2026-08-03_9d1535aad03b11f77d61826d719066d5_amadey_avoslocker_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_lynx_metamorfo_njrat_pos_remcos_revil_smoke-loader
- SHA256 9e110fb26dba4c48846fc37581c889f5b70afb4d4b7aaf8962f75499a9671d41
-
Detects Windows executables referencing non-Windows User-Agents
-
Detects encrypted or obfuscated .NET executables
-
Detects executables packed with Dotfuscator
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=15, id=259, version=27412,
count=220, id=261, version=27412,
count=39, id=261, version=30034,
count=22, id=260, version=30034,
count=28, id=259, version=30034,
count=1, id=263, version=27412,
count=21, id=260, version=27412,
count=27, id=170, productName=VS2010 build 30319, version=30319,
count=5, id=259, version=30140,
count=62, id=260, productName=VS2017 v15.5.6 build 25835, version=25835,
count=1, productName=Unmarked objects (old),
count=43, id=257, version=27412,
count=457, id=1, productName=Unmarked objects,
count=697, id=260, version=30140,
count=1, id=255, version=30140,
count=1, id=151,
count=1, id=258, version=30140,