| N/A | |
| PE32+ executable (native) x86-64, for MS Windows | 63264 |
| N/A | |
| 9283df55e2f9af1ce279bf82d63c542d | |
| 82d0458adf22ae6896e82e45f16c72e0a2bffe5d | |
| 8865c09c99bbb94311009c5d5520c92be12700b297b6c411cb6f51cc68c60a06 | |
| N/A | |
| N/A | |
| N/A | |
| N/A | |
| PE32+ | |
| application/octet-stream | |
| 9.0 | |
| N/A | |
| 4096 | |
| 6.1 | |
| Win32 EXE | |
| 62 kB | |
| AMD AMD64 | |
| 6.1 | |
| Native | |
| 56832 | |
| 6.1 | |
| 0x12064 | |
| Source: |

| AVG | Hider.ZHL |
| AntiVir | TR/Rootkit.Gen |
| ESET-NOD32 | a variant of Win64/Rootkit.Kryptik.V |
| Malwarebytes | Rootkit.Necurs.GO |
| Tencent | Win32.Trojan.Falsesign.Hsid |