| MD5 | 4b163d55d3ffbd0220256bb423990761 | 
| SHA1 | 7655fb1de8dc844b31a93fe339a850ecc8fd94bc | 
| Domains | [update.down123.net] [www.58ad.cn] [58ad.cn] [91ww.91fu.com] | 
| IP Addresses | [115.28.45.16] [119.97.143.26] [119.97.143.85] [119.97.143.18] [119.97.143.21] [119.97.143.25] | 
| Antivirus | [Mal/VMProtBad-A] | 
| [Malware-gen*Win32*Malware-gen] | |
| [Trojan.Click3.11739] | |
| [Trojan.Win32.VMProtect] | |
| [Trojan.Yoddos.Win32.474] | |
| [W32/S-74fc28cb!Eldorado] | |
| [W32/VMProtBad.A!tr] | |
| [Win32/Blacked] | |
| [Win32/Packed.VMProtect.ABD] |