2025-08-06 23:40:32
C:\Users\jordan\Downloads\usermode-master (2)\usermode-master\x64\Release\Valex_External.pdb
38190b3b4592ee47e0e16d31af1fba93
Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
---|---|---|---|---|
.text | 0x00001000 | 0x002598ec | 0x00259a00 | 6.49431117409 |
.rdata | 0x0025b000 | 0x0009c41c | 0x0009c600 | 6.46139977428 |
.data | 0x002f8000 | 0x000a3518 | 0x000a1000 | 6.33086684816 |
.pdata | 0x0039c000 | 0x00015444 | 0x00015600 | 6.31522333645 |
.rsrc | 0x003b2000 | 0x00029558 | 0x00029600 | 2.2514368806 |
.reloc | 0x003dc000 | 0x00001d50 | 0x00001e00 | 5.38634260023 |
Name | Offset | Size | Language | Sub-language | File type |
---|---|---|---|---|---|
RT_ICON | 0x003d9a50 | 0x000018f5 | LANG_ENGLISH | SUBLANG_ENGLISH_US | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced |
RT_ICON | 0x003d9a50 | 0x000018f5 | LANG_ENGLISH | SUBLANG_ENGLISH_US | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced |
RT_ICON | 0x003d9a50 | 0x000018f5 | LANG_ENGLISH | SUBLANG_ENGLISH_US | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced |
RT_ICON | 0x003d9a50 | 0x000018f5 | LANG_ENGLISH | SUBLANG_ENGLISH_US | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced |
RT_ICON | 0x003d9a50 | 0x000018f5 | LANG_ENGLISH | SUBLANG_ENGLISH_US | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced |
RT_ICON | 0x003d9a50 | 0x000018f5 | LANG_ENGLISH | SUBLANG_ENGLISH_US | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced |
RT_ICON | 0x003d9a50 | 0x000018f5 | LANG_ENGLISH | SUBLANG_ENGLISH_US | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced |
RT_ICON | 0x003d9a50 | 0x000018f5 | LANG_ENGLISH | SUBLANG_ENGLISH_US | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced |
RT_ICON | 0x003d9a50 | 0x000018f5 | LANG_ENGLISH | SUBLANG_ENGLISH_US | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced |
RT_GROUP_ICON | 0x003db348 | 0x00000084 | LANG_ENGLISH | SUBLANG_ENGLISH_US | data |
RT_MANIFEST | 0x003db3d0 | 0x00000188 | LANG_ENGLISH | SUBLANG_ENGLISH_US | XML 1.0 document, ASCII text, with CRLF line terminators |
Antivirus | Signature |
---|---|
Bkav | W64.AIDetectMalware |
Lionic | Clean |
Elastic | malicious (high confidence) |
ClamAV | Clean |
CMC | Clean |
CAT-QuickHeal | Clean |
Skyhigh | Clean |
ALYac | Gen:Variant.Zusy.594877 |
Cylance | Unsafe |
Zillya | Clean |
Sangfor | Clean |
CrowdStrike | win/malicious_confidence_90% (W) |
Alibaba | Trojan:Win64/GenKryptik.fd32d6ce |
K7GW | Trojan ( 005c85f21 ) |
K7AntiVirus | Trojan ( 005c85f21 ) |
huorong | Trojan/Agent.cfs |
Baidu | Clean |
VirIT | Clean |
Paloalto | generic.ml |
Symantec | ML.Attribute.HighConfidence |
tehtris | Clean |
ESET-NOD32 | a variant of Win64/GenKryptik_AGen.AHT |
APEX | Malicious |
Avast | Win64:MalwareX-gen [Cryp] |
Cynet | Malicious (score: 100) |
Kaspersky | Clean |
BitDefender | Gen:Variant.Zusy.594877 |
NANO-Antivirus | Clean |
ViRobot | Clean |
MicroWorld-eScan | Gen:Variant.Zusy.594877 |
Tencent | Win32.Trojan.Agen.Lqil |
Sophos | Mal/Generic-S |
F-Secure | Heuristic.HEUR/AGEN.1379366 |
DrWeb | Clean |
VIPRE | Gen:Variant.Zusy.594877 |
TrendMicro | Clean |
McAfeeD | ti!735E28EF9F09 |
Trapmine | Clean |
CTX | exe.trojan.agen |
Emsisoft | Gen:Variant.Zusy.594877 (B) |
Ikarus | Trojan.Win64.Krypt |
GData | Gen:Variant.Zusy.594877 |
Jiangmin | Clean |
Webroot | Clean |
Varist | Clean |
Avira | HEUR/AGEN.1379366 |
Antiy-AVL | Clean |
Kingsoft | Win64.Troj.zusy.v |
Gridinsoft | Trojan.Win64.Kryptik.sa |
Xcitium | Clean |
Arcabit | Trojan.Zusy.D913BD |
SUPERAntiSpyware | Clean |
ZoneAlarm | Clean |
Microsoft | Trojan:Win64/Zusy!rfn |
Detected | |
AhnLab-V3 | Malware/Win.Barys.R715254 |
Acronis | Clean |
VBA32 | Clean |
TACHYON | Clean |
Malwarebytes | Malware.AI.2952065517 |
Panda | Trj/GdSda.A |
Zoner | Clean |
TrendMicro-HouseCall | TROJ_GEN.R002H01H625 |
Rising | Trojan.Kryptik!8.8 (TFE:5:EssXKppeRfV) |
Yandex | Clean |
TrellixENS | Artemis!BF0F05E857BC |
SentinelOne | Static AI - Suspicious PE |
MaxSecure | Clean |
Fortinet | W64/GenKryptik.WS!tr |
AVG | Win64:MalwareX-gen [Cryp] |
DeepInstinct | MALICIOUS |
alibabacloud | Trojan:Win/Zusy.AXHJ3DGW |
IRMA | Signature |
---|---|
Trend Micro SProtect (Linux) | Clean |
Avast Core Security (Linux) | Win64:MalwareX-gen [Cryp] |
C4S ClamAV (Linux) | Clean |
Trellix (Linux) | Clean |
Sophos Anti-Virus (Linux) | Mal/Generic-S |
Bitdefender Antivirus (Linux) | Gen:Variant.Zusy.594877 |
G Data Antivirus (Windows) | Virus: Gen:Variant.Zusy.594877 (Engine A) |
WithSecure (Linux) | Heuristic.HEUR/AGEN.1379366 |
ESET Security (Windows) | a variant of Win64/GenKryptik_AGen.AHT trojan |
DrWeb Antivirus (Linux) | Clean |
ClamAV (Linux) | Clean |
eScan Antivirus (Linux) | Gen:Variant.Zusy.594877(DB) |
Kaspersky Standard (Windows) | Clean |
Emsisoft Commandline Scanner (Windows) | Gen:Variant.Zusy.594877 (B) |