| MD5 | 3b52abef6df5761a5fdad741719fadeb |
| SHA1 | 87b4a3ed6cbe673ff2338e982419db8ba906239a |
| Filename | duplicate_of_the_transmitted_prescript.exe |
| Domains | [icanhazip.com] [www.download.windowsupdate.com] |
| IP Addresses | [104.238.141.75] [184.25.56.181] |
| Antivirus | [Mal/Upatre-S] |
| [PossibleThreat.P0] | |
| [TR/Upatre.cgjz.41] | |
| [Trojan-Downloader.Win32.Upatre.ckba] | |
| [Trojan.Upatre] | |
| [Trojan.Win32.Upatre.ckba] | |
| [TrojanDownloader:Win32/Upatre.BN] | |
| [Upatre-FACH!3B52ABEF6DF5] | |
| [Win32.Trojan.Fakedoc.Auto] |