2025-03-09 01:05:20
573bb7b41bc641bd95c0f5eec13c233b
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .text | 0x00001000 | 0x000065b1 | 0x00006600 | 6.46727735025 |
| .rdata | 0x00008000 | 0x00001358 | 0x00001400 | 5.10392905216 |
| .data | 0x0000a000 | 0x0001fb38 | 0x00000600 | 4.03045923971 |
| .ndata | 0x0002a000 | 0x00010000 | 0x00000000 | 0.0 |
| .rsrc | 0x0003a000 | 0x00022910 | 0x00022a00 | 6.0647294128 |
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| RT_ICON | 0x0005be78 | 0x00000468 | LANG_ENGLISH | SUBLANG_ENGLISH_US | Device independent bitmap graphic, 16 x 32 x 32, image size 1024 |
| RT_ICON | 0x0005be78 | 0x00000468 | LANG_ENGLISH | SUBLANG_ENGLISH_US | Device independent bitmap graphic, 16 x 32 x 32, image size 1024 |
| RT_ICON | 0x0005be78 | 0x00000468 | LANG_ENGLISH | SUBLANG_ENGLISH_US | Device independent bitmap graphic, 16 x 32 x 32, image size 1024 |
| RT_ICON | 0x0005be78 | 0x00000468 | LANG_ENGLISH | SUBLANG_ENGLISH_US | Device independent bitmap graphic, 16 x 32 x 32, image size 1024 |
| RT_ICON | 0x0005be78 | 0x00000468 | LANG_ENGLISH | SUBLANG_ENGLISH_US | Device independent bitmap graphic, 16 x 32 x 32, image size 1024 |
| RT_ICON | 0x0005be78 | 0x00000468 | LANG_ENGLISH | SUBLANG_ENGLISH_US | Device independent bitmap graphic, 16 x 32 x 32, image size 1024 |
| RT_DIALOG | 0x0005c500 | 0x00000060 | LANG_ENGLISH | SUBLANG_ENGLISH_US | data |
| RT_DIALOG | 0x0005c500 | 0x00000060 | LANG_ENGLISH | SUBLANG_ENGLISH_US | data |
| RT_DIALOG | 0x0005c500 | 0x00000060 | LANG_ENGLISH | SUBLANG_ENGLISH_US | data |
| RT_GROUP_ICON | 0x0005c560 | 0x0000005a | LANG_ENGLISH | SUBLANG_ENGLISH_US | data |
| RT_MANIFEST | 0x0005c5c0 | 0x00000349 | LANG_ENGLISH | SUBLANG_ENGLISH_US | XML 1.0 document, ASCII text, with very long lines (841), with no line terminators |
| Antivirus | Signature |
|---|---|
| Bkav | W32.AIDetectMalware |
| Lionic | Trojan.Win32.Keygen.4!c |
| Elastic | malicious (high confidence) |
| ClamAV | Win.Malware.Score-6997747-0 |
| CMC | Clean |
| CAT-QuickHeal | Trojan.Riskware |
| Skyhigh | BehavesLike.Win32.Generic.cc |
| ALYac | Application.Generic.3932404 |
| Cylance | Unsafe |
| Zillya | Clean |
| Sangfor | Trojan.Win32.Save.a |
| CrowdStrike | win/grayware_confidence_70% (W) |
| Alibaba | Clean |
| K7GW | Unwanted-Program ( 0052f55b1 ) |
| K7AntiVirus | Unwanted-Program ( 0052f55b1 ) |
| huorong | Clean |
| Baidu | Clean |
| VirIT | Trojan.Win32.NSISDrp.ILR |
| Paloalto | generic.ml |
| Symantec | Trojan.Gen.MBT |
| tehtris | Clean |
| ESET-NOD32 | Win32/Keygen.ACE potentially unsafe |
| APEX | Malicious |
| Avast | Win32:Malware-gen |
| Cynet | Malicious (score: 100) |
| Kaspersky | Clean |
| BitDefender | Application.Generic.3932404 |
| NANO-Antivirus | Clean |
| ViRobot | Clean |
| MicroWorld-eScan | Application.Generic.3932404 |
| Tencent | Clean |
| Sophos | Generic Reputation PUA (PUA) |
| F-Secure | Trojan.TR/AVI.Agent.ckgqd |
| DrWeb | Clean |
| VIPRE | Application.Generic.3932404 |
| TrendMicro | Clean |
| McAfeeD | ti!3E5A4418610A |
| Trapmine | Clean |
| CTX | exe.trojan.keygen |
| Emsisoft | Application.Generic.3932404 (B) |
| Ikarus | Trojan.Androm |
| GData | Application.Generic.3932404 |
| Jiangmin | Clean |
| Webroot | Clean |
| Varist | W32/Trojan.TSQT-6949 |
| Avira | TR/AVI.Agent.ckgqd |
| Antiy-AVL | RiskWare/Win32.Agent |
| Kingsoft | Win32.HackTool.Keygen.v |
| Gridinsoft | Crack.Win32.Wacapew.sa |
| Xcitium | Clean |
| Arcabit | Application.Generic.D3C00F4 |
| SUPERAntiSpyware | Clean |
| ZoneAlarm | Clean |
| Microsoft | HackTool:Win32/Keygen!rfn |
| Detected | |
| AhnLab-V3 | HackTool/Win.Keygen.C5307056 |
| Acronis | Clean |
| VBA32 | Clean |
| TACHYON | Clean |
| Malwarebytes | Malware.AI.3757947517 |
| Panda | PUP/Keygen |
| Zoner | Clean |
| TrendMicro-HouseCall | TROJ_GEN.R002H06EG25 |
| Rising | Clean |
| Yandex | Clean |
| TrellixENS | Artemis!7E1329F086BE |
| SentinelOne | Clean |
| MaxSecure | Trojan.Malware.388067077.susgen |
| Fortinet | Riskware/KeyGen |
| AVG | Win32:Malware-gen |
| DeepInstinct | MALICIOUS |
| alibabacloud | Clean |
| IRMA | Signature |
|---|---|
| Trend Micro SProtect (Linux) | Clean |
| Avast Core Security (Linux) | Win32:Malware-gen |
| C4S ClamAV (Linux) | C4S.MALWARE.SHA256.AUTOGEN.64133280.UNOFFICIAL |
| Trellix (Linux) | GenericRXVT-BD |
| Sophos Anti-Virus (Linux) | Clean |
| Bitdefender Antivirus (Linux) | Application.Generic.3932404 |
| G Data Antivirus (Windows) | Virus: Application.Generic.3932404 (Engine A) |
| WithSecure (Linux) | Trojan:W32/Generic.abch!mind |
| ESET Security (Windows) | Clean |
| DrWeb Antivirus (Linux) | Clean |
| ClamAV (Linux) | Win.Malware.Score-6997747-0 |
| eScan Antivirus (Linux) | Application.Generic.3932404(DB) |
| Kaspersky Standard (Windows) | Clean |
| Emsisoft Commandline Scanner (Windows) | Clean |