| MD5 | 15e2dd46d3e8cacdfcd337f43cee6bce |
| SHA1 | 4b6ad0301d22903525d5455bff2ff3277709a6e9 |
| Filename | payment1872.zip |
| IPs | [202.153.35.133] |
| IPs | [213.175.194.96] |
| IPs | [74.125.28.100] |
| IPs | [212.227.67.194] |
| IPs | [212.227.67.195] |
| IPs | [193.203.50.17] |
| IPs | [184.25.57.9] |
| Domains | [continua.ltd.uk] [www.continua.ltd.uk] [stun.schlund.de] [www.download.windowsupdate.com] [stun.iptel.org] [stun.rixtelecom.se] [stun1.voiceeclipse.net] [www.drycleaningadvertising.net] |
| IP Addresses | [202.153.35.133] [213.175.194.96] [74.125.28.100] [212.227.67.194] [212.227.67.195] [193.203.50.17] [184.25.57.9] |
| Antivirus | [Artemis!5A0E6A8F6D3A] |
| [HEUR/QVM20.1.Malware.Gen] | |
| [Malware.QVM20.Gen] | |
| [PE:Malware.FakePDF@CV!1.9C28] | |
| [Upatre.FH] | |
| [Win32/TrojanDownloader.Waski.A] |