Static | ZeroBOX
No static analysis available.
;;B&F7B
B4FhD&B
E(?(E8B
?dA/B6H
C1A5G~A
DrDhD7H
ExE(;2D
;;B&F7B
B4FhD&B
C1A5G~A
@H??wElDj>
@H??wElDj;
DocuSign
Installer
Intel;1033
{02C5A063-F64E-4D25-8149-F6D89D9A23BD}
DocuSign Print Driver 3.5.0 3.5.0.1
DocuSign Print Driver 3.5.0
MSI Wrapper (11.0.53.0)
DocuSign Print Driver 3.5.0 3.5.0.1
DocuSign Print Driver 3.5.0
MSI Wrapper (11.0.53.0)
Print Driver 3.5.0
!This program cannot be run in DOS mode.
NameTableTypeColumn_ValidationValueNPropertyId_SummaryInformationDescriptionSetCategoryKeyColumnMaxValueNullableKeyTableMinValueIdentifierName of tableName of columnY;NWhether the column is nullableYMinimum value allowedMaximum value allowedFor foreign key, Name of table to which data must linkColumn to which foreign key connectsText;Formatted;Template;Condition;Guid;Path;Version;Language;Identifier;Binary;UpperCase;LowerCase;Filename;Paths;AnyPath;WildCardFilename;RegPath;CustomSource;Property;Cabinet;Shortcut;FormattedSDDLText;Integer;DoubleInteger;TimeDate;DefaultDirString categoryTextSet of values that are permittedDescription of columnAdminExecuteSequenceActionName of action to invoke, either in the engine or the handler DLL.ConditionOptional expression which skips the action if evaluates to expFalse.If the expression syntax is invalid, the engine will terminate, returning iesBadActionData.SequenceNumber that determines the sort order in which the actions are to be executed. Leave blank to suppress acti
!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
F09^(u
D$XSVW
9t$Hr?
L$P9t$ds
L$(j@Q
L$(j@Q
T$,j@R
T$,j@R
T$`jlR
t$HWSPQV
T$`jlR
t$HWSPQV
U(VjeS
<+t'<-t#<0u
D$8SP3
VWVVVh
PWWj%W
0WWWWW
0WWWWW
PPPPPPPP
^SSSSS
^SSSSS
u)jAXf;
0WWWWW
AAFFf;
0SSSSS
8VVVVV
0A@@Ju
j@j ^V
>=Yt1j
URPQQh
C PjPV
C$PjQV
C*PjTV
C+PjUV
C,PjVV
C-PjWV
C.PjRV
C/PjSV
0SSSSS
0SSSSS
PPPPPPPP
^SSSSS
j"^SSSSS
HHtYHHt
tZj"[f;
0WWWWW
AAFFf;
utSSSSS
:u#f9tx
>=Yt1j
t"SS9]
uL9=$0
;t$,v-
UQPXY]Y[
^SSSSS
^SSSSS
t+WWVPV
u8VVVVj
u,VVWV
t VV9u
QQSVWd
HtHu4j
s[S;7|G;w
tR99u2
_VVVVV
^WWWWW
0SSSSS
_VVVVV
<+t(<-t$:
+t HHt
Unknown exception
LC_TIME
LC_NUMERIC
LC_MONETARY
LC_CTYPE
LC_COLLATE
LC_ALL
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
EncodePointer
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
(null)
`h````
xpxxxx
CorExitProcess
runtime error
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
united-states
united-kingdom
trinidad & tobago
south-korea
south-africa
south korea
south africa
slovak
puerto-rico
pr-china
pr china
new-zealand
hong-kong
holland
great britain
england
britain
america
swedish-finland
spanish-venezuela
spanish-uruguay
spanish-puerto rico
spanish-peru
spanish-paraguay
spanish-panama
spanish-nicaragua
spanish-modern
spanish-mexican
spanish-honduras
spanish-guatemala
spanish-el salvador
spanish-ecuador
spanish-dominican republic
spanish-costa rica
spanish-colombia
spanish-chile
spanish-bolivia
spanish-argentina
portuguese-brazilian
norwegian-nynorsk
norwegian-bokmal
norwegian
italian-swiss
irish-english
german-swiss
german-luxembourg
german-lichtenstein
german-austrian
french-swiss
french-luxembourg
french-canadian
french-belgian
english-usa
english-us
english-uk
english-trinidad y tobago
english-south africa
english-nz
english-jamaica
english-ire
english-caribbean
english-can
english-belize
english-aus
english-american
dutch-belgian
chinese-traditional
chinese-singapore
chinese-simplified
chinese-hongkong
chinese
canadian
belgian
australian
american-english
american english
american
Norwegian-Nynorsk
`h`hhh
xppwpp
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
CONOUT$
string too long
invalid string position
bad exception
bad allocation
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
vector<T> too long
bad cast
." /SETINTEGRITYLEVEL (CI)(OI)HIGH
always
administrators
." /SETINTEGRITYLEVEL (CI)(OI)LOW
RegDeleteKeyExW
GAIsProcessorFeaturePresent
KERNEL32
1#QNAN
1#SNAN
RSDSD:
C:\ss2\Projects\MsiWrapper\MsiCustomActions\Release\MsiCustomActions.pdb
UuidCreate
UuidToStringW
RpcStringFreeW
RPCRT4.dll
msi.dll
MultiByteToWideChar
LoadResource
LockResource
SizeofResource
FindResourceW
FindResourceExW
GetLastError
CloseHandle
WaitForSingleObject
FindFirstFileW
FindNextFileW
FindClose
GetExitCodeProcess
CreateFileW
GetFileSize
ReadFile
WriteFile
GetModuleHandleW
GetTempPathW
VerSetConditionMask
VerifyVersionInfoW
GetCurrentProcess
GetProcAddress
GetCurrentThreadId
KERNEL32.dll
DefWindowProcW
RegisterClassExW
CreateWindowExW
ShowWindow
UpdateWindow
BringWindowToTop
IsWindow
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SystemParametersInfoW
AllowSetForegroundWindow
SetForegroundWindow
USER32.dll
CryptDestroyHash
CryptReleaseContext
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
GetUserNameW
OpenProcessToken
GetTokenInformation
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
ADVAPI32.dll
ShellExecuteExW
SHGetFolderPathW
SHELL32.dll
PathFileExistsW
PathAppendW
PathFindExtensionW
SHLWAPI.dll
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteFileW
RemoveDirectoryW
CreateDirectoryW
GetCommandLineA
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
InterlockedIncrement
InterlockedDecrement
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
RaiseException
GetFileAttributesW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
CreateProcessW
LCMapStringA
LCMapStringW
InterlockedExchange
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetLocaleInfoW
CreateFileA
FlushFileBuffers
InitializeCriticalSection
GetProcessHeap
GetModuleHandleA
MsiCustomActions.dll
_CheckReboot@4
_InstallFinish1@4
_InstallFinish2@4
_InstallMain@4
_InstallPrepare@4
_InstallRollback@4
_SubstWrappedArguments@4
_UninstallFinish1@4
_UninstallFinish2@4
_UninstallPrepare@4
.?AVtype_info@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AV_Locimp@locale@std@@
.?AVout_of_range@std@@
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
.?AVbad_exception@std@@
.?AV?$numpunct@D@std@@
.?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AV?$ctype@D@std@@
.?AUctype_base@std@@
.?AVfacet@locale@std@@
.?AV?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AV?$_Iosb@H@std@@
.?AVios_base@std@@
.?AVruntime_error@std@@
.?AVexception@std@@
.?AVlogic_error@std@@
.?AVfailure@ios_base@std@@
.?AVCAtlException@ATL@@
.?AVlength_error@std@@
.?AVbad_cast@std@@
.?AVbad_alloc@std@@
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD
0(0V0d0
;%;L;P;T;X;
=&=8=W=
3"385X5
0*151y1
7*717F7N7T7Y7g7
8)969M9
4&585M5m5
7+8J8p9{9
9&:7:Q:_:v:
?!?7?I?l?
11/1Z2
3#3I3R3W3i3{3
4"474C4
:4:I:U:|:
;4;B;b;r;
<6= >.>T>
5#6-6D6V6`6h6o6
67<7B7a7
8T8H9s9
<+<3<D?L?
8F8T8o8w8
:c:n:z:
>$>;>}>
020@0}0
5@6V6c6i6s6
6Q7d7m7
:+:::I:V:
;+;2;<;B;L;R;_;d;
=&><>v>
?,?f?|?
1@1G1L1Z1b1p1
2$3C3j3
8)8>8n8
:&;8;o;
;1<K<R<\<
>#>/>6>@>V>\>
606I6i6n6
788J8\8n8
9X9f9z9
60H0e0
676<6C6R6m6t6
6;7Y7s7
80868Y8y8F:X:o:
?2?:?@?I?P?U?[?a?|?
6%636R6e6l6
7$777A7N7Y7_7q7x7
:$:4:H:\:p:
;B<N<Y<q<
<7=I=`=
>!>/>X>f>x>
2(2:2G2V2]2
7#8A8z8
9 9&9,92989>9D9J9P9V9
;";q;w;
?#?0?K?R?j?
5-656J6U6
:X;];g;
<(<X<t<
>>+>0>@>E>K>Q>g>n>
>*?_?x?
0 0$0n0t0x0|0
1 1A1k1
3O3h3o3w3|3
4^4d4h4l4p4
7;7I7O7r7y7
;%;*;9;B;O;Z;l;
<%<,<1<:<G<M<g<x<~<
0/1t1G3R3Z3m3
5)6/6O6
:);@;Q;
1[2>4n4
6=6E6o7
8'8W8a8m8v8
91989_9e9p9|9
:!:':3:9:F:P:W:o:~:
:0;6;`;f;
;:<]<g<
=+=1=F=T=_=f=
>.>9>>>I>N>Y>^>k>y>
.0;0m0
123g4N5]5x5
Q0M1e1
1Q1Y1j1v1
5?5L5V5d5m5w5
99%9.939B9i9
;9<K<T<]<k<X=a=m=
>D>M>Y>}>
0$090y0
4&454m4w4
6A7G7]7h7
7%888j8
060i0u0
1H2M2_2}2
8B9`9r9
2!2+252`2h2
2T4j4{4
9#:i:r:
2'2?2F2P2X2e2l2
0$0>0M0Z0f0v0}0
1.1a1p1y1
2&212\3z3v4
0"0&0*0.02060C0d0
556=6g6w6
4'5-5~5
637>7i7t7
7%8*8o8t8{8
<(<1<@<E<O<]<
==>W>`>
606>6M6[6c6p6
6>7_7k7
<9>F?x?
1>2T2^2i2u2
586S6]6d6
?$?3?@?F?P?_?~?
)040E0Q0Y0_0n0w0
101A1r1
2#272|2
7&7C7c7}7
8$9@9\9t9
:5:B:@<
6`719:9f9l9u9|9
3N4D5L5
7"8(888
;}=E?R?`?
0.0[0~0
>#?R?z?
5%515;5G5S5]5j5o5u5y5~5
3 3$3(3X3\3
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
`1h1p1x1
2 2(20282@2H2P2X2`2h2p2x2
3 3(30383@3H3P3X3`3h3p3x3
6 6$6(6,6064686<6
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
<(=,=<=@=P=T=X=`=x=
> >0>4>8><>D>\>l>p>
? ?(?@?P?T?d?h?l?p?x?
0(0,0<0@0H0`0p0t0
1 1$1(101H1X1\1l1p1t1|1
2 20242D2H2L2T2l2|2
3$3(383<3D3\3l3p3
4,404H4
606P6p6|6
7 7@7`7
8 8@8`8
9 9@9`9
:(:H:P:\:|:
;,;0;P;X;\;t;x;
<4<8<@<H<P<T<\<p<x<
=$=4=<=P=X=\=`=h=p=x=
> >(>@>L>l>t>|>
>,?<?P?d?p?x?
0 0@0H0P0X0`0l0
181@1H1P1\1|1
2<2H2h2t2
3(343T3`3
4$4,444<4H4h4p4x4
545<5D5L5T5\5d5l5x5
6(6H6P6p6
747<7D7L7T7\7d7l7t7
848<8D8L8T8`8
9$9,949<9D9L9T9`9
:$:D:L:T:\:h:
;,;4;@;`;h;t;
<$<,<8<X<d<
=$=,=4=<=D=L=T=\=h=
>$>,>4><>D>L>T>\>d>l>t>|>
?(?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0|0
0$0(0,0004080<0@0D0H0T0X0
4 4$4044484<4h8`9
:$:,:4:<:D:L:T:\:d:l:p:t:x:|:
; ;0;@;H;
>D?H?l?t?x?
1 2X2t2
383X3t3
roductCode{8DE1A92C-0E81-4110-9D03-E69B64FF3A91}ProductLanguage1033ProductNameDocuSign Print Driver 3.5.0ProductVersionWIX_DOWNGRADE_DETECTEDWIX_UPGRADE_DETECTEDSecureCustomPropertiesWIX_DOWNGRADE_DETECTED;WIX_UPGRADE_DETECTEDSOFTWARE\[BZ.COMPANYNAME]\MSI Wrapper\Installed\[BZ.WRAPPED_APPID]LogonUser[LogonUser]regUserNameUSERNAME[USERNAME]regDateDate[Date]regTimeTime[Time]regArgumentsWRAPPED_ARGUMENTS[WRAPPED_ARGUMENTS]3.5.0.1DocuSign{C6823564-E27C-4D6D-88DF-C23A0EEFC158}1.js
Y11-1-
1U1111--
743`420
setup_108.exe
c3VcCd52
$?A~]8
s*r4cp
:GgKdc?
OiYlBuC
XyRbH>
ag+?g]24~
z1~*VE
kMP-24
Ad6cHF?
*6]/@_a+
<f_w*F`
gm<7P1Q1b
=EMrk\t
DocuSign
entIdGuidA string GUID unique to this component, version, and language.Directory_DirectoryRequired key of a Directory table record. This is actually a property name whose value contains the actual path, set either by the AppSearch action or with the default setting obtained from the Directory table.AttributesRemote execution option, one of irsEnumA conditional statement that will disable this component if the specified condition evaluates to the 'True' state. If a component is disabled, it will not be installed, regardless of the 'Action' state associated with the component.KeyPathFile;Registry;ODBCDataSourceEither the primary key into the File table, Registry table, or ODBCDataSource table. This extract path is stored when the component is installed, and is used to detect the presence of the component and to return the path to it.CustomActionPrimary key, name of action, normally appears in sequence table unless private use.The numeric custom action type, consisting of source location, code type, entry, optio
Pu^s55tP
gq^@`?
N'@c%n
pfy#_V
5>Zb{$
|5<Pc8aY
`d?=*xw
\<n;H}
4g(T7:
,o0d9+M
s1{2XbP
5Lef<:
[3"*"(}sLO
@x\%V;
oEP>A3
`0WbdX-
Ao}~~3
XN8p\p
nKVACo
5c0tYL>3
<~a.WP
pt7<00
A9)1#3J
GY6C;*
w~S^G4oYG
;^6H%\0
:bVX="%
@?DC;kD
.?xn><
$]>Skr
yH$x=S
#2t}!$
1kdbJFb
)m_R9F
"~f3zA9
%KK*B!A=
?Wz?o8P
N.?~k}
eFAF'wORV
YT#%4N!q
{.mY;0{
5m/o7,
45G5c:
D3khdn
i.MF(Yi
X8F&6xz
t~!qbS
kEKs)0?
:^h&7
k|=I|_+
.gf_^b
z$:H} 6
M[f+)=
x^ {4F
yj:3L6
0f{Z@C
eP\;gs.
u-3QPs
&:q|&R
C:|}J
L_bVv"
-+&+<,
kXMok^c
Qa)'baG
H5`Wb
YfVI|6
R<aYJW
ne9vBN
y{=F:4+
3YBB"21
`?<?%K
-T=[v#{
{L-x\&T
N&9}h6
pqsEr*
aS7~25
D>88pp
Z,\_Snh
fm\@C\'8&[
g,s-}-
qeRo<;
V=!LOq
S@ClyF
|{|@Q\
>E RCJ
|~J.12
2gyG*>
%q=p?}F
,Bt"hE
s<*fmQ
\L7qzq\
TQOo6<
bd.QmP=
`ZJ[v1
~[9:{rW
/dI?"g
,Sb8?e
hKQ(?[x
gF:wc_
?3P9we,
^&Y}=:g
!ACaCt
CgK6,S
*&:HP!,"
L%&#lB
XW$66|=
kKthO4
ZS>KW`:
)t|E%}
,o&R]c6e$T
}Tu#&|&
tCE_y
?i@.u_
d3lb@e
BCv]Yh
6`L_E)
tBwFmJ
H#"P\S
02XLe
;B_*O|/
l4/;f(
+<,%!S
=o3b$up
F"cDg#
J&-NV+
xBWr/
M_N_O_
zW:MQU
T4*>KK9
Iqq1H%#
I+T+=+>+?+@*AU
ZQZYZaZiZqZyU
IX</&j
R5{7Ih
de_4k|
]" H?66
@j?%P`
'%3H'D
/xsp/H
&w)h%O;
oj 9.+
q$AFw=
Cl$xbq
`~CL_V
}-%Zk2
?z8N+3
ENJlu:
gh2_~dmZ
kzOv}I\
6jGV<#-=$
;I}cmZ
uL_~Wk
vKf>c,
C7g://
G=j`USw
7ltPjnV{
tfK@dQ=4
<K-yMW=
=<bui
PHgH"'
=9XV%>
<AR .E56
?&{e%u
SP<k6v
w^M/Ok@
6 vUG`
i~6!2&
}:"T8
iqgnx'
d)={y.:
({5iWl
c&Wir<
/i-y,@,
<Lj\EM
F]/,s!lK-~
= yEuu
W@e!3O
#C4q?"
0\~V08/
7xaQy<o
w-6Z`{
zeO>{T
${ufS3
fQ"vh<V/J
B7.)s6
i{\ACG
}3PKAh8
7+t>>Y
AS;E4H
leueLM<
%X`6Cn
'!Qg}
<@ctaA
C,3B*%
La:??n B
K\O++fce5
XG28/x1T>
Ijv YoGA
RHc|QUKL
mRty2h
BcugJ[
8hgilK
HiqIqE?
n\uMg)a_
"ovY 1
[DHk3m
hsgf8U
0Y$nlQ
#;$4am
agL1vU
mm:L`K
yY))Oa{8
X:c%H5
rt{;G
VBGi$9b
kd"_`RX+"
dMPd2&
f{0Jxv
>NkuE!
f+BO0{
Wrl;0JA
1+i[3\F
w9oG'S
h:zVNb
vd:(ud
[}Ik:K
x`K!^1_
n+_Eng
#P/t8z\
YN%n%Z1
1*YvgxpC
Wx+K@%
YuWNnd.F
z+M%,I
{NT9:p
!0~*pZ
vY!(+\
ZtijLJ}w3
q~l6s%
:'ees(
h-VxU>2
0x VF6O
@u; 7P
<"ln;`
SCDg8H5
N8;0?!
`3rIO(
rvj^'P
>8UV_^}
[aMA_a
Qc5;`H
Z5U:;k
5/LV*^
R=XP@th(I
d?=&e>
bQ'\i.
e)Sej>zn
2ZNN$L
}%<pXL
s2IbFj
sjB9ooP
\na9kf
%r=Rh{
gH68^(
zKF)G6
`#c^ss
$8=Kp7E
O{q&C!
b:n5[l
;%UKuH
[NKwObWi
LH>ixcZeXVE
LS$Cab
ESd]~C
3yM{bl
Gp~m8>
}q^LH}
:o!(2f;
*?B=ok
)&8yOp
mZ#cSD
nsm) Y
gkhuM
.q5GWS
xkr^o%
H%vD;|W
Pu[@,v
JJF.piz6
Plu2,r
BO/oN>)
&*#+aC
<v$c]3
F%|;j~
.kmbZF
jz`m'%w
/ou@12
gR0mzEs
#v+T/s
s^U}vN*
#[|?gFu
cxV7vNI
7hVFx1
w(]W()[DZ
QFT2~R
S(OLe
<|[>6
<ma*_F<
v~]_BG-
.[y2fj
,^|NGC,js
BAe&uB
80P%HT
QF]"b|cx
,ivEp@
]TmsL^
W%EDaC
q<V#`z@
YJhb;4
-_|%Ny/
U4#`?%
c]no,~
p7}sq_L
}?^a<|
h<qqJB
R^'y|e
qrA!+Q
zC[hI/
<_AcC]U=_
qrnLD
yjzru>
yw1Z8?U
M/[y/<
FGg<{
o;7WJ+
z~?G`$
"g?kH}
~06\C
~R%=y
Rp^!5a
TfG0?0r@
%P/GGTR
8i[2@*&
!:tA$k
L{J<N5
IjW?12
X~NFIq(
QVVW:=
$m/2\VK
x ?Zg
C` dAV
UfkG:j
Q 6~S
V1%]a1O
bLIHk]
iji66
1REHQ
nHX&h^w
t}h$0hJ
^ eI[Jrq9
H\p/7(
vRQ;&FwFqN
VGhoUB
ToC2yq
Nd.3D]B6
E|;>\hT
T M]Gse
0QvHl?-E<
L+{Z4cm
+1kMTe
Q'qk8=w
I$r[ssw
a$_=`!
#c;^h"
Z@<QX_
?|h5$43
?5Q>-P
 ?@ !
'tzmyp
!Vb*-3
4\{Q%H
xTX&i
SKoj+,
xmznN
xlq&U}X%
6d4,\_
|YM,h;
F$%'UpH(
P&D?CCw
uHQs^I
{/IZ!9
BGI]jh
oI2Z`c
L$IY_p
'w@~ \`
FI`?Ut
k[Ik&T
hh{,&_
G3h:x^
[R;)F9A+W
4~^$C2#
UBn-y.
(sl!=<a
VtAbdVI
]i>3@m
_aln`b'
o}R|;xG
{la&Ui-Ahaj Jfh
q{l<mZA
[%VT+T
|a?;9d
L:\YUN
vE~`iMp
WU/@TUQ
79/PnR^
qhD/b/
:mb:{q
1h@t*N
\~LD=O
Ut.Ii%
=mZx!|
~wE$h$4MG=
ZnY?&W
4]$0ux
^#nVP!
*("b1z
F\PdZK
4-tQ[i
?^QY[(
~uTEH\}
ERQZ!F
!2ap<*
T6gWL=
"^P&inZ
]~Zz9V
3?LXy/
#qbG!:
)|_b-S,
l;,998
B:hTgK
Q$$kFJ
!0PI,N
!o_KbX
!LhY$7[@@
,s=G4t
StB*Gz
( LZG*
9_i{1_
k!oq*)
xNsjl[
=+k7cX
jb_c?{tf
yu't1{
G9hW+r
Jj(5-P
^Cly61
SJT*F
G@lPp,
a^W2FU
haMBnA
dsPX=4
b"$EP?M
GfVc@a)
$oGvMa
*iq8)S
g*aw*'n\?b;
2w)"kew
Z(k<,Q!
.T!gZx
xJ0,HTp
qY/9=_
+o<!8h)
JS9+{;T
}M5.fE
,5/Lx`p
<_D2GM
aes^yp
RHn2wdQ
+Sg(_Z
k|6!,N
wd_N+Ps.
L[aOPz
Eg?{U=
2}]6s~f'l
PEJ7!;(
9 l !>k
B5O9Qf
5Hnq>.
flCNx=Qf
O*uBd(
n{@z-0
wD`#e
z*z)z
[PcBEI
VI|f (
nY-}Jy/?
ZMX<Bc
=sx$T-1
r,y`^5
H0=N-x
L7StK7
.!R)sAj
+]!4~r
,hn<[qX'W
)x5RutW
=P}_86
5lfTl%
]m&kVC
03ddz]
4F!7`"
'Em5ow
%_`y&+
z]}W};
1gq7k<
r&7;5i|I
:O,{n)
*e=:&)
-6=4@Z
,m4RHC
]yb8RP
cPyv3dW
!a~F0lJl
7p/5DC9
/3sfBl
.iDR9NE
]9;tm^s
1x45tX\
n(tYfJ
WXv"ZF
@"R7qh
6!W^%Ab
i>JRo(!
HlBGNi
x| Zuh
:lT` jt
kFAcYa
i!nU!S
ky>L;
*_a;e^
TV|$K&
1|f0dVq
%]PviG6
/r'I5K;P
Mo)!Zd
c}GH5H
=*7 k=
J2]M9/
tSsu't
,$>nQ`>
;%|PzK
4wFs"vO/
-|WW{#
MRLvn`t
'o&*vGKn
=^5a>o
=#to#k
'LgxO
2O]R42
-bAY+D
QN5 Y6
B$("*%
cSGLr/
N?:wx6
2(M9T;
I2,d|G
/iahKR2O
VVAvxz{
5Hs{X;
k}x6Hw
:(9{mz
|H1w4y
40[uW+
1J/4*2
nti?sN
;>Iana
Z?jYAA
_7^s5H
FhVKaq2
#{6tOe
YaP!R5
Y=Xs^d
1D!}Qu
TsiPdB
5GHC({V
fo@KT+KI
q4;Q7
=tFZ;O
=(`owp
x.3:'=
EI0ij*,
Hn<FHot
7b_VFM
51:D#r
J#<^a:
FR1=6P
FmYc`7
T<Vzz7
T5w tV8}.
<aw4h|
8.`|usVxT
m'J`/]g
&U`2`'
Zmct*f-L
P9&^L"
{MSqIv
<kBT0F
j5t<rk
EFX<LH
n,+wZ7T
#}V%@v
_nZ9*=
?EBbGl
]?w,_!
`z ?v`
,SWXM,
~n Msw
}Piv2C
&0HC3l
k5 Ly
R5'L:F
5B5|cO2,$
]HYT {*
6^,;FD
2=a]F
f.<8bS"
66i$^YV
k 7)'wZ
+x0+^X
0M]ho>
JjlH><
f~2_izC
}}Py8W#
??2bz]
Z2?GsT
(gX"mI?
F~-R(V
obI2Dj
*p]z-p
b.c ,=
*,)liyA
@khlL:
NqA+Hl_c
q.mI |
qp80h*2
D~).[a1
.NV!S%w
"n\ ;
&o_.J+(
cW$2pI0
3O`j,/
(,=ET?
_MBh6V
zO8k'D
p37.t%+
%P'V~I
5nL6VVk
p~O|y
56ABYJ
%"]Qmx
;}KIN[
sWpBNmk
p9ZuI*N
{R'zS-`
fL[}|q8
BugLgP
<k/,C:
jQU%*[3D
qxx;na
Q1jRirw
jj(^6
OqPr)u
ngQbiR
Lo1qg-C
B_y%&W#
ojD6gy}
6uS@^z
B`]:Vqq%
e3`T-nY
SO%nqP
pfn&a;
]7~/6h
hEmOG]
tU- u^!m
%NDUZ-h
L]>&},
'F=b%g,
*z`fzF
>.KZ^S
i'i6d>
3Lg%1E
tL[R@i
sOi/ }
yDo!FP|
;^L?AS
#$dbh1"?H
1af;d)#M
`m_u
'>|IeZ
G:CP\O'V
q<W% $
!MHXmX
Mg@/uj
2/2I;Q
b<n)JO
plRA,f
z5m[gS
n:=Nd*G
WqnqKe
@} gFeKu
hdN+[l
o.,]Bu
+xFZ7y
I /W$p
5sF%KQ
nwY^-J{
}6dR$SI
$)'|:;qx
L}! )4
jU:1@
C+"0e$i
H#cP0S
;R,y+vO
\9B2K<
9VwRye
jwCuN>R
d((F53
=h{w}k
.m:c[
g{yT|6
5B:.RVK!y
vgQPGw-
c3bkd%
U(hi]L
dJ^6{GF
Z!eZO#
R{Up~
K^]@*g
~A>x3w
zb{l%%
Wql mi
kj2ui=
lz.TRn
zi,uI/
e\,&.H
Z?"yP~}
LaU.kj
W|]i)Ap?1
+4<N=L
$DeMlDQ
[0KWVPs
&,j3q"
#:^?J)g
U1yJ-{L
iGVmO
wR\enr|
bDKCzmF
}2CdGg</
'#u9E+
:s/Jwf7
14\ybo
4NP^&F
qClF(7#6
(Ayj2.
3)OR2o
+;j0?w
D`-@`X
S<<hCS
qo6I[T
zv~h"
N}RlhO
Qs063</
sNmRpp6
jn|nAj>%
o%GZRT%
KE!Jx-
5TkNEo
A!$I^u
&7,GLl
nYLgGU
G}Sf3|
YXX46"
uaqw#y
5Z[J)X
L>[l.`
h;!$u+>
a[KY+r
nBcxZ}
;^KU[u
:Z6|80
(3qP,%{
hPhbo$Z
^yyO9\
%t{B*a'
oHBew]
"v`B,":
eX]b)a
~& vB^
lO'c7
(rF?b*
.CyBzN
#R*]]v
z-p^9
n -h19
<AG@Eu
"sgsD#
O~*s]O
e7-V2s
X?p|xF
:Dr"6.'
HuGrsv
o?zh3xT
*ol.""
,STukhL
klKX[w
EA2FU4
k*%IGP
VQb'*P
l6Z9c(J@:
MJ`$4L
(woESEf*e$J
b;tav+<
NmSL.%V
es!Q{;
x. E q
}8+:Cv-
#+U(S<
0i<'+T
rLMQ^b
bC/}yKIC
#:H(%J
gZS!9P
K]1a#:[
m$y*`s
=5t>k3m
}t0"Ni
}KM%OC
.v)Fo[
E^.Jv6
;{saet
OYtM|t
D0lY^ZF
(^$. Q
TV]52{.
Jt=rMI`
<U9)!j
p@&2h>
:8,AqN
%)rd+uq
^\e88i
(TO1>B!
oc}cej
u'qy3#3
q(w4cS
<!,LIs
{J#aIZ
_ 9`ic
p9ZIk3
K/t=W'
V0H,6N
eIJgXL
!7EWLVJ
X.ZIH
Yn31:5
2/c"BX
a`J2>7
/O[%/,
h4(xJIp
d&"NZ*
^oy2:o/
&ckDduI
g\SVv=
5[$=-6
3{{t<,K
>DH!er
e!7O)~
g`}eWoi
LA$%)pA"
q y oA
7Y^!GI8
819_BIi
B$X}l5
@tQ>Sm
32Nf'E
'CX3mc4E"
Yff;$,
tonsxpr/2
HW'#'Q
%FQbmr3
>MHmZg
dU}Z&0r
!xX>OA2
F}O&qs
#ct`""
nV4d8XB
fJs[MW
3(:pF3=
L9t*;s
+V<$O|c
Ve3Pn}9
d@6y9|MVT8
<FD4U
Q&iGPJ
rJ:Uf.
7]Ge\+
pc\ITA
InB<m9
r85AfW
lTscRn
ULc:7K_
ie#/q9
-8la*f
y,+[Zim
2<5JC>
2B\AJd,
U<[3]GH7
zw7'{C
PoWoLQ
{<2fw)
kF&Lyd
`pS8eg
)hY(qV
gp3@'x
ONWY?{,
#|H_~#
SGW.$I4Y
,y:;9:89i
fL1SIS
]B0%C_vUY
1b,D{G
{o`MGh
hokcR\
9M7J!
2;"pe9O
G#C;vf
3cZWu>
e;~HA;
1iKNLr4
[,"poB
mEADtb
XJC90m
pCs/;+r!9|
$4qW_^
,XkcBYp
mQ5gO+
8HG$ck
ct.N^?M
;BE&Zl
wlv9S#
ddF&:g
d.{FDuWa#
t!4|tR
hnmab
LM,gt=
I5`wo_
K$;gF6K
G0)Yrt
S!-><UU
0+AFj#
Q^R[>#
m~3i@w
kl-^dQI
._Qr%Y
'[ClA1
^yVB.u
Io2rr[9
lyT,]t
uRW(KJ
.t^R3?"
ejzxos
h5p})l_
vnHGUk
l\%|N&
xGmB;6
2Q~h'r
VpoyIt
W9x|~y^
1d(5V_c
'oSTf9F
nWosJU
:t[C_l
r#tTu|
vYqptZ
x#w8z(
j/l;9T
1~d>v"=#
\46vFq0
N/DX;[
MZ]I'sg
hOz&?R
4g=G$E+/
g/:6/M
i6Lhm\
2S'3MN
f6|+%,z
=DRS9
UH1g!vk
2}YzSF
nx6Z5u
6@J7%G
eap%]sZ
\Y6sXH|T
1{Y>zV
|96]`vl
W-DQZr
f@_5l&
>0F>hY
@X1^}v-
wL:?jW
]wK\Ku`a4e
-v@Xsh
f+`:uR
jjcZv_
ld>jVA
k3iKZV
4mxKS+
#~eS,]n
"e%SuT%e
a$ka*i
\,r}l?
K(&G4~
O4verA
ZV 20V
rDaq03
</>~_M
Y:xxs>E
HKvcCA
b(n>yc9
Root Entry
SummaryInformation
DocumentSummaryInformation
""")))***++//////555=====MMMMMMMM\\aaaaaaaaoorrrsssttwwwwww
#%'#%'#%'
-%/147:5IK
47MOQTV]_'7_adgik
-#%'#%'
%@xz|~
k2DX
$&($&($&(,.90368<HJL?>BEGSY[NPRUW^`nmcbfhjlpq$&($&(vu
cmd.exe
COMSPEC
KERNEL32.DLL
mscoree.dll
((((( H
h(((( H
H
SystemRoot
BZ.INIFILE
CustomActionData
Ini file is
Unable to get ini file name from BZ.INIFILE or CustomActionData
Cleanup
Cleanup is skipped because the debug mode is active.
SetupFileName
Setup file name is
Unable to get wrapped setup file name from ini file
Remove setup file
Error removing temp executable.
Remove ini file
Session directory
rd /s /q "
Clean up files. Command:
files.cab
Remove cabinet file
GetParameters: Start.
BZ.FIXED_INSTALL_ARGUMENTS
UILevel
WRAPPED_ARGUMENTS
BZ.UINONE_INSTALL_ARGUMENTS
BZ.UIBASIC_INSTALL_ARGUMENTS
BZ.UIREDUCED_INSTALL_ARGUMENTS
BZ.UIFULL_INSTALL_ARGUMENTS
GetParameters: Done.
InstallPrepareInternal.
BZ.ELEVATE_EXECUTABLE
Unable to create GUID.
Unable to create session directory.
msiwrapper.ini
BZ.WRAPPED_APPID
WrappedApplicationId
BZ.WRAPPED_REGISTRATION
WrappedRegistration
BZ.INSTALL_SUCCESS_CODES
InstallSuccessCodes
ElevationMode
BZ.BASENAME
Unable to get base name of wrapped setup.
BaseName
Unable to export wrapped setup.
CabHash
SetupParameters
[SourceDir]
WorkingDir
BZ.CURRENTDIR
CurrentDir
SessionDir
FilesDir
BZ.RUN_BEFORE_INSTALL_FILE
RunBeforeInstallFile
BZ.RUN_BEFORE_INSTALL_PARAMETERS
RunBeforeInstallParameters
BZ.RUN_AFTER_INSTALL_FILE
RunAfterInstallFile
BZ.RUN_AFTER_INSTALL_PARAMETERS
RunAfterInstallParameters
CustomActionData:
Valid exit codes are
Unable to get valid exit codes from ini file:
Base name is
Unable to get base name from ini file:
Setup parameters are
Working directory is
Current directory is
Focus is
Elevation mode is
Run before install file:
Run before install parameters:
Run after install file:
Run after install parameters:
Unpacked files directory:
Session directory:
UILevel:
Check if security must be applied.
Protect folder:
Protection failed.
No protection required
Check session folder integrity
Unable to check directory for files.
Entry:
Session directory is not empty. Someone may try to hack the installation.
Unable to create session file directory.
Validate cabinet file.
Unable to get cabinet security attributes value.
Integrity of cabinet file may be compromised. Too risky to continue.
Unable to extract the cabinet file.
[FilesDir]
Stop because the action run before the installer exited with an exit code.
Run wrapped setup
*FILESDIR*
*SOURCEDIR*
OS supports elevation
Elevate executable installer
Do not elevate executable installer
OS does not support elevation
Wait for finish
Success running wrapped setup. Exit code %d
Error running wrapped setup
ShellExecuteEx failed (%d).
File: %s
Parameters: %s
Check exit code mapping
Exit code %ld is mapped to %ld using the map '%s'.
ExitCode
Stop because the action run after the installer exited with an exit code.
Cleanup because an error occurred.
Check if security must be removed.
Remove protection from folder:
Removal of protection failed.
-- CUSTOM ACTION --
(null)
Elevated
Not elevated
User name is
The user is a member of the Administrators group.
The user is not a member of the Administrators group.
BZ.VER
ProductCode
ProductName
- UNREGISTERED - Wrapped using MSI Wrapper from www.exemsi.com
InstallPrepare
Invalid ProductName property
InstallFinish1
CheckReboot
Exit code is
BZ.EXITCODE
InstallFinish2
Wrapped application id is
Visible mode is
Hidden
Modify registry
Error modifying registry.
InstallMain
InstallPrepareInternal returned successfully
Settings were written to
InstallFinish1Internal returned successfully
Wrapped setup was installed Per User
ALLUSERS
Wrapped setup was installed Per Machine
InstallRollback
UninstallPrepare
UPGRADINGPRODUCTCODE
BZ.FIXED_UNINSTALL_ARGUMENTS
BZ.UINONE_UNINSTALL_ARGUMENTS
BZ.UIBASIC_UNINSTALL_ARGUMENTS
BZ.UIREDUCED_UNINSTALL_ARGUMENTS
BZ.UIFULL_UNINSTALL_ARGUMENTS
UninstallFinish1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
Registry key name=
UninstallString
Remove the system component entry.
SystemComponent
UninstallFinish2
Get database
Open view
SELECT `Data` FROM `Binary` WHERE `Name` = '%s'
Query:
Error in call to MsiDatabaseOpenView
Bad query syntax
Invalid handle
Unknown error
Execute view
Error in call to MsiViewExecute
Get record
Error in call to MsiViewFetch
Create file:
Read stream
Error reading stream
ERROR_INVALID_DATATYPE
ERROR_INVALID_HANDLE
ERROR_INVALID_PARAMETER
Export finished
EXPAND.EXE
Save wrapped installer cabinet
bz.WrappedSetupProgram
Extract files from installer cabinet
Error getting path of expand tool.
Extract files
-R files.cab -F:* files
SetProperty: Name=
SetProperty: Value=
GetProperty: Name=
GetProperty: Value=
SubstProperties: Input=
SourceDir
OriginalDatabase
[OriginalDatabase]
SubstProperties: Output=
SOFTWARE\EXEMSI.COM\MSI Wrapper
<EXITCODE>
<UILEVEL>
<FILESDIR>
Elevate action
Do not elevate action
Success running action. Exit code %d
Error running action
Detect installation context (per user or per machine)
DisplayName
FOCUSAPP
Unable to create proxy window.
ICACLS.EXE
Error setting security. Exit code %d.
Error setting security.
ModifyRegistry: Start.
ModifyRegistry: Application id list is empty.
ModifyRegistry for application id
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Modify done for application id
ModifyRegistry: Error getting UninstallString value from registry.
ModifyRegistry: Done.
Advapi32.dll
WReadRegStr: Key=
, ValueName=
, 32 bit
, 64 bit
, default
ReadRegStr: Value=
ReadRegStr: Unable to query string value.
ReadRegStr: Unable to open key.
SetDWordValue: Unable to set DWORD in registry.
SetDWordValue: Key name=
SetDWordValue: Value name=
SetDWordValue: bitness is 64
SetDWordValue: bitness is 32
SetDWordValue: Unable to open registry key. Error: %d
DeleteRegValue: Unable to delete value in registry.
DeleteRegValue: Key name=
DeleteRegValue: Value name=
DeleteRegValue: bitness is 64
DeleteRegValue: bitness is 32
DeleteRegValue: Unable to open registry key.
DeleteRegKey: Unable to delete key in registry.
DeleteRegKey: Key path=
DeleteRegKey: Key name=
DeleteRegKey: bitness is 64
DeleteRegKey: bitness is 32
DeleteRegKey: Unable to open registry key.
UninstallString is
QuietUninstallString
QuietUninstallString is
No uninstall string was found.
Uninstaller=
Splitting:
params1=
Launch the uninstaller.
params2=
OS supports UAC
Elevate executable uninstaller
OS does not support UAC
Uninstall finished:
""")))***++//////555=====MMMMMMMM\\aaaaaaaaoorrrsssttwwwwww
#%'#%'#%'
-/147%:5IK#
@CFMOQ
TV47]_a_dgik7'
-#%'#%'%
")*+/5=M\aorstw
Antivirus Signature
Lionic Trojan.Win32.Heavy.4!c
MicroWorld-eScan Gen:Variant.Lazy.649482
CTX msi.trojan.heavy
CAT-QuickHeal Clean
ALYac Gen:Variant.Lazy.649482
Malwarebytes Clean
Zillya Clean
Sangfor Clean
CrowdStrike Clean
K7GW Clean
K7AntiVirus Clean
huorong Clean
Baidu Clean
VirIT Trojan.MSI.Agent.HSN
Symantec Trojan.Gen.MBT
ESET-NOD32 a variant of Win32/TrojanDownloader.Agent.HUQ
TrendMicro-HouseCall Clean
Avast Other:Malware-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky HEUR:Trojan.Win32.Heavy.gen
BitDefender Gen:Variant.Lazy.649482
NANO-Antivirus Exploit.Script.Nemucod.dzzhbf
ViRobot Clean
Sophos Clean
F-Secure Trojan:W32/GenInflated.B
DrWeb Clean
VIPRE Clean
TrendMicro TrojanSpy.Win32.METASTEALER.YXFBNZ
CMC Clean
Emsisoft Gen:Variant.Lazy.649482 (B)
Ikarus Trojan-Downloader.Win32.Agent
FireEye Clean
Jiangmin Clean
Varist ABTrojan.SIPV-
Avira TR/Dldr.Agent.ssdzr
Fortinet W32/Agent.HUQ!tr.dldr
Antiy-AVL Trojan/Win32.Heavy
Kingsoft Win32.Trojan.Heavy.gen
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.Lazy.D9E90A
SUPERAntiSpyware Clean
Microsoft Clean
Google Detected
AhnLab-V3 Clean
Acronis Clean
VBA32 Clean
TACHYON Clean
Zoner Clean
Tencent Win32.Trojan-Downloader.Oader.Lqil
Yandex Clean
SentinelOne Clean
MaxSecure Clean
GData Gen:Variant.Lazy.649482
AVG Other:Malware-gen [Trj]
Panda Clean
alibabacloud Trojan[downloader]:Win/Heavy.gyf
No IRMA results available.