Per User
ALLUSERS
Wrapped setup was installed Per Machine
InstallRollback
UninstallPrepare
UPGRADINGPRODUCTCODE
BZ.FIXED_UNINSTALL_ARGUMENTS
BZ.UINONE_UNINSTALL_ARGUMENTS
BZ.UIBASIC_UNINSTALL_ARGUMENTS
BZ.UIREDUCED_UNINSTALL_ARGUMENTS
BZ.UIFULL_UNINSTALL_ARGUMENTS
UninstallFinish1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
Registry key name=
UninstallString
Remove the system component entry.
SystemComponent
UninstallFinish2
Get database
Open view
SELECT `Data` FROM `Binary` WHERE `Name` = '%s'
Query:
Error in call to MsiDatabaseOpenView
Bad query syntax
Invalid handle
Unknown error
Execute view
Error in call to MsiViewExecute
Get record
Error in call to MsiViewFetch
Create file:
Read stream
Error reading stream
ERROR_INVALID_DATATYPE
ERROR_INVALID_HANDLE
ERROR_INVALID_PARAMETER
Export finished
EXPAND.EXE
Save wrapped installer cabinet
bz.WrappedSetupProgram
Extract files from installer cabinet
Error getting path of expand tool.
Extract files
-R files.cab -F:* files
SetProperty: Name=
SetProperty: Value=
GetProperty: Name=
GetProperty: Value=
SubstProperties: Input=
SourceDir
OriginalDatabase
[OriginalDatabase]
SubstProperties: Output=
SOFTWARE\EXEMSI.COM\MSI Wrapper
<EXITCODE>
<UILEVEL>
<FILESDIR>
Elevate action
Do not elevate action
Success running action. Exit code %d
Error running action
Detect installation context (per user or per machine)
DisplayName
FOCUSAPP
Unable to create proxy window.
ICACLS.EXE
Error setting security. Exit code %d.
Error setting security.
ModifyRegistry: Start.
ModifyRegistry: Application id list is empty.
ModifyRegistry for application id
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Modify done for application id
ModifyRegistry: Error getting UninstallString value from registry.
ModifyRegistry: Done.
Advapi32.dll
WReadRegStr: Key=
, ValueName=
, 32 bit
, 64 bit
, default
ReadRegStr: Value=
ReadRegStr: Unable to query string value.
ReadRegStr: Unable to open key.
SetDWordValue: Unable to set DWORD in registry.
SetDWordValue: Key name=
SetDWordValue: Value name=
SetDWordValue: bitness is 64
SetDWordValue: bitness is 32
SetDWordValue: Unable to open registry key. Error: %d
DeleteRegValue: Unable to delete value in registry.
DeleteRegValue: Key name=
DeleteRegValue: Value name=
DeleteRegValue: bitness is 64
DeleteRegValue: bitness is 32
DeleteRegValue: Unable to open registry key.
DeleteRegKey: Unable to delete key in registry.
DeleteRegKey: Key path=
DeleteRegKey: Key name=
DeleteRegKey: bitness is 64
DeleteRegKey: bitness is 32
DeleteRegKey: Unable to open registry key.
UninstallString is
QuietUninstallString
QuietUninstallString is
No uninstall string was found.
Uninstaller=
Splitting:
params1=
Launch the uninstaller.
params2=
OS supports UAC
Elevate executable uninstaller
OS does not support UAC
Uninstall finished:
""")))***++//////555=====MMMMMMMM\\aaaaaaaaoorrrsssttwwwwww
#%'#%'#%'
-/147%:5IK#
@CFMOQ
TV47]_a_dgik7'
-#%'#%'%
")*+/5=M\aorstw
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh Clean
ALYac Trojan.GenericKD.73745754
Malwarebytes Clean
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Clean
ESET-NOD32 Clean
TrendMicro-HouseCall TROJ_GEN.R002H09GT24
Avast Clean
Cynet Clean
Kaspersky Clean
BitDefender Trojan.GenericKD.73745754
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Clean
Tencent Clean
TACHYON Clean
Sophos Clean
F-Secure Clean
DrWeb Clean
VIPRE Trojan.GenericKD.73745754
TrendMicro Clean
FireEye Trojan.GenericKD.73745754
Emsisoft Trojan.GenericKD.73745754 (B)
huorong Clean
GData Trojan.GenericKD.73745754
Jiangmin Clean
Varist Clean
Avira Clean
Antiy-AVL Trojan/Win32.PossibleThreat
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Program:Win32/Wacapew.C!ml
Google Detected
AhnLab-V3 Trojan/Win.Generic.C5654630
Acronis Clean
McAfee Clean
MAX malware (ai score=86)
VBA32 BScope.Trojan.Convagent
Zoner Clean
Rising Clean
Yandex Clean
Ikarus Trojan.Win32.Shellcoderunner
MaxSecure Clean
Fortinet PossibleThreat.RF
BitDefenderTheta Clean
AVG Clean
Panda Clean
CrowdStrike Clean
alibabacloud Clean
No IRMA results available.