2026-07-01_93d933dfeeb19bd2b0eee62d9e5c4fab_agent-tesla_amadey_avoslocker_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_karagany_luca-stealer_lynx_njrat_play_remcos_rhadamanthys_rugmi_smoke-loader_stealc
- IMPHASH af457a899dff0be8f96c758b66fd5f37
- SHA256 9960d18600de90f5d818edb36c8a6750af1016b77478076daa09b888f92ed00d
-
Detects executables manipulated with Fody
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=1, id=152, version=20115,
count=33, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=15, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=118, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=102, id=1, productName=Unmarked objects,
count=1, id=174, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,