| Ad-Aware | Gen:Trojan.Heur.UT.yrW@byntOnoi | 20170611 |
| AegisLab | Gen.Troj.Heur!c | 20170611 |
| Arcabit | Trojan.Heur.UT.EBDE14 | 20170611 |
| Baidu | Win32.Trojan.WisdomEyes.16070401.9500.9999 | 20170608 |
| BitDefender | Gen:Trojan.Heur.UT.yrW@byntOnoi | 20170611 |
| Bkav | HW32.Packed.5B95 | 20170610 |
| CrowdStrike Falcon (ML) | malicious_confidence_100% (W) | 20170420 |
| Emsisoft | Gen:Trojan.Heur.UT.yrW@byntOnoi (B) | 20170611 |
| Endgame | malicious (high confidence) | 20170515 |
| ESET-NOD32 | a variant of Win32/Agent.YXW | 20170611 |
| F-Secure | Gen:Trojan.Heur.UT.yrW@byntOnoi | 20170611 |
| GData | Gen:Trojan.Heur.UT.yrW@byntOnoi | 20170611 |
| Invincea | heuristic | 20170607 |
| McAfee | Artemis!3B53E66F34BE | 20170611 |
| McAfee-GW-Edition | BehavesLike.Win32.Dropper.tc | 20170610 |
| eScan | Gen:Trojan.Heur.UT.yrW@byntOnoi | 20170611 |
| Palo Alto Networks (Known Signatures) | generic.ml | 20170611 |
| Rising | Malware.Generic.5!tfe (thunder:5:Fg6CbBUYvS) | 20170611 |
| SentinelOne (Static ML) | static engine - malicious | 20170516 |
| Sophos | Mal/Generic-S | 20170611 |
| Symantec | ML.Attribute.HighConfidence | 20170610 |
| Tencent | Win32.Trojan.Heur.Lkxn | 20170611 |
| VBA32 | Malware-Cryptor.General.35 | 20170609 |