Static | ZeroBOX

PE Compile Time

2059-12-18 10:41:18

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00030214 0x00030400 7.96853698056
.rsrc 0x00034000 0x0001ca5c 0x0001cc00 5.79801330805
.reloc 0x00052000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0004c270 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0004c270 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0004c270 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0004c270 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0004c270 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0004c270 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_GROUP_ICON 0x00050498 0x0000005a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000504f4 0x0000037c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00050870 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
MYUN 7
3rMce
MYUN 7
y[VX 1
yu(^ i
3rMce
|Xf +[*
y[VX i
)d[ Z/
3rMce
y[VX 1
v4.0.30319
#Strings
77aaa8
77aaa8.exe
<Module>
RepositoryTemplateReader
Ockngxdmz.Readers
Object
System
mscorlib
PageBridgeFilter
aaa8.Filters
DispatcherPublisherID
Ockngxdmz.Identifiers
ValueType
AccountTemplateReader
ExceptionTaskRule
aaa8.Rules
ProxyTemplateReader
WriterPublisherID
aaa8.Managers
StatusVisitorConsumer
Ockngxdmz.Consumers
AdvisorBridgeFilter
MockTemplateReader
ProccesorOrderManager
ListSingletonDef
MulticastDelegate
TemplateSingletonVisitor
aaa8.Visitors
ComparatorTemplateReader
<PrivateImplementationDetails>
<Module>{dc84c05e-56aa-4de2-90f5-99def686d5cc}
ComputePrinter
ViewPrinter
OrderPrinter
SortPrinter
CollectPrinter
DestroyPrinter
FindPrinter
PopPrinter
CancelPrinter
AwakePrinter
_Printer
template
CallPrinter
CreatePrinter
reference_min
AssetPrinter
VerifyPrinter
var1_amount
SearchPrinter
visitor
_Publisher
DefinePrinter
PrintPrinter
idx_config
NewPrinter
DeletePrinter
AddPrinter
_Singleton
_Thread
RatePrinter
VisitPrinter
next_key
IncludePrinter
SelectPrinter
num_item
CountPrinter
m_Params
SetPrinter
MapPrinter
removeTASKAt
PatchPrinter
InterruptPrinter
columnvar1
InsertPrinter
InitPrinter
PublishPrinter
ChangePrinter
GetPrinter
EnablePrinter
TestPrinter
RunPrinter
ExcludePrinter
DisablePrinter
m_Worker
ResolvePrinter
Delegate
Combine
Interlocked
System.Threading
CompareExchange
InvokePrinter
Remove
MovePrinter
IntPtr
Invoke
BeginInvoke
IAsyncResult
AsyncCallback
callback
object
EndInvoke
result
CustomizePrinter
Thread
AppDomain
get_CurrentDomain
ResolveEventHandler
add_AssemblyResolve
ListPrinter
Assembly
System.Reflection
ResolveEventArgs
counter
Stream
System.IO
MemoryStream
GetExecutingAssembly
GetManifestResourceStream
String
CopyTo
ToArray
IDisposable
Dispose
UpdatePrinter
ClassLibrary
Llrvnskwoq
PostPrinter
config
second
RijndaelManaged
System.Security.Cryptography
Rfc2898DeriveBytes
CryptoStream
RuntimeHelpers
System.Runtime.CompilerServices
InitializeArray
RuntimeFieldHandle
SymmetricAlgorithm
set_KeySize
set_BlockSize
Encoding
System.Text
get_UTF8
GetBytes
get_KeySize
DeriveBytes
set_Key
get_BlockSize
set_IV
set_Mode
CipherMode
CreateDecryptor
ICryptoTransform
CryptoStreamMode
66840DDA154E8A113C31DD0AD32F7F3A366A80E8136979D8F5A101D3D29D6F72
m_39e48f67d3814084a3e4c2c8f716d2dd
m_2916e8c3e2af427b992e0345c1e0cd43
m_a8cba7c76dc44bc2a6df079bbb5bd999
m_e5c6fccf7a94454cb29a8f52e773cea8
m_b13f36cbb9264efbbea0cf4bb89e6b8a
m_a59bbb58eb8c49f9966f35424a98368b
m_664d189c403a4cd08358799c85630b23
m_5df4eedf10224aaebb36eb10b5111f3e
m_69f2f2a80ccf43ffafdb41c02a54d322
m_88f1caca14764e37ae8ef93853f5102f
m_2dfb8ebb01c2411499376f748a8e7161
m_d8d467b8d7fb4e37b171fda6df2035e5
m_6f31aa93f6fd40048b048ac0bb66f042
m_0a572cec808d47689dc41a2d3885f452
m_2e7b9c3e031244c9bbd139e18e334eab
m_5b1233f945f5425ebcfe178fba20343c
m_66f97079275d4c49afb0236f7d98afa3
m_ffd5b0ea392c4f0db2d2aeb0afb4cf1e
m_c9eb67f8e73944718c6de78442d76087
m_515679b43f334539b613673beccc4401
m_646ab0f5a66f48a68284bcce8559bc64
m_6b07666db7d2481ea189d684a32a5620
m_0cd7132ee92a438ea69440782f97e61f
m_33775f7ebb554ba8b5261a27762d597d
m_70e42b68f93c4b3699473851c3d73865
m_4ee0583a6d6147488cf60f5f136a5f9d
m_d6d88192fad8407fbb3e2054be18d7c4
m_788e0babe39947a881a2dcf9122ba6ca
m_f227090bb0c94259b7d1b5337de24616
m_15b17a2ef1524ac8b4e56b200fbf56b2
m_8b3616b80e02497093a86d58789d04b9
m_c4aaad7d738344a78a5f2eaabaefff57
m_0bcfa857c5b44ab9b21f8798805e2431
m_7f2881d7eacb47c798c9e63bd86409d8
m_2eaeccfaa5e841a483b80c0e8b91540e
m_ddfe946c84d74fcba88a8b63b678c3c4
m_7d3b27a8d24642379b70aee336f77ca5
m_cc7d59b1b28c4fcd91f7ae249a7a258f
m_e94d8e0eeb804f59a113990b20189e8f
m_e4d72154cd2e45c6ba696cf60c1e2c90
m_748ae2c39dac495bb8d0bd455c9abb4d
m_cf650e4b025a4fbfb5bcbaec692ab7aa
m_7f073c10d9d34c218093c7823fb54e8b
m_90347c224ac04f1b923680f1b05774db
m_b32b1ee008bd4557b0da0301bdd799ac
m_5f89f755cc5e4290af82c6474684227f
m_15caebec947a43ed98768f274c189d26
m_df081cd47a204952908ff926dd13c69d
m_1fe03e5e04c349969523055d2365e539
m_8c6e52a7d7374b5d8390a423739fa467
m_6c121d8953864aa4a78473ecef09e137
m_f0b3db04a3a44440a93e1e8b56df29aa
m_b840a3f8402f4a0c991d73918f9932bb
m_d44877a8a42f45dcbe3703ad4f1b7aed
m_367fbb0b0c994e66a44580234c611d54
m_15a5fe9f472a4478bd3a81038a83d9fc
m_1704ee43558d4330879a16f7016067a4
m_344feea2b06f45efae8457650aab8a0c
m_e80ebb43413149c0ad4d4003bde7ec52
m_5d3336076a7f4f25ad090f89a2968e39
m_b27c9c1f95f7478b9d2223368a1dfae0
m_987fc1ddf9494d8f93cc4db2b0eff232
m_c5dd53cae96942d9baea19a2e87e0bbe
m_7fb5172a8dec42f4ab2eddb1e5c655b0
m_bb0d6f6a93194bdfb93a3c8002b260ed
m_cff02d820d2245919c1ec6e43d693053
m_43898d19755a49b18f77aadb7073f082
m_ca1ea02fc9cd40388aabeef4abacdcc9
m_b68936bebfd646cf9b704d3f900db847
m_fc860235735e48f6b1997b0450e04de1
m_18c8452e48f54fd8886f90bdc769ff65
m_c9ec1d71743c4cf49d8f3f625e4b2d85
m_aae6aba8e1804ddda7bac9f67c8b7294
m_563594f279e44560a48c2d6aa9bbf2f0
m_dfcfc64bf4674b7c80ab36dbbe204c1b
m_999162f4228b4a47a471f264c67b8920
m_d5ce333830ff44b79dbe2d36daeaea74
m_88592e8b5b03463c9d6d4fe594508526
m_09af94b98f764bd480bad5205c73558e
m_6d9563ac64e44667a61fe8ac033f8147
m_67caf9595cd640758b0f2dada1d3fa03
m_ac5b938294fd46438b421bd646c03316
m_e1ed7b0e269f4f578ccc79a1dfd4fc83
m_097a3f7a7ea44852917f0b7f6a193631
m_05cd95bf5a234b8bb204ae96ae47c132
m_b9445c6e426042f39eaf226591a4b77d
m_174e705dedf542a0b55c9c4c33eca0b1
m_35c425ab149247a89dcc6b2779c1930b
m_d202076d3fb64b46a7d7fcf34191e05e
m_c09a67dea8674cd1b89f596516636b17
m_10e27f76893e472eb722c36cc6da09d9
m_696ab6f681b942ffa80846eb6c78ed28
m_93622744dfed4b0d9c8a027d71ef573d
m_25a6b0d461d8426584ab8f66306e0f1a
m_02ea8146a56541119ab27569031a2d14
m_c8bd415996f84e3486a2c83282247f5d
m_e1fdc3a4c4814e91af55f8c1abf86cd2
m_70a42b40e1684bd7b17367b380bea737
m_b90cbcb9a3c5423988c2a90ad5c17bd3
m_e912f0dab51441528fb84206b6a8933d
m_58ec779c50b646c38708fefdeec22409
m_1d7cb1cd4ab54c10ad78593fb2c472d5
m_24447fc660ac4e83a7b413a662f7d1b4
m_85f694fe64b942f98a1ccb4c59544610
m_9cb62346022c43d58e0489bee8c22168
m_f0456102b96943a78f53ab6b6474a0eb
m_ba33954ac4f44085ac4d95cac59d1df3
m_d3358920ebc94892a1d5cff0c9e04330
m_dab6358bb07b43d297015b9c368ffea5
m_5162c7ae1cf64500a6067083fc41ff07
m_5c7551b036914c05b980d3f7359dc56a
m_de69c89b21f44d039725d5f7a6dc147d
m_5a52bc9fe98e49b7ad5db5f0d6db231e
m_2891f493f56a45a684c323f70fca581d
m_dd6646f502914a768288b920f64ab18b
m_2043a4bf506b44a38d6e3f2e338c5c51
m_88107ad4fa10442fb674aa7d39f9ea6e
m_8ceb5a1e80d941c58a7b3679c482cbff
.cctor
ndb50cbd8f10f46c7bc88b89e1b5f41b5
CompilationRelaxationsAttribute
Boolean
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
CompilerGeneratedAttribute
STAThreadAttribute
Fmzjedeas.Llrvnskwoq.dll
WrapNonExceptionThrows
Telegram Desktop
Telegram FZ-LLC
Copyright (C) 2014-2021
$1c6e927f-b3e5-41cb-991e-5fd5eaad17fa
2.7.4.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
VL}w,
#S#zldO-
"FZl4}
}Te?$V
,QsN4
oxbS@3
+{1rNz|
B0+)}R
3.G?jcY
d^1cb
<x"/kv
Z6:Z,O
XZwdl
A\QZ&
Ux( #8D
7I_qfY
U^x'Xy
i7>gmp
Vn006,>
y"#!j6
Gs4Rq6i
K B^~v
f0S$[^'
jjdS& n#
dLMz$x
|HV[}h
zue~p2WM
x<?px?
)6|$PWH
~hsjzo
jte+&60;
}@}0G5
if;bkI&
Q{6qZu
A5<3s EG
P5k*:pu
`\N^-/
vIUK*W
Hj@-CC
]x.=,U
W}eqWR
A"BMM4
Y.pVf\
1MU9<?j
8jaB.#R
NWcXaF
ol&`lZS
H d`#8D
R^+7NN
ln%JdA
>Tsc^f
TLR&A,
1D$Zfz
#TVTQiA
hruc]1Z
$B'c6s
v53-eiF[
3k_GZfj
e{m+$W
({1Ky8b
^?yHvA
0:&,$nU
v*M7g*~4!+6
"&;L8{*
%~o{,s
`mmI8#
k}yl\P
e\ZZZ\~
E62s,OG
Gv>O>y
XlpT!OV
k[ZkMKl
jT9N_!b
}60J zyp#
jH8dLe
;|vMKs
S'JPE'
>9s`c%
q}fP$
.EK7:E
tJA.F|M
N4O%9x4
[PHz>y!
D+LC;R
nh\"l5
{cK`Hgqa1
d,vH$8%e
e^@FN>=
<HrAue
TU3<Dm
e_i|T4t
%LOy{i
7gRna~
MQ84t51
?_E>6
dhEx(q
CsFN'.
^P~FG
ZNS,l?A;
{Nk=W^
}t[mnvc
"d//#2
w,/$eNK
iDB%ig
0sz$$`JS
NL60ic7.i
S@coR,
-06R\^
{Ly,qsD
l2"lJM
}~lq#
'Te8P?
L}_GD
ayD;d$
}pU9&BA
7k:gLu
rRZc8opf
qZfN65
UBp #
;OarUD
oms\n7
i'}'Iy
B2KF\%
}6NXu&
^ZbE[y
'1pwYf
+f|T4Pm
_J,7q}
=Y7-[#
gsebhD
r"tq|'
tDiL-y:
<H02hg^.
CY3!Vz
Y<:=yY
y-< )f
5',{[n!
5XO>y-
R `cJr\
Zm_Ent
!6{e?1
ck>@k9=
5]=3!:[k$
Jg8AXt!
<3h(yt
Mdpoh@l0
~i'd0.
@&@5-6*
V!CBlL
1Rk@y*6~-
wkE<C
<fFt]D
M,k_eI
FtBG4'|@%L
KyG-xA
t/RILb
Cm3GqC
a[8%;I
O47t~I
#UP8wW^
f@ED E
iH/u~{
aD_4qrb
),6;"(
k3G4pVN:
&iRq)c
IJ~9N`
=Z3,W:
y{;~&=
KMs/O\
%98QL[iN
utX8.+o
~>;+\-
pj]V&V\
E-+22"x
$vGBQq7
aZ-W`W
FpzzyC
]B`w F
X[VXm)$
c\pd.L
b\YUu@
le2>7F
TYyfQu
6]_ce:
xF8.PbnT
2/|{1_
hPCc^X'
q;.fwJ
wk89et\
~6R1-[
?Q<ZF]
M%ik{s
r^Vr$cFa
j9|JXO_
]uM5^d
2ci'nE
hYTW@^
>gC1C"
Qnj+o5
_$vGt]
Y_^-,S
V8t9\l
)S)dVB
]]-[,c
{\f?VDse%L
y?4\5L
XS%Zb%
U>ly{[L
IGj$/">c
/!&;|\
a&WL\svp
.s\@X;xY
,7XxeA0
}m={5WS
3'_& ]:r
e~19Y
"4q&iw
>b16"4)
2bA<K(S
BuX#;&Y
Dw9<;<{9
kL0R-lo
dTs[\7
XS3!`F8
E`_<HI\
me/AHsE
+6R+O6
4m.?$GeM
8YD4 &4}2
v2Q`JO
QM"TE
D+Qd3|
3'(qngR
=DSGT7~#
IRGD9;{
Qh 0\@~
lQB)3yZ.
Lw3Iq]
gizc*%
*K,[9B
EXg(Qz
\]9%')k
n@]o]O
B4[Yus
)+2VK`
^"ejfN]H
G43/gFG
Q2(+a*V
wFo!*
2"_My&o<
D#Un:8
R6y7QsUO
2oN0NQ*
5*g^UI5
Hze?_Y
j*croY
[$5g^!Z
Q~O'X^
b?P[Yh
(NyIl_
B3pRT,;
m-RHGf5
8OV|/`
IcH^w
JD]*`?
nYokb~
D#LqY>9Q
O4S j];
t9#Z"%
37lx!F
`l`K`e
c}:T*qB\j,x7
xI'>Cv
O^|so}j
\'t1f+
W,H5(!V`
_xAV`n
CSuc~:&D
{DY<:;z
~[`es^j
4m|x@"
!nv0-c
z9dbln
8rJ6&r
g+c.2~
TNfW#Q
s7*K!"
/[]#R@e
==]2^O
,PiYgH
"rQ0Hs/
:[?Ae~0
-HKvy=Yfr m
~3~wn4
4HFat)3
SP!LI@
cwfCt
OJ",}Mr
(SO?"U
K;^^6P
Esl|~I
%_NQ!S
\Cv&Eg
q!?)(^z
't.^K4
O& rBe
7o85Q8
4Nz~$1<3
9f?(5
/2`Xu*.0Do28a+
t/oDalP
nm2F[|
_6~{@bh
gI5S>s
pd'sD3
89$3zp
5\8d5v{v
Q(cGK'LVXj
nz5qP2
Ed7YYQ
d7 !ZC
s8"eCe
T|zB{qB
}Z7d-J
mUz4b((
?ONxu[
_CorExeMain
mscoree.dll
=4IDATx
#G)E4A
8E\QAi
'$]9J)b*
MrBZBB
<G&dV8
)PQiUX:
msG&@i
&DpnXR^
|&j*B!
=k=L2&6
|<Y-Et
lJ-~xQ#
@}^+{*
ys?_?9
UJ]$l:
;t?M0;
H?)g-8R
=g*n=wZ
t$Bl{C
'O*\P~`
="vH)p&
fxh}'b&
=F?H$$
Ah+iG^9BW
x,ok`W
al(%@"
[LT22f
22GXUS
n|xVy8
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
Greater Manchester1
Salford1
Comodo CA Limited1!0
AAA Certificate Services0
040101000000Z
281231235959Z0
Greater Manchester1
Salford1
COMODO CA Limited1+0)
"COMODO RSA Certification Authority0
HCgNr*
2http://crl.comodoca.com/AAACertificateServices.crl04
http://ocsp.comodoca.com0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA0
191007000000Z
221006235959Z0
943491
Private Organization1
Dubai1
Dubai1;09
2Business Central Towers, Tower A, Office 2301 23031
Telegram FZ-LLC1
Telegram FZ-LLC0
https://sectigo.com/CPS0U
Dhttp://crl.comodoca.com/COMODORSAExtendedValidationCodeSigningCA.crl0
Dhttp://crt.comodoca.com/COMODORSAExtendedValidationCodeSigningCA.crt0$
http://ocsp.comodoca.com0#
AE-943490
Greater Manchester1
Salford1
COMODO CA Limited1+0)
"COMODO RSA Certification Authority0
141203000000Z
291202235959Z0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA0
=U5W5H
https://secure.comodo.com/CPS0L
;http://crl.comodoca.com/COMODORSACertificationAuthority.crl0q
/http://crt.comodoca.com/COMODORSAAddTrustCA.crt0$
http://ocsp.comodoca.com0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA
20210428095006Z
Greater Manchester1
Salford1
Sectigo Limited1,0*
#Sectigo RSA Time Stamping Signer #2
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
201023000000Z
320122235959Z0
Greater Manchester1
Salford1
Sectigo Limited1,0*
#Sectigo RSA Time Stamping Signer #20
https://sectigo.com/CPS0D
3http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
3http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
http://ocsp.sectigo.com0
New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority0
190502000000Z
380118235959Z0}1
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
?http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl0v
3http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt0%
http://ocsp.usertrust.com0
rRj;B7|
[C]e=P
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA
210428095006Z0?
New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority
Fmzjedeas.Llrvnskwoq.dll
Ngdfwsrwbxej
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Telegram Desktop
CompanyName
Telegram FZ-LLC
FileDescription
Telegram Desktop
FileVersion
2.7.4.0
InternalName
77aaa8.exe
LegalCopyright
Copyright (C) 2014-2021
LegalTrademarks
OriginalFilename
77aaa8.exe
ProductName
Telegram Desktop
ProductVersion
2.7.4.0
Assembly Version
2.7.4.0
Antivirus Signature
Bkav Clean
Elastic Clean
MicroWorld-eScan Trojan.GenericKD.37056044
FireEye Generic.mg.d87d1faa4c23aa64
CAT-QuickHeal Clean
ALYac Clean
Malwarebytes MachineLearning/Anomalous.95%
Zillya Clean
SUPERAntiSpyware Clean
K7AntiVirus Clean
BitDefender Trojan.GenericKD.37056044
K7GW Trojan ( 0057db4f1 )
Cybereason malicious.54c5f9
Baidu Clean
Cyren W32/MSIL_Agent.BCR.gen!Eldorado
Symantec ML.Attribute.HighConfidence
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Ad-Aware Trojan.GenericKD.37056044
Comodo Clean
F-Secure Clean
DrWeb Trojan.PackedNET.821
VIPRE Win32.Malware!Drop
McAfee-GW-Edition Artemis!Trojan
CMC Clean
Emsisoft Trojan.GenericKD.37056044 (B)
SentinelOne Static AI - Malicious PE
Jiangmin Clean
Webroot Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Win32.PSWTroj.Undef.(kcloud)
Gridinsoft Clean
Arcabit Clean
AegisLab Trojan.MSIL.Agensla.i!c
GData Trojan.GenericKD.37056044
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!D87D1FAA4C23
TACHYON Clean
VBA32 Clean
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H0DF721
Rising Clean
Yandex Clean
Ikarus Trojan.MSIL.Crypt
eGambit PE.Heur.InvalidSig
Fortinet MSIL/Kryptik.ABHY!tr
BitDefenderTheta Gen:NN.ZemsilF.34722.tm2@aWMJeKc
MaxSecure Trojan.Malware.300983.susgen
CrowdStrike win/malicious_confidence_100% (W)
Qihoo-360 Clean
No IRMA results available.