1970-01-01 03:00:00
d42595b695fc008ef2c56aabd8efd68e
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .text | 0x00001000 | 0x000e2631 | 0x000e2800 | 6.27073844839 |
| .rdata | 0x000e4000 | 0x0010d498 | 0x0010d600 | 5.43247089591 |
| .data | 0x001f2000 | 0x003799a0 | 0x00330800 | 6.13652827637 |
| .pdata | 0x0056c000 | 0x00006210 | 0x00006400 | 5.21654496225 |
| .xdata | 0x00573000 | 0x000000b4 | 0x00000200 | 1.7832060128 |
| .idata | 0x00574000 | 0x0000053e | 0x00000600 | 3.94871861301 |
| .reloc | 0x00575000 | 0x0000497c | 0x00004a00 | 5.42542250265 |
| .symtab | 0x0057a000 | 0x00000004 | 0x00000200 | 0.0203931352361 |
| Antivirus | Signature |
|---|---|
| Bkav | W64.AIDetectMalware |
| Lionic | Trojan.Win32.Agent.Y!c |
| Elastic | malicious (high confidence) |
| ClamAV | Clean |
| CMC | Clean |
| CAT-QuickHeal | Clean |
| Skyhigh | BehavesLike.Win64.Ransomware.th |
| ALYac | Clean |
| Cylance | Unsafe |
| Zillya | Clean |
| Sangfor | Clean |
| CrowdStrike | win/malicious_confidence_70% (D) |
| Alibaba | Trojan:Win64/Quasar.1ec405f0 |
| K7GW | Trojan ( 005c917f1 ) |
| K7AntiVirus | Trojan ( 005c917f1 ) |
| huorong | Clean |
| Baidu | Clean |
| VirIT | Clean |
| Paloalto | generic.ml |
| Symantec | ML.Attribute.HighConfidence |
| tehtris | Generic.Malware |
| ESET-NOD32 | a variant of WinGo/Agent.AMI |
| APEX | Clean |
| Avast | MSIL:Quasar-A [Rat] |
| Cynet | Malicious (score: 100) |
| Kaspersky | VHO:Trojan.Win32.Agent.gen |
| BitDefender | Clean |
| NANO-Antivirus | Clean |
| ViRobot | Clean |
| MicroWorld-eScan | Clean |
| Tencent | Clean |
| Sophos | Mal/Generic-R |
| F-Secure | Trojan.TR/AVI.Quasar.uzzxj |
| DrWeb | BackDoor.QuasarNET.3 |
| VIPRE | Clean |
| TrendMicro | Clean |
| McAfeeD | ti!79DCF621D889 |
| Trapmine | suspicious.low.ml.score |
| CTX | exe.trojan.wingo |
| Emsisoft | Clean |
| Ikarus | Trojan-Dropper.WinGo.Agent |
| GData | Win64.Trojan.Agent.JHSTOB |
| Jiangmin | Clean |
| Webroot | Clean |
| Varist | Clean |
| Avira | TR/AVI.Quasar.uzzxj |
| Antiy-AVL | Clean |
| Kingsoft | Win32.Trojan.Agent.gen |
| Gridinsoft | Susp.U.XOREncoded.sd!yf |
| Xcitium | Clean |
| Arcabit | Clean |
| SUPERAntiSpyware | Clean |
| ZoneAlarm | Clean |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| Detected | |
| AhnLab-V3 | Malware/Win.Quasar.C5773013 |
| Acronis | Clean |
| VBA32 | Clean |
| TACHYON | Clean |
| Malwarebytes | Clean |
| Panda | Clean |
| Zoner | Clean |
| TrendMicro-HouseCall | Clean |
| Rising | Trojan.Agent!8.B1E (CLOUD) |
| Yandex | Clean |
| TrellixENS | Artemis!A3184BB8C1C6 |
| SentinelOne | Static AI - Suspicious PE |
| MaxSecure | Trojan.Malware.300983.susgen |
| Fortinet | W32/Agent.AMI!tr |
| AVG | MSIL:Quasar-A [Rat] |
| DeepInstinct | MALICIOUS |
| alibabacloud | Trojan:Multi/Agent.AZE |
| IRMA | Signature |
|---|---|
| Trend Micro SProtect (Linux) | Clean |
| Avast Core Security (Linux) | MSIL:Quasar-A [Rat] |
| C4S ClamAV (Linux) | Clean |
| Trellix (Linux) | Clean |
| Sophos Anti-Virus (Linux) | Mal/Generic-R |
| Bitdefender Antivirus (Linux) | Trojan.GenericKD.76688706 |
| G Data Antivirus (Windows) | Virus: Trojan.GenericKD.76688706 (Engine A) |
| WithSecure (Linux) | Trojan.TR/AVI.Quasar.uzzxj |
| ESET Security (Windows) | a variant of WinGo/Agent.AMI trojan |
| DrWeb Antivirus (Linux) | BackDoor.QuasarNET.3 |
| ClamAV (Linux) | Clean |
| eScan Antivirus (Linux) | Trojan.GenericKD.76688706(DB) |
| Kaspersky Standard (Windows) | UDS:Trojan.Win32.Fsysna.kasu |
| Emsisoft Commandline Scanner (Windows) | Trojan.GenericKD.76688706 (B) |