| ALYac | Generic.Remcos.0A5B1918 |
| APEX | Malicious |
| AVG | Win32:RATX-gen [Trj] |
| AhnLab-V3 | Backdoor/Win.Remcos.R625673 |
| Antiy-AVL | Trojan[Backdoor]/Win32.Rescoms.b |
| Arcabit | Generic.Remcos.0A5B1918 |
| Avast | Win32:RATX-gen [Trj] |
| Avira | BDS/Backdoor.Gen |
| Baidu | Win32.Trojan.Kryptik.awm |
| BitDefender | Generic.Remcos.0A5B1918 |
| BitDefenderTheta | Gen:NN.ZexaF.36810.ECW@auvQ3uii |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Backdoor.RemcosIH.S31010159 |
| ClamAV | Win.Trojan.Remcos-9841897-0 |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.eb2cc7 |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | BackDoor.Remcos.433 |
| ESET-NOD32 | Win32/Rescoms.V |
| Elastic | Windows.Trojan.Remcos |
| Emsisoft | Generic.Remcos.0A5B1918 (B) |
| F-Secure | Backdoor.BDS/Backdoor.Gen |
| FireEye | Generic.mg.437b017eb2cc7db4 |
| Fortinet | W32/Rescoms.U!tr |
| GData | Win32.Trojan.PSE.1OHYAG0 |
| Google | Detected |
| Gridinsoft | Ransom.Win32.Wacatac.oa!s1 |
| Ikarus | Backdoor.Remcos |
| Jiangmin | Backdoor.Remcos.dyc |
| K7AntiVirus | Riskware ( 00584baa1 ) |
| K7GW | Riskware ( 00584baa1 ) |
| Kaspersky | HEUR:Backdoor.Win32.Remcos.gen |
| Kingsoft | malware.kb.a.1000 |
| MAX | malware (ai score=82) |
| Malwarebytes | Generic.Malware.AI.DDS |
| MaxSecure | Trojan.Malware.121218.susgen |
| McAfee | Remcos-FDQO!437B017EB2CC |
| McAfeeD | Real Protect-LS!437B017EB2CC |
| MicroWorld-eScan | Generic.Remcos.0A5B1918 |
| Microsoft | Backdoor:Win32/Remcos.GA!MTB |
| NANO-Antivirus | Trojan.Win32.Remcos.keikbt |
| Panda | Trj/Genetic.gen |
| Rising | Backdoor.Remcos!1.BAC7 (CLASSIC) |
| SUPERAntiSpyware | Trojan.Agent/Gen-Remcos |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Remcos.gh |
| Sophos | Mal/Remcos-B |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Backdoor.Win32.Remcos.kb |
| VBA32 | Backdoor.Remcos |
| VIPRE | Generic.Remcos.0A5B1918 |
| Varist | W32/Trojan.SMWB-4856 |
| VirIT | Trojan.Win32.Genus.UED |
| Zillya | Trojan.Rescoms.Win32.1521 |
| ZoneAlarm | HEUR:Backdoor.Win32.Remcos.gen |
| huorong | Backdoor/Remcos.k |
| Alibaba | Backdoor:Win32/Remcos.e1d7e3fa |
| BitDefenderTheta | Gen:NN.ZexaF.36812.ECW@auvQ3uii |
| CrowdStrike | win/malicious_confidence_100% (W) |
| K7GW | Trojan ( 0056cd541 ) |
| Kingsoft | Win32.Hack.Remcos.gen |
| Lionic | Trojan.Win32.Remcos.m!c |
| MaxSecure | Trojan.Malware.9833444.susgen |
| Paloalto | generic.ml |
| ViRobot | Trojan.Win.Z.Remcos.494592.TT |
| Xcitium | Malware@#30li4a5prq46v |
| Yandex | Trojan.Rescoms!UD1aXITfKmk |
| ALYac | Gen:Variant.Application.Tedy.16065 |
| AVG | Win32:MalwareX-gen [Rat] |
| Antiy-AVL | Trojan[Backdoor]/Win32.Remcos |
| Arcabit | Trojan.Application.Tedy.D3EC1 |
| Avast | Win32:MalwareX-gen [Rat] |
| BitDefender | Gen:Variant.Application.Tedy.16065 |
| CTX | exe.trojan.remcos |
| ESET-NOD32 | Win32/Rescoms.V trojan |
| Emsisoft | Gen:Variant.Application.Tedy.16065 (B) |
| GData | Gen:Variant.Application.Tedy.16065 |
| Gridinsoft | Trojan.Win32.Wacatac.oa!s1 |
| K7AntiVirus | Backdoor ( 005ce3801 ) |
| K7GW | Backdoor ( 005ce3801 ) |
| Malwarebytes | Remcos.Backdoor.Bot.DDS |
| MicroWorld-eScan | Gen:Variant.Application.Tedy.16065 |
| Skyhigh | BehavesLike.Win32.Mal_remcos_rat.gh |
| Sophos | Troj/Remcos-APM |
| Symantec | Trojan.Gen.MBT |
| TrellixENS | Remcos-FDQO!437B017EB2CC |
| TrendMicro | Backdoor.Win32.REMCOS.SMCHD |
| TrendMicro-HouseCall | Backdoor.Win32.REMCOS.SMCHD |
| VIPRE | Gen:Variant.Application.Tedy.16065 |
| Webroot | W32.Malware.gen |
| ZoneAlarm | Troj/Remcos-APM |
| alibabacloud | Backdoor:Win/Remcos |