Static | ZeroBOX

PE Compile Time

2085-07-21 16:30:36

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00071264 0x00071400 7.99153018511
.rsrc 0x00074000 0x0002d49c 0x0002d600 5.32192529724
.reloc 0x000a2000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000a0a1c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a0a1c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a0a1c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a0a1c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a0a1c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a0a1c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a0a1c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a0a1c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000a0a1c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x000a0e94 0x00000084 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000a0f28 0x00000374 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000a12ac 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
z`W+63,
.6\^xr
7~wX_M
WG~6B2
JGrw?*
x<N%W6}
NTL#lKga
~8u/Yi
GDo="$
#=pJyb
Clc#0x!X
083,\.<
~@g3P>F
fa }02.
(*E\t
%)TU4"
cA bPi|
Ea"A$?
y mO,,
Ti2I]M
M _QLPH
B,x &&^
O-O>}]
axT)nG.
k _p-vL
}@{lYb
EgBU>t>~
~\)\Nj
'ui.?z
WLXt)\>
\'G{jm
>Wu+YU/
1\dNDV
cuf>OR
P^SWsmAs_q
,QcLf([
JT"&2&H
-Q{NM{5QFys
OQkdgX
IL?.i;s
~re?\}
u#iNUb
|AirHj8Q
zYaZl3
^<aZHPItzrjAD~|
fdhiDPah
1,'SU
~fLt06p
BOmmQW
}t5di7
cS\r7 S
uGy]ifu
\l\)v7K
,Ft`6X
mLFq?
o_\s{)
Iwq+ZS\e
t^W=/0]i
$[ssCgx
&6_wg!
Lkl}P
hox_jk
K0>08`
DZ50_j
v[_;+o
|W;?~~
n6$hXh
!N!^!n)|
n`L`T`|@O*`
L=<B}_
T"YcC/
?b2Dwu|>
:H[:HZ
$md6Hp
)!Xs&N
N"aZ_L
A0j]\
"#GE})eIao1
BI->x3z
Bp(:?u
V6QQ=P
sY1hlz$
CD!|yj
?SK=88
aHK;PK
~lEb.OFqC
jq;8Rj
Y?A=^b
zL8&zy
r0Bhor
qd-HzUDR
frA_I`
SJ-vwWT
R~$k'z
VM{V~x
#MjB@P
5r{bSe
vkxZ)h
<@z3^t
Nw\`WI
>a|lBlX
O'@Ze4~$o
v@Z>IM
7IjdyT
xdo-~G
]wfaMj
W$i.RC
}2=6Trc
i-[ZKV
Rt|S%R
#z\]YS
.]Vpub/
{Q^fCF
giQ0"m
wq4cq{
\45>%N
Dj;{>q
!j2/M]A
X%YcS&
LG@1dGt
Y\oY\R
`~<0_:
TYjB'DL
Ar,:|D
hqZ)Rp
xkNiWr
G[k9[Z
@'vLO^{7.
+7E"tb
*q>Fl?
r)59GxLr
f&,6(~
,[m@.:
_>j(ikC
:=xX;6t
0Dq@l`
!vb3!vI
>,/|63
=OM^soE>K
MaV3Gu
y)kN5*}H
Kse(,Z@
]jME0!
t,G*.9
ZlI>E&d
ZM4$cm
L]nmO`
&[*V.q2
v jkZ'`x
])I%<f
}>K8nE_V
KbMOb<
t3\A6Y
d..igHkqx!OQ
06?x,a
TmAba7
L]>O)S|j8sK:2
7t7t12
dC_Tm9
Dd0&yq;'L~
P\0DG9
[c+Ws,
c3Abqc
(,np3m
KW@=hS
,|IrlH
N6#]N]
}<Lvr"
Ft^qy%
s5>X`r
s(|?d'
qxG+]51
&"=iE0
+RsDZJ
_|)T:HhG
Mf,z]i
Og&$X
[d$JN,
gF_2q/
$`,auK
;,<`y;/<
<E'_w>
{"qHDE
SnZLU2
34,/x5J_C_/
F,wU*j{\
oXI?fv
JJGJ';
3>9pO)6
lZpa_P
<x,B&
tsy 9?
HXT-1P
)m'}n)
M2oO4}H
$T`g4A
ospTrz
Qd7}s
'JUvx
".C}^'
l@fPAi
E Uj2Q
$[#xKx
`(Qs1j
:{;@4FRk
}UL\Lj
=%V!rSI3
eU!xSs_
yA;&BP
p<Fm!
sx CLMP
'ybA4=bs-Gs
|r5Bjs-
"/|jm
vm4u2
|_`,b6
sK!N/?g
3gz=33
lTF6P]XA
_$>#0l
fu><2
4>DgjP,Q.
r$;}gjZ
*,xi6V5X
{IISg@
8Wd~)&
k3;.Yd
/UE(>~
q2MsME^
pkP1|S<a3q
t@ gv[
>5PI*I62
"k;nLY
:S%]-v
u.*i5|F$
?,*jZSlU}
d<RnnZ
F#*6Uu
U:wo/:
|vt]rw
!:2>2@
@'2=_:>2Q
/P !p)
Z1j&Q;F
MBi[rdZ
,\r"VX
HGqsX~!K
B'!iD\
#*,O!*tA~
zA>zA6zA.zA&zA
b,g*lC
WQ8a{:H
p>}JyQ^
#;d\9S
CrtA2A
GQ$*@9
s.xar4
p%Nbo/1
e4H"?H
d09 tz"
mVjbqA
X%IrIPBf
rYaV$FF#
P>v3);
&bX7)n#
qKykKr]
">}aIn
C!R'VU
*;>;>I
Ma@"CU
9)[,b\
S-_]4}B
^|aQfB
=J&W6
,vO:2@-
klhcjgb
1C;si1
VKgi;7C
XVdE3<@FFU
8uFDRB
@pEW21
JUYK=$f
qqsp+&H
6[KnlQ27
1N|_RD
y@->1%
u"tE]I
zKVJzik#
U{C.YV
keV\,>
.fp @
[=)g"wv
bQ=)b6m
deZ~E_
Jv^Hmx
;OnFtVc8tz
UO9=Uq
x1kEsT
qmg+~>
"$UGeE
A'\oXB}
Ozy92LuA6f
+y,#.=
>-$N>dY
WYv*A^
m;JRmkzkWA
XeSq0A
BXfLXK4
@ELHKH
( ~H$G
SBzG!+%d
Pji $n
v]_t<.J
\O&6UT>gY
H,P;y/q7
U~M##>
6D+Z;K
!wwdxI
r,>gN'
:1B+ss
et%h1z
CcGYZ[
|0>}J8
rkI{L+z
_\b~3!l"
5@+(c'
D1 .ls
yQTnG@
AobeT@[
umIM]Cf
2z O]<pT0
L<m{QZ
s%#?zc
1CeN3d
*a<En"
,|(0c"
AJeA4}
00SMe]"
d<+MvZ
WYI*+9
]Ki;K8*J
W.W'=S
X-Sf)g
www8o
je&@{3
e/D G
mv{a>
jF".x~5,
Y2_6:L
`9;7t;
tN[]q~
Jkts(,
<CE%AP
`oz2b2b
%4}<lMY
EhWz3
(.iJiS%y
ek[sgw
GXvZ$C
tKDNsa
ix/[-l
~(oUg<
h4Gq"&
a#~{W/
b([#6c
b?MTEp
PH1/mouO
#hLjLp
5gz?$3
R8gWp2
9w/nwb
<=k{/BG
vO)Ey]
l3qEU2
1 |\@u
A#kliHV
}'8oW8
axC438
hzQ[0G
KneBF3
,9|-H>
}=8]@2.
H=evA)l
^-6_+St
v`aAk)W
z3)@4
tw _LY
tLAcM.a
7yNY1a
# >SV>IR
R|G-E1
*=]Du`\
:)XgU0ru
$Lt0_"
UHraqS
z6~\Gf
t, ^M>
L6z/+l
Mj!z.60r
vJPXX&
(?R6}N:
@iY9<L
. as9jO
[zuvVJ
C>NVA|]=
S*VIp6
>?u'gr
%Fl}<b't
z;|%h\?
\B,<w{
(.-VL;
Sc%0Jb
&KPNU|
a&#s X=
Abv\6>
s#.>1K
v+hLE*
LJ4dRC
U"[E6D
+4MVtL
}?z/}g/!
R)|=$7
bU@m{}
/DN|YK!
6\4/?B
{mJY=fGd
rx?&/CL
DwuRnH>/bG
Vx"Ma8\L
S+Q;Ue
V;l&#L+
)| 1U4
Me3%/~
u_ZZ3=?
Ob3L}TL[
+[oLeD
fK{Vx>
Bg{\ub
_VZj520\
U_aE71L
xIQE2U3
K#mt4i
fIw31T{
49d+sm
"gOGE\+pc
F!&+3%
6)X2I
uDrD2q
SpeTOSv
.5meh|
or$knJ
>ojEPw8
edyqos;
u/1yw8
*hT^J&
C-hu-(
A{r-8
73$c0H
&s C_k@
^%K~nU
*x>6EF
c'GCN1
aXLy#t
m\pY'~
qcLL-p
|SKwV/
{.;K)j]
IV8w`x0H
Yh/}1hB
K?M>W>
]|3O?^
_^ht<Y
p8.{QY
k5M?DN
_AknZgZ3
|%&RAJp
e46egxY
'zZ56YNq.o
KJ:4"p@M
?PwinJ5
13m]1{T
7vG%07
RlH%X/.
x>fHLX
SE!SVu
pMP<-~
(ZD1aE
@0;[=+
7DT#Ct
f\Zp$cN3
CnwDII
Zo|_6I
Wm0UkeS
s<N# Jf
SCz[i[|
lO"h?(
c5:6.J
oagjsMB\
)@a`f(G
u,<M,?UQ
I+^GVz
,R8W!h
nX6Cpv
F4[oS?
<.@*7Y
y8gy8g
qj}8gW
BL37f;e
/:@+^"
dW/J[@
5U+_sW?c|7
N4Avh:
HXb^WO
`pqlw"
ZoZtd3
I7|#]=
2m@NL>6
4I*>k|-
bb\ld'
:Gcz;>
^rF@kDJ8r
UMQL6@&
k(Q;D/
/Dqu>n
u+cmlTk
%[f9&HH
K/`<]YK-
(g{J?R
P J1N[
4D"8{B
+'Jms@
QCQ\Y.
KD1";V/
Sl^4*}
B{\!C[
Bv\,!=
I:Em06
5B@z%!
%|B{Bo
5Ov95k
SW~3"oNU
By#y<F
c-\R,
tX_M.e
{P^#.O
S\2G\8b8
\5@}7Z
92_/7_
sY^`~y
F+>")~K
7`=o)
k}?q./
n\(a_?
I.e>nH
?Niencn
hok6nJ
cvT|W"
;fb|?9}f
?YOy|B
C|ZkL!
*9^17Q
F1ysgu
2.a}u $n
60;OP
Xdx_VY"
4rV)V^
/%5/pO
y_gy72
x|/7ANa
y2ris|
9[oV+X@
H`WL/v
R}!|ijO^
$)#GZ|4&YQGY|!&E
ZR`oR@
HgBV7X
p^'MOD
An\{:/
S;;C;`
cwy{pg
<}^^|=
&fPSyU$*h
a\nGoG
3d<&JZ
2SnUaYR
=?6xfW
z>2Gz[
1*FzM^
Y/|v?<
|kH?u0
)r?0Wx
\c,IcI
'`o4v'5
Hx#:B:S
|{Hg+|
C7r_u#
w`OaOc
,Z=N>0
/)l.\Rxb
7'}=)#?7
X^\^Y>
,{]v]n
6YI>$]
js<=v|JH
}oy=!'
p@r9P%'
;P%CIOBW
Id x>P%.
wSH1P%e
b\[%[qU
(P%-Yc
k>qc4ZD
Je/4W*
94W+_Bs
r*47(K
cTFIF4co
}QtBq~
Kp4+w
kqxq,F
\\l..1
$qKR I!%
7--(."
BWIYEAYUM1
4RTZTR]]XY]VZQ
SQUXVT
M,w+"-h
!ij6z#
`KWr@Ss
$*hmBT,
i5*ExC
gRwjZ>t
y|BA,7
LJJ/9Z0F
Mq!]$e^
h9=&||
z&$Mm2
*qDo%m
\mfuE}21
f"v^M>
r),EWg
*Y8y<
$ks8sSj
3($"sA0
d:o(hA T
<ZN4QJ
NPeiH%
]E]y9+-
B>7T2{Q
I~ya3)yE
7]Kx/K
_<Q?'3
Fb Yv$K
L>5/.g
3lkB|
|nHF>n
ok%CYg
`q[gNf
milwYvjl
o<PFiAw
GEj4.
+z.v>P
ZS9>2o
1|Q|wC
ECvyfBY
3]|2tsvP
-znd{_
&iz;NeZ
NxYibo
/MA$:O
4;B9o3
;=e6#$V
L,7sWH
3I25.I
n.D_n\4
sr#0$l
]oX$w
?JMz3Y
'i@'i1,
YpB.YL
U8("pdm
5qI7^A
!6zICh
9;@lzdF
i<xC 4
>t7;t{~g
"wz!gz
h!]i'T
;V`aan
c"dX%e}^g
/hU?(j/
2:9!^:;
zG&n<fJ[
KOt+]K
}t5P?*
Y%BWxBW
C01'mG
!n88<8
ed(.#Ej
(|ha^nx
a-t0L(
; ;;ovrqvQV~
U_ch7c
N+lLkj
VP@HBDC
M%s|^N>
KbF2#H8
~b$TCo
@6Yxsd
bsSN_>
jB6^m}v
kw&/ox
D=>7mP
iQ<~H8r
v4.0.30319
#Strings
<>p__10
<>p__0
<>p__11
<>o__1
<>p__1
IEnumerable`1
CallSite`1
<>p__12
<>p__2
Dictionary`2
Newaapny2
<>p__13
<>p__3
Func`3
<>p__4
Func`4
<>p__5
<>p__6
<>p__7
<>p__8
<>p__9
<Module>
System.IO
Icxxusboqa
Costura
mscorlib
System.Collections.Generic
Thread
isAttached
Interlocked
costura.costura.dll.compressed
costura.eyhokrvymak.dll.compressed
costura.newtonsoft.json.dll.compressed
ReadToEnd
set_Method
source
CompressionMode
Exchange
nullCache
Invoke
IDisposable
RuntimeTypeHandle
GetTypeFromHandle
Console
get_Name
fullName
GetName
requestedAssemblyName
Newaapny2.Lewsmoafjme
WriteLine
ExpressionType
set_ContentType
System.Core
culture
HttpWebResponse
GetResponse
Dispose
Create
CallSite
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
DebuggableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
TryGetValue
add_AssemblyResolve
CurrentDomain_AssemblyResolve
sfdfr.exe
Htydtzvf
System.Threading
System.Runtime.Versioning
CultureToString
Attach
get_Length
EndsWith
Eiemlnrtrkxjhi
Eyhokrvymak
nullCacheLock
Iefgfxkpsojfk
Animal
numTail
ReadStream
LoadStream
GetManifestResourceStream
GetResponseStream
DeflateStream
GetRequestStream
MemoryStream
stream
Program
set_Item
System
AppDomain
get_CurrentDomain
FodyVersion
System.IO.Compression
destination
UnaryOperation
BinaryOperation
System.Globalization
System.Reflection
set_Position
Exception
Newtonsoft.Json
StringComparison
CopyTo
Anxcdo
get_CultureInfo
CSharpArgumentInfo
Newaapny2.Zfpsjtxpbsjo
Newaapny2.Kehfgpklp
Microsoft.CSharp
GetMember
StreamReader
TextReader
AssemblyLoader
sender
Microsoft.CSharp.RuntimeBinder
CallSiteBinder
ResolveEventHandler
StreamWriter
TextWriter
.cctor
Monitor
System.Diagnostics
System.Runtime.InteropServices
System.Runtime.CompilerServices
ReadFromEmbeddedResources
DebuggingModes
GetAssemblies
resourceNames
symbolNames
assemblyNames
get_Flags
AssemblyNameFlags
CSharpArgumentInfoFlags
CSharpBinderFlags
ResolveEventArgs
get_TotalAnimals
set_TotalAnimals
totalAnimals
Equals
GetNumOfTails
Daqzsgaizens
System.Linq.Expressions
Concat
Format
DeserializeObject
System.Net
Target
ToLowerInvariant
JsonConvert
GetNearest
HttpWebRequest
ToArray
ProcessedByFody
ContainsKey
ResolveAssembly
ReadExistingAssembly
GetExecutingAssembly
Newaapny
ClassLibrary
op_Equality
op_Inequality
IsNullOrEmpty
Mksnzxaopxy
Newaapny2.Wvauxy
WrapNonExceptionThrows
Telegram Desktop
Telegram FZ-LLC
Copyright (C) 2014-2021
$a0aa56d2-5375-407b-ba17-cd1f8ea377dd
2.7.4.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
_CorExeMain
mscoree.dll
wXDv""
OWg.E>
_XpMaa
?7w*6z
J^*7_p
V [Q6r
B9Hsnj
ydWbCn@
,BC8(3
uBP{/h
*z0c,/L
S38R_d
s5<_It
;S=m;.
+xm=*"
q}PuRcJ
r3]a2[
v?" (O
ftiqvR
V+&3Y\"*
j57;Ar
kJ63Y^
$WZ=7"
nDfVVdV7M
H4S:1`
weQHPa
8iM9i;PJ
[yYy?O
\:r"M
naaaaaaaaaaaaaaaaaaaa
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
Greater Manchester1
Salford1
Comodo CA Limited1!0
AAA Certificate Services0
040101000000Z
281231235959Z0
Greater Manchester1
Salford1
COMODO CA Limited1+0)
"COMODO RSA Certification Authority0
HCgNr*
2http://crl.comodoca.com/AAACertificateServices.crl04
http://ocsp.comodoca.com0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA0
191007000000Z
221006235959Z0
943491
Private Organization1
Dubai1
Dubai1;09
2Business Central Towers, Tower A, Office 2301 23031
Telegram FZ-LLC1
Telegram FZ-LLC0
https://sectigo.com/CPS0U
Dhttp://crl.comodoca.com/COMODORSAExtendedValidationCodeSigningCA.crl0
Dhttp://crt.comodoca.com/COMODORSAExtendedValidationCodeSigningCA.crt0$
http://ocsp.comodoca.com0#
AE-943490
Greater Manchester1
Salford1
COMODO CA Limited1+0)
"COMODO RSA Certification Authority0
141203000000Z
291202235959Z0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA0
=U5W5H
https://secure.comodo.com/CPS0L
;http://crl.comodoca.com/COMODORSACertificationAuthority.crl0q
/http://crt.comodoca.com/COMODORSAAddTrustCA.crt0$
http://ocsp.comodoca.com0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA
20210428095006Z
Greater Manchester1
Salford1
Sectigo Limited1,0*
#Sectigo RSA Time Stamping Signer #2
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
201023000000Z
320122235959Z0
Greater Manchester1
Salford1
Sectigo Limited1,0*
#Sectigo RSA Time Stamping Signer #20
https://sectigo.com/CPS0D
3http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
3http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
http://ocsp.sectigo.com0
New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority0
190502000000Z
380118235959Z0}1
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
?http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl0v
3http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt0%
http://ocsp.usertrust.com0
rRj;B7|
[C]e=P
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA
210428095006Z0?
New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority
>ABCDE
Newaapny.Eyhokrvymak.dll
Cat has {0} tail.
Dog has {0} tail.
Zoo has {0} animals.
http://us1.unwiredlabs.com/v2/process.php
application/json; charset=utf-8
{{ "token": "{0}", "radio": "gsm", "mcc": {1}, "mnc": {2}, "cells": [{{ "lac": {3}, "cid": {4} }}] }}
status
balance
accuracy
message
.compressed
costura
costura.costura.dll.compressed
eyhokrvymak
costura.eyhokrvymak.dll.compressed
newtonsoft.json
costura.newtonsoft.json.dll.compressed
6.0.0.0
4.1.0.0
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Telegram Desktop
CompanyName
Telegram FZ-LLC
FileDescription
Telegram Desktop
FileVersion
2.7.4.0
InternalName
sfdfr.exe
LegalCopyright
Copyright (C) 2014-2021
LegalTrademarks
OriginalFilename
sfdfr.exe
ProductName
Telegram Desktop
ProductVersion
2.7.4.0
Assembly Version
2.7.4.0
Antivirus Signature
Bkav Clean
Elastic Clean
MicroWorld-eScan Trojan.GenericKD.37077782
CMC Clean
CAT-QuickHeal Clean
Qihoo-360 Clean
McAfee RDN/Oskistealer
Cylance Unsafe
VIPRE Clean
Sangfor Trojan.MSIL.Seraph.gen
K7AntiVirus Trojan ( 0057ddc11 )
BitDefender Trojan.GenericKD.37077782
K7GW Trojan ( 0057ddc11 )
Cybereason malicious.4ad08b
Baidu Clean
Cyren W32/MSIL_Agent.BCR.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Kryptik.ABKG
APEX Malicious
Avast Win32:CrypterX-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Trojan-Downloader.MSIL.Seraph.gen
Alibaba Trojan:MSIL/Kryptik.4b83ae92
NANO-Antivirus Clean
ViRobot Clean
AegisLab Clean
Rising Clean
Ad-Aware Trojan.GenericKD.37077782
Emsisoft Trojan.GenericKD.37077782 (B)
Comodo TrojWare.Win32.Agent.taypd@0
F-Secure Clean
DrWeb Trojan.PackedNET.835
Zillya Clean
TrendMicro Backdoor.MSIL.SERAPH.USMANFB21
McAfee-GW-Edition RDN/Oskistealer
FireEye Generic.mg.3b014082a0ebcbc1
Sophos Mal/Generic-S
SentinelOne Static AI - Suspicious PE
GData Trojan.GenericKD.37077782
Jiangmin Clean
Webroot Clean
Avira Clean
MAX malware (ai score=99)
Antiy-AVL Clean
Kingsoft Win32.Troj.Undef.(kcloud)
Gridinsoft Trojan.Win32.Kryptik.oa
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/AgentTesla!ml
Cynet Malicious (score: 100)
AhnLab-V3 Malware/Win.AGEN.C4522697
Acronis suspicious
ALYac Trojan.GenericKD.37077782
TACHYON Clean
VBA32 Clean
Malwarebytes MachineLearning/Anomalous.96%
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Backdoor.MSIL.SERAPH.USMANFB21
Tencent Clean
Yandex Clean
Ikarus Trojan.MSIL.Crypt
eGambit PE.Heur.InvalidSig
Fortinet MSIL/Kryptik.ABKG!tr
BitDefenderTheta Gen:NN.ZemsilF.34738.Om2@aC4Np3i
AVG Win32:CrypterX-gen [Trj]
Paloalto generic.ml
CrowdStrike win/malicious_confidence_90% (W)
MaxSecure Trojan.Malware.300983.susgen
No IRMA results available.