| 06cd917aa83a03480c0cc4842470b3dbdb76de69ab51e4666eff759f5ac23348 | |
| PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | 266240 bytes |
| 2016-07-20 23:57:13 | |
| c34dcc3e7b3e2af2064dc58aa917339e | |
| 496c885f15ef38db95df568d89bd2b18a39b62a4 | |
| 06cd917aa83a03480c0cc4842470b3dbdb76de69ab51e4666eff759f5ac23348 | |
| d4cbefc0d882a3bc07973f8656af8540ca525fcbea88b4a10d42efc9184390a636592352f878952135fe7bb1956c8380950088f8c9e649f013dab0e2a6338b9b | |
| 6144:zzXVZsMWyyzUFm3/UhaZUyAAJzZjBNNxL:PsMWyWUFmP+sUyAAhZjBNNx | |
| 7a93a8695cfea2eef3e3bc2d80e1faa0 | |
| N/A | |

| AVG | Downloader.Generic14.AOAZ |
| AVware | Trojan.Win32.Generic!BT |
| AegisLab | Uds.Dangerousobject.Multi!c |
| AhnLab-V3 | Trojan/Win32.Necurs.N1923457426 |
| Antiy-AVL | Trojan/Win32.TSGeneric |
| Avast | Win32:Malware-gen |
| Avira | TR/Dldr.Agent.266240.39 |
| Cyren | W32/Trojan.VOCV-4200 |
| ESET-NOD32 | a variant of Win32/TrojanDownloader.Necurs.L |
| Fortinet | W32/Necurs.L!tr.dldr |
| Ikarus | Trojan-Downloader.Win32.Necurs |
| K7AntiVirus | Trojan-Downloader ( 004df02c1 ) |
| K7GW | Trojan-Downloader ( 004df02c1 ) |
| Kaspersky | UDS:DangerousObject.Multi.Generic |
| Malwarebytes | Backdoor.Bot |
| McAfee | RDN/Generic Downloader.x |
| McAfee-GW-Edition | RDN/Generic Downloader.x |
| Qihoo-360 | HEUR/QVM30.1.Malware.Gen |
| Sophos | Mal/Generic-S |
| Symantec | Heur.AdvML.C |
| TheHacker | Trojan/Downloader.Necurs.l |
| VIPRE | Trojan.Win32.Generic!BT |
| ViRobot | Trojan.Win32.Z.Necurs.266240[h] |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\IMM |
| HKEY_USERS\S-1-5-21-1547161642-507921405-839522115-1004\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers |
| HKEY_CURRENT_USER\SOFTWARE\Microsoft\CTF |
| HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\SystemShared |