| MD5 | 0860360612d8d1984bd7add26109be1b | 
| SHA1 | 8789023136fa0a120ace4d0c452c07d28c957122 | 
| Filename | dogovor.exe | 
| Domains | [antonovaeroconceptflypower.ru] [www.google.com] [www.google.ca] | 
| IP Addresses | [155.94.239.146] [216.58.193.100] [216.58.193.99] | 
| Antivirus | [PWSZbot-FHN] | 
| [Spyware/Win32.Zbot.N2140262961] | |
| [Trj/GdSda.A] | |
| [Troj/Zbot-LLH] | |
| [Trojan-Spy.Win32.Zbot.xipi] | |
| [Trojan.PWS.Panda.10151] | |
| [Trojan.Win32.Panda.ehujkc] | |
| [TrojanSpy.Zbot!1HPwOLywFys] | |
| [Trojan[Spy]/Win32.Zbot] |