| N/A | |
| PE32 executable (GUI) Intel 80386, for MS Windows | 970752 |
| N/A | |
| b8f35aa90cd1fbbff6ba099ceae857df | |
| d426612fbd32492678bd9df7b99de7794a999eb4 | |
| f35d3044ddb52b082bb87f806b47c0025a6bb9c0f4faf002452730e3d3b8d6aa | |
| N/A | |
| N/A | |
| N/A | |
| N/A | |
| PE32 | |
| mydocs | |
| 948 kB | |
| Intel 386 or later, and compatibles | |
| Windows NT 32-bit | |
| 610304 | |
| 4.0 | |
| 0x5149 | |
| 0x003f | |
| 8.0 | |
| N/A | |
| N/A | |
| 6.00.3790.3959 (srv03_sp2_rtm.070216-1710) | |
| 1867776 | |
| My Documents Folder UI | |
| 6.0.3790.3959 | |
| Microsoft® Windows® Operating System | |
| Microsoft Corporation | |
| application/octet-stream | |
| Unicode | |
| English (U.S.) | |
| 6.0.3790.3959 | |
| Win32 EXE | |
| mydocs.dll | |
| © Microsoft Corporation. All rights reserved. | |
| Windows GUI | |
| Dynamic link library | |
| 0.0 | |
| (none) | |
| 4.0 | |
| 6.00.3790.3959 | |
| Source: |

| AVG | Crypt_s.BUL |
| AhnLab-V3 | Trojan/Win32.Tepfer |
| Avast | Win32:Kryptik-MJU [Trj] |
| BitDefender | Gen:Variant.Kazy.201661 |
| Comodo | TrojWare.Win32.Kryptik.BFUC |
| ESET-NOD32 | a variant of Win32/Kryptik.BFUC |
| Emsisoft | Gen:Variant.Kazy.201661 (B) |
| F-Secure | Gen:Variant.Kazy.201661 |
| Fortinet | W32/Kelihos.BC!tr |
| GData | Gen:Variant.Kazy.201661 |
| Kaspersky | Trojan-PSW.Win32.Tepfer.nsol |
| Malwarebytes | Malware.Packer.FMS2 |
| McAfee | RDN/Generic.tfr!dm |
| McAfee-GW-Edition | RDN/Generic.tfr!dm |
| Microsoft | Backdoor:Win32/Kelihos.F |
| Norman | Kelihos.TJS |
| Panda | Trj/Genetic.gen |
| VBA32 | BScope.Trojan.Hlux |
| VIPRE | Trojan.Win32.Generic!BT |