Static | ZeroBOX

PE Compile Time

2023-01-09 16:34:53

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00038535 0x00038600 7.73992298971
.rsrc 0x0003c000 0x000124ec 0x00012600 6.23545040247
.reloc 0x00050000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0004d627 0x00000468 LANG_SUTU SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0004d627 0x00000468 LANG_SUTU SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0004d627 0x00000468 LANG_SUTU SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0004d627 0x00000468 LANG_SUTU SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0004d627 0x00000468 LANG_SUTU SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0004d627 0x00000468 LANG_SUTU SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0004d627 0x00000468 LANG_SUTU SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0004d627 0x00000468 LANG_SUTU SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0004d627 0x00000468 LANG_SUTU SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0004d627 0x00000468 LANG_SUTU SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0004d627 0x00000468 LANG_SUTU SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0004d627 0x00000468 LANG_SUTU SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0004d627 0x00000468 LANG_SUTU SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x0004dadd 0x000000bc LANG_SUTU SUBLANG_NEUTRAL data
RT_VERSION 0x0004dbd5 0x000004f4 LANG_SUTU SUBLANG_NEUTRAL data
RT_MANIFEST 0x0004e105 0x000003e7 LANG_SUTU SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
91V~Y
+1+6+7~
Ivan Mvedev
v4.0.30319
#Strings
oidAdccFlfAok.exe
oidAdccFlfAok
<Module>
mscorlib
System
Object
MulticastDelegate
ValueType
Attribute
GetString
SmartAssembly.Delegates
MemberRefsProxy
SmartAssembly.HouseOfCards
Strings
PoweredByAttribute
SmartAssembly.Attributes
Random
Func`2
value__
ModuleHandle
Dictionary`2
System.Collections.Generic
String
get_Length
get_Chars
System.Management
ManagementObjectSearcher
ManagementObjectCollection
GetEnumerator
ManagementObjectEnumerator
get_Current
ManagementBaseObject
get_Item
ResourceManager
System.Resources
GetObject
ToString
ToLower
Assembly
System.Reflection
get_Location
Contains
MoveNext
IDisposable
Dispose
Stream
System.IO
GetExecutingAssembly
GetDirectoryName
Intern
op_Equality
Directory
GetTempPath
Exists
IsNullOrEmpty
EnumerateDirectories
IEnumerable`1
Encoding
System.Text
get_ASCII
get_Unicode
get_UTF8
GetBytes
HashAlgorithm
System.Security.Cryptography
ComputeHash
Buffer
BlockCopy
SymmetricAlgorithm
set_Key
set_IV
set_Mode
CipherMode
CreateDecryptor
ICryptoTransform
TransformFinalBlock
Concat
GetTypeFromHandle
RuntimeTypeHandle
Marshal
System.Runtime.InteropServices
SizeOf
Convert
ToUInt32
BitConverter
ToInt32
IntPtr
get_Size
op_Explicit
ToInt16
Console
WriteLine
Environment
Thread
System.Threading
WebClient
System.Net
OpenRead
GetManifestResourceStream
Replace
FromBase64String
Create
RuntimeHelpers
System.Runtime.CompilerServices
InitializeArray
RuntimeFieldHandle
DeriveBytes
MemoryStream
ToArray
.cctor
ParameterInfo
object
method
Invoke
nhffskdsfkdfdhdafrffddhfscffdf
hkgfsfdffdhfhddrfahhddsshcf
chfdgeffhfkdafsfhddhdshdghf
BeginInvoke
IAsyncResult
AsyncCallback
callback
EndInvoke
result
hfsdkfdhgfshseffdfaffhfdch
fhhfgsffrffdkdffcdhhhfdasdfh
fchfhfdgfadfdfrsfsshdkfffgh
hjfdffhfgadsffhrddfffskhj
fsfhrgdddffhdffffkhsjd
fjshdfcffddshdffgfedfkfghj
sddddffsfheghddjffffffgjhskdgsfacsafp
sfhjffkfhgfhjsrfhhddfhffadsfsfhsscfgdb
ddfrhjfsffhgdffafcfdssfkfhgj
ffchkffgahfhfsrddsfsfj
jffadsfcfhdggfsdehfsgkffj
jcfssafdghhfffrfddsdgkfff
ffchkfhrffdfdhafgsssffj
jffafffffdrdgfhcsdsgkffj
jcfhdsfrfgfdsadfsdgkffff
gdddfdsfdhfssfdgh
fhfssddssdfhfddfhhs
hsfddsd
fsdfdsh
shsdsffdsd
sdfsdfsfh
sdhffsdssf
sshddsfgfs
afsdgfsdshs
gsfsfdsd
gssdaffadss
gsfashdsfs
gfssadfsdg
gasdsfdfshsg
gdsdfafag
hssddfdafs
adsfdsfsdds
jdddfsdsf
gdfgfsssdfh
jfsdsafdfhg
jffddddsgfdgs
jsfsddfdf
jdffaf
gdfddsfddj
kfdssfdfsgfh
fssjfsffdfg
sjfadsfff
fdfhfsfsfs
jsffsfdssd
jdsdffffssk
wssffssdv
gsffffsds
gffssfddsx
startupInfo
fahikFd
jdfhfdfdffdffssdkfj
hdfffdfhffsassdkfsh
hdffhdfsdhdffdfkdf
affdssdfffhhfhh
sdfffdsshfffdhf
hffdsffdfshfsdhs
hhhgfdffffdfsfh
sfdfsffhfffdhs
fddsffhss
ffdhdfff
hhfdhsdffsf
jhffsdffdfdh
EndUpdateResource
kernel32.dll
BeginUpdateResource
UpdateResource
CreateMemberRefsDelegates
typeID
CreateGetStringDelegate
ownerType
UnverifiableCodeAttribute
System.Security
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
AssemblyFileVersionAttribute
SuppressIldasmAttribute
CompilerGeneratedAttribute
AttributeUsageAttribute
AttributeTargets
oidAdccFlfAok.resources
{a3c1cb21-611c-4796-a132-b1de81a1b65a}
RuntimeEnvironment
GetRuntimeDirectory
Combine
AssemblyName
AppDomain
DefineDynamicAssembly
AssemblyBuilder
System.Reflection.Emit
AssemblyBuilderAccess
DefineDynamicModule
ModuleBuilder
DefineType
TypeBuilder
TypeAttributes
GetMethod
MethodInfo
MethodBase
GetParameters
System.Core
Enumerable
System.Linq
Select
get_ReturnType
DefinePInvokeMethod
MethodBuilder
MethodAttributes
CallingConventions
CallingConvention
CharSet
GetMethodImplementationFlags
MethodImplAttributes
SetImplementationFlags
CreateType
Delegate
CreateDelegate
get_CurrentDomain
get_ParameterType
MD5CryptoServiceProvider
RijndaelManaged
Exception
Repeat
Rfc2898DeriveBytes
CryptoStream
CryptoStreamMode
ResolveTypeHandle
GetFields
FieldInfo
BindingFlags
MemberInfo
get_Name
ResolveMethodHandle
RuntimeMethodHandle
GetMethodFromHandle
get_IsStatic
get_FieldType
DynamicMethod
GetILGenerator
ILGenerator
OpCodes
Ldarg_0
OpCode
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Tailcall
Callvirt
SetValue
GetModules
Module
get_ModuleHandle
get_Module
GetMethods
Ldc_I4
get_MetadataToken
TryGetValue
WrapNonExceptionThrows
6.9.0.114
"Powered by SmartAssembly 6.9.0.114
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
[Dh;_Mb
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
:g]\m,
t#']LP
*NqM2R
j)Y|,9(
`i&FSW
V+YM-Q0
I~)lOs
cHhjnK
0EG92J
$%x1rl7
DV/kz%
S}Kf'#c
RQ8rZC
C1i]QeV0+
C1i]QeV0+
$GBUB0
L_?1OX
)T`H*
=3[n f
J!a.Yz
"kDZY_
2F59dK
et[/\7
Owxi7pJ
et[/\7
`h hoS
:VWBZ-
SGR&/^ iA
qFoL_-
Jqi/,0
ZCLrz?
k5E6:Y
5f]KJn_'@c
y'@D]o
%5z?UC
yMfP{+
b:Yo>+
tN&g9?
icXQkG?
<waX(8
@ezUybI
5Sn6s&
ueQY:l!
oZ9S8C
PFKp'TJ
Z#jmc
a%,_UTK
(V+J@m(OE
vw|i;
YbyrD:
*-Hnod
Fo[St4
JQ3Pg)
hj1idu^
$5K#~m
xI!~%[
+c6!$@3dRK
)lC.~"
#&>,};
1w+Lv1D
Bfk[ E
Iy9' c
Zk[yT+so
:l'v\5
$A,uIq
=cKwF
gGU{AN
eT[m;J
<:>B3AJ
Q:N}c3H:
czc-4]:$
d~U [H[%
pfv]7#}k
S?}_3k=FW
slY6v'
HF)'_6VQ5
8="#Dgn
Frgb:06
.3[(1M
>a_k**
hq]5Da/!
>|3>fI
4SwO$)z
5Qe:;<
p+"rF32
P~16-=V
>.41j4
lswUh
zvLq[P
z[v"hb
{g4(0jcOm#
HAGYRe*
5b C0do
SBcHY_
rgP|S>
$ h&dx
GOR4o4
.Pt0}g
[F>R3NW9
56B#S
)e{dpa
CP{o+kA]
\mEz!(j|X
RnD2^H
k3M3H
$PZ+!:
~'D=Aq2
aS!I3+e/
(ODrcw
uYqI{h9
`^w'~]
6-U-865
;Dttz
^fvj(7
K",q4!Gu
%4V;T{GE
;?43^;j
D<Ky{d
qvA(/^Q
}aXD0X
,/idTq
()ynoP(},
Q1kMFp
(u@_mYT
lP#Ph/
e;%r-F
Rj$<TN
M.Vz?J'
nj*0{f
B X=A}$
5O*$}I
tcwjU?
$1-W$'
>EZZ9
qZCl.!~
hWkDlp
S@*0BY[
LezzoJ]
&)Faqh
"%*E7:
vQ2Yd;
-HvyH.
~Lb#5Ju
{V2s~Pk-X
{;z]f"<
6~'|c3
J5S,qR7
ylvL2wu
KN\`>
'/fwfi
9VRlWy
W@)8
9#]I|^
eY|W1M
qdf#?
W(dn&e4+
%]+T ;
$~*k{QI
5UP07E7
Lh2IN0
[?Dpo*d
{srk`L l
[?Dpo*d
rkVrm
[?Dpo*d
[?Dpo*d
Gk[#DG
7Zw%b"Gm;
Gk[#DG
7Zw%b"Gm;
7Zw%b"Gm;
Z2z5ZPX
[?Dpo*d
Z2z5ZPX
[?Dpo*d
(Z*z-
(Z*z-
(Z*z-
9:Ra~|8
S>YX8Z
3(<Bd7
9:Ra~|8
[?Dpo*d
qX9Xg#)^0|
[?Dpo*d
9:Ra~|8
9:Ra~|8
[?Dpo*d
[?Dpo*d
[?Dpo*d
)=p"'
Pa^pK.
-Jp~6c
`k7}j==
RR1Jc&
`k7}j==
dZ|=<?
dZ|=<?
@7&&2q
dZ|=<?
vb]0uo
4DWeKq
@7&&2q
vb]0uo
9:Ra~|8
9:Ra~|8
`k7}j==
`k7}j==
+ftb'na
dZ|=<?
@7&&2q
+ftb'na
dZ|=<?
@7&&2q
+ftb'na
vb]0uo
+ftb'na
vb]0uo
9:Ra~|8
+ftb'na
9:Ra~|8
`k7}j==
`k7}j==
dZ|=<?
@7&&2q
dZ|=<?
vb]0uo
@7&&2q
vb]0uo
9:Ra~|8
9:Ra~|8
mfcem\
`k7}j==
mfcem\
`k7}j==
dZ|=<?
@7&&2q
dZ|=<?
@7&&2q
vb]0uo
@7&&2q
vb]0uo
`k7}j==
`k7}j==
dZ|=<?
@7&&2q
dZ|=<?
vb]0uo
@7&&2q
vb]0uo
K:8@)p,L
HcJg]+
`gV"7lc
o9iCf4
eIW9g
1;m>YG
KS>]PM
,^d4K%
2zJiAN
2zJiAN
2zJiAN
9t9sf5
)(EO"O=
. xpV}m
blE7nD1
9:Ra~|8
Ht@lD%
m&'.!1
r:I9f\
"#5>'g
!%9;7R
uc&-,9
A`w&1:
uc&-,9
[Ht!dr
# {&mC
# {&mC
[4FSUS
!Hc{|3
:c/eZG
x6\q(W
BFrd2@
t^^%I,;
tFz?zA
2zJiAN
x#>a,K
PbT/xBD
Y4v0TV
jK^}8
.RUl2'$`'
&f2ia4dV
Yy9MTlZGa0dUczl5eEtMTEtXMkpTUT09
b2lkQWRjY0ZsZkFvaw==XZUdlamdDQ21wWjdidVhnRmdkQkxOYVNkanZTY3BkTEdaMFZZeUs0TmZEbGtSUmM3N1UrNTRVMnpISy9UWjZDbg==XZUdlamdDQ21wWjdidVhnRmdkQkxOYStrMlVVeTFreVc5ZzdzUDZveFVmNVRxd2ZpcWQyeEFvYzZaRlA0c3h4NQ==
RHluYW1pY0RsbEludm9rZVR5cGU= bE1PME81RXJWMklEMzNxd3FmREhJUT09<RUJCbDJXd2d1Snozb3F3QW95V05URmpUemZJRU94dkpsVkdPMVNWczdZbz0=XU21XMzFLS2lWTG81ZlU4VkZGTlUwelg0N2xNcllteTNVZGx1aUVCNTB3YytTd2h6TS9GeHBvT1lGQjliTzJBLw==XUFFQaUY1cldIbmpmTEpEZmNzUmg1WGNSRlhqZXpiWjN4WEdGOFVlbkViQkdNK1p2dHFsYXQ3L0VLNmo2WThjbw==XNi8xR21BNnBkTTB2YVhtalFzdFVjVi94NWZPSjlKMWU5ZXhhRmJpeXFFMXhCUEIydGVuS0RZaFZCVEJaaUFjTg==<aFpZczhmcmdrcjlOUlYxZUpMRUREeTdkZ2ZPaS9QRlYyRHBXMjJrOHdOQT0=XdUVIUGNmMXF0ektXVklSTFNPdzJ2Ui9PUHROcU13R2tHdys2RkpPMy82dGNFQmswTXl4OWVkZFJBZk45blZzeg==XQzVmS0NhZmdTQzhFTEpEWTNtbHBzaWluK2lSZTUzUE91ZlhVR1hEVzZWNng4Mm1WWS9rNWlnaDVhZC9lTUVlNA==XMlg3WlYyUGlBZnVRVlhMcHd0SmdiUDBCSEttTXM5TEp3QTNiaUJ3SmhWUFBMK2paMGlSSk94Zi9qQWhpQ0w2WQ==<QjNpWnYzNTF1K2c5d0NmRUJjQjlrbklyTFVDUk9YbGgxaldPakFhVjNtUT0=<QVc2VVI3aWNOYWdCYkQxYlVOREYyM2JXbTlIeXFpeDFVOTZwTmMwbTF5dz0=XdHdqNDFPaE4xKzhrRkdEY0hNU0ZVUnlDSXpoWXd5K1JBNDdEVXF5bDRPMWNMaE9oenA3S2t0OE1MNS9CNUdzdQ==0U2VsZWN0ICogZnJvbSBXaW4zMl9Db21wdXRlclN5c3RlbQ==
TWFudWZhY3R1cmVy
bWljcm9zb2Z0IGNvcnBvcmF0aW9u
dm13YXJl
TW9kZWw=
ZmZmZmZmZg==
IA== YWJjZGVmZ2hpamtsbW5vcGtySWRtRkFT
aHR0cDovL2dvb2dsZS5jb20=
_CorExeMain
mscoree.dll
yyyyyp
yyyywp
vflflg
~vgffffffffg
vffffffff
gffvfffh
ffvfgff`
f~vfvf`
~vnvvfvf
~~vnvfh
xnvffff
fihg}|{~utsqoow
utvqooooo
uuvqqoooooo
}|{~utsqoooooooo
fihg}|{~utsqoooooooooy
utvqoooooooooor
uuvqqooooooooooo
}|{~utsqoooooooooooo
fihg}|{~utsqooooooooooooo
utvqqooooooooooooo
uuvqqoooooooooooooo
}|{~utsqooopd/+*
|{~utsqok.
&8::96&
7:<<::995$
K@???<::9982"
A@@@??<::9985&
MAAA@@??<::99884&# "
BBAAA@@??<::9988865322222222))'
DBBBAA@@??<::9988866554333222))'
DDDBBAA@@??<::9988866554333222))'
EEDDBBAA@@??<::9998866554433222))'
FFEDDBBAA@@??<::9998866554433222))'
OFFEDDBBAA@@??<:::998866654433222))'
FFFEDDBBAA@@??<<::998866654433322)H
QFFFEDDBBAA@@???<::998886654433322
QFFFEDDBBAA@@@??<::9988866544333
bQFFFEDDBBAAA@@??<::99888665544X
^QFFFEDDBBAAA@@??<::998886655U
^QFFFEDDBBBAA@@??<::998886=
\PFFEDDDBBAA@@??<::998IL
a]RFEEDDBBAA@@??<:>NY[
`SODDBBAA@CMZ_
dIPQME0)
WVVTRPJ?-*
hZYXVTRQLF:0--..12222#"
][ZYXVTRQOLHD@==;;4422#"
_][ZYXWVRQPOKKHCBA>5422#3
`_^[ZYXWVRRPOLKHCBA><422v
i`_^[ZYXWVRRPOLKHGBA><44
a`_^[[YXWVRRQOLKJGBA><x
{a`_^\[ZXWVRRQOLKJGCAf
ka`_^\[ZYWVTRQOLKJGU
|b`_^\[ZYWVTRQPLSt
pj_^\[ZYXVTRgl
~}qnmoyz
_RM:DE=<G
WQTM:7F><<<n
`WVSN69B?<<<<J
XXUPOL8C@=;Km
dXYap]M:DA
/,'%"
4-(%# 3
A 6oBH
Vt0o`|
_goE=D
<JWOYi
!LWo?
oQoE=e
8c:#t-
6ZSs-r
w^2\fCZt
aQck/
8JWcoE[
w?t8$H
m~[Z~<
\oOZw~?
Z9vXZ0
GIz D4e<
IA<]DYP
'{0`b
}4>O,]
xC`YqOe
q=CVnw+
1uuMtJ
'.iHN7$
huBtiI
^d/t.y
yb/f)<f4
yVyJJJ
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS></application></compatibility></assembly>
!*X!AX!CX!*
1*X1AX1*
{a3c1cb21-611c-4796-a132-b1de81a1b65a}
oidAdccFlfAok
/ P6pL
,/KPip
/-P?pR
MAINICON
VS_VERSION_INFO
StringFileInfo
000004b0
Comments
This installation was built with Inno Setup.
CompanyName
IcoFX Software S.R.L.
FileDescription
icofx 3 Setup
FileVersion
LegalCopyright
ProductName
icofx 3
ProductVersion
3.7.1
VarFileInfo
Translation
Antivirus Signature
Bkav W32.AIDetectMalware.CS
Lionic Trojan.Win32.MSILMamut.l!c
Elastic malicious (high confidence)
ClamAV Win.Packed.Msilzilla-10040800-0
CMC Clean
CAT-QuickHeal Trojan.Ghanarava.1693641864b0ebb3
Skyhigh BehavesLike.Win32.Generic.fc
ALYac IL:Trojan.MSILMamut.8725
Cylance Unsafe
Zillya Trojan.Stealer.Win32.33074
CrowdStrike win/malicious_confidence_100% (W)
Alibaba Trojan:MSIL/Kryptik.28b6a332
K7GW Trojan ( 0059a0341 )
K7AntiVirus Trojan ( 0059a0341 )
huorong VirTool/MSIL.Obfuscator.aic
Baidu Clean
VirIT Trojan.Win32.GenusT.DQAC
Paloalto generic.ml
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of MSIL/Kryptik.AHUA
APEX Malicious
Avast Win32:CrypterX-gen [Trj]
Cynet Clean
Kaspersky HEUR:Trojan-Spy.MSIL.Stealer.gen
BitDefender IL:Trojan.MSILMamut.8725
NANO-Antivirus Trojan.Win32.Stealer.julooz
ViRobot Clean
MicroWorld-eScan IL:Trojan.MSILMamut.8725
Tencent Malware.Win32.Gencirc.13baa579
Sophos Mal/MSIL-VD
F-Secure Heuristic.HEUR/AGEN.1305764
DrWeb Trojan.Inject4.51522
VIPRE IL:Trojan.MSILMamut.8725
TrendMicro Clean
McAfeeD Real Protect-LS!E9F22B285BFD
Trapmine malicious.high.ml.score
CTX exe.trojan.msil
Emsisoft IL:Trojan.MSILMamut.8725 (B)
Ikarus Trojan.MSIL.Crypt
FireEye Generic.mg.e9f22b285bfdc648
Jiangmin Clean
Webroot Clean
Varist W32/MSIL_Kryptik.ILU.gen!Eldorado
Avira HEUR/AGEN.1305764
Fortinet MSIL/Kryptik.AHUA!tr
Antiy-AVL Trojan/MSIL.Kryptik
Kingsoft malware.kb.c.1000
Gridinsoft Clean
Xcitium Clean
Arcabit IL:Trojan.MSILMamut.D2215
SUPERAntiSpyware Clean
Microsoft Trojan:MSIL/Redline.GDI!MTB
Google Detected
AhnLab-V3 Trojan/Win.Generic.C5357576
Acronis Clean
McAfee GenericRXVG-YG!E9F22B285BFD
TACHYON Clean
VBA32 Clean
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Clean
Rising Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:wY4JxSTlpMGPVlNwGTOwYQ)
Yandex Trojan.Kryptik!sdKW3kSq71w
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.73709669.susgen
GData IL:Trojan.MSILMamut.8725
AVG Win32:CrypterX-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Trojan[spy]:MSIL/Redline.GFE2XJC
No IRMA results available.