18944
Native PE loads .NET payload via CLREncrypted data section (very high)
SHA-256bb18ffc24e65436a9d21acd6b615a84cb6660b49d0bc53e4f7ca7238ba957639
Evidence
No evidence locations were recorded for this file. Raw result