| ALYac | GT:VB.Orcinius.1.CE0511A4 |
| AVG | MO97:Downloader-GP [Trj] |
| AhnLab-V3 | W97M/Zorex |
| Antiy-AVL | Trojan[Downloader]/Script.Agent |
| Arcabit | HEUR.VBA.Trojan.d |
| Avast | MO97:Downloader-GP [Trj] |
| Avira | HEUR/Macro.Downloader |
| Baidu | VBA.Trojan-Downloader.Agent.dgf |
| BitDefender | GT:VB.Orcinius.1.CE0511A4 |
| CAT-QuickHeal | O97M.Downloader.39037 |
| CTX | xls.unknown.orcinius |
| Cynet | Malicious (score: 99) |
| DrWeb | W97M.DownLoader.7200 |
| ESET-NOD32 | VBA/TrojanDownloader.Agent.IGI trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | GT:VB.Orcinius.1.CE0511A4 (B) |
| F-Secure | Trojan:W97M/MaliciousMacro.GEN |
| Fortinet | VBA/Agent.IGI!tr.dldr |
| GData | GT:VB.Orcinius.1.CE0511A4 |
| Google | Detected |
| Ikarus | Trojan.Script.Agent |
| Jiangmin | MSOffice.DownLoader.Synaptics |
| Kaspersky | HEUR:Trojan-Downloader.MSOffice.Agent.gen |
| MaxSecure | Downloader.W32.MSOffice.Agent.gen |
| McAfeeD | Trojan:Office/Downloader_Redline.NEAA |
| MicroWorld-eScan | GT:VB.Orcinius.1.CE0511A4 |
| Microsoft | Trojan:O97M/Madeba.A!det |
| NANO-Antivirus | Trojan.Ole2.Vbs-heuristic.druvzi |
| Rising | Downloader.Synaptics/VBA!1.C7E9 (CLASSIC) |
| Sangfor | Virus.Generic-Macro.Save.Synaptics |
| SentinelOne | Static AI - Malicious OLE |
| Skyhigh | BehavesLike.OLE2.Bad-VBA.mr |
| Sophos | Troj/DocDl-JJH |
| Symantec | X97M.Zorex |
| TACHYON | Suspicious/X97M.XSR.Gen |
| Tencent | Trojan.Win32.MacroS.11022980 |
| TrellixENS | X97M/Downloader.ep |
| TrendMicro | W2KM_DLOADER.THEBAAH |
| TrendMicro-HouseCall | W2KM_DLOADER.THEBAAH |
| VBA32 | TrojanDownloader.O97M.Agent |
| VIPRE | GT:VB.Orcinius.1.CE0511A4 |
| Varist | PP97M/Agent.BLW.gen!Eldorado |
| Zoner | Trojan.DOC.132395 |
| huorong | OMacro/Downloader.axn |
| VirusTotal Report submitted 2026-02-21 07:31:44 UTC |
