virustotal's antivirus scan report for the file with md5 1a5fc26d8596c2573c7a5e480fb94724 at 2015-12-09 12:26:22 utc. 23 out of 55 antivirus detected the file as malicious. some of the detections were: w32.hfsadware.216a, application.hacktool.li, artemis!1a5fc26d8596, application.hacktool.li, unwanted-program ( 004b92a41 ), unwanted-program ( 004b92a41 ), riskware.win32.procpatcher.dyzpbm, trojan.gen.2, riskware.nettool!, application.hacktool.li, generic pua id (pua), trojan.win32.generic!bt, behaveslike.win32.pup.wc, w32/trojan.yoyr-1095, spr/autokms.ahaz, hacktool:win32/autokms, application.hacktool.li, hacktool/win32.crack, trojan.win32.generic!bt, trj/ci.a, a variant of msil/hacktool.idlekms.e potentially unsafe, riskware/rpchook, hacktool.win64.rpchook.a