| MD5 | 4b877573d48a35756ecac5af96b04021 |
| SHA1 | 4f4df241dd87d2ad789a1a7e6634a46770946548 |
| Domains | [microsoft.com] [a767.dscms.akamai.net] [download.microsoft.com] |
| IP Addresses | [134.170.188.221] [134.170.185.46] [72.246.43.8] [72.246.43.42] |
| Antivirus | [Downloader.Upatre.Win32.51567] |
| [Pakes.RDW] | |
| [Trojan*Win32/Dynamer!ac] | |
| [Trojan-Downloader.Win32.Upatre.epvj] | |
| [Trojan.Kovter] | |
| [Trojan.MulDrop6.3116] | |
| [Trojan.Ransomlock.AK] | |
| [Trojan.Win32.Kovter] | |
| [W32/Ransom.KIYU-6928] | |
| [W32/Upatre.EPVJ!tr.dldr] |