| MD5 | 5580155259ea5c4098807e68f4721c83 |
| SHA1 | d14d6782a7554d134f3221764a3bbe60b0389932 |
| Domains | [www.update.microsoft.com.nsatc.net] [update.microsoft.com] [windowsupdatesecurity.ru] |
| IP Addresses | [191.232.80.55] [157.55.240.94] |
| Antivirus | [Inject3.YPO] |
| [TR/Dropper.VB.47445] | |
| [VirTool.VBInject.LE3] | |
| [W32/Injector.CISM!tr] | |
| [Win32/Injector.BJVG] | |
| [Worm*Win32/Gamarue] |