| MD5 | 00ae318d12d52b832ed0ca6de13316a3 |
| SHA1 | 2298ee8a7b211b2028236c1ead2ca15aa556f409 |
| Domains | [www.update.microsoft.com.nsatc.net] [windowsupdate.microsoft.com] |
| IP Addresses | [134.170.58.221] [65.55.50.189] |
| Antivirus | [Downloader.Agent.16.AA] |
| [Downloader.Ponik] | |
| [Ransom-CTB!00AE318D12D5] | |
| [TR/Cabhot.A.95] | |
| [Troj/Agent-ALFM] | |
| [Trojan-Downloader.Win32.Cabby.cbtj] | |
| [Trojan-Downloader.Win32.Upatre] | |
| [Trojan.Agent.BHHS] |