Static | ZeroBOX

PE Compile Time

2016-04-09 17:46:19

PE Imphash

15a92363039fb41362406845afb153a0

PEiD Signatures

InstallShield 2000

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00044f2e 0x00045000 6.61113162632
.rdata 0x00046000 0x0000e5aa 0x0000e600 6.15970541668
.data 0x00055000 0x0000e314 0x0000dc00 5.54641037058
.rsrc 0x00064000 0x0001b8a0 0x0001ba00 6.93453600672

Resources

Name Offset Size Language Sub-language File type
RT_BITMAP 0x000666f0 0x00019030 None SUBLANG_DEFAULT data
RT_ICON 0x00064130 0x000025a8 None SUBLANG_DEFAULT dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_GROUP_ICON 0x000666d8 0x00000014 None SUBLANG_DEFAULT data
RT_MANIFEST 0x0007f720 0x0000017d None SUBLANG_DEFAULT XML 1.0 document text

Imports

Library USER32.dll:
0x4460ac TranslateMessage
0x4460b0 LoadCursorW
0x4460b4 DispatchMessageW
0x4460b8 GetMessageW
0x4460bc RegisterClassExW
0x4460c0 MoveWindow
0x4460c4 PostQuitMessage
0x4460c8 DialogBoxParamW
0x4460cc DefWindowProcW
0x4460d0 DestroyWindow
0x4460d4 EndDialog
0x4460d8 SendMessageW
0x4460dc LoadStringW
0x4460e0 wsprintfW
0x4460e4 CreateWindowExW
0x4460e8 ShowWindow
0x4460ec UpdateWindow
0x4460f0 LoadCursorA
0x4460f4 GetWindowRect
0x4460f8 InvalidateRect
0x4460fc RemovePropA
0x446100 SetMenu
0x446104 PtInRect
0x446108 GetDesktopWindow
0x44610c SetScrollRange
0x446110 GetActiveWindow
0x446114 ScreenToClient
0x446118 RedrawWindow
0x44611c GetDlgCtrlID
0x446120 GetScrollRange
0x446124 GetWindowTextA
0x446128 GetScrollInfo
0x44612c GetWindowLongA
0x446130 GetClassNameA
Library KERNEL32.dll:
0x446008 VirtualAlloc
0x44600c HeapAlloc
0x446010 HeapFree
0x446014 WriteFile
0x446018 RtlUnwind
0x44601c VirtualFree
0x446020 HeapCreate
0x446024 HeapDestroy
0x446028 GetFileType
0x44602c GetStdHandle
0x446030 SetHandleCount
0x446034 GetOEMCP
0x446038 GetACP
0x44603c GetProcAddress
0x446040 WideCharToMultiByte
0x446054 GetModuleFileNameA
0x44605c GetCurrentProcess
0x446060 TerminateProcess
0x446064 ExitProcess
0x446068 GetVersion
0x44606c GetCommandLineA
0x446070 GetModuleHandleA
0x446074 GetCPInfo
0x446078 CreateFileA
0x44607c GetModuleHandleW
0x446084 GetStartupInfoA
0x446088 CloseHandle
0x44608c GetFileSize
0x446090 CreateFileMappingA
0x446094 LoadLibraryA
0x446098 GetLastError
0x44609c CreateFileW
Library GDI32.dll:
0x446000 CreateCompatibleDC
Library SHELL32.dll:
0x4460a4 ExtractIconW

!This program cannot be run in DOS mode.
`.rdata
@.data
SXW"RV|
]6WW6hh
VhXT"T|R
]T|R]6hTSW3]W
XX|RW6
W6WXXT
X]XWVW
XVhXX6R
RW6XX6WXVh
X6bXR\SXhXH
hW|V]RTb
6S]XXR
|X]\WX
~VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
OjQ]9_
RXVXX\YP
SXW"RV|
]6WW6hh6
VhXT"T|R
]T|R]6hTSW%
vXX|RW6
W6WXXT]f
X]XWVW3
XVhXX6R
RW6XX6WXVh
ThW("y
X6bXR\SXhX
hW|V]RTb
6S]XXR
(OXTbX
^|X]\WX
LbwVVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
b2XS6W6
RXVXX\
SXW"RV|
]6WW6hh
X|TWXO
XbW,|O
VhXT"T|RG
]T|R]6hTSW
xXX|RW6
W6WXXT!
X]XWVW
XVhXX6Rx
1RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
|X]\WX
bX]"w]]LPa
VVVTWVTX
+B6RXX
T6TT|R
66"RX6
]h\RXhXWX
aXS6W6
RXVXX\
PSXW"RV|
]6WW6hh
VhXT"T|R
]T|R]6hTSW\
XX|RW6
W6WXXTQO~zX
X]XWVW
]|X"X
XVhXX6R
KRW6XX6WXVh
|0VXR6
X6bXR\SXhX:
hW|V]RTb
6S]XXR
}|X]\WX
bX]"?d
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hh
VhXT"T|R
]T|R]6hTSW
XX|RW6
W6WXXT
X]XWVWb
XVhXX6Rhpr
RW6XX6WXVh
X6bXR\SXhX<:
hW|V]RTb
8H!3B[
6S]XXR
SWXh*I`
|X]\WX
?_VVVTWVTX
6XWmpBVQ!6RXX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
_SXW"RV|
]6WW6hh^
VhXT"T|R1l
]T|R]6hTSW
XX|RW6
W6WXXT
X]XWVWR
XVhXX6R
RW6XX6WXVh
X6bXR\SXhX#_L
]X=p.d
hW|V]RTb
6S]XXR
v!|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hh
Vgr'VZ(
VhXT"T|RqW
]T|R]6hTSWb
XX|RW6
W6WXXTTQ
X]XWVW
XVhXX6Ra
]N9RW6XX6WXVh
]1*>e@
X6bXR\SXhX
#ZhW|V]RTb
6S]XXR
G\OXTbX
Xb?|X]\WX
bX]"+M
~7oVVVTWVTX
gIGY6RXX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
MSXW"RV|
]6WW6hh
j436]VT
VhXT"T|R
]T|R]6hTSW~$
XX|RW6
W6WXXT
X]XWVW3
XVhXX6R
RW6XX6WXVh
X6bXR\SXhXu
N:4hW|V]RTb
6S]XXR
ghCOb'
Wm|X]\WX
|LVVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\A2
hySXW"RV|
]6WW6hh
VhXT"T|R
]T|R]6hTSW
XX|RW6
W6WXXT
X]XWVW
XVhXX6R
*"^RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
<hMA`;
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hhEG_P
X|TWX*h
S>|bX
VhXT"T|R
]T|R]6hTSW\
XX|RW6
W6WXXTI
X]XWVWwL
XVhXX6R
RW6XX6WXVh
X6bXR\SXhX
^^hW|V]RTb
6S]XXR
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
jpXS6W6
RXVXX\
SXW"RV|
]6WW6hh
c|N6]VT
VhXT"T|R
]T|R]6hTSW
9XX|RW6
W6WXXTu,
X]XWVW
XVhXX6Ru
,}XzlRW6XX6WXVh
X6bXR\SXhXox
$GhW|V]RTb
6S]XXR
Cn|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hh
QS+|bX
VhXT"T|R3
]T|R]6hTSW
%XX|RW6
W6WXXT]]
X]XWVW
XVhXX6R
_RW6XX6WXVh
=];VXR6
X6bXR\SXhX
NU/hW|V]RTb
6S]XXR
1D|<|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hh]
|O6]VT
X|TWXh""
XVT"Z"a&
VhXT"T|R9
]T|R]6hTSW
XX|RW6
W6WXXT
X]XWVW
XVhXX6R
RW6XX6WXVh
3LVXR6
X6bXR\SXhX
hW|V]RTb
6S]XXR
W$yuWj
j+<kXTbX
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
|Pb<"X
RXVXX\
SXW"RV|
]6WW6hh
TeU|bX
__{>XXR
VhXT"T|RSO
]T|R]6hTSW\
XX|RW6
W6WXXT
kJ'WoJ
X]XWVWx
A]|X"X
XVhXX6R4
RW6XX6WXVh
X6bXR\SXhXE
b+:8/y]
hW|V]RTb
6S]XXR
SWXhTZ
'iXTbX
|X]\WX
bX]"#R
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\V
FSXW"RV|
]6WW6hh
XVT~,r
VhXT"T|RP
]T|R]6hTSWG
]0XX|RW6
W6WXXT
X]XWVW
L]|X"X
XVhXX6R*mE
f":VuRW6XX6WXVh
nvVXR6
X6bXR\SXhX
hW|V]RTb
6S]XXR
|X]\WX
VbcmVVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
5([4"X
RXVXX\
SXW"RV|
]6WW6hh
X|TWXB
VhXT"T|Rp
]T|R]6hTSW
XX|RW6
W6WXXT
X]XWVW
XVhXX6R7
RW6XX6WXVh
[#QVXR6
X6bXR\SXhX
hW|V]RTb
6S]XXR
YWc^:nbX|
plXTbX
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hhL
X|TWX"
VhXT"T|R
]T|R]6hTSW
<XX|RW6
W6WXXT
X]XWVW
XVhXX6R
QRW6XX6WXVh
X6bXR\SXhX~t
hW|V]RTb
6S]XXR
|X]\WX
~VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hh
6TRB]&
VhXT"T|R
]T|R]6hTSW
],XX|RW6
W6WXXTw
X]XWVW
ba)9L]
3i]|X"X
XVhXX6R
~RW6XX6WXVh
ThW)vp
X6bXR\SXhXB
[hW|V]RTb
6S]XXR
~|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hh
VhXT"T|R
]T|R]6hTSW
MXX|RW6
W6WXXT
X]XWVW
XVhXX6R
RW6XX6WXVh
X6bXR\SXhX_m
hW|V]RTb
6S]XXR
|X]\WX
UVVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
CXS6W6
RXVXX\\
SXW"RV|
]6WW6hh
VhXT"T|R
]T|R]6hTSWL
4XX|RW6
W6WXXT
X]XWVW
XVhXX6R
RW6XX6WXVh
X6bXR\SXhX
`=hW|V]RTb
6S]XXR
|X]\WX
jVVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\W+
zBISXW"RV|
]6WW6hh
X|TWX.
VhXT"T|R
]T|R]6hTSW
MXX|RW6
W6WXXTI
X]XWVW
RqXDAHCM
XVhXX6R'
RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
Z=SXW"RV|
]6WW6hh
X|TWX3
VhXT"T|R
]T|R]6hTSW
YXX|RW6
W6WXXTc
X]XWVW]E
r$]|X"X
XVhXX6Re
RW6XX6WXVh
d]aVXR6
X6bXR\SXhX
hW|V]RTb
6S]XXR
bR4]<6K
|X]\WX
bX]"1#
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\mD
SXW"RV|
]6WW6hh
X|TWX=I
r$[|bX
VhXT"T|R
]T|R]6hTSW
QDmgXX|RW6
W6WXXT
X]XWVW
XVhXX6R
RW6XX6WXVh
\L|jSIVXR6
X6bXR\SXhX8z
hW|V]RTb
6S]XXR
|X]\WX
oVVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
\HB(=.JZ]$
+XS6W6
RXVXX\F
SXW"RV|
]6WW6hh
VhXT"T|R
]T|R]6hTSW1yx
XX|RW6
W6WXXT\x>
X]XWVWlYh
Te]|X"X
XVhXX6R2
RW6XX6WXVh
X6bXR\SXhX
]7hW|V]RTb
6S]XXR
`|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\GgkG4ZCi
SXW"RV|
]6WW6hh!
X|TWX$
VhXT"T|R
]T|R]6hTSWn(
~XX|RW6
W6WXXT
X]XWVW
XVhXX6R
RW6XX6WXVh
X6bXR\SXhX
'hW|V]RTb
6S]XXR
Q|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hh
VhXT"T|R
]T|R]6hTSWr
XX|RW6
W6WXXT
X]XWVWV
XVhXX6R
1RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hh
VhXT"T|RSN/d
]T|R]6hTSW
3XX|RW6
W6WXXT4
X]XWVW
mt7r|Y]|X"X
XVhXX6R
RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
SWXh!e(
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
nSXW"RV|
]6WW6hh
X|TWXB
VhXT"T|R
]T|R]6hTSWlR+
NXX|RW6
W6WXXTEE
.]]w$p
X]XWVW8
XVhXX6R
OLRW6XX6WXVh
X6bXR\SXhX
^I3hW|V]RTb
6S]XXR
)~|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hh
VhXT"T|R\G
]T|R]6hTSW
XX|RW6
W6WXXT
X]XWVW
9]|X"X
XVhXX6R
RW6XX6WXVh
X6bXR\SXhX9<Y
hW|V]RTb
6S]XXR
SWXh6E
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
ZXS6W6
RXVXX\>x
BSXW"RV|
]6WW6hh
X|TWX1
XVT?AE
VhXT"T|R
]T|R]6hTSWYB[4'
sXX|RW6
W6WXXT
X]XWVWW
XVhXX6R
fRW6XX6WXVh
X6bXR\SXhX`
hW|V]RTb
UV=6X|
6S]XXR
SWXhJ]
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
r4SXW"RV|
]6WW6hh
X|TWX|<6
VhXT"T|R
]T|R]6hTSW.
XX|RW6
W6WXXT
X]XWVW
]N]|X"X
XVhXX6R
RW6XX6WXVh
KcHj$O
X6bXR\SXhX
hW|V]RTb
6S]XXR
|X]\WX
fVVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\l
,zSXW"RV|
]6WW6hh)m
X|TWX,
VhXT"T|R
]T|R]6hTSW%
XX|RW6
W6WXXT
X]XWVW
XVhXX6R
RW6XX6WXVh
U&]|.h
X6bXR\SXhX
ahW|V]RTb
6S]XXR
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hh}
$`:6]VT
xM@XyRQT
VhXT"T|R
]T|R]6hTSW
XX|RW6
W6WXXT<
X]XWVW]>
XVhXX6R
RW6XX6WXVh
X6bXR\SXhX^
hW|V]RTb
6S]XXR
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
gXS6W6
RXVXX\!,
SXW"RV|
]6WW6hh?%
A@_wXQ|bX
VhXT"T|RQ
]T|R]6hTSW
XX|RW6
W6WXXT"$s
X]XWVW
XVhXX6Rp
NRW6XX6WXVh
X6bXR\SXhX
w(bO0hW|V]RTb
6S]XXR
SWXhyBq
XEXTbX
|X]\WX
vVVVTWVTX
796RXX
T6TT|R
66"RX6
]h\RXhXWX
jXS6W6
RXVXX\]
SXW"RV|
]6WW6hh
VhXT"T|RU
]T|R]6hTSW]
E XX|RW6
W6WXXT
X]XWVW
^]|X"X
XVhXX6R
RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\`
SXW"RV|
]6WW6hh
VhXT"T|R
]T|R]6hTSW
XX|RW6
W6WXXT
X]XWVW<f
XVhXX6R
QRW6XX6WXVh
X6bXR\SXhXh
,hW|V]RTb
6S]XXR
d8|X]\WX
bX]"bS
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
OSXW"RV|
]6WW6hh
S_o6]VT
VhXT"T|RT]Z|
]T|R]6hTSW^P
XX|RW6
W6WXXTkW
X]XWVW
XVhXX6R
RW6XX6WXVh
X6bXR\SXhXT>
hW|V]RTb
6S]XXR
*|X]\WX
vNVVVTWVTX
6XW_2*
T6TT|R
66"RX6
]h\RXhXWX
8RaXS6W6
RXVXX\Rzm
SXW"RV|
]6WW6hhn
X|TWXe
VhXT"T|R
]T|R]6hTSW
.XX|RW6
W6WXXTGI
X]XWVW
l]|X"X
XVhXX6R
RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
]oOy?bX|
<KYNC`?
9LW*|X]\WX
VVVTWVTX
6XW-i{;
5`6RXX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\_\^]
SXW"RV|
]6WW6hh
L{yqr/
VhXT"T|R,`
]T|R]6hTSW
XX|RW6
W6WXXT^
X]XWVW\SG
7]|X"X
XVhXX6R
{RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
|X]\WX
bX]"UST(y!U
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\]GGX
]ySXW"RV|
]6WW6hh
Wp6]VT
X|TWX@
VhXT"T|R
]T|R]6hTSW!
,XX|RW6
W6WXXT
X]XWVW
XVhXX6R
RW6XX6WXVh
X6bXR\SXhX
^.iqr\
hW|V]RTb
6S]XXR
SWXhaGm_
Z^G]9:,
,(c|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
fSXW"RV|
]6WW6hh
X|TWX_
}lvAu|bX
VhXT"T|R?
]T|R]6hTSWQr'\pJ
XX|RW6
W6WXXT
X]XWVWa#
!U[]|X"X
XVhXX6RdK
RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
|X]\WX
bX]"}2
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\S7O
)SXW"RV|
]6WW6hh\)p
6T8GVH]5XXR
VhXT"T|R
]T|R]6hTSW
XX|RW6
W6WXXT*
X]XWVW
%D~7]|X"X
XVhXX6R
RW6XX6WXVh
CBVXR6
X6bXR\SXhX
]]lPhW|V]RTb
+b^6X|
6S]XXR
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
$n4_An
]h\RXhXWX
RXVXX\
zSXW"RV|
]6WW6hhn
]d4V@|bX
VhXT"T|R
]T|R]6hTSWS
XX|RW6
W6WXXT
X]XWVW
5]|X"X
XVhXX6RC.W=
RW6XX6WXVh
X6bXR\SXhX"
hW|V]RTb
6S]XXR
{{|X]\WX
+&VVVTWVTX
o$`6RXX
T6TT|R
"*]yV]
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hh
X|TWX]
|Be_d|bX
6TOOg)
VhXT"T|Rs
]T|R]6hTSW
XX|RW6
W6WXXT
X]XWVWP
a]|X"X
XVhXX6R
RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
SWXhdl
C=?|X]\WX
fVVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
=XS6W6
RXVXX\j
SXW"RV|
]6WW6hh
X|TWXQV
VhXT"T|R
]T|R]6hTSW
XX|RW6
W6WXXT
X]XWVW#UT
XVhXX6R
RW6XX6WXVh
X6bXR\SXhXd
hW|V]RTb
6S]XXR
|X]\WX
bX]"~^
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hh\
VhXT"T|RKI
]T|R]6hTSWU
NXX|RW6
W6WXXTJa
X]XWVW+8
[]|X"X
XVhXX6R
%RW6XX6WXVh
X6bXR\SXhXW"
B]EhW|V]RTb
6S]XXR
P|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\;
2SXW"RV|
]6WW6hh
%F6]VT
VhXT"T|R
]T|R]6hTSW;
]8boXX|RW6
W6WXXT
X]XWVW'
Y]|X"X
XVhXX6RBxe
QRW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
yyXTbX
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
,Acg9fl
#V0="X
RXVXX\
lJk]\cCSXW"RV|
]6WW6hh
XVTTuFs
VhXT"T|R_
]T|R]6hTSW
XX|RW6
W6WXXT
X]XWVW
QD]|X"X
XVhXX6R
RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
SWXh]
|X]\WX
VVVTWVTX
$%6RXX
T6TT|R
66"RX6
]h\RXhXWX
CXS6W6
RXVXX\A
R#SXW"RV|
]6WW6hh8
XbBkHeQ
VhXT"T|R
]T|R]6hTSW
XX|RW6
W6WXXT
X]XWVW=
XVhXX6RgZJ
\{~RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
|X]\WX
9VVVTWVTX
6p6RXX
T6TT|R
66"RX6
]h\RXhXWX
^_Q"\W
O2iOXo]i
b3zw"B
K]*^5wP
Kyc>\>
X2S_"Q
a,"G@9
Bv_Xij
(i*=A,
b&~$ID4'y
gocI0JbHF
{tFuP&
YCb^Qv
^|F1[6O
%]U\s]
vV](Pb?\^]
b`\Ai{A;
#JYM_O"
7SV9NP
;8xY>\
-X[%@Gk=^"i
]nbb1]
#B}fV]
A<B"=7
e(V1B!
)OPU*
]as/]X
~)O}m|V
L@Zd*
zMRGu)
.TN 1&
W>%]}~
wb2GE%$
]GL`d2b0G
$CxX\TB
Kw)HUn
YC>]T94>m
X6bXR\SXhX
hW|V]RTb
6S]XXR
S}XTbX
vN"HxD
|X]\WX
6eVVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
9XS6W6
RXVXX\
8SXW"RV|
]6WW6hh
VhXT"T|R
]T|R]6hTSW
EogXX|RW6
W6WXXT
X]XWVW
XVhXX6R
RW6XX6WXVh
X6bXR\SXhXO
fhW|V]RTb
6S]XXR
=|X]\WX
VVVTWVTX
6XW:DS
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
!SXW"RV|
]6WW6hh
]n<6]VT
VhXT"T|R:
]T|R]6hTSW1
XX|RW6
W6WXXT,
X]XWVW
R']|X"X
XVhXX6RO
RW6XX6WXVh
X6bXR\SXhX\
hW|V]RTb
6S]XXR
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hh
X|TWX]v4
h"XOO}
VhXT"T|R2
]T|R]6hTSW
XX|RW6
W6WXXT]
X]XWVWeEw+|
bO]|X"X
XVhXX6R{
RW6XX6WXVh
X6bXR\SXhX
!$W%T6
hW|V]RTb
6S]XXR
SWXh,]]
\n|X]\WX
bX]" ~_+
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\BB
SXW"RV|
]6WW6hhg
VhXT"T|R*\
]T|R]6hTSWDh
XX|RW6
W6WXXT]
X]XWVWT]
-]|X"X
XVhXX6R;d
"={RW6XX6WXVh
ThW]K]
X6bXR\SXhX
$hW|V]RTb
6S]XXR
F"OTYWV
_b]:|X]\WX
2tVVVTWVTX
|lSf6RXX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hhi
X|TWXc
VhXT"T|RSbI
]T|R]6hTSW
{nXX|RW6
W6WXXT\
X]XWVW
']|X"X
XVhXX6R/7kz
RW6XX6WXVh
X6bXR\SXhX
7hW|V]RTb
6S]XXR
VV@UT]z
|X]\WX
VVVTWVTX
nb\mu6RXX
T6TT|R
66"RX6
]h\RXhXWX
S@XS6W6
RXVXX\
SXW"RV|
]6WW6hh
X|TWXSC
VhXT"T|R
]T|R]6hTSWg
XX|RW6
W6WXXT
X]XWVW
XVhXX6R
*v!RW6XX6WXVh
X6bXR\SXhX
]X_{R1
EhW|V]RTb
6S]XXR
SWXh\(A
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\w
OSXW"RV|
]6WW6hhX^
VhXT"T|R
]T|R]6hTSW
XX|RW6
W6WXXTGib
X]XWVWX
XVhXX6R
*RW6XX6WXVh
X6bXR\SXhX
Qwwj$T6
hW|V]RTb
6S]XXR
|X]\WX
VVVTWVTX
^_6RXX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\5
"cO"^SXW"RV|
]6WW6hheoESn<
X|TWX:P
XVTrpi];
VhXT"T|R
]T|R]6hTSW
xFw,XX|RW6
W6WXXT;
X]XWVW"
L]|X"X
XVhXX6R)
zRW6XX6WXVh
X6bXR\SXhX
]$*hW|V]RTb
6S]XXR
SWXhxA
8|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hh
$Mq|bX
VhXT"T|RS
]T|R]6hTSW]
M:XX|RW6
W6WXXT2
X]XWVW
XVhXX6R[y
RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hh
X|TWXh_
VhXT"T|R=
]T|R]6hTSWr
XX|RW6
W6WXXT
X]XWVW
ki]|X"X
XVhXX6Rz
E_R[RW6XX6WXVh
X6bXR\SXhXp
hW|V]RTb
6S]XXR
RV.zQD
|X]\WX
5VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
EXS6W6
RXVXX\Q
SXW"RV|
]6WW6hh
X|TWXtCO
VhXT"T|RV
]T|R]6hTSW"
XX|RW6
W6WXXT
X]XWVWZ
XVhXX6R
RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
\|zbX|
Jh+XTbX
v|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
1XS6W6
RXVXX\n
SXW"RV|
]6WW6hh}
X|TWX"1
VhXT"T|RU1
]T|R]6hTSW
XX|RW6
W6WXXT
X]XWVWS
XVhXX6Rk=
RW6XX6WXVh
4zVXR6
X6bXR\SXhX
c"OhW|V]RTb
6S]XXR
2|X]\WX
CVVVTWVTX
bu6RXX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\S|
SXW"RV|
]6WW6hh
+}<6]VT
VhXT"T|RTQ
]T|R]6hTSWr
XX|RW6
W6WXXT/$
X]XWVWE
E]|X"X
XVhXX6R
RW6XX6WXVh
X6bXR\SXhX(
m<hW|V]RTb
(xNS:p
6S]XXR
Tl|X]\WX
uVVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hh
6"f6]VT
X|TWX?,<
VhXT"T|R
Sa/Tf5J
]T|R]6hTSW
XX|RW6
W6WXXTW]
X]XWVW
Li]|X"X
XVhXX6R
NN\GRW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
|Jl6X|
6S]XXR
nC04bX|
|X]\WX
VVVTWVTX
S]o6RXX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
sDZSXW"RV|
]6WW6hh
VhXT"T|R
]T|R]6hTSW)b
XX|RW6
W6WXXT_
X]XWVW
-]|X"X
XVhXX6Rw@\0X
RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
SWXh0&]j
@v9XTbX
c|X]\WX
VVVTWVTX
y`6RXX
T6TT|R
66"RX6
]h\RXhXWX
WDXS6W6
RXVXX\
ISXW"RV|
]6WW6hh^
X|TWX]
S=yXXR
VhXT"T|R
]T|R]6hTSW
XX|RW6
W6WXXT
X]XWVWj
O]|X"X
XVhXX6Rv"
RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
SdXS6W6
RXVXX\X
"~SXW"RV|
]6WW6hh
QbA#S?6]VT
VhXT"T|R
]T|R]6hTSW9
ujXX|RW6
W6WXXTS
X]XWVW
XVhXX6R
RW6XX6WXVh
X6bXR\SXhX
V`hW|V]RTb
6S]XXR
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
R47T\G'
RXVXX\
kBSXW"RV|
]6WW6hhI\h|
%&F6]VT
VhXT"T|R
]T|R]6hTSW]
XX|RW6
W6WXXT=O
X]XWVWv
XVhXX6RY0Sb
WbQRW6XX6WXVh
X6bXR\SXhX'(1
hW|V]RTb
6S]XXR
]\O|IS
K"SSQ|X]\WX
mVVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
#]lXS6W6
RXVXX\
SXW"RV|
]6WW6hh
X|TWXq
"ZGb0T
VhXT"T|R
]T|R]6hTSW
XX|RW6
W6WXXTm
X]XWVW](BS
XVhXX6R6
FgRW6XX6WXVh
X6bXR\SXhX&;
XX2hW|V]RTb
6S]XXR
cTbZWV
|X]\WX
`UVVVTWVTX
6XW8$H
T6TT|R
66"RX6
]h\RXhXWX
KXS6W6
RXVXX\
SXW"RV|
]6WW6hh(SjQ
St(RNT
B!+b^V
H)ha{1S~
VhXT"T|R]
]T|R]6hTSW
~<XX|RW6
W6WXXT
X]XWVW
XVhXX6R
?+RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
CC|X]\WX
fdVVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
\\OzXS6W6
RXVXX\d
SXW"RV|
]6WW6hh
X|TWXU
VhXT"T|R$@
]T|R]6hTSWbt
XX|RW6
W6WXXT=@J
X]XWVW
XVhXX6RS
^*RW6XX6WXVh
X6bXR\SXhX\S
YhW|V]RTb
6S]XXR
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hh`
VhXT"T|R
]T|R]6hTSW|
XX|RW6
W6WXXTL
X]XWVWT8]b
XVhXX6R"
RW6XX6WXVh
X6bXR\SXhXy&
hW|V]RTb
6S]XXR
|X]\WX
bX]"C!
VVVTWVTX
8S;6RXX
T6TT|R
66"RX6
]h\RXhXWX
q$FXS6W6
RXVXX\
SXW"RV|
]6WW6hh"M@
VhXT"T|R
]T|R]6hTSW
XX|RW6
W6WXXTi
X]XWVW
k]|X"X
XVhXX6R"x!
RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
SWXh-^bDY
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hh
X|TWXKV
VhXT"T|Rb
]T|R]6hTSWPi
XX|RW6
W6WXXT#s
X]XWVW
S[]|X"X
XVhXX6RNph
RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
|;(}6X|
6S]XXR
5|X]\WX
7VVVTWVTX
T6TT|R
!]bVxV]
66"RX6
]h\RXhXWX
RJXS6W6
RXVXX\$n$Za
SXW"RV|
]6WW6hh
X|TWX%%X-
VhXT"T|R\5
]T|R]6hTSWm
-WbVyXX|RW6
W6WXXTb
!]f{nu
X]XWVW
XVhXX6R|
RW6XX6WXVh
ve{VXR6
X6bXR\SXhX
hW|V]RTb
Ba""A-
lSm6X|
6S]XXR
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
SXW"RV|
]6WW6hh
X|TWX*
pTt|bX
VKvf\oT
VhXT"T|R]C7"c
]T|R]6hTSWP|
'XX|RW6
W6WXXT
X]XWVW-
XVhXX6R;g
RW6XX6WXVh
X6bXR\SXhXQ
hW|V]RTb
AS#WyEA
6S]XXR
:R/bX|
SWXh]'H
|X]\WX
VVVTWVTX
T6TT|R
zU"qV]
66"RX6
]h\RXhXWX
[,fXS6W6
RXVXX\SQ
SXW"RV|
]6WW6hh>
xf6]VT
VhXT"T|R
]T|R]6hTSW
]OXX|RW6
W6WXXT$
X]XWVW"C
RP]|X"X
XVhXX6R
$RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
$ItNXS6W6
RXVXX\
{SXW"RV|
]6WW6hh
W6]VT
X|TWX_:1
VhXT"T|RM{
]T|R]6hTSW
XX|RW6
W6WXXTcYg
X]XWVW5
XVhXX6R
RW6XX6WXVh
X6bXR\SXhX
L2hW|V]RTb
6S]XXR
SWXh4E{
`@mxXTbX
|X]\WX
N4VVVTWVTX
6XWUa/
T6TT|R
66"RX6
]h\RXhXWX
?[^b8rXS6W6
RXVXX\
SXW"RV|
]6WW6hh
XVTG]]
VhXT"T|R
]T|R]6hTSW
XX|RW6
W6WXXT
X]XWVW
XVhXX6RO\2
A].9RW6XX6WXVh
ThW].B
X6bXR\SXhXEV\
QU\FT6
hW|V]RTb
6S]XXR
|X]\WX
lVVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
PXS6W6
RXVXX\
~SXW"RV|
]6WW6hh
VhXT"T|R
]T|R]6hTSW0
XX|RW6
W6WXXT
X]XWVW
b4]|X"X
XVhXX6R
.HRW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
0qWjSXW"RV|
]6WW6hh
f56]VT
X|TWX2ra
VhXT"T|R
]T|R]6hTSW7
:XX|RW6
W6WXXT
X]XWVW;
n]}]|X"X
XVhXX6R
RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
|X]\WX
]QVVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
/SXW"RV|
]6WW6hhz
VhXT"T|R
]T|R]6hTSW
XX|RW6
W6WXXT<
X]XWVWZ>E
fY]|X"X
XVhXX6R{
RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
eA[6xXS6W6
RXVXX\r
ySXW"RV|
]6WW6hh
VhXT"T|R
]T|R]6hTSW
7XX|RW6
W6WXXT
X]XWVWG#w
XVhXX6R
RW6XX6WXVh
X6bXR\SXhXE
hW|V]RTb
6S]XXR
SWXh.Hw(
gci|X]\WX
LVVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\f
SXW"RV|
]6WW6hh
VhXT"T|R
]T|R]6hTSWY
[XX|RW6
W6WXXTe
X]XWVWY
~]|X"X
XVhXX6R
RW6XX6WXVh
X6bXR\SXhXn3
hW|V]RTb
6S]XXR
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
Rbh-Fp"X
RXVXX\
BBSXW"RV|
]6WW6hhZYb"r
S-6]VT
VhXT"T|Rx0
]T|R]6hTSW
#XX|RW6
W6WXXT
X]XWVWFN
XVhXX6R
RW6XX6WXVh
X6bXR\SXhXm
]XY6OD
jhW|V]RTb
6S]XXR
|X]\WX
VVVTWVTX
a@6RXX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\[
SXW"RV|
]6WW6hh.TGj
Xbs{+
VhXT"T|R
]T|R]6hTSW
XX|RW6
W6WXXT
X]XWVW
]|X"X
~o:)I=
XVhXX6R
RW6XX6WXVh
X6bXR\SXhX\
hW|V]RTb
6S]XXR
|X]\WX
^VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
";rXS6W6
RXVXX\
SXW"RV|
]6WW6hh
VhXT"T|R
]T|R]6hTSW7*
XX|RW6
W6WXXT
X]XWVW5
XVhXX6R
lRW6XX6WXVh
q&?#,D
X6bXR\SXhX
hW|V]RTb
;/qn:
6S]XXR
SWXh]ZA#
|X]\WX
VVVTWVTX
6XW]T)t
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\f
SXW"RV|
]6WW6hh
VhXT"T|R(
]T|R]6hTSW$
XX|RW6
W6WXXT
X]XWVW5
XVhXX6RL
RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
|X]\WX
jVVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
uXS6W6
RXVXX\t
_CtSXW"RV|
]6WW6hh
VhXT"T|Rb
]T|R]6hTSWb
XX|RW6
W6WXXT
X]XWVW
XVhXX6R
gRW6XX6WXVh
X6bXR\SXhX
sH1>XChW|V]RTb
6S]XXR
:\(][MmvK@bX|
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
O6E!"X
oXS6W6
RXVXX\Cs
SXW"RV|
]6WW6hh
X|TWXY|
vMfXXR
XVTHmk
VhXT"T|R
]T|R]6hTSWIeQ
XX|RW6
W6WXXT^&A
X]XWVWhFJ
g]|X"X
XVhXX6R))]
RW6XX6WXVh
X6bXR\SXhX
hW|V]RTb
6S]XXR
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\
/SXW"RV|
]6WW6hhB
VhXT"T|R
]T|R]6hTSW
iXX|RW6
W6WXXT
X]XWVW
XVhXX6R
RW6XX6WXVh
ThWagP1
X6bXR\SXhX#
hW|V]RTb
6S]XXR
Ez|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
kXS6W6
RXVXX\
]:SXW"RV|
]6WW6hhP
VhXT"T|Rr
]T|R]6hTSW
XX|RW6
W6WXXT
X]XWVWL_
XVhXX6R
RW6XX6WXVh
OVXR6
X6bXR\SXhXUL
hW|V]RTb
6S]XXR
SXN*b]wbX|
RV|qQC
>|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
xx8XS6W6
RXVXX\4
kSXW"RV|
]6WW6hh
zt6]VT
VhXT"T|R
]T|R]6hTSW
XX|RW6
W6WXXT
X]XWVWx
XVhXX6R
RW6XX6WXVh
X6bXR\SXhXov
0hW|V]RTb
6S]XXR
|X]\WX
lVVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
RXVXX\H
SXW"RV|
]6WW6hh.
$"`XXR
VhXT"T|R
]T|R]6hTSW7xv
XX|RW6
W6WXXTV
X]XWVW
C-]|X"X
XVhXX6R+>
RW6XX6WXVh
X6bXR\SXhX
]X]ede
*hW|V]RTb
6S]XXR
SWXhN}>
|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
/XS6W6
RXVXX\
|!nSXW"RV|
]6WW6hh
VhXT"T|R
]T|R]6hTSW
CXX|RW6
W6WXXT+TJ~
X]XWVWe|
I]|X"X
XVhXX6R
RW6XX6WXVh
ThW>le
X6bXR\SXhX
hW|V]RTb
6S]XXR
n|X]\WX
VVVTWVTX
T6TT|R
66"RX6
]h\RXhXWX
5,HXS6W6
RXVXX\
SXW"RV|
]6WW6hh
VhXT"T|Rb
Antivirus Signature
Bkav W32.AIDetect.malware1
Lionic Trojan.Win32.Mansabo.trFy
Elastic malicious (high confidence)
Cynet Malicious (score: 100)
CMC Clean
CAT-QuickHeal Clean
ALYac Trojan.Trickster.Gen
Malwarebytes Spyware.TrickBot
VIPRE Trojan.Win32.Generic!BT
Sangfor Trojan.Win32.Save.a
K7AntiVirus Riskware ( 0040eff71 )
BitDefender Gen:Variant.Trojan.TrickBot.1
K7GW Riskware ( 0040eff71 )
CrowdStrike win/malicious_confidence_100% (D)
Baidu Clean
Cyren Clean
ESET-NOD32 a variant of Win32/Kryptik.FYCJ
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky Trojan.Win32.Mansabo.rd
Alibaba Trojan:Win32/Mansabo.cc48983d
NANO-Antivirus Trojan.Win32.Mansabo.iaoyyg
SUPERAntiSpyware Clean
MicroWorld-eScan Gen:Variant.Trojan.TrickBot.1
Tencent Win32.Trojan.Mansabo.Pciz
Ad-Aware Gen:Variant.Trojan.TrickBot.1
Sophos Mal/Generic-R + Troj/Trikbot-W
Comodo Malware@#wgnmfhr65pvr
F-Secure Heuristic.HEUR/AGEN.1118472
DrWeb Trojan.Trick.45135
Zillya Trojan.Mansabo.Win32.129
TrendMicro TSPY_GOLROTED.IWG
McAfee-GW-Edition GenericRXCZ-QA!4849AB316B3D
FireEye Generic.mg.4849ab316b3dcde6
Emsisoft Gen:Variant.Trojan.TrickBot.1 (B)
SentinelOne Static AI - Malicious PE
GData Gen:Variant.Trojan.TrickBot.1
Jiangmin Trojan.Mansabo.bi
Webroot W32.Trojan.Gen
Avira HEUR/AGEN.1118472
MAX malware (ai score=100)
Antiy-AVL Trojan/Generic.ASMalwS.223D4CE
Kingsoft Win32.Troj.Undef.(kcloud)
Gridinsoft Trojan.Win32.Skeeyah.cc!s1
Arcabit Trojan.Trojan.TrickBot.1
ViRobot Trojan.Win32.U.Agent.512000.J
ZoneAlarm Trojan.Win32.Mansabo.rd
Microsoft Trojan:Win32/Trickbot.A!MTB
AhnLab-V3 Trojan/Win32.Injector.C2181257
Acronis Clean
McAfee GenericRXCZ-QA!4849AB316B3D
TACHYON Trojan/W32.Mansabo.512000
VBA32 BScope.Trojan.Mansabo
Cylance Unsafe
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall TSPY_GOLROTED.IWG
Rising Trojan.Generic@ML.100 (RDML:8gDeLmCy13QY0g5lKAkzAA)
Yandex Trojan.GenAsa!0CEqU9iCyHA
Ikarus Trojan-Banker.TrickBot
eGambit Generic.Malware
Fortinet W32/GenKryptik.BCDU!tr
BitDefenderTheta Gen:NN.ZexaF.34126.FqW@aiPr4pmG
AVG Win32:Malware-gen
Avast Win32:Malware-gen
MaxSecure Trojan.Malware.300983.susgen
No IRMA results available.