Looking at the dependencies of these indicators, I would be very wary of running this without sandbox. I mean, what the hell it does with API calls like FtpPutFileW, and keybd_event? image