| N/A | |
| PE32 executable (GUI) Intel 80386, for MS Windows | 32256 |
| N/A | |
| c3470e61990a6ee564b0516388eabf05 | |
| 701fd5802b9fa5712dcc37f60127fafd7234fadc | |
| 1379d9d277ffc6b42de797b9fea0edb06e13b239b20e4a166f6129af0160be1c | |
| N/A | |
| N/A | |
| N/A | |
| N/A | |
| PE32 | |
| Microsoft Installer | |
| (c) Microsoft Corp. | |
| Microsoft Installer | |
| 32 kB | |
| Intel 386 or later, and compatibles | |
| Win32 | |
| 23552 | |
| 4.0 | |
| 0x546c | |
| 0x003f | |
| 2.25 | |
| N/A | |
| N/A | |
| 6.0.2900.5512 | |
| 7680 | |
| Microsoft Installer | |
| 6.0.2900.5512 | |
| Microsoft Installer | |
| (c) Microsoft Corp. | |
| application/octet-stream | |
| Windows, Cyrillic | |
| Russian | |
| 6.0.2900.5512 | |
| Win32 EXE | |
| Microsoft Installer | |
| (c) Microsoft Corp. | |
| Windows GUI | |
| Executable application | |
| 0.0 | |
| Possibly corrupt Version resource | |
| (none) | |
| 4.0 | |
| 6.0.2900.5512 | |
| Source: |

| AntiVir | TR/Spy.32256.49 |
| BitDefender | Gen:Trojan.Heur.bG0@ru8OU9fc |
| Comodo | Heur.Packed.Unknown |
| F-Secure | Gen:Trojan.Heur.bG0@ru8OU9fc |
| GData | Gen:Trojan.Heur.bG0@ru8OU9fc |
| Ikarus | Backdoor.Win32.DarkMoon.BE |
| McAfee | New Malware.lq |
| McAfee-GW-Edition | Heuristic.BehavesLike.Win32.Trojan.H |
| Sophos | Troj/Agent-MXR |
| a-squared | Backdoor.Win32.DarkMoon.BE!IK |