Static | ZeroBOX

PE Compile Time

2021-05-26 23:46:11

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0004429e 0x00044400 7.97856879553
.rsrc 0x00048000 0x00036163 0x00036200 6.89657912466
.reloc 0x00080000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0007d531 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0007d531 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0007d531 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0007d531 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0007d531 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0007d531 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0007d531 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0007d531 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0007d531 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0007d531 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0007d531 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0007d531 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0007d531 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0007d9d5 0x000000bc LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0007dacd 0x00000470 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0007df79 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
p++ +%+*++
+++,+1r$
p+1+6rB
v4.0.30319
#Strings
QUAConsoleApp5.exe
QUAConsoleApp5
<Module>
mscorlib
Object
System
MulticastDelegate
ArithmeticOperation
PrintHello
Program
Avxmwhfrtm
Settings
Avxmwhfrtm.Properties
ApplicationSettingsBase
System.Configuration
PoweredByAttribute
SmartAssembly.Attributes
Attribute
<>9__3_0
Action`2
<>9__4_0
<>9__5_0
<>9__6_0
Func`2
ResourceManager
System.Resources
CultureInfo
System.Globalization
DownloadDataCompletedEventArgs
System.Net
Assembly
System.Reflection
ResolveEventArgs
Invoke
BeginInvoke
IAsyncResult
AsyncCallback
callback
object
EndInvoke
result
operand1
operand2
method
.cctor
System.Drawing
Bitmap
Culture
Jkgjqexg
Ulpzuqnyacmm
Untitled_1
Default
UnverifiableCodeAttribute
System.Security
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
CompilerGeneratedAttribute
GeneratedCodeAttribute
System.CodeDom.Compiler
DebuggerNonUserCodeAttribute
STAThreadAttribute
EditorBrowsableAttribute
System.ComponentModel
EditorBrowsableState
.resources
Console
WriteLine
Double
String
Format
List`1
System.Collections.Generic
System.Core
Enumerable
System.Linq
IEnumerable`1
get_Result
WebClient
DownloadDataCompletedEventHandler
add_DownloadDataCompleted
DownloadDataAsync
Thread
System.Threading
AppDomain
get_CurrentDomain
ClassLibrary1
EOwJ4eFNmj7ASK7siE
CMupxDahRQSO4QMa5c
l4TdZDDmN
ResolveEventHandler
add_AssemblyResolve
Concat
GetTypeFromHandle
RuntimeTypeHandle
get_Assembly
GetObject
SettingsBase
Synchronized
WrapNonExceptionThrows
Adobe Acrobat DC
Adobe Systems Incorporated
Adobe Acrobat DC
VCopyright 1984-2018 Adobe Systems Incorporated and its licensors. All rights reserved.
$8e422d50-868a-400d-aeee-f8b70d01da7c
19.10.20069.49826
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4(
#Powered by SmartAssembly 7.5.2.4508
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
16.8.1.0
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPADg
}UUMe{en
mT$Sgcmu}mv
4kV^ao
uMMuCk
MMcU]cSM[)P
}ScuuSKUKL
mu[CKKL
{Qd{QQ
K\ZEqM
43<W{[
rW%nj{
27dY3rMPK
/,0g]q
,~xRs'6,Dp
J=^V`nUeH
ULsW_Y
W.[f/V
.~Te"O
@ o.N^@
/9`p<1[e
`\ukwr
fcc-1E
e\z'At
2L0L37
2L0L37
3lMi3F
OLKHZT
h+LM\#
L( TaQ
@KcnJ"
lq:?FW
:E'p$ic
eKZtKo
CDpf#Qq
j%gjL.
"N3JNE
]z=aW4
],cL]t,
MTYLK;
v7,a,r
Eur${J
*E(obOd
ab80e8
i4`(Z7W`
r[;0$mB
/Mnokk
:1\NMC
q6T0p6
iph|d6^N|
Z.WorE
esP7h$
hzGM.,
WDef0W
tu+cKQ
Fk`Fg$
T}{~N6
`=y]Ge
b>Vw .
Gj~dlH
+{CrT^5
\Y.K."
W$|Nr$
*t`'N$'
>vk&Q_WC'
31r7TkSr
%p'MMb
vG&?F
U-uQckJ
J5x%n4P
`bLe3F
q\4}]MS
LQ$9Jt
F?B)Fv
\(Wi3\
+iK],1
q>RxR[=
?Xa'T=
O%iNsY
+[6S>5%
4[#^ju
1a3J;$
"7mS.33
!qf=Pg^
tu834i
uSW=w@
TC0e;&0
:+):py
cyV:LD
yE7m7Q
o&;jFV
Vg'd`Jk
w*uFFM
@Y=ZhU
L]9'Zl
J,Nqrc^
_rJV%/
RK/O%tC
d.L)J$
m',`AY
(~DS4%z
jEm!bnM'
o)3[lv?/
e.A3`*
0Afl*t
)j9]*/
F4!wa;(
Q%P^gi
N>TrzD
x0Y81Z:?
2eb&=2-2
!Pr[9
NsA_S,
2a+mIhW
xT2\
9/FXu<
FfLmt*
Z&m;e[&E
KEeL3y
}< Y"N'
R,Z'%T
Lt$6\
$<LG-E
mVbV6^
vID3v|
qv@0d:
1zq[$%
rm|#bv
} /e|_W
-sXgjj
E!%:5_
|\'-0z
`IB>*rQ
7'~uuq{
1QVQ1-3G
b".*bA7
5[#4ng3|
Nzev01
Fe^~C]U
u*Ahhk
/2{"r#
qv||]
|0Iw[8
&>Z6G+~l
!cW5~#
)lFK,;
0lg%%7t#
'yR7x#
;1=cB`
6Za(Y@
tGdm48:
Y2U9yQ'W
qWX)n4
H/Kz@y
sZ^^^w
7.kPAJ
=vU2v:
}{S"bjg&.4
a?q}7b:
yJS2y[
4D^isa
FwL^4]i
K4k4b*
!/n^b-
3Hn+}\
faOJSq
>+XmEh
`[,az3pVz
-6XqEV
W9yYR)
B r F;
}:Afbxc
q6e}Jg
"T'KYG
Gy!4n^v
{?O!OKc
7=u.+Q
~rz|_o
VpP(v:
is|xxh'
6$wFJW
`"$&4L
~qKp0p
2[v$%`-
sM0d{F
p;D$vb"{n
EKIP#yz
acj\:#
./VY4?
U-Hu!2s
!a`#x%6
-0d(B'
G@L9Kj
g,'S.Y
<1h:&`F
IliF>.
#(d5Kuqz>
.c'B{g
&,t;qKJ
+uumr5
cv~}o#
OQ}HuH5HUH
HeH%HEHh
Q!"@D\"
HoR7E
Ezn;Z$S,
V')Ql_
2HmH%@.
tuW@:8
zCo5/H
x{DM<*S
uC}7hkn@M
};WrMy
^?/G9/
\#oR-n
n@Q.H"
RJAJKe>
bRbDu3
"Hux~c
3?L}2fcL
$g3gl}
LRG$7a
cGt4c;t
Ymrn]mk
lP]Q /
ub]biW
|5a^u?
+'7m|
05,GC~
/5E/7m
k.WZ;u
N\A^&(
*7w:Oy
\+aF`
=urG|B_M^iw
eikfk5_9
9hD=b[
ie[C\j?
p%p8q&
,~ MI?
Q+e}bIu
</<d/@J
b?X<<y
jDZI]#
<tyo|
H+IsI7
4{yA7A
.uy{z{a
U~ +@[t
3aX>~#
|{d_5}0
~FtlNFFr3
)\o2eo|&\_
/<0S>~
`n\-,{
%&[X=0H
i)k2H0
-} -r62
p)Y;sx
N&S|1S{
+zg,@d
2{(h/`
,bn[Z=
Pv#8V:
m@&{Y;CI
.,lE.:
m#18W06
V5aUcV
f_hS /
#GbFpP3
z's%x4M
|"Lbe\0
p&lgP'
N%ItBb?
<B8G."0i
?J9K@5 T
.&h[U:
;NrgX
)h5X{gc
|.zb|!
z.3RKi#
4;u_<qd.
<,Z=2e
Y,UjIQu
J?U!C&
WPwu"W
LEH}M[
e{,VANpq
zY]DvG
KV!:k_Yg
cG[(X
"mdVaV
N>AN|L
3'n*X(
FW}:p ++
Yp+.%]
p'~Yeo
z7wtj>W&
1M'c(#0<{{
*LQv]ZY
.uX#zf<r
*NYK0b
R ]hmk
uZGKu]h
,r"xd5Z
uRY`LO
~,m]jg
MT_V3D
Br}NQ2|w
~yowJt
R1f"ye^
Ecz52{
550xl(A
M< {zb8
!H>M#C
=@,lG:~
tQE4V.+
;;;;3;
0ZFbr
Cbvz1w
eyn2A.L
+[5N `
u,,; M
14$CY[
2qGx?<o
2SG+r^
Ukdfty
/HcM;+
@vw"HB
"G'6Fh
pP '!0
@hNr*I
ZS2n|H|"
}A(w+?
/*}$.$*3F
XQba/=
*\(X.Z
N77_n1
pY{Q*.
$T}8D
tkw[#\y,Rb
`Bt"@n|[
p.Nv >s
M"U'J!O
W1DD&W
.M648a)
y3sa!w
hvsd'e
_z*Wqs
6z}|s)5
 `gM/
;$+mnD
Gb7!DK
No{Vo^
WZ6iv]
dA'dA_
fcs_jR
s!IunL
XaQpiE
yL]SEW
yHw=k@~
qxNv1j
!TujT#
+y,#.=
>-$N>dY
WYv*A^
m;JRmkzkWA
XeSq0A
BXfLXK4
@ELHKH
( ~H$G
SBzG!+%d
Pji $n
v]_t<.J
\O&6UT>gY
H,P;y/q7
U~M##>
6D+Z;K
!wwdxI
r,>gN'
:1B+ss
et%h1z
CcGYZ[
|0>}J8
rkI{L+z
_\b~3!l"
5@+(c'
D1 .ls
yQTnG@
AobeT@[
umIM]Cf
2z O]<pT0
L<m{QZ
s%#?zc
1CeN3d
*a<En"
,|(0c"
AJeA4}
00SMe]"
d<+MvZ
WYI*+9
]Ki;K8*J
W.W'=S
X-Sf)g
:]OnOM'U
IG~"&#O^
Zgr>>>
dzNN.sR
KHUkB*}A
yT{X"6
0?<I,?d
/H3qW4
L{T=T29
<;}T3y
~7qVk
-~=uZ[
>9Y\CX
Tyim\oG
}]Z0~>]
:Y1pje
@VUU)6g
/8[sH?
ZxS<h{7
;\Ug^:f
=.x.\)
b>K^(
+rYIr\
j-[~{j
]i:%kyt
:5yH'N
;ypUAY
nsnj|pB
:p]X.X
?A"5\K9hx
:~%jAc
fwv[Tj/
!.hS$s
wt(rn\0
R<H!`48@"
R<H!`Mp
k<k"k
H!HWA*
R-HM 5
OOt4bI
~z^$7
\(s5,\
'z^`?b
Knv-C1c
e6sl^es
r<pq%G
.vymK#
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
IDATx^
j>T{+=
$---999...&&&
ZW[Wf,?
aDDDdd
L~}JEeeKn#gdd
8q",,,:::999''
\'''KK+
iJKK/\
1111""
Pq :<
TSSSfffNN
Zf<5p@G
-~~~=z
'yZ*??
?=|x/qV
%IfO?= /
G^pP^p
TSSSFF
kcgcae
U[[[QQQZZ
8~\L2
XYYYDDD~a
-U^^^ZZZ\\\YYYWW'~E
7Z^;0wu
Q]]]SS
W_}U[[
cG1>33
usi'9n
+WFEE)
3'>>^t655
{\\\ZZ
,*2DFFu
X-""B,
W_}U\Hy
Eg}}}AA
mnay9!i
$INNN+W
_W&~=w
Y[[{gDK
>**2##
9YnllT
A\:11q
oiiioo
DVVVyyySSScccBBBuu
MIIINN
PQQ!F>
yyy~~~
SVVv7`2
:tz_Gg
7AAAIII
yNNNFF
333cbb
1!!A9+
3'00Py_
2///ss
1cF\\\yyyttt
TQQQhh
S555MMMb
Eiiiuu
3qu+++qo
\Q6QNII
544dgg/[
RbnMMMVV
WUUeff
(+++//W:
u8q!--
ccc]]]
`fffyyyNN
W{{{GFF
\\\233w
o'''744
9+7'6..22
KrKdSPP
^NH*)5
-%%%&&&77
r~~~QQ
VUU%''
G}4+;
7o~uuuzzz
NvvvTTTEE
ZmqqqLL
aHHHDDDCC
!!!UUU
o_jjj\\\DDDii
$&&644
;w^aAAuu
&%%EFF
F^^^JJ
EEEEFF
X<444 @4
RQQQee
tiIIqtt
OeeeUUU
V|||YY
aUUUbbR
WEEEFK
+Wbbblll
7o-..>{
lhhhII
6<###!!!;;;$$
[AAAUUU
WXXXnnnvv
eb@CCCrrrDD
6VTT655^
6xCeUumMMNv
:vNHL2
_CorExeMain
mscoree.dll
$$$$$$%%%%,,,,,%%%%$%$$$$$$
-//3/3333333333433333333/3//-
-!/!1FF633334434333333/119;!.
ttuuuyyy
zzyyuuxvsss==4
==ssuuuwyyy{{{
{yyyyuusss==3433
===sssuuuwyy{{{{
{{yyuusus==443333
!44=4=sssuuuyyy{{
{yywuuss==44333//3!
/344===sstuuwyy{{{
yyyuutss=4=3333///-
333444==sstvwwyy{{
{ywuuss==3333////-/
333344=>=sstuwyy|{{
yyuuss==4433////-.-
//33334===ssuuyyy{{
yyuus==4433////-.--
///333334==ssuuyy{{X
Byuuss=4433///.----
//////3334==ssvwyy{q
Iyuus==433///.----
---///33344==stuwy{g
Ewus==333///----
-----///3334==stuyyf
wts=433//----
------/-/3333==suuyE
us=433//----
-----///333==svyE
t=433/---
------//334ssuf
s=33/---
---//334=tF
E=3//--
-----//34=d
--/33;
''''''(iK
Jj!+)+)(''
'''''((++7VY
L`9877+!+)(()
''''((+(++779l
QrC;987777+7)((-
'')'+(+(+77799C`
XdDCC9997777+7++(-
'')'((+(7+77799CFn
ECCC999878777++)
'))'++(7+77799:CCGj
EECC::99987777777
')))))7+777999;CCGEp
}EGCCC9999987777!
!'+)!+7778999:<<GEnN
}}ECCC:C999999777
++7(7777998:;<FCEEoU
}}}EGCC:::9999988
!7777799899:C:GE~r`U
}}ECCCC:C999998
+77789799:C:CCE~~o&
}}}EECCC::::999
77897999::C<FEE~o`
}}}EECCCC:C:99
8889999C:C<CEE~~oU
}}}EGGCCC::C9
899999:C:CFGEE
}}~}DGCCC:C:
`8999C:CCCCEE~
}~}DGGDCC:d
99C9CCC<FE
}~}}DGCCC
;9;:C:CCEEE~~oU
}}}DGDGC
<C:CCC
~}~EDD
CCCCCG~~}}nO
CCCEE~}
+.3335555555553333+
YVYYWVVVVVUq|U>
~~J755V
:77~~~
~J7753.;
5577~~
~~77533.+
35577~~
~77533+++
335577~~
~~755.++((
+..5557~~
~755.++(
++...577~
~755++(
(((..557~
~~53.((
+(+..57~
((..56~
a==
 !!""@k
sC@@>==
!!!""@@Gn
tVHGA>">""
"!===@GFVq
VHGGG=@===
=!""===GGGHRm
VLHBGBA@>=
=""==@GBCVVpg
VVHHBB@@@
="@@@GBHFV
VLHHCGGA
>@@GGBHFV
RRVHFFCG
@@@GBHHVR
RVVVHFC
@GCGHHVV
GCGHHVV
GHFVVR
!%5)))*))%)%'
Spaabx
z7[]]ddgg
gd]][,*%v
*,7[]cdggD
Cdd][,*)%%
)*,7[]ddg@
Cd]\7*)%!
%%*,7[]dgH
Gd][*)%!
!%),7\ce
][,)!!
!)*7\d
%*7]
OC54///
p?<531//
//436?T
{lD?342/2
//443?DO
Rpl??6533
14243?D{
|rl??633
2246<DlO
Urll??<<
246<DiT
}rll??6
5<?AlO
Rxrll?
pbbdddddbb`p
3 .VXSzzPEZ
x.>AHJw
,>AHLeiKA>
,@HQ|{F@
:N/'&#mm#%)*Ns
sTN/*'ot&'*M8
~ZPN0*y
BLMMa6
~pz!"{
;ikkcvv
dGp&Bt>J
Ulhtr5
'fEF/M1;
t4K.:C*
H9:Zj9vx'9
D"A__
4Vr7`A
TrvO>M
$ILOOs
!IO60J&
>:K$8C
hjjbdd
z}Dk7.X
3KH{UxE6
x,X8?O
Hp>D66M2
d2tuuQ___
@ @__
R _o&P
+WV}:P
h4Jkk+SSS
_NSX,/
bX#MKM
87&qiV
Nvl\GNg!7?I
VWWS__O8
];7!&B
3J*?2:
2;;KSS
KPcOspk
O#^veX(
D"AKKK
B~6>4x
f!&l~F
;CLWnGe|
JL)2-
Wcc#@0
/9iJ<b
,[^_KX
K2yY!0c
T;p[]`S!}
NfRQF X
%iH !`
[@27v"c9
5\h/a<
MH./Mo2
YFyJg<
A,--acc
'gF"\rG
)looc<
@k,.v!-
Rw!3bk
ylnnb2
;;;X[[Cri
~2LJw)
*:+ojg;
RXn8@8
"u3?`F
=Y'*3=
M@flk8
h8 bk:
z@F#0M
2q$:)mPK
Slnnbkk+=
1,--ayy9
'N&/!-
H1CFr:
Bz<8y&?
c?Pol
y-xIz4)%
hIDAT%
d)ovd
b+:P.:
";F]FK
P(:LT\
tzMVg5
nn+t{|=|6
F$]pj?
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
Number: {0,-12:N0}
{0} + {1} = {2}
Money: {0:C}
https://cdn.discordapp.com/attachments/844641656991907850/846437254331367444/ClassLibrary1.dll
WritePredicate
Welcome {1} to {0}
Hello
Jkgjqexg
Ulpzuqnyacmm
Untitled_1
Ulpzuqnyacmm
Jkgjqexg
Untitled_1
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Adobe Acrobat DC
CompanyName
Adobe Systems Incorporated
FileDescription
Adobe Acrobat DC
FileVersion
19.10.20069.49826
InternalName
QUAConsoleApp5.exe
LegalCopyright
Copyright 1984-2018 Adobe Systems Incorporated and its licensors. All rights reserved.
LegalTrademarks
OriginalFilename
QUAConsoleApp5.exe
ProductName
Adobe Acrobat DC
ProductVersion
19.10.20069.49826
Assembly Version
19.10.20069.49826
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
VIPRE Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Trojan-Downloader ( 0057d1d81 )
Cybereason malicious.47e4fc
Baidu Clean
Cyren W32/MSIL_Kryptik.EHH.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/TrojanDownloader.Agent.HYZ
APEX Malicious
Avast Win32:MalwareX-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Trojan-Downloader.MSIL.Seraph.gen
Alibaba TrojanDownloader:MSIL/Seraph.bdaf608f
NANO-Antivirus Clean
ViRobot Clean
AegisLab Trojan.MSIL.Seraph.a!c
Rising Downloader.Agent!8.B23 (CLOUD)
Ad-Aware Clean
Sophos Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.gc
MaxSecure Trojan.Malware.300983.susgen
FireEye Generic.mg.51ee29d68a7aefea
Emsisoft Clean
Ikarus Trojan.MSIL.Inject
GData Win32.Trojan.Agent.32GSXV
Jiangmin Clean
Webroot W32.Trojan.Gen
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Win32.Troj.Undef.(kcloud)
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Wacatac.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.Genmalmil.C4495838
Acronis Clean
McAfee Artemis!51EE29D68A7A
TACHYON Clean
VBA32 Clean
Malwarebytes Malware.AI.2766681978
Panda Clean
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H0CEV21
Tencent Clean
Yandex Clean
SentinelOne Static AI - Suspicious PE
eGambit Unsafe.AI_Score_99%
Fortinet MSIL/Agent.HYZ!tr.dldr
BitDefenderTheta Gen:NN.ZemsilF.34692.Em0@aaPWrHb
AVG Win32:MalwareX-gen [Trj]
Paloalto generic.ml
CrowdStrike win/malicious_confidence_80% (W)
Qihoo-360 Clean
No IRMA results available.