Static | ZeroBOX

PE Compile Time

2079-06-30 20:00:24

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0002a8b4 0x0002aa00 7.95809365699
.rsrc 0x0002e000 0x0001ca6c 0x0001cc00 5.79879037694
.reloc 0x0004c000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00046270 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x00046270 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x00046270 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x00046270 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x00046270 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x00046270 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_GROUP_ICON 0x0004a498 0x0000005a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0004a4f4 0x0000038c LANG_NEUTRAL SUBLANG_NEUTRAL PGP symmetric key encrypted data - Plaintext or unencrypted data
RT_MANIFEST 0x0004a880 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
# a:f{Yf 5%
cf bwZ
be j s
=xp 4-
# a:f{Yf \
,y;n >:T
=xp 4-
Y 9&iRa
'S=aX )
Y 9&iRa
X oy)~a
cf bwZ
# a:f{Yf
(fe u)
v4.0.30319
#Strings
ConsoleApp6
ConsoleApp6.exe
<Module>
StructSingletonExporter
Lwhfyhqpt.Exporters
Object
System
mscorlib
Strategy
Struct
ConsoleApp6.Database
Helper
Lwhfyhqpt.Structs
HelperSingletonExporter
ValueType
WorkerRoleStrategy
MulticastDelegate
ErrorRoleStrategy
Lwhfyhqpt.Strategies
ConfigurationVisitorRecord
ConsoleApp6.Records
<PrivateImplementationDetails>
<Module>{8707a723-4f3e-449d-b9e8-5cb044920fe7}
NewStrategy
ResolveStrategy
QueryStrategy
SortStrategy
CompareStrategy
DisableStrategy
PushStrategy
ViewStrategy
AssetStrategy
InitStrategy
MoveStrategy
InterruptStrategy
ExcludeStrategy
MapStrategy
StopStrategy
ValidateStrategy
RunStrategy
GetStrategy
RestartStrategy
StartStrategy
_Annotation
_Singleton
PublishListener
CollectStrategy
SelectStrategy
sumconfig
FindStrategy
CalculateStrategy
insertSPECAt
RemoveStrategy
DefineListener
Boolean
PrepareListener
m_System
CalcListener
RegisterStrategy
Interlocked
System.Threading
CompareExchange
Delegate
Combine
CustomizeStrategy
Remove
InsertStrategy
SelectListener
DeleteListener
IntPtr
Invoke
BeginInvoke
IAsyncResult
AsyncCallback
callback
object
EndInvoke
result
CloneListener
ManageStrategy
Thread
AppDomain
get_CurrentDomain
ResolveEventHandler
add_AssemblyResolve
WriteStrategy
Assembly
System.Reflection
ResolveEventArgs
MemoryStream
System.IO
Stream
ToArray
CopyTo
IDisposable
Dispose
GetExecutingAssembly
GetManifestResourceStream
String
IncludeStrategy
ClassLibrary
Bcdikvzpovs
CancelListener
ReadListener
MoveListener
EnableStrategy
connection
RijndaelManaged
System.Security.Cryptography
Rfc2898DeriveBytes
CryptoStream
SymmetricAlgorithm
set_KeySize
set_Mode
CipherMode
get_BlockSize
DeriveBytes
GetBytes
set_IV
set_BlockSize
get_KeySize
set_Key
Encoding
System.Text
get_UTF8
ICryptoTransform
CryptoStreamMode
ResolveListener
RuntimeFieldHandle
RuntimeHelpers
System.Runtime.CompilerServices
InitializeArray
FillListener
CreateDecryptor
MapListener
VerifyListener
InterruptListener
66840DDA154E8A113C31DD0AD32F7F3A366A80E8136979D8F5A101D3D29D6F72
m_4e4b6fdc3bb04b61b2d42fe314d84eda
m_e3b7e64165324876a6f617e6d5cbb576
m_20a5cd69a2364878a4ace1aac709b0dd
m_c4cf76ec0cf741548d6b52b709ed9b75
m_0fedfef99e0747279d8bd855e795076f
m_2aaf7b7cd19d458c9ed59266636558d2
m_4c524985eecf4404b5eb23476cbc1920
m_e7cd5cb94605418492959b6e6cc73b19
m_485befd2283d4fb4bcd8b58fe403804b
m_4008621d0e6f4f148056582ffb6cb6e6
m_bce7d8cfbf174105bd55dd9d0c20888e
m_2684e068471241819e1ee3509f8c875f
m_9caf0c4691904d0d87de1c1389873826
m_d008b322093d4a30a4e89fb706427139
m_6cacb2d111cf45f9879b089c885e0e39
m_542523432a0242d7b0547acc71730f80
m_4d21490f41e94a6bbbefbca2e40ff775
m_882cfa12b89b4312815a3f0c8fd97ab3
m_6b47e40a523447bcabca4863e0cfd1ae
m_da3b511d8edd4a1590096ac9a398f2af
m_77fc3a65065349cea330e8f468cd2e77
m_2fbf709a534c4aad9db20d6c546ee9bc
m_18a4dab921fc42a19c39788cebdb5940
m_f13cc8895a6840f6b77ed1234acf22c5
m_fc3159746bcf48d8b513e7b0b1e5a9fb
m_df1a884154284c8cb4c7d608d8cc1679
m_75844b99b5e44de798b2be80e695ddc9
m_5350191fdf934a65beefb45e5f471d04
m_67e5ba9bb8ba4277b7e62aa447af4f48
m_2f0debf573c24a9596280b65d86b2e8c
m_e7159d74feac438896c59bae5042c0a3
m_833b965c492a4653963db465b2977e4d
m_772e57bcf0ea4bd8a32a0e208f047fb5
m_2f81dbeb57b040bf9a0f39c6987b5816
m_aa9f8ed977c3487fbf61ee757e378f53
m_ea7e30758fb84c3b9f0551a6c9b71a8e
m_b0d2a34375624289a1da4d9a93bc11cf
m_0d9e250d6353484c8f648c3385f94a57
m_c6c390861e1647e29c97cdc539fa1173
m_51260652895e4eca8ac868c15ddda131
m_d2b1e294acf041dc967d9afaf7efe315
m_ae160471184e4218a06334c7144d9d22
m_30e4913965a24c8dbb9d76835954a21d
m_d3b7b8cd7aae4f7a9c8f2666a0238a8e
m_8100767f542a4e21b2d6a77caa3eec05
m_a80cf389b68241d39f694304ec0416a4
m_d0d988dfb7af46cc92e3d828e53fd84e
m_14bf837ea4a04b8187cfbf4c1c1b6da7
m_3eeac3ce62064bbfb6dee571f6f7248b
m_4864aa7358a749dc9667bcae6a4bddb0
m_5dc87376953a4a52bb16182233a1b0b3
m_62cabd8510e44cb09c9e6b7831c93ebd
m_f3340f14f0224508a9916b9aebcb13b4
m_2e62e9ffe3d04f91bb1c7de479c82cea
m_29dcb79a74264a53a21881be99201d16
m_44b85e6e1f724493a013b26d456f7a6d
m_d6d4c30cc6174097b1019bc76d74add6
m_28c11071607041c3a9c98515d5ca5f5c
m_52218301fae04b1c89984bdc66246775
m_43107cd8aa364ff885ca4f9f6a6188cb
m_841b5a1a08114b7a8d9a7d5343b25e8a
m_d629a3455c1849a5898c67b6cf30a6e9
m_7e8db09a545b4fcc8c88f93dba7667d9
m_677b86f1512a40cf91e3f01482129dc9
m_69482de327cc4c75abeec2f9dd9123be
m_bc0336bb61d640f8bd7c60aba5c9c445
m_0bd69850fb84413b9aedf30d19fd44e4
m_021b3401fa6f4240b05a9d92909cd7b7
m_77c550cdf6f64d7295a7a83ad5081201
m_62fd2f947d2d43e4b9d1500cdefaa767
m_f0501c3b89d9462b863d00b95853c25c
m_c2c6080dfb9d4ea98d246249358eb8c2
m_f425d473cb3e44738549833b9235ed5a
m_7968509ad7c84b58ab9c13dcbb697be0
m_b22edabf23bf4cd3b71ad605a2022dbc
m_61fe924d67cf40468b0873a78b05a628
m_dac30e4ccf7c42db99656f23f6868a48
m_86e0f977c51e40718fd3c69e7bb01c1e
m_7d0fb368047b4bc18fb94c4571d83b85
m_3b59c09c01f34c4cb8347b7e16ee7579
m_4845798737ef42e19a147a70bf7b550a
m_39f68fd0f9ee499a9f1432f96e3526ec
m_d1eab3f12b6d4efea120a39114d54864
m_e972f8caf25f41909fd908a4f891f6d0
m_95df6ec5499a49088d648539641eafc2
m_f0918b75325a4a70ba50f9d0bfbdbb17
m_918eef36c1a948a7bcba8171d3a7575a
m_fcaafe8c8f0c44bf905c877ef6a5a4b2
m_ff14003502cc4be7a193c7266ee01655
m_2e5eb255704648fe9942eb12d8bb08f0
m_0b0b5a853e3c4df08f56469e3b89720f
m_95dfa9abf7f44ba29516fd63fe5516bc
m_6d2778ae75a84b3194d4d5983305844d
m_cd53b773365e4074b0604204eb1974fe
m_14b81788a3ab4f8496c5d8bbb793871b
m_80dcb8b623c9436e8c6ee49eccf6093b
m_782dad9e49414c01ac56cb1012b5cc54
m_7e7b2a66824144cb94c9229c4075830b
m_7a47b35e926e4aed811f57835f85aabb
m_2053bda309bf44adbfb4302d38341b55
m_65587554cc8e4f9baf2d563a95a2de64
m_f536a0b807b54ba8a47080a5de836796
m_93b86376d60c4630be092482a6062f1b
m_fc45b9edcad847c98e84af2d997bcc5d
m_a9b738210a9f4d6ea185dc5c5a218fd2
m_391da04ef2e74a6c83305b8e747ba445
m_3d0467ae5ca145edbc95ea5e59a7e1c0
m_4c42cfd576364ab692528dc8129e28cc
PatchListener
.cctor
t9a86547e87f140d69481e2b827e62bc0
PrintListener
CountListener
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
CompilerGeneratedAttribute
STAThreadAttribute
Lwhfyhqpt.Bcdikvzpovs.dll
WrapNonExceptionThrows
Telegram Desktop
Telegram FZ-LLC
Copyright (C) 2014-2021
$467fe5db-9338-41a9-9604-e5c793a8c8fb
2.7.4.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
;7%GyTXO
Oz<QH;
WtmO w3
>Fq.}f
PnNwYA
78k>^&
a&$c4Z
P)DVsPA
u8m0mv
lgdRj:
yGJx0#1
tnH=PR
16t^[p
*3g?Tv5
rK\_F_Y
;BM2Uh
8`-vaR
AfoUh/
y!Z$-h#
%{krZ}
[==!Tx
K$s{i~K
L5u[?)
">5d(3
>#dgcU
e0]Qh"
D{#2IW
hqD@\)
8xy%w\W
1rp>G<
S(J.e3
-OS;{
z~}f}v
/ykbb2
DS07D2
(J@rr7
pI00@d
z^fiCr
%_'9(t
ZA*YF>*z
HAx="@
,MCi,+
V#R~cB-
wQGzRJ9
_9dKa4
}Ah%.t
^%I$!6
Zw+qgG
T\%$9W
IA;PYm
}NA]!w
CZv&`p
"WF-e}H
GqlWV !
a3//M4M
ha-@uC
u&hOFw
?5QH&N
Dj\e<6
2\ZM?yC1
iVorA(
^i|vp9
b_VZ;f
-_Jx)\
}y5eJe
{cstrgJ=)
'$ghLc
QSV!DZ[
&kyPrH\R
?IqBA(b
%"n")}
IpC;S6
tU!h[IX
,E%MrE
8NThr'\
q5$tz#b/
5seD/=
oI..c{?
7uQ>(
l#"&:^*
t>I#=puL
LCjKu;%
y)HP!LA
'\f:2k
]5B(-j:
(Y_pI~
6aj4=5
BiA?uP
T*`yq^
Ii&(m
_1}k%_}\'Qu6
h}*%~oL
~!3?}p
{E7+j{u
c"UHOc
N6%V>D
>GtS)m
lBt|<)
Oc2%.>
M>GlyWC
TAt.*m
lMYb1{H=
PO"$E^
?<t!IZ$W
Kf:"p2j
\|ZMq(
*alY8w(W
Ygx-75
?]_~{"
:+UFp@v
yGv=ad
sY^0K#Zu
';q|}8
(n~6xj
.LY;b.R
e.q=mD
N$m'me
||~C^)
\M|6Qp
N>A(TY
K![zblR
l\1NXM
(Cq^jk
>1BizO,=
~qX?@qp]k
qaBN>I
ze{QrQ)
5+Q2tF
z0gp^
[_%o-'K
eMaG.'
\/bl$e
GNat](
<jw8{0hG
n" BnH
LM=hYe{
eziC=M8
]0Hm35DQC
a/J*k
7"aL#lb
Mf/?j(
~FpGKc
hZ6|u-
CE{W>bL.b
;!5Y+{
^xK5)+
9NJS&
=8n,T5i
O$,:f)
T'vFGZ:
;gRm@@:
B]%C+ug
">=[)m
,Y^d2E
<!"D!
^_H mms)
K=ztMT
MflY+D
Q!^&/kx
Ng7AadS
cYh"}s
045u%U
Z9sEfr
3hG4]Sx<
wR)/\
[M5oQcc
@d6!#g
EJ@:gAU
un5l73
BD`v1?F
cpRypUa
6~OF:_>V
c]v=W[
R<a9x<
2cj;z`H
/j_z_n
vXS.~2
_<ICq
mlVReL
d)tbGn
eQfRH,
=?pzX0~U
Aqh|t"|k^
4DnoC^
8V.)(8f
^N.t?{
~Lb>zz
RD-T^t
+?g4qywWSZ
t1>aYR]
p4J~Mf
-@<\1]
.s1#/e
MryeM 2
qtJ|%0
5p4=0w
cKcYlaR
p38,ZnV
I%yB[
Cd)|BjVq
,3,t~#
n5<HWNc
r:Ko:>
>:cMhb
Zxr:6
%fhgK$+
eHF/p
mmuvqJ5
Qh2pIY
10cHcC
,jM];C
;}z'8b
VkI)E^W
:2=F-;++
,-I"si
S><1[o
~LyCez
jPB%8?
!~-.+N?f!
@]T>&!~X
G:fU}9
@/O8Y#
r.39_e^yRe
~05pe
f'N}Nn
a@z/ay
`i=.*N
jX{_Jg
*|;1YQ
%h<mz/
J5X:Oo
aSX&bI
}VT&fm=K
pwH~[+_EG
QillKg
fBK WO
b2HDGk
h)t2c|-
}7fB}Nm
5rx:}A\
5?c1?:
QnVR-b
OrkE)G
3A{[!X
7Z@G}:&t
Mf6[N}
Rw`qD4o
5BUW{~9
qPXNDa
EKLbeQ:
C88Oo)
JM+XAyh
/(?4ea9
_7zMx<m
UwkvbQ]
#bW1eG
oZ:hq>
3~F.&y
\Z8|}z
Dog5zmMa
TE%PL5
^;pOc4q
Uo7J@$
B^Rn[0;
35=9OC
hS8#oj
$~%;OLC
=b9B/u
]o~*W^&
3D>B*
qd=8p|
d?z44%h6
c]B]J5
%1.HFo
_CorExeMain
mscoree.dll
=4IDATx
#G)E4A
8E\QAi
'$]9J)b*
MrBZBB
<G&dV8
)PQiUX:
msG&@i
&DpnXR^
|&j*B!
=k=L2&6
|<Y-Et
lJ-~xQ#
@}^+{*
ys?_?9
UJ]$l:
;t?M0;
H?)g-8R
=g*n=wZ
t$Bl{C
'O*\P~`
="vH)p&
fxh}'b&
=F?H$$
Ah+iG^9BW
x,ok`W
al(%@"
[LT22f
22GXUS
n|xVy8
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
Greater Manchester1
Salford1
Comodo CA Limited1!0
AAA Certificate Services0
040101000000Z
281231235959Z0
Greater Manchester1
Salford1
COMODO CA Limited1+0)
"COMODO RSA Certification Authority0
HCgNr*
2http://crl.comodoca.com/AAACertificateServices.crl04
http://ocsp.comodoca.com0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA0
191007000000Z
221006235959Z0
943491
Private Organization1
Dubai1
Dubai1;09
2Business Central Towers, Tower A, Office 2301 23031
Telegram FZ-LLC1
Telegram FZ-LLC0
https://sectigo.com/CPS0U
Dhttp://crl.comodoca.com/COMODORSAExtendedValidationCodeSigningCA.crl0
Dhttp://crt.comodoca.com/COMODORSAExtendedValidationCodeSigningCA.crt0$
http://ocsp.comodoca.com0#
AE-943490
Greater Manchester1
Salford1
COMODO CA Limited1+0)
"COMODO RSA Certification Authority0
141203000000Z
291202235959Z0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA0
=U5W5H
https://secure.comodo.com/CPS0L
;http://crl.comodoca.com/COMODORSACertificationAuthority.crl0q
/http://crt.comodoca.com/COMODORSAAddTrustCA.crt0$
http://ocsp.comodoca.com0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA
20210428095006Z
Greater Manchester1
Salford1
Sectigo Limited1,0*
#Sectigo RSA Time Stamping Signer #2
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
201023000000Z
320122235959Z0
Greater Manchester1
Salford1
Sectigo Limited1,0*
#Sectigo RSA Time Stamping Signer #20
https://sectigo.com/CPS0D
3http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
3http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
http://ocsp.sectigo.com0
New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority0
190502000000Z
380118235959Z0}1
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
?http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl0v
3http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt0%
http://ocsp.usertrust.com0
rRj;B7|
[C]e=P
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA
210428095006Z0?
New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority
Btgvlyyfu
Lwhfyhqpt.Bcdikvzpovs.dll
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Telegram Desktop
CompanyName
Telegram FZ-LLC
FileDescription
Telegram Desktop
FileVersion
2.7.4.0
InternalName
ConsoleApp6.exe
LegalCopyright
Copyright (C) 2014-2021
LegalTrademarks
OriginalFilename
ConsoleApp6.exe
ProductName
Telegram Desktop
ProductVersion
2.7.4.0
Assembly Version
2.7.4.0
Antivirus Signature
Bkav Clean
Elastic Clean
MicroWorld-eScan Trojan.GenericKD.37056017
FireEye Generic.mg.5346c6935008b47b
CAT-QuickHeal Clean
McAfee RDN/Generic.dx
Malwarebytes MachineLearning/Anomalous.95%
VIPRE Clean
AegisLab Trojan.Win32.Malicious.4!c
Sangfor Trojan.Win32.AgentTesla.ml
K7AntiVirus Clean
BitDefender Trojan.GenericKD.37056017
K7GW Trojan ( 0057db4f1 )
Cybereason malicious.238c2d
BitDefenderTheta Gen:NN.ZemsilF.34722.sm2@ai4!Y4c
Cyren W32/MSIL_Agent.BCR.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Kryptik.ABHY
Baidu Clean
APEX Malicious
Avast Win32:RATX-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Trojan-Downloader.MSIL.Seraph.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Ad-Aware Trojan.GenericKD.37056017
Sophos Mal/Generic-S
Comodo Clean
F-Secure Clean
DrWeb Trojan.PackedNET.822
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
CMC Clean
Emsisoft Clean
SentinelOne Static AI - Malicious PE
GData Trojan.GenericKD.37056017
Jiangmin Clean
eGambit PE.Heur.InvalidSig
Avira Clean
MAX malware (ai score=84)
Antiy-AVL Clean
Kingsoft Win32.Troj.Undef.(kcloud)
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/AgentTesla!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
VBA32 Clean
ALYac Clean
TACHYON Clean
Cylance Unsafe
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
Ikarus Clean
MaxSecure Clean
Fortinet MSIL/Kryptik.ABHY!tr
Webroot W32.Trojan.Gen
AVG Win32:RATX-gen [Trj]
Paloalto generic.ml
CrowdStrike win/malicious_confidence_100% (W)
Qihoo-360 Clean
No IRMA results available.