Static | ZeroBOX

PE Compile Time

2023-04-26 02:43:09

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0001a9e4 0x0001aa00 5.73310501107
.rsrc 0x0001e000 0x0002bc3e 0x0002be00 7.17396578769
.reloc 0x0004a000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000370e0 0x0001242a LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000370e0 0x0001242a LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000370e0 0x0001242a LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000370e0 0x0001242a LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000370e0 0x0001242a LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000370e0 0x0001242a LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x000370e0 0x0001242a LANG_NEUTRAL SUBLANG_NEUTRAL PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_GROUP_ICON 0x0004950c 0x00000068 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00049574 0x000004f4 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00049a68 0x000001d6 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, ASCII text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
"ochhco"
$nXttXn$
*x``x*
pYG''GYp
pYGCCGYp
&ztwwtz&
?#g%%g#?
?#g@@g#?
q'gg'q
vrNYYNrv
vrN**Nrv
ciUnnUic
tiRllRit
4[7VV7[4
4[7337[4
qOeyyeOq
W- NN -W
W- << -W
w4<aa<4w
bu~xx~ub
6d60 cd60a
&qKz |qKza
6d60
&qKz
G9ui
1Y\W wY\Wa
j:_ ,j:_a
k6Mb S6Mba
q2y- ,2y-a
Z7k BZ7ka
R)9U
?_b !?_ba
1dOW cdOWa
WyK {WyKa
Sv?A vv?Aa
g>p~ +>p~a
tb]N /b]Na
>2w +>2wa
:Wq o:Wqa
M+S3
.W# p.W#a
Q!_* h!_*a
D3iH
wr?] r?]a
rWZ^ /WZ^a
7C6V aC6Va
KzEr >zEra
DsRJ >sRJa
c23w
|PQ%
3$wY
yVD. 0VD.a
`' ?`'a
r4o2 >4o2a
BH*w yH*wa
j/.o :/.oa
MPeg 5Pega
Qcoa 1coaa
Qqd +Qqda
X}\
6$Z M6$Za
!0N) B0N)a
iHf _iHfa
9"qM g"qMa
,y G,y a
)H. )H.a
=drj cdrja
+2j G+2ja
5)JZ P)JZa
_1SO
9ABX
ixm Kixma
tZv WtZva
Z3nd }3nda
(gbD
u7L0 ;7L0a
Kw:T |w:Ta
j^"G U^"Ga
)>0Y
oN'e ;N'ea
RM% ZRM%a
&RK G&RKa
`PV J`PVa
>;FT H;FTa
fa*}
mvy3
eHAL
e0|5 W0|5a
%bd6 }bd6a
'%9- E%9-a
t1* [t1*a
;m+x nm+xa
ZzZ! 0zZ!a
9"|W d"|Wa
Zq](
l9$D L9$Da
pnUh &nUha
|Ls6 *Ls6a
27VT w7VTa
(Xh+ @Xh+a
,[:Y
w=~ yw=~a
vQJ?
&Nzk dNzka
fcK KfcKa
')zY v)zYa
q8< Yq8<a
_HwH 6HwHa
gmF8 ZmF8a
:f#a Kf#aa
|HVW GHVWa
#`h4 ~`h4a
_et %_eta
?0,< l0,<a
Jq- <Jq-a
M{;Z v{;Za
CI6` dI6`a
B\I ;B\Ia
QIV@ yIV@a
}SD?
y_\J :_\Ja
71+9 v1+9a
7Xl* aXl*a
16w G16wa
c@L 6c@La
7jE
`++ i`++a
tFtr CFtra
Pbqh pbqha
$pd} ppd}a
^F)4 dF)4a
^F$* 8F$*a
*E,` ]E,`a
bXua
^JI 8JIa
'1_} N1_}a
H.TI o.TIa
`YZ,
=26 "=26a
0!UW ~!UWa
]$R/
DX)P
=k1[ Sk1[a
_^i g_^ia
p:, Kp:,a
rsZi VsZia
Vj40 :j40a
K7c ~K7ca
J9M _J9Ma
x72
>:0e
5?s$ @?s$a
VG{+ gG{+a
<WL+
O}`n
=X< H=X<a
dsbO >sbOa
}lqb 6lqba
w:n( R:n(a
fU' QfU'a
RWlA zWlAa
<:l x:l a
jf/F Lf/Fa
Q=l~ b=l~a
ncwF ;cwFa
Q|1B w|1Ba
Lt/A
$ZJM `ZJMa
;O9m ZO9ma
a9<L
`"C
d{r 9d{ra
Dv9 cDv9a
%%*f h%*fa
k4E> O4E>a
-XpO ~XpOa
AX, .AX,a
kAQJ GAQJa
n5YU E5YUa
blSj _lSja
S]\) }]\)a
4|?( D|?(a
PJ3* 5J3*a
C.#|
ZERi uERia
j<9l
{<*V
#333333
*@ME F@MEa
*@ME {@MEa
`NOF
|(Wl D(Wla
#zX% dzX%a
%b4 Z%b4a
pbv #pbva
gL,p 5L,pa
emr 1emra
#MYJ [MYJa
*@ME P@MEa
`NOF &NOFa
*@ME s@MEa
*@ME _@MEa
`NOF
|(Wl
#zX%
*@ME D@MEa
`NOF #NOFa
|(Wl
#zX% QzX%a
v4.0.30319
#Strings
List`1
kKogU2yhW71qFUQgZ/epaqlGg64
<Module>
4c6z9A
92sUSG
System.IO
setChannelInfoISO
zmBxpS
kTasWW
LFj1FY
System.Media
mscorlib
System.Collections.Generic
lpEnumFunc
GetCurrentProcessId
Thread
add_Load
get_Red
get_DarkRed
getAppDomainInitializerArgumentsUnicodeEncoded
get_IsAttached
get_Checked
set_Checked
GetItemChecked
SetItemChecked
set_Enabled
set_FormattingEnabled
get_HasExited
POLICYCREATESECRETAccountKrbtgtSid
ReadAttributesEnd
Append
get_Second
method
Replace
getViewAccessControlorderedSource
get_ExitCode
set_AutoScaleMode
GetOrCreateValueSoapLanguage
get_DarkOrange
EndInvoke
BeginInvoke
IDisposable
get_Handle
CloseHandle
ProcessHandle
Rectangle
zairianLucile
FontStyle
set_WindowStyle
ProcessWindowStyle
set_Name
set_FileName
GetClassName
DateTime
DrawLine
ValueType
Compare
ButtonBase
Dispose
FillEllipse
DrawEllipse
MulticastDelegate
CheckState
NullableComparerGetUserStoreForSite
get_White
STAThreadAttribute
UnverifiableCodeAttribute
DebuggableAttribute
get_Minute
get_Value
get_NewValue
set_Size
set_AutoSize
set_ClientSize
K3ht8f
IndexOf
System.Threading
setProviderNamegetSelfAffectingThreading
Padding
PlayLooping
ToString
lpOutputString
disposing
System.Drawing
beanoDervish
get_Length
ProcessInformationLength
ReturnLength
Pd5DIi
AsyncCallback
callback
get_Black
add_ItemCheck
add_Tick
add_Click
set_CheckOnClick
set_Interval
System.ComponentModel
kernel32.dll
user32.dll
ContainerControl
ListControl
getMonitoringSurvivedMemorySizeDependentOSMetadataSupportUrl
oothecaFlawful
lParam
System
Voguishexclaim
jelliesZairian
set_TextAlign
set_Margin
Application
get_Location
set_Location
ProcessInformation
System.Reflection
ControlCollection
CheckedItemCollection
ObjectCollection
Exception
Button
set_ShowUpDown
ProcessStartInfo
StringBuilder
Debugger
DateTimePicker
ItemCheckEventHandler
IContainer
NodeKeyValueCollectionEnter
SoundPlayer
set_Anchor
set_UseVisualStyleBackColor
get_DefaultBackColor
SetLastError
SharedBoolsetDateSeparator
GetEnumerator
RamSZGenericArrayEnumerator
.cctor
OrderEditor
IntPtr
get_Hour
CreateGraphics
System.Diagnostics
Brushes
servesJellies
hiemsJellies
EnableVisualStyles
AnchorStyles
potionsServes
ItemCheckEventArgs
get_Ticks
get_Controls
get_Items
get_CheckedItems
System.Windows.Forms
set_AutoScaleDimensions
get_Chars
ProcessInformationClass
TerminateProcess
hProcess
OpenProcess
GetCurrentProcess
GetProcAddress
set_Arguments
Exists
TzLQAt
RemoveAt
Concat
set_Format
set_CustomFormat
DateTimePickerFormat
Object
object
GraphicsUnit
SetCompatibleTextRenderingDefault
IAsyncResult
DialogResult
result
ContentAlignment
Environment
get_Current
pbDebuggerPresent
set_Font
get_Count
debugPort
FailFast
unpetalIambist
SuspendLayout
ResumeLayout
PerformLayout
MoveNext
System.Text
set_Text
nmZGZu
9GAzpu
get_Now
get_UtcNow
set_TabIndex
MessageBox
CheckBox
CheckedListBox
get_Gray
RuntimeHelpersSerializationNullKey
GetExecutingAssembly
LoadLibrary
ResolveMemory
Directory
get_Capacity
op_Equality
op_Inequality
System.Security
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
_CorExeMain
mscoree.dll
444|@@@
,,,"666
### nnn
30.[#!*
OOOxiii
'''rhhh
)~~~&vvv${{{Owww
yyy ~~~&
XWW$gkkRltt
#!!!
iii>tss
ccc=}}}
(((_ooo
?>?G%%$
)))#///
,,,,111
///+444
,,,+///
~~~E{{{
+{{{+www){{{E{{{
^^^;_^^vegg
%$,v&#(;/,1
$$$5###
```1ttt
kkk8rrr
[[[1ggg
ccc7kkk
AAAi***
,,,5###
...8)))
0006333
3336333
...6
,,,6$$$
rrr3ooo
~~~_}}}
7~~~6{{{6zzz4}}}=}}}
zzz>|||
feeAccc
679A679
YYY.]\\>bbbAmuurnzz
IA.r+*4A"!,>$!'.!
ccc0ccc
0/00878
***C)))
[[[/mmmu{{{
GLBu#'/
dddDhhh
WWW/___
$ (/1/1
```.ggguqqq
AG;u(((0
-___-```
"&0+**
s999s^^^
&%'C///
NNNt:::0+++
+++0:::
---C>>>
---D;;;
111B///
222B333
444B777
---BBBB
...B999
,,,B;;;
sssB~~~
000?```
...B'''
gggBeee
BzzzB~~~Byyy?
B|||t~~~
ttt/}}}
zzz0~~~C
Bvvvtjjj
oooAuuu
ebbTc``
'+4T7<I
^^^$kkk^aaa
998^>=<$110
^^^!XVV
jjj$mqq@joosmtt
LF6s<8/@447$!-
0/3!#!$
WWW7VVVMWWWY^\\YcaaW\\\[qvvpu
<7.p/.7[$%5W#"/Y&$,Y&#*M&#)7$ (
\\\4\\\`]]]
"`(%+4%!)
jjj```Qkkk
888Q888::9
[[[ggg@mmmtmmm
AE<tBD?@-,.
888$===a:::
OOO3eeeQgggtqqq
XXX#OOO`TTT
JJJ3MMM____
zzz#ttt^www
aaa[[[Qeee
$"(Q102888
WWWbbb@___t```
471t24/@554
ggg0]]]Phhhtlll
DI>t&'&R
uuu-aaa[YYY
c($,9%#'
TTT fffIbbb
yyy"|||]
A...AHHHkVVV
%#)\.,/!
"vvv]~~~
uuEEE
-,-_333$333
HHHt;;;@777)))
"xxx]yyy
KKKsAAAR7775&&&
///c)))9000
%%%P222
)))];;;"444
'''a666$777
,,,`...#AAA
&&&^<<<#:::
444]///"...
///],,,"444
zzz"|||]~~~
888]777"AAA
"~~~]uuu
///]///"AAA
"ttt]zzz
999]222"===
~~~"uuu]xxx
000]<<<"555
&&&]666"===
111]888";;;
000]333";;;
,,,]222"999
)))]444"...
"ooo]yyy
***]111";;;
uuu"ppp]www
(((]@@@!
ttt"ppp]{{{
***Y???
zzz"yyy]zzz
999XJJJ
%%%^888$
"{{{]xxx
"xxx]zzz
yyy"yyy]{{{
~~~"}}}]www
{{{"zzz]
"{{{]}}}
|||"vvv]zzz
{{{"{{{]
"vvv]|||
~~~Y}}}
jjjWjjj
fff$ccc^___
{{{@iiitiii
{{{2xxxP
ttt1}}}]
%zzzAwwwq}}}
e{{{{{{{
]vvv]uuu]
]~~~]ttt]{{{Y
^xxxtttt
"zzz"zzz"
"xxx"xxx!|||
@~~~s~~~
{{{3}}}`
@|||t}}}
{{{mmmQxxx
kkk3vvv_
yyy9tttPwww]yyya
@uuus{{{
|||"www]
{{{"xxx]zzz
"zzz]vvv
bbbtCCC@
ppp$|||^lll
zzz^qqq$EEE
^^^Tmmm
^NPURU
a`""_H{
Rly1#F
0`7)0s
sD)@J#
GW<=f,Y
(%T&LR1
R+NRqT
!+h.HD8
`YxW&t
D DE`
b$EP5F
U! h Hd
IQ|t)x
q-V:K"
~R1W{,
v$XZ#I]y
P6T}V#
fieHm]
Qy[)/0
EI*+Khe
Yk]Gy=<<
N{~L;Zt
eyUk}P
HQUi%?e
XR"T(J-
4MSzzz
I'HzB^&
fh7y6xo;
jZ}EmD
(h&pa$
7`K;RJ8
7ar)/iSs
HD7aX/
>L)}PJy_D^1
AZyV*T
3'Ue"Z
r/)5JoK
lDfFmk
3A`19A
jCE8ETUL
V^TRh`h
Uw[DCJ
OOOk4p<
j$&" E
@MYHfPa
<A]/P_2
<7@pef
qWjil
_pomN7
/|VGgo
~aofC*
^GW P5
s#qft.#
VWB#Yuz
+jM{Z`
c~7vvY
T]%Pii
5:T/@ 0j
isd-?k
LD7R^6
c^~DOor>sA
SAM]Gn
`^7^Pan
.t"k,
N?n Ak
ZkW j?m
UA i4a
H@_scLD
S@Ek8b
.="(DT
8ExGXs3J
CK){j`;L
@=2!5,
@%"-A~m
\Szx8
GoupO:
p*xx`<
e[!\%x
@<N-D/
n>>i:p)
Kmff8v
W8EDXD*
9GG"wr
^\;`4
YmIu@j
q`m*o{
8@O3nj
>p<#?@
PsUYnM
O7:pep
mt3V.,cr$E
{>7MJ
[f~+"o
RJxxx@
K"zGDO}S
IT`=lm}
eEz^dy
(`F*"
!8"r"BZ
^AxUJy\
*K>+k:M
.^uwQU
:F$sh)
}K7~Q"
7pLFmRu
uwLS5i
8HR~rr
v3UsUS
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
DigiCert Inc1
www.digicert.com1.0,
%DigiCert Assured ID Code Signing CA-10
201125000000Z
231129235959Z0r1
Bucharest1
Bitdefender SRL1
DEVSUP CLINSTALLER1
Bitdefender SRL0
*http://crl3.digicert.com/assured-cs-g1.crl00
*http://crl4.digicert.com/assured-cs-g1.crl0L
https://www.digicert.com/CPS0
http://ocsp.digicert.com0L
@http://cacerts.digicert.com/DigiCertAssuredIDCodeSigningCA-1.crt0
8.<,5M
DC:[f^ Z8
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
220801000000Z
311109235959Z0b1
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
]J<0"0i3
v=Y]Bv
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
~qj#k"
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
110211120000Z
260210120000Z0o1
DigiCert Inc1
www.digicert.com1.0,
%DigiCert Assured ID Code Signing CA-10
.http://www.digicert.com/ssl-cps-repository.htm0
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
j-#O7;
(f*^[0
DigiCert Inc1
www.digicert.com1!0
DigiCert Trusted Root G40
220323000000Z
370322235959Z0c1
DigiCert, Inc.1;09
2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA0
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
2http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
DigiCert, Inc.1;09
2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA0
220921000000Z
331121235959Z0F1
DigiCert1$0"
DigiCert Timestamp 2022 - 20
Ihttp://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
http://ocsp.digicert.com0X
Lhttp://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
DigiCert Inc1
www.digicert.com1.0,
%DigiCert Assured ID Code Signing CA-1
:bVZ`f
DigiCert, Inc.1;09
2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA
221024104510Z0/
xURhe"
kJ0NB,}
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
131022120000Z
281022120000Z0r1
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Code Signing CA0
p1f3q>
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
https://www.digicert.com/CPS0
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Code Signing CA0
201214000000Z
231129235959Z0r1
Bucharest1
Bitdefender SRL1
DEVSUP CLINSTALLER1
Bitdefender SRL0
/http://crl3.digicert.com/sha2-assured-cs-g1.crl05
/http://crl4.digicert.com/sha2-assured-cs-g1.crl0L
https://www.digicert.com/CPS0
http://ocsp.digicert.com0N
Bhttp://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Code Signing CA
20221024104510Z0
Symantec Corporation10
Symantec Trust Network110/
(Symantec SHA256 TimeStamping Signer - G3
VeriSign, Inc.10
VeriSign Trust Network1:08
1(c) 2008 VeriSign, Inc. - For authorized use only1806
/VeriSign Universal Root Certification Authority0
160112000000Z
310111235959Z0w1
Symantec Corporation10
Symantec Trust Network1(0&
Symantec SHA256 TimeStamping CA0
https://d.symcb.com/cps0%
https://d.symcb.com/rpa0.
http://s.symcd.com06
%http://s.symcb.com/universal-root.crl0
TimeStamp-2048-30
Symantec Corporation10
Symantec Trust Network1(0&
Symantec SHA256 TimeStamping CA0
171223000000Z
290322235959Z0
Symantec Corporation10
Symantec Trust Network110/
(Symantec SHA256 TimeStamping Signer - G30
?'J3Nm
https://d.symcb.com/cps0%
https://d.symcb.com/rpa0@
/http://ts-crl.ws.symantec.com/sha256-tss-ca.crl0
http://ts-ocsp.ws.symantec.com0;
/http://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(
TimeStamp-2048-60
U){9FN
Symantec Corporation10
Symantec Trust Network1(0&
Symantec SHA256 TimeStamping CA
221024104510Z0/
/1(0&0$0"
VS_VERSION_INFO
StringFileInfo
000004B0
Comments
This installation was built with Inno Setup.
CompanyName
Radion varus Training
FileDescription
Aucaner deva.
FileVersion
1.27.0.5
LegalCopyright
ProductName
Aucaner deva
ProductVersion
1.27.0.5
VarFileInfo
Translation
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
Antivirus Signature
Bkav Clean
Lionic Trojan.Win32.PsDownload.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.66656979
ClamAV Clean
FireEye Generic.mg.6bdbea0ec35358cc
CAT-QuickHeal Clean
McAfee Artemis!6BDBEA0EC353
Malwarebytes Backdoor.ShellCode.MSIL
Zillya Clean
Sangfor Downloader.Win32.Psdownload.Vfzc
CrowdStrike win/malicious_confidence_90% (D)
BitDefender Trojan.GenericKD.66656979
K7GW Trojan ( 0059cfdb1 )
K7AntiVirus Trojan ( 0059cfdb1 )
Baidu Clean
VirIT Clean
Cyren Clean
Symantec Trojan.Gen.2
tehtris Clean
ESET-NOD32 a variant of MSIL/Kryptik.AISE
APEX Malicious
Paloalto generic.ml
Cynet Clean
Kaspersky HEUR:Trojan-Downloader.MSIL.PsDownload.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Downloader.PsDownload!8.E547 (CLOUD)
Emsisoft Trojan.GenericKD.66656979 (B)
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
Trapmine Clean
CMC Clean
Sophos Mal/Generic-S
Ikarus Trojan.MSIL.Crypt
GData Trojan.GenericKD.66656979
Jiangmin Clean
Webroot W32.Trojan.Gen
Avira Clean
MAX malware (ai score=84)
Antiy-AVL Trojan/Win32.Sabsik
Gridinsoft Ransom.Win32.Sabsik.sa
Xcitium Clean
Arcabit Trojan.Generic.D3F91AD3
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-Downloader.MSIL.PsDownload.gen
Microsoft Trojan:Win32/Casdet!rfn
Google Detected
AhnLab-V3 Clean
Acronis Clean
BitDefenderTheta Gen:NN.ZemsilF.36164.sm2@a40jl9b
ALYac Clean
TACHYON Clean
DeepInstinct MALICIOUS
VBA32 Clean
Cylance unsafe
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Clean
MaxSecure Trojan.Malware.300983.susgen
Fortinet PossibleThreat
AVG Win32:TrojanX-gen [Trj]
Avast Win32:TrojanX-gen [Trj]
No IRMA results available.