| MD5 | 3b6d06524a46b2906ba802ff2580e7b1 |
| SHA1 | 832685dbb5a58e118f537ecc080a024d54dbc1ad |
| Filename | VIR2.xor |
| Domains | [corneliusfrench.com] |
| IP Addresses | [188.40.248.66] |
| Antivirus | [Mal/Isda-B] |
| [Ransom:Win32/Isda.A] | |
| [Ransomware-FDE!3B6D06524A46] | |
| [Trojan-Dropper.Win32.Injector.octt] | |
| [Trojan.DownLoader19.15183] | |
| [Trojan.DR.Injector!YCMZNMRR4Yw] | |
| [Trojan.Graftor.D418E7] | |
| [Trojan.Win32.DownLoader19.dzzqha] | |
| [Trojan.Win32.Filecoder] | |
| [Trojan[Ransom]/Win32.Aura] |