| MD5 | 3759e278345b00b651fae29990c7d4b4 |
| SHA1 | 85b7dbb43e6b96ff859891264d7a7c8a43eee546 |
| Domains | [www.update.microsoft.com.nsatc.net] [faumoussuperstars.ru] [powerrembo.ru] [update.microsoft.com] [109.120.180.29] [lunaizemlya.ru] |
| IP Addresses | [134.170.58.222] [134.170.58.221] [109.120.155.30] |
| Antivirus | [Malware-gen*Win32*Malware-gen] |
| [Trojan-Downloader.Win32.Wauchos] | |
| [Trojan.Kovter] | |
| [Trojan.PWS.Steam.5781] | |
| [VirTool*Win32/Obfuscator.ANM] | |
| [W32/Agent.XL.gen!Eldorado] | |
| [W32/Kryptik.DVBJ!tr] | |
| [Win32/TrojanDownloader.Wauchos.AK] |