| MD5 | 5394b16c92d418903c52eaeddf65c5d7 |
| SHA1 | 14f1398582f444382724577300303f915f4095b0 |
| Domains | [microsoft.com] [e3673.dspg.akamaiedge.net] [download.microsoft.com] |
| IP Addresses | [134.170.185.46] [134.170.188.221] [23.13.158.244] |
| Antivirus | [Backdoor.Bot] |
| [Downloader.Upatre.Win32.52695] | |
| [Trojan-Downloader.Win32.Upatre.etrh] | |
| [Trojan.DownLoader15.5888] | |
| [Trojan.Girtk.DWMB.qsyf] | |
| [Trojan.Ransomlock.AK] | |
| [W32/Ransom.CBVO-3522] | |
| [W32/Upatre.DWMB!tr.dldr] | |
| [Win32/Kryptik.DWMB] |