| SXLOC.DLL | |
| PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | 6144 bytes |
| 2016-10-17 21:45:11 | |
| e779d0f1aafd8d3894675d8b514709e9 | |
| 4249322f1d147157d83605c667c6bf468dfec626 | |
| 43b638a083a73039251b08d6a889df1f2c350b0246fb4a95d5db8d3a73c3a682 | |
| 100202a986455bd86900a9ca761c8b6ebf5c9a0eb260dd6a2941555e680a21e822133470abc517cc74775945c6bdb4c1796e6d3624483534dc3e22ffcf0072e8 | |
| 96:4bFtUaphSvcIs8ck3rLsRLVSboqy50Yl/87BF5EQD:4bTUagH3EgStk7Ga | |
| N/A | |
| N/A | |
| Source: |

| ALYac | Trojan.Inject.GE |
| AVG | Win32/DH.FF8401B9{Mw} |
| Ad-Aware | Trojan.Inject.GE |
| AegisLab | Troj.W32.Agent.kYSj |
| AhnLab-V3 | Malware/Win32.Generic.C1431374 |
| Arcabit | Trojan.Inject.GE |
| BitDefender | Trojan.Inject.GE |
| CrowdStrike | malicious_confidence_100% (D) |
| Cyren | W32/SuspPack.T.gen!Eldorado |
| ESET-NOD32 | a variant of Win32/Korplug.HJ |
| Emsisoft | Trojan.Inject.GE (B) |
| F-Prot | W32/SuspPack.T.gen!Eldorado |
| F-Secure | Trojan.Inject.GE |
| GData | Trojan.Inject.GE |
| Ikarus | Backdoor.Win32.Poison |
| Invincea | worm.win32.gamarue.n |
| Kaspersky | Backdoor.Win32.Gulpix.beb |
| McAfee | Artemis!E779D0F1AAFD |
| McAfee-GW-Edition | Artemis!Trojan |
| MicroWorld-eScan | Trojan.Inject.GE |
| Microsoft | Trojan:Win32/Toga!rfn |
| NANO-Antivirus | Virus.Win32.Gen.ccmw |
| Qihoo-360 | HEUR/QVM40.1.0000.Malware.Gen |
| Sophos | Troj/Plugx-AP |
| Tencent | Win32.Backdoor.Gulpix.Akov |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\IMM |
| HKEY_USERS\S-1-5-21-1547161642-507921405-839522115-1004\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers |
| HKEY_CURRENT_USER\SOFTWARE\Microsoft\CTF |
| HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\SystemShared |