Static | ZeroBOX

PE Compile Time

2083-12-28 17:16:30

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0007afe4 0x0007b000 7.99300765862
.rsrc 0x0007e000 0x000046e8 0x00004800 2.5375520699
.reloc 0x00084000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0007e100 0x00004028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x00082138 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0008215c 0x0000038c LANG_NEUTRAL SUBLANG_NEUTRAL PGP symmetric key encrypted data - Plaintext or unencrypted data
RT_MANIFEST 0x000824f8 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
z`W+63,
.6\^xr
7~wX_M
b?MTEp
PH1/mouO
#hLjLp
5gz?$3
R8gWp2
9w/nwb
<=k{/BG
vO)Ey]
l3qEU2
1 |\@u
A#kliHV
}'8oW8
axC438
hzQ[0G
KneBF3
,9|-H>
}=8]@2.
H=evA)l
^-6_+St
v`aAk)W
z3)@4
tw _LY
tLAcM.a
7yNY1a
# >SV>IR
R|G-E1
*=]Du`\
:)XgU0ru
$Lt0_"
UHraqS
z6~\Gf
t, ^M>
L6z/+l
Mj!z.60r
vJPXX&
(?R6}N:
@iY9<L
. as9jO
[zuvVJ
C>NVA|]=
S*VIp6
>?u'gr
%Fl}<b't
z;|%h\?
\B,<w{
(.-VL;
Sc%0Jb
&KPNU|
a&#s X=
Abv\6>
s#.>1K
v+hLE*
LJ4dRC
U"[E6D
+4MVtL
}?z/}g/!
R)|=$7
bU@m{}
/DN|YK!
6\4/?B
{mJY=fGd
rx?&/CL
DwuRnH>/bG
Vx"Ma8\L
S+Q;Ue
V;l&#L+
)| 1U4
Me3%/~
u_ZZ3=?
Ob3L}TL[
+[oLeD
fK{Vx>
Bg{\ub
_VZj520\
U_aE71L
xIQE2U3
K#mt4i
fIw31T{
49d+sm
"gOGE\+pc
F!&+3%
6)X2I
uDrD2q
SpeTOSv
.5meh|
or$knJ
>ojEPw8
edyqos;
u/1yw8
*hT^J&
C-hu-(
A{r-8
73$c0H
&s C_k@
^%K~nU
*x>6EF
c'GCN1
aXLy#t
m\pY'~
qcLL-p
|SKwV/
{.;K)j]
IV8w`x0H
Yh/}1hB
K?M>W>
]|3O?^
_^ht<Y
p8.{QY
k5M?DN
_AknZgZ3
|%&RAJp
e46egxY
'zZ56YNq.o
KJ:4"p@M
?PwinJ5
13m]1{T
7vG%07
RlH%X/.
x>fHLX
SE!SVu
pMP<-~
(ZD1aE
@0;[=+
7DT#Ct
f\Zp$cN3
CnwDII
Zo|_6I
Wm0UkeS
s<N# Jf
SCz[i[|
lO"h?(
c5:6.J
oagjsMB\
)@a`f(G
u,<M,?UQ
I+^GVz
,R8W!h
nX6Cpv
F4[oS?
<.@*7Y
y8gy8g
qj}8gW
BL37f;e
/:@+^"
dW/J[@
5U+_sW?c|7
N4Avh:
HXb^WO
`pqlw"
ZoZtd3
I7|#]=
2m@NL>6
4I*>k|-
bb\ld'
:Gcz;>
^rF@kDJ8r
UMQL6@&
k(Q;D/
/Dqu>n
u+cmlTk
%[f9&HH
K/`<]YK-
(g{J?R
P J1N[
4D"8{B
+'Jms@
QCQ\Y.
KD1";V/
Sl^4*}
B{\!C[
Bv\,!=
I:Em06
5B@z%!
%|B{Bo
5Ov95k
SW~3"oNU
By#y<F
c-\R,
tX_M.e
{P^#.O
S\2G\8b8
\5@}7Z
92_/7_
sY^`~y
F+>")~K
7`=o)
k}?q./
n\(a_?
I.e>nH
?Niencn
hok6nJ
cvT|W"
;fb|?9}f
?YOy|B
C|ZkL!
*9^17Q
F1ysgu
2.a}u $n
60;OP
Xdx_VY"
4rV)V^
/%5/pO
y_gy72
x|/7ANa
y2ris|
9[oV+X@
H`WL/v
R}!|ijO^
$)#GZ|4&YQGY|!&E
ZR`oR@
HgBV7X
p^'MOD
An\{:/
S;;C;`
cwy{pg
<}^^|=
&fPSyU$*h
a\nGoG
3d<&JZ
2SnUaYR
=?6xfW
z>2Gz[
1*FzM^
Y/|v?<
|kH?u0
)r?0Wx
\c,IcI
'`o4v'5
Hx#:B:S
|{Hg+|
C7r_u#
w`OaOc
,Z=N>0
/)l.\Rxb
7'}=)#?7
X^\^Y>
,{]v]n
6YI>$]
js<=v|JH
}oy=!'
p@r9P%'
;P%CIOBW
Id x>P%.
wSH1P%e
b\[%[qU
(P%-Yc
k>qc4ZD
Je/4W*
94W+_Bs
r*47(K
cTFIF4co
}QtBq~
Kp4+w
kqxq,F
\\l..1
$qKR I!%
7--(."
BWIYEAYUM1
4RTZTR]]XY]VZQ
SQUXVT
M,w+"-h
!ij6z#
`KWr@Ss
$*hmBT,
i5*ExC
gRwjZ>t
y|BA,7
LJJ/9Z0F
Mq!]$e^
h9=&||
z&$Mm2
*qDo%m
\mfuE}21
f"v^M>
r),EWg
*Y8y<
$ks8sSj
3($"sA0
d:o(hA T
<ZN4QJ
NPeiH%
]E]y9+-
B>7T2{Q
I~ya3)yE
7]Kx/K
_<Q?'3
Fb Yv$K
L>5/.g
3lkB|
|nHF>n
ok%CYg
`q[gNf
milwYvjl
o<PFiAw
GEj4.
+z.v>P
ZS9>2o
1|Q|wC
ECvyfBY
3]|2tsvP
-znd{_
&iz;NeZ
NxYibo
/MA$:O
4;B9o3
;=e6#$V
L,7sWH
3I25.I
n.D_n\4
sr#0$l
]oX$w
?JMz3Y
'i@'i1,
YpB.YL
U8("pdm
5qI7^A
!6zICh
9;@lzdF
i<xC 4
>t7;t{~g
"wz!gz
h!]i'T
;V`aan
c"dX%e}^g
/hU?(j/
2:9!^:;
zG&n<fJ[
KOt+]K
}t5P?*
Y%BWxBW
C01'mG
!n88<8
ed(.#Ej
(|ha^nx
a-t0L(
; ;;ovrqvQV~
U_ch7c
N+lLkj
VP@HBDC
M%s|^N>
KbF2#H8
~b$TCo
@6Yxsd
bsSN_>
jB6^m}v
kw&/ox
D=>7mP
iQ<~H8r
{Ah,5Z
[Jb%Bx&uC{G
_<-i(y&
"U"[+F
oUfM+AMH
YuL1k0n
QTz=Lf
I4P@hC
o}2G o
88N0a):
0,p1CD
.4P.TU&
PA8t!Y
xHdTl\
EQQV[][
nIe}IN
D6\8or
_(8e~c
P]^e8h
ZjvN^C
jZc7c R
]Uf>[N,
5VFo.4
;6!bdU
ct|=?r
Z@~oD
on=?hs
kdcmcO
zw:&?pa
F'hW4=w4(
1kUf;M
A|$8?s
XYq:cu"
02zZ|s
Qmm5kkP
Z=X&w%A
h`>}[[U'$
mE3TvT+b
DQE`<
nn<}[|
]akNw=
JR6SKS
i%q(C#
5Y%U!7
J^_Ki?
w:bLqt
F/Y(u.Y(Uw@
J[F8?N
B<.c6}3
V-(Wp(t
Qn>!-^?
UVdThiw5
a!S)oh
"W335VCW
EJ{W44
`X9Ba!
Q9 oh$
oxDj5u#9
.AHMrd(b
?,=Z6Tq
b5a=9\
3F ]1l
)yH$F`
4;/aG{g
;-Qn]4
SxisbBM
_K$8}5p
>i1p!v
erDbyR
.^4tY"n
[Gh.n7
vI\+v}*
CKKlqW
a3Nww~
g$z:Z5
'2V"YV
X1R"wc;
Raf!#
Ea60Dsy
\mR&@x
dV&Fi|
>}q:t#
?2*"{l0dEB
wH'30h
x[8cWu
cy9g>\~
83~CNyG}
|-t|uZ7
PSB.Pu
qPw V@
W\0UzH
_'eB!)
HW;2t(
*GKcvI
%}WxuK
-+x<m
->eyC*
H/v&xL
0;\?+$
r}(R;N
sY.VR_
k$^r58
J96kp4
MG>}(z
%N!^bqHXU
N,O_E]
r]LUXW
(qK^R1
a/.E<Q
_5Ul^1
d,Ii0Y!
gDxVS~^
0#Iu"$
4[bMsKG
_/Sum*t
/UQY2jH
[wN}nw
M<rz<0^
^xl$~>
.161h'
,enlB`X :
w[M{K8
!53=-/
aECj!u
!2X8c~
PnP4Wka
*gfma9
JjqbMl[
cC;\sq
w~0"mZ
Om~5'm
'=[[LW?Y8
-S45ax
+|H_]b
TuFB >Q
lnjRP"!
4gf6eg2b5
#[3{S#'X;
`g`odg
[T#{g+
)0Pu5vv
Fx`aa~
$@CL=v
;nqSPlu
Z0_YauQ
}%ZLvk
OBNED!
+i&&_2
'VO&V}~
zEVNzig+
{D"W^i
m<K&h[2c++
mQjG&?
}h$*Q.(
}EA. +
M^|yW)<
E_&;8zhn)
%#@O!kL
1yK\]vm
@nNtVg4rz
53V=t&
s*:.ixg
-SXBiS
[L=bD\
,J8g2
j7kw={:
+y,#.=
>-$N>dY
WYv*A^
m;JRmkzkWA
XeSq0A
BXfLXK4
@ELHKH
( ~H$G
SBzG!+%d
Pji $n
v]_t<.J
\O&6UT>gY
H,P;y/q7
U~M##>
6D+Z;K
!wwdxI
r,>gN'
:1B+ss
et%h1z
CcGYZ[
|0>}J8
rkI{L+z
_\b~3!l"
5@+(c'
D1 .ls
yQTnG@
AobeT@[
umIM]Cf
2z O]<pT0
L<m{QZ
s%#?zc
1CeN3d
*a<En"
,|(0c"
AJeA4}
00SMe]"
d<+MvZ
WYI*+9
]Ki;K8*J
W.W'=S
X-Sf)g
:]OnOM'U
IG~"&#O^
Zgr>>>
dzNN.sR
KHUkB*}A
ivKDfZ
c3}qzo^
4l[C;s
mbZfHp[Y
:+-"Ge
.ZMh@r
4|V^PO&/p
)_TIC(
6EW{wld/
6<.^6Xc
[Z58=1u
pCFd$k
CF)440
Pjlfrv:
{0xepE
SFYG~k&
4e4v84^;
vtOmB&
vVek'&
(K5@:/
OV6T31
zQ\h/<f
6Dx!A_w
E&RQj#
Qk}076W
?^4X}C
)<xbm2
Ix+)!
\2AD2A_<:
#g&h'\
J[~cn
Dz*&W0(
Vvt\@i'W
Phq<e,=
8"QQ|~N37
9.fPN~
;HGkQ[}
M#P[00n
-.ofF@
nKecc)
97M:~H
qn%<Tk;
-3j)=[I
+"GuKW
[U;ltjg
D!'m1P
O;_57A@
5/8 R+
1;6And
SChP.q)
P\K$BMu
#2bEP+
x3h6ReS
62]%t{Lt
z|vmOk
61)km9
<q{#-u
pq?^&#
>`.&i>
[SI^&G
Wk%?6C
eSU(K]A
30";^
IKL$'yn
I~1g$3<
FUZ_01
)<aSc>
hY$4Ia
W5l%8]y
2s^ze_
VEjQSq
ZJeh^9.
qp9FNDI
\;`$E.
u4{3N%
bxgs2`
HA3B8@
Uh%_2Iw
yMu-?
i]w}k9{7
dPIY#o
+H:Qq^Ty
3O?t1-
OXTw 9J[<
Mld\p
#N{4
)p;.)m*
;W4 5?n
m%tbkD
5OAo>@
6G5b(EO
e_xSJt|
d4uY(7
h*0#2:
Dr]*qx9
&8WEsm4
Zl:T7`E
^)8z/R
sn<}XO
eEeXN_
;!qqDMiL
G=1 MC
== ^T
f"+k()
rGAh[Mxt
sCv"hI
pKM=p6
xq_UyR
k]NssW
S{=?"*
Wc~Lw
/c= Ogh
8iuwU|
bX^K^Xb
5q2lXj
[Hsx~eH(}
%%$Q)4
@R&mvNK
_[M>!?b
ID$3{!
EcDn1U2
A?P3>hS<
w%ih?:
2>:KYQp
gqD0q}K;
!jLB#v?
gG'bs'
|#`usgh
nPit$I
lIJ$HFL
^.D4rx
Fkkk3N
GcF|ZK
RY"2/2H
Bz$AXM
71*}Efx
:\4tbr-
|~:%_.+
YW_;'A
6gNRK"W
{+:f*"
4n*Mv-
!@Rs(<
vTHx5RP
ABYec0k
O\;F6f%
;$Q$Wb
''&g:w
v# fF{(5
k]HLhd
s\DHCC
FwAlr
n8%R%2X
"G0B@
*I"i$%
Bx[?D9
nM_PHmb
Qg}+i&
!QF/6\
y9z4,lA
@[pbak
<rLdH0
!RF``o
8Ftdk4x
p*c}fVeCb
;*F~tz
J=PJ0:
1jzW)|c;DQ
+:u#)^
+Lf{OR
TN,Uw=}
1kR2mP
GT>;vb
]=?}cS
]}wM?O+
8}wQU[=
wh}a^I.O
K?>PM[1
9ART
p+d ^6
zv"e-d
fo3w:?A
Y8qpe-J
>u%XXJ
R2|j<i
3LhQ@Y
J]9Gtz
!SXl[G
+BwrSR
A|h<uT
,Rs(Gaa
JB~J@~:~
,h<_eM
r`dDT+
5l@MR<
Dw[2r3
[7HJ|V
<HPoAQ
[#%ob
5aU1Fm-
tsD3A
_!4s^S
$jW;g8g
bQMBbRB
ywb|wT
GJ&C[RT5bJg'
]}2l{Fe
W%aH?g
)>m{5G
W\Xjg
)&|:Gh
(tQn64
s=A[US
zC{sGT
Y,-<)d1
afz@k)
DkG9n,Nwj
iFJEG7
utUt4qtUq
b^@/)74D
",uy,^
Q`,|s1&H
y|)ZT
a5Pv[\@
yVsK#6
V'V 9iU
ZXXYY]
4pkmm^a
%LGOq/o
/`pe*-@
v4.0.30319
#Strings
<>p__10
<>p__0
<>p__11
<>o__1
<>p__1
IEnumerable`1
CallSite`1
RFL_0769002
<>p__12
<>p__2
Dictionary`2
Fgfrikaysthl2
<>p__13
<>p__3
Func`3
<>p__4
Func`4
<>p__5
<>p__6
<>p__7
<>p__8
<>p__9
<Module>
System.IO
Costura
mscorlib
System.Collections.Generic
Fgfrikaysthl2.Ecpyismjc
Thread
isAttached
Interlocked
costura.costura.dll.compressed
costura.newtonsoft.json.dll.compressed
costura.zmhikajpuu.dll.compressed
Fgfrikaysthl2.Jdiltfxtjd
<x>k__BackingField
<y>k__BackingField
ReadToEnd
set_Method
source
CompressionMode
Exchange
nullCache
Invoke
IDisposable
RuntimeTypeHandle
GetTypeFromHandle
Console
get_Name
fullName
GetName
requestedAssemblyName
WriteLine
ValueType
ExpressionType
set_ContentType
System.Core
culture
HttpWebResponse
GetResponse
Dispose
Create
CallSite
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
DebuggableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
TryGetValue
add_AssemblyResolve
CurrentDomain_AssemblyResolve
RFL_0769002.exe
Fgfrikaysthl2.Ymkiadg
System.Threading
System.Runtime.Versioning
CultureToString
Attach
get_Length
EndsWith
Qxogji
Fgfrikaysthl2.Utbhebcikxxmhj
Prjcrzqij
Cwpyhjj
nullCacheLock
Animal
Fgfrikaysthl
numTail
Cynhofjril
ReadStream
LoadStream
GetManifestResourceStream
GetResponseStream
DeflateStream
GetRequestStream
MemoryStream
stream
Otnnioam
Program
set_Item
System
Ugjywklkuvnzvm
AppDomain
get_CurrentDomain
FodyVersion
System.IO.Compression
destination
UnaryOperation
BinaryOperation
System.Globalization
System.Reflection
set_Position
Exception
Newtonsoft.Json
StringComparison
CopyTo
get_CultureInfo
CSharpArgumentInfo
Veftlpyoo
Microsoft.CSharp
Fgfrikaysthl2.Lkqbjeeedq
GetMember
StreamReader
TextReader
AssemblyLoader
sender
Microsoft.CSharp.RuntimeBinder
CallSiteBinder
ResolveEventHandler
StreamWriter
TextWriter
.cctor
Monitor
System.Diagnostics
System.Runtime.InteropServices
System.Runtime.CompilerServices
ReadFromEmbeddedResources
DebuggingModes
GetAssemblies
resourceNames
symbolNames
assemblyNames
get_Flags
AssemblyNameFlags
CSharpArgumentInfoFlags
CSharpBinderFlags
ResolveEventArgs
get_TotalAnimals
set_TotalAnimals
totalAnimals
Equals
GetNumOfTails
System.Linq.Expressions
Esvfvydwjiwrs
Concat
Format
DeserializeObject
System.Net
Target
ToLowerInvariant
JsonConvert
GetNearest
HttpWebRequest
Zmhikajpuu
Frdgpjxhw
Ojdmmw
ToArray
ProcessedByFody
ContainsKey
ResolveAssembly
ReadExistingAssembly
GetExecutingAssembly
ClassLibrary
op_Equality
op_Inequality
IsNullOrEmpty
Fgfrikaysthl2.Xvqpsvncz
Oavrnuz
WrapNonExceptionThrows
Telegram Desktop
Telegram FZ-LLC
Copyright (C) 2014-2021
$e8c3d34a-b149-43da-9a17-807d969d52ee
2.7.4.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
Greater Manchester1
Salford1
Comodo CA Limited1!0
AAA Certificate Services0
040101000000Z
281231235959Z0
Greater Manchester1
Salford1
COMODO CA Limited1+0)
"COMODO RSA Certification Authority0
HCgNr*
2http://crl.comodoca.com/AAACertificateServices.crl04
http://ocsp.comodoca.com0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA0
191007000000Z
221006235959Z0
943491
Private Organization1
Dubai1
Dubai1;09
2Business Central Towers, Tower A, Office 2301 23031
Telegram FZ-LLC1
Telegram FZ-LLC0
https://sectigo.com/CPS0U
Dhttp://crl.comodoca.com/COMODORSAExtendedValidationCodeSigningCA.crl0
Dhttp://crt.comodoca.com/COMODORSAExtendedValidationCodeSigningCA.crt0$
http://ocsp.comodoca.com0#
AE-943490
Greater Manchester1
Salford1
COMODO CA Limited1+0)
"COMODO RSA Certification Authority0
141203000000Z
291202235959Z0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA0
=U5W5H
https://secure.comodo.com/CPS0L
;http://crl.comodoca.com/COMODORSACertificationAuthority.crl0q
/http://crt.comodoca.com/COMODORSAAddTrustCA.crt0$
http://ocsp.comodoca.com0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA
20210428095006Z
Greater Manchester1
Salford1
Sectigo Limited1,0*
#Sectigo RSA Time Stamping Signer #2
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
201023000000Z
320122235959Z0
Greater Manchester1
Salford1
Sectigo Limited1,0*
#Sectigo RSA Time Stamping Signer #20
https://sectigo.com/CPS0D
3http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
3http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
http://ocsp.sectigo.com0
New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority0
190502000000Z
380118235959Z0}1
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
?http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl0v
3http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt0%
http://ocsp.usertrust.com0
rRj;B7|
[C]e=P
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA
210428095006Z0?
New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority
>ABCDE
Fgfrikaysthl.Zmhikajpuu.dll
Cat has {0} tail.
Dog has {0} tail.
Zoo has {0} animals.
http://us1.unwiredlabs.com/v2/process.php
application/json; charset=utf-8
{{ "token": "{0}", "radio": "gsm", "mcc": {1}, "mnc": {2}, "cells": [{{ "lac": {3}, "cid": {4} }}] }}
status
balance
accuracy
message
.compressed
costura
costura.costura.dll.compressed
newtonsoft.json
costura.newtonsoft.json.dll.compressed
zmhikajpuu
costura.zmhikajpuu.dll.compressed
6.0.0.0
4.1.0.0
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Telegram Desktop
CompanyName
Telegram FZ-LLC
FileDescription
Telegram Desktop
FileVersion
2.7.4.0
InternalName
RFL_0769002.exe
LegalCopyright
Copyright (C) 2014-2021
LegalTrademarks
OriginalFilename
RFL_0769002.exe
ProductName
Telegram Desktop
ProductVersion
2.7.4.0
Assembly Version
2.7.4.0
Antivirus Signature
Bkav Clean
Elastic Clean
MicroWorld-eScan Trojan.GenericKD.37076859
FireEye Generic.mg.3c88c6ef1a906bc8
CAT-QuickHeal Clean
ALYac Trojan.GenericKD.37076859
Cylance Unsafe
VIPRE Trojan.Win32.Generic!BT
AegisLab Clean
Sangfor Backdoor.MSIL.Androm.gen
K7AntiVirus Trojan ( 0057ddc11 )
BitDefender Trojan.GenericKD.37076859
K7GW Trojan ( 0057ddc11 )
Cybereason malicious.9d9c20
BitDefenderTheta Gen:NN.ZemsilF.34738.Gm2@aGtSzMo
Cyren W32/MSIL_Agent.BCR.gen!Eldorado
Symantec Trojan Horse
ESET-NOD32 a variant of MSIL/Kryptik.ABKG
Baidu Clean
APEX Malicious
Avast Win32:TrojanX-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Backdoor.MSIL.Androm.gen
Alibaba Backdoor:MSIL/Androm.19b41886
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Trojan.GenericKD.37076859
Sophos Mal/Generic-S
Comodo TrojWare.Win32.Agent.zmbec@0
F-Secure Clean
DrWeb Trojan.PackedNET.835
Zillya Clean
TrendMicro TROJ_GEN.R002C0PFA21
McAfee-GW-Edition GenericRXOG-DJ!3C88C6EF1A90
CMC Clean
Emsisoft Trojan.Crypt (A)
Ikarus Win32.Outbreak
GData Trojan.GenericKD.37076859
Jiangmin Clean
MaxSecure Trojan.Malware.300983.susgen
Avira TR/AD.Swotter.pndre
MAX malware (ai score=100)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Trojan.Win32.Kryptik.oa
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/AgentTesla!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
McAfee GenericRXOG-DJ!3C88C6EF1A90
TACHYON Clean
VBA32 Clean
Malwarebytes MachineLearning/Anomalous.100%
Panda Clean
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002C0PFA21
Tencent Clean
Yandex Clean
SentinelOne Clean
eGambit PE.Heur.InvalidSig
Fortinet MSIL/Kryptik.ABKG!tr
Webroot W32.Trojan.Gen
AVG Win32:TrojanX-gen [Trj]
Paloalto generic.ml
CrowdStrike win/malicious_confidence_90% (W)
Qihoo-360 Clean
No IRMA results available.