virustotal's antivirus scan report for the file with md5 6f6909857e3a8f9836188776ebf91c54 at 2016-03-10 12:50:38 utc. 30 out of 56 antivirus detected the file as malicious. some of the detections were: w32.hfsadware.216a, application.hacktool.li, hacktool.autokms.r3 (not a virus), trojan.win32.generic!bt, application.hacktool.li, unwanted-program ( 004b92a41 ), unwanted-program ( 004b92a41 ), riskware.nettool!, w32/trojan.yoyr-1095, not-a-virus:nettool.win64.rpchook.a, riskware.win32.procpatcher.dyzpbm, msil:malware.generic(thunder)!1.a1c4 [f], application.hacktool.li, generic pua df (pua), applicunsaf.win32.hacktool.kms.a, application.hacktool.li, artemis!1a5fc26d8596, spr/autokms.ahaz, hacktool:win32/autokms, application.hacktool.lk, nettool.win64.rpchook!c, application.hacktool