SOPHOS lab…quick as usuall :wink:

WIN32.EXE -- identity created/updated (New detection Troj/Zegost-R)

Norman

This file is multi-compressed file. Firstly compressed with SFX and after that compressed with UHARC Compresses. Actual compressed file is already detected by Norman. Detection on this archive may lead to FP. Actual Win32.exe is detected as W32/Packed_NSPack.A.