compiled autoit exe or plain au3 · heuristic decompress · risky api calls · persistence · anti-analysis strings · iocs · runs locally
input
Drop compiled AutoIt (looks for AU3!EA05/06) or paste .au3. Decompression uses zlib inflate as a best-effort stub — proprietary LZ falls back to ASCII strings.
risk score: 0 / 100 · paste mode