| N/A | |
| PE32 executable (GUI) Intel 80386, for MS Windows | 2585 |
| N/A | |
| d182c37510cfaaab00223ee2bedf4205 | |
| 03082d12a4e1a6087cca539d5f7f1d0cce34a3f1 | |
| 9b3e51f520165536deb5ac6ac2e35a08fcea89ddf1a3a038398de95aab564af6 | |
| N/A | |
| N/A | |
| N/A | |
| N/A | |
| PE32 | |
| application/octet-stream | |
| 6.0 | |
| N/A | |
| 46080 | |
| 0.0 | |
| Win32 EXE | |
| 2.5 kB | |
| Intel 386 or later, and compatibles | |
| Error processing PE data dictionary | |
| 4.0 | |
| Windows GUI | |
| N/A | |
| 4.0 | |
| 0x6a88 | |
| Source: |

| AVG | Generic_r.EKO |
| AegisLab | Troj.W32.Gen |
| AhnLab-V3 | Trojan/Win32.Rbot |
| Comodo | Heur.Corrupt.PE |
| McAfee-GW-Edition | BehavesLike.Win32.Downloader.xz |
| TheHacker | W32/Behav-Heuristic-CorruptFile-EP |