| APEX | Malicious |
| BitDefenderTheta | Gen:NN.ZemsilF.36808.0m2@auxrNE |
| Bkav | W32.AIDetectMalware.CS |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.PackedNET.2979 |
| Elastic | malicious (high confidence) |
| FireEye | Generic.mg.0cfedb587d34de73 |
| Fortinet | MSIL/GenericKDS.61009645!tr |
| Kaspersky | VHO:Trojan.MSIL.Crypt.gen |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfeeD | ti!7D811633533F |
| Paloalto | generic.ml |
| SentinelOne | Static AI - Malicious PE |
| Symantec | Scr.Malcode!gdn33 |
| Trapmine | malicious.moderate.ml.score |
| VBA32 | TrojanLoader.MSIL.DaVinci.Heur |
| ZoneAlarm | VHO:Trojan.MSIL.Crypt.gen |
| ALYac | Generic.Dacic.3435.4D5F7167 |
| AVG | Win32:MalwareX-gen [Pws] |
| AhnLab-V3 | Trojan/Win.PWSX-gen.C5650812 |
| Arcabit | Generic.Dacic.3435.4D5F7167 |
| Avast | Win32:MalwareX-gen [Pws] |
| Avira | TR/AD.Nekark.csyem |
| BitDefender | Generic.Dacic.3435.4D5F7167 |
| CAT-QuickHeal | Trojan.Ghanarava.173336438935e4b2 |
| CTX | exe.trojan.msil |
| ClamAV | Win.Packed.Generic-10033503-0 |
| ESET-NOD32 | a variant of MSIL/Kryptik.ALYZ |
| Emsisoft | Generic.Dacic.3435.4D5F7167 (B) |
| F-Secure | Trojan.TR/AD.Nekark.csyem |
| Fortinet | MSIL/Formbook.D5D0!tr.spy |
| GData | Generic.Dacic.3435.4D5F7167 |
| Google | Detected |
| Ikarus | Trojan.MSIL.Inject |
| K7AntiVirus | Trojan ( 005b80d61 ) |
| K7GW | Trojan ( 005b80d61 ) |
| Kaspersky | HEUR:Trojan.MSIL.Crypt.gen |
| Kingsoft | MSIL.Trojan.Crypt.gen |
| Lionic | Trojan.Win32.Dacic.4!c |
| Malwarebytes | Trojan.MalPack.PNG.Generic |
| MaxSecure | Trojan.Malware.11716371.susgen |
| MicroWorld-eScan | Generic.Dacic.3435.4D5F7167 |
| Microsoft | Trojan:MSIL/Formbook.AMAO!MTB |
| NANO-Antivirus | Trojan.Win32.Nekark.kqzcsz |
| Panda | Trj/Chgt.AD |
| Rising | Trojan.Crypt!8.2E3 (C64:YzY0OpiOoLJN561g) |
| Sangfor | Trojan.Msil.Agent.Vnmg |
| Skyhigh | Artemis!Trojan |
| Sophos | Mal/Generic-S |
| Symantec | MSIL.Packed.43 |
| Tencent | Malware.Win32.Gencirc.14127be4 |
| TrellixENS | Artemis!0CFEDB587D34 |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04C9j |
| VBA32 | TScope.Trojan.MSIL |
| VIPRE | Generic.Dacic.3435.4D5F7167 |
| Varist | W32/MSIL_Kryptik.LGK.gen!Eldorado |
| ViRobot | Trojan.Win.Z.Crypt.862952 |
| Webroot | W32.Trojan.Gen |
| Zillya | Trojan.Kryptik.Win32.4836630 |
| alibabacloud | Trojan:MSIL/Znyonm.Gen |
| huorong | HEUR:TrojanSpy/MSIL.AgentTesla.sl |