YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_430_440_Silicon_Realms_Toolworks_additional YRP/Armadillo_v171_additional YRP/Armadillo_430_440_Silicon_Realms_Toolworks YRP/Armadillo_v430_440_Silicon_Realms_Toolworks YRP/Armadillo_v430_440_Silicon_Realms_Toolworks_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/Armadillo_v430_v440_Silicon_Realms_Toolworks YRP/Armadillov430v440SiliconRealmsToolworks YRP/Armadillo440SiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/TEAN YRP/suspicious_packer_section YRP/GenerateTLSClientHelloPacket_Test

YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_430_440_Silicon_Realms_Toolworks_additional YRP/Armadillo_v171_additional YRP/Armadillo_430_440_Silicon_Realms_Toolworks YRP/Armadillo_v430_440_Silicon_Realms_Toolworks YRP/Armadillo_v430_440_Silicon_Realms_Toolworks_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/Armadillo_v430_v440_Silicon_Realms_Toolworks YRP/Borland YRP/Armadillov430v440SiliconRealmsToolworks YRP/Armadillo440SiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi_dll YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/Dropper_Strings YRP/DebuggerCheck__QueryInfo YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/sniff_audio YRP/spreading_share YRP/rat_webcam YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Big_Numbers1 YRP/CRC32_poly_Constant YRP/CRC32_table YRP/TEAN YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/suspicious_packer_section YRP/FVEY_ShadowBrokers_Jan17_Screen_Strings YRP/GenerateTLSClientHelloPacket_Test

YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_430_440_Silicon_Realms_Toolworks_additional YRP/Armadillo_v171_additional YRP/Armadillo_430_440_Silicon_Realms_Toolworks YRP/Armadillo_v430_440_Silicon_Realms_Toolworks YRP/Armadillo_v430_440_Silicon_Realms_Toolworks_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/Armadillo_v430_v440_Silicon_Realms_Toolworks YRP/Armadillov430v440SiliconRealmsToolworks YRP/Armadillo440SiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/TEAN YRP/CookieTools YRP/suspicious_packer_section YRP/GenerateTLSClientHelloPacket_Test

YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_430_440_Silicon_Realms_Toolworks_additional YRP/Armadillo_v171_additional YRP/Armadillo_430_440_Silicon_Realms_Toolworks YRP/Armadillo_v430_440_Silicon_Realms_Toolworks YRP/Armadillo_v430_440_Silicon_Realms_Toolworks_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/Armadillo_v430_v440_Silicon_Realms_Toolworks YRP/Armadillov430v440SiliconRealmsToolworks YRP/Armadillo440SiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/android_meterpreter YRP/CRC32_poly_Constant YRP/CRC32_table YRP/TEAN YRP/suspicious_packer_section YRP/GenerateTLSClientHelloPacket_Test

YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_430_440_Silicon_Realms_Toolworks_additional YRP/Armadillo_v171_additional YRP/Armadillo_430_440_Silicon_Realms_Toolworks YRP/Armadillo_v430_440_Silicon_Realms_Toolworks YRP/Armadillo_v430_440_Silicon_Realms_Toolworks_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/Armadillo_v430_v440_Silicon_Realms_Toolworks YRP/Armadillov430v440SiliconRealmsToolworks YRP/Armadillo440SiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/TEAN YRP/CookieTools YRP/suspicious_packer_section YRP/GenerateTLSClientHelloPacket_Test

YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_430_440_Silicon_Realms_Toolworks_additional YRP/Armadillo_v171_additional YRP/Armadillo_430_440_Silicon_Realms_Toolworks YRP/Armadillo_v430_440_Silicon_Realms_Toolworks YRP/Armadillo_v430_440_Silicon_Realms_Toolworks_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/Armadillo_v430_v440_Silicon_Realms_Toolworks YRP/Armadillov430v440SiliconRealmsToolworks YRP/Armadillo440SiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/url YRP/contentis_base64 YRP/VM_Generic_Detection YRP/VMWare_Detection YRP/Misc_Suspicious_Strings YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/vmdetect YRP/anti_dbg YRP/antivm_bios YRP/network_udp_sock YRP/network_tcp_listen YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/CRC32b_poly_Constant YRP/MD5_Constants YRP/TEAN YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/CookieTools YRP/suspicious_packer_section YRP/GenerateTLSClientHelloPacket_Test

YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_430_440_Silicon_Realms_Toolworks_additional YRP/Armadillo_v171_additional YRP/Armadillo_430_440_Silicon_Realms_Toolworks YRP/Armadillo_v430_440_Silicon_Realms_Toolworks YRP/Armadillo_v430_440_Silicon_Realms_Toolworks_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/Armadillo_v430_v440_Silicon_Realms_Toolworks YRP/Armadillov430v440SiliconRealmsToolworks YRP/Armadillo440SiliconRealmsToolworks YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/maldoc_find_kernel32_base_method_1 YRP/domain YRP/url YRP/contentis_base64 YRP/DebuggerHiding__Active YRP/ThreadControl__Context YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/TEAN YRP/suspicious_packer_section YRP/GenerateTLSClientHelloPacket_Test