Static | ZeroBOX
No static analysis available.
;;B&F7B
B4FhD&B
E(?(E8B
DrDhD7H
ExE(;2D
;;B&F7B
B4FhD&B
?dA/B6H
@H??wElDj>
@H??wElDj;
?$OcO_
<p9.os-D~
s:FpUT
79vi4/
<_Ku{8
FileRunBat
FileWindrivProtectExe
N.`**0
'd5UH;
5Dd{RH'"
h2`@?
9kL0p@
zlcE|
(Kr.|d
243H<Z
Otk9YVX
j;IZs{
`cIWM+\
{m41:w
^@kY@%
ZJ}%~'RF
C&2N|wG
3{r~nk~i
BPX]G~
5G`9&(
Q_I?<PZ
ylF{MR
!.qUu
a:$A)I
FhS:@`
^LPgdq
fGzNOp
's9HK~
tWQM[n
w%.#;R
3r%7*/
cI^U[*
]se~JD
%g?qcQd
NN\@p0
_A3+9~
onf,|E\
ZBN6k?W
_j&*<^o
-`/Je&Od
E6B|CeT
S5 urQVx6
((y\Tr
C~'`+s
6ew%S}:R
tu~jmee
qL7RE2
QuN5/$
.(jtaq+
EuvP?_
)O=4*
Fnk@ez
)5L%/P>kk
uU9tk-
ihz\5+T
Fl;fl$1
U,:Xl
m,iyCEo
oi6.$mj
w@"fq-
&C!8qW
]&^FRc
}-<Dnf
)L&z5I
C|}81u
CbVRGr
eogXDF
Dyun?sP
VzTL1}o
,:_DiB3
yv5/%^
"7}1P9
[^0n `P
E!:X|i;+
JaE?3,
ej%\3dHv
zr3PEwz
ztb{I
,B"(Cky
tNtDvK
@oZEjd~?
HA@Iq{!}
z+yh|9
($l^0R
&4giCnO
wX~?,-6
$L2\Z%
fb|aZu^
}VRN;Z
OK]mcL8yX
-lMLaN
d(/R#G|
e/}`hB
x_#4-h
a_&WjWs
]Ya]uX?
5~HB0l
6v9j[4
ia%/r&`.
IjJ*!h
y%Z+/Ep)
Bu>OL>6
7phC5A
Aa~T%@,
x9JjXn
Y!>.lB
H'|2tS
uQ?hk{
VV86:d@z
r)1*d_
lPjxhb
&'Npw(
|El#ff\
`XwH>/
tyq$QR`
CE4\
>GJ8kQ
~VwLuF
qwk+[Xn
IlV/Cv
f"PF/*
Gf;nf!M$D
Hhjfy+5
P?6#pQr
oQG*5/
Hu&Z>k_
~nV%UA
Iwj3"KyJ
uh~hR]f
C7b2XTs
0;n]Ap
<!_*J}
lgilNV
$s-%1O&
%7#v_'"t
r!At`O
vtd_/*
<g6HoQ
!,R8,}
i=Qi|E
9LFl?]
p=MC\T
[~#SkHe
WZdf~k
{%iah~
kXXioK5o
sa<IY$$
N?VIqgW
9s8B0U
<x[=,Bbw
id7){E
8l$t3\K
VFHqXQ
*h3_DR
|.gbrI
)J}$_tb9+
M~[,ea
Lb0P'\[O
y~{SrH
~|Hf>U
\N0ae,
lVh }m
\{?z}?
[p,Q1b
n6/<!T|
46;)LB
fylxRMe
3b j+PnuT9:
L/$;jf
j0EV=)HzU
A 6L{
>\ u/X
7%[>*
7k!;s~
y%lVG)
~-g$d/
J,7\sO/pO
nzMxwW
hQNfeK
y_|,|vZ{
CCg4M#
p)"wk
_s\'_Rh
yCR/xA`
|v#+t>
-mnR4P
s$"(zQ
Y;u;Y&
qbw4 C
}7SK],
3P @r0
^/F7#fz%
k0xMmi
QEG07g8
o8>`VC
K rK<^
=W1aWZ
!Zy[Yu
;9-e/q
WG=2a
,@;O(FoYj
LpLWA/
BK|UgP
(b9G|8
J9d^iS*
R$;.>%
!pwzui
U8- Ld
J4\wL'
H{+o>e
O~dWxZzK
'CzCb>F
2vF[>&
FfI-s^
/I\0n@
DqbAJq
<aL^^X2
:c)EU6
3U{b~l
#a<ja4
)T!&PXk4]P
_&]_f9
[^}0`8
~m~*j_
(k0^C,
5=V3|E
6N^$vH
Tu)K2r
k kD=f
BLan?9
7`@>|0*
gij%3[
OGFi)La
.Z%=?E
akk`dO
2KWpx^)
pUWG|l
~&#NKTq
%jN2{`1
n[E<~0X
AjkK3$
AQ"ml7
d6G_)FQi
m0?YPe
]wR`a@
fGl ]=
[q?cZm
<=!nJfS3
Yu_JIy/
T]?E+D
G&HS9R
HPjxp;
c#vr5n
Dc/sYG
+6S{BcsR
x*(rzn
wx$rs1
lj;[`]
p@V6u.~
E;WPJC5
LJ$SM5
[q1x^Q
:*^d+?
sz1-#9k
(,UpFC
m{z@QI
?Hr&l'
B1YCj$&G
)pZm1sGMM
kg'YV_
a&;6/7n
:6v;~z
1(|V*t
qvos(}
$.LB@08a
bX.~/|
.0Xy>8N
v`Bz%w
L9^z/NL
OsQWSJD]B
q+[TSEf^
cB}\,qC
f~P(1l
Dp {;v
wA3\D~
<##0_7.
6p7X!n
'6<ZHkpy
];E#?S
_'l)wD
"#@Z15/
?OlSH!xG
S5TsJK
&T%JJs
B>&laRf
5+1`xO
`xXN#W
m]@CFQG
14#~e*
eQ"3Kc
yMT)qaI5
$TPhK*
aiqL8Y
ObQ$cE
_dV#F51
?9>28o
+d}mRIC
xJ"=E}
y=||1!
P;9m'j
'8#6,:
rkB5Fk
}'"K[+
gEpns@
BA:jej
w5xdT!
G^JLvNn
Gjknc^
XN,MbG
71TnbZ9
9.5!/,
\l:hEE
c^UiLY
AV^%:!
8,\c0m
%Q(wtKB
hS(j)[
9+BEl~wg>
E4wfMfxB
2f~<P&
l(ZLF
,xu6'J<
!}1dvd
1Q{ZW]
Q!p]-A
!_VU%H)0
,QyDgc
 a2FD
R98YkM
@0y?g|q0F
*6v0pw
B#tri=
]!~>aT
)^s2`u-
1s9_9(
I8h!,%
Y)0E3@cy
4umvN
%tn"pJ"y (
'Z`P,
g_&;:P
R4Wn,+
9($SIZ
[5uo)
-w_py@K
$-${2
(Cc^[+r}
;yT"M!rF[;
_+3te'
eQ,P`!
6=Pskp7
+(%"aN'x
kR.~!J
+`#YPi
J]pp9MQ,
i{XD\'
vV',)
>xL*6
s\sRm %V
(h $OS
ty!0aV3
GKXjiN
y>51!_
P%!k_
A*FW`giH^_
bHZ~>E
#EZ\j$o
/:JaB1
9E:Z)B#
o]/ZeL
/~=5t|
:UW}6^
+XQD3Y:nU
A}u^$M9
h?!.eF
I!#p s
uQu<tG
Te$Rpk}
WKhHsR
ULgfaL?
-j7ThM
G1?5ko
;'vO/Tk
d]-Rd=
7*.O}Z
:Tto&@\
:Xm|R]
B`^$*^
,Oote+0
e?jqh:&3c
K1v$D2
r,trIlz
"w!0pz
fm0&0-
wYyY.N
pI]C{:
+4''Hu
PUOboR
/,c1">
Md@5\twb
q77 2\%
~n9i~bA
SnxC2T
kTObh5
&2:QE
C&`,D:
,$mCh
C{[JRw
xN7*wAx
7RVF"%3S
sGFaZSd
sE1wT2
^)~HH9E
CDNXf")
R6ZZp5#
x)f:b"
g=Q}k/e
ek]#rb5Sb
%+:5"
Rbo`lL0
Q$MZLg
SPk}P*
'!0vq2,
{C,/UGg*
Q]}O*b5
iMMDj9_
nvc!bX
SmU T%
&;8tbB
Js`&U^
b]7 @N
NeN@:
)E:X7_9
Dsk#s\
3]nk98
Oxs|4+
lquL@hfeQ
>arl=h
8rdP;
dWS:f6
kfF6IrA
vNaPi~Kn
c$L;RGy
nYE(5l
GKs_<k
^]pyrK
o#D<b
E7I ]|
5um#zJv
o~'].s
to[OZd
QYfAN/
+4gvq7
:-Av.\x"
|u^B7W
=CV(<)2
f>r~.
H?8oA%
[W<k0o
plO5rc8c
Vpc" I
v4-m^r
h'f5B~
tTuxO99
z3ZSPq
{>=(|.
v#[oy2c]
7K1AA8|
Hs8@lJ4
%E1qZ2Y
/HI+z"
8x=OeNc
oq#8J_a
zREna_
H&;{[w
bDs'-=
:R[u`0"
q)=vpnI
j'f%l
~_hzW[
+\,_wlbB~
.hWg%O
StL_CgO
<m/$dUd
1dvvCK
Q-Ix:D*
F}J[ugK
*eMGrlv
IuWv[q6
7n<l(j
LUH<fR=2H
r]Ja|6J
kTFH?s
x$?{4$[
>(2SMH
N<ntn>{
)]96gU
bstpD3
p]b4-C
yU)+n'(w
e0W/!T
44^o=d
(JFNHkG
/qH@V|
A_~7k?R
JaD0J
[dAY
~YwJ%=1
LaaaXhu
~K")+h
K$A`!}
I(|,n@
PI$9$%$s$G$?
0'kKYsK
7[9K'K7[
A3\t(:
FC&T'T&
#.,tL4
P(:83!T
10uP0u
<@+[Pn
ekD-x/\
Installation Database
MyProduct
MyCompany
Installer
This installer database contains the logic and data required to install MyProduct.
Intel;1033
{A2E9CDC2-0714-4580-A887-2EE4D0EFD60C}
Windows Installer XML Toolset (3.14.1.8722)
expression syntax is invalid, the engine will terminate, returning iesBadActionData.SequenceNumber that determines the sort order in which the actions are to be executed. Leave blank to suppress action.AdminUISequenceAdvtExecuteSequenceComponentPrimary key used to identify a particular component record.ComponentIdGuidA string GUID unique to this component, version, and language.Directory_DirectoryRequired key of a Directory table record. This is actually a property name whose value contains the actual path, set either by the AppSearch action or with the default setting obtained from the Directory table.AttributesRemote execution option, one of irsEnumA conditional statement that will disable this component if the specified condition evaluates to the 'True' state. If a component is disabled, it will not be installed, regardless of the 'Action' state associated with the component.KeyPathFile;Registry;ODBCDataSourceEither the primary key into the File table, Registry table, or ODBCDataSource table. This extract
NameTableTypeColumnIdentifier_ValidationValueNPropertyId_SummaryInformationDescriptionSetCategoryKeyTableMaxValueNullableKeyColumnMinValueName of tableName of columnY;NWhether the column is nullableYMinimum value allowedMaximum value allowedFor foreign key, Name of table to which data must linkColumn to which foreign key connectsText;Formatted;Template;Condition;Guid;Path;Version;Language;Identifier;Binary;UpperCase;LowerCase;Filename;Paths;AnyPath;WildCardFilename;RegPath;CustomSource;Property;Cabinet;Shortcut;FormattedSDDLText;Integer;DoubleInteger;TimeDate;DefaultDirString categoryTextSet of values that are permittedDescription of columnAdminExecuteSequenceActionName of action to invoke, either in the engine or the handler DLL.ConditionOptional expression which skips the action if evaluates to expFalse.If the expression syntax is invalid, the engine will terminate, returning iesBadActionData.SequenceNumber that determines the sort order in which the actions are to be executed. Leave blank to suppress acti
Root Entry
SummaryInformation
""")))***++++++11199999IIIIIIIIXX]]]]]]]]kkklllmmpppppp{{}}}}}}
#%'#%'#%'%+-0361EG
03IKMPRY['3[]`ceg#%'#%'
%<qsuwy
$&($&($&(5,/248DFH;:>ACOUWJLNQSZ\ji_^bdfh$&($&(on|rtvxz
")*+19IX]klmp{}
""")))***++++++11199999IIIIIIIIXX]]]]]]]]kkklllmmpppppp{{}}}}}}
#%'#%'#%'+-03%61EG#
<?BIKM
PR03Y[][`ceg3'#%'#%'%
qsuwy<{
Antivirus Signature
Lionic Trojan.Win32.Crysan.m!c
ClamAV Clean
CTX msi.trojan.msil
CAT-QuickHeal Trojan.Ghanarava.1743457533665a40
Skyhigh Artemis!Trojan
ALYac Gen:Trojan.Mardom.IN.9
Malwarebytes Clean
Zillya Clean
Sangfor Suspicious.Win32.Save.a
CrowdStrike Clean
K7GW Trojan ( 005b9f041 )
K7AntiVirus Trojan ( 005b9f041 )
huorong Backdoor/MSIL.AsyncRAT.p
Baidu Clean
VirIT Trojan.MSI.Agent.HXB
Symantec Trojan Horse
ESET-NOD32 a variant of MSIL/Kryptik.AMFY
TrendMicro-HouseCall Clean
Avast Win32:BackdoorX-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky HEUR:Backdoor.MSIL.Crysan.gen
BitDefender Gen:Trojan.Mardom.IN.9
NANO-Antivirus Trojan.Win32.Crysan.kwkowi
ViRobot Clean
MicroWorld-eScan Gen:Trojan.Mardom.IN.9
Tencent Malware.Win32.Gencirc.1459c94f
Sophos Mal/Generic-S
F-Secure Trojan.TR/Dropper.Gen
DrWeb Clean
VIPRE Gen:Trojan.Mardom.IN.9
TrendMicro Clean
CMC Clean
Emsisoft Gen:Trojan.Mardom.IN.9 (B)
Ikarus Trojan-Spy.MSIL.AgentTesla
FireEye Gen:Trojan.Mardom.IN.9
Jiangmin Clean
Varist W32/MSIL_Kryptik.MBK.gen!Eldorado
Avira TR/Dropper.Gen
Fortinet MSIL/Kryptik.AMFY!tr
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.Mardom.IN.9
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Clean
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!7A8BE2EA6B03
TACHYON Clean
VBA32 Malware-Cryptor.MSIL.Alpha.Heur
Zoner Clean
Rising Malware.Obfus/MSIL@AI.98 (RDM.MSIL2:oAxWfEtBgsE4heFau3k41g)
Yandex Clean
SentinelOne Clean
MaxSecure Clean
GData Gen:Trojan.Mardom.IN.9
AVG Win32:BackdoorX-gen [Trj]
Panda Clean
alibabacloud Backdoor:MSIL/Jalapeno.AJ8PHU
No IRMA results available.