| MD5 | 614cba2137d44d53eeda1d4f52cd846a |
| SHA1 | 90f2c046bb8d3a7eebc1bc5c5e8a12cbfc6bdb8d |
| Domains | [wefindco.com] [theindianretreats.com] [sealcommerce.co] [westhollywooddentaloffice.com] [surusegitimmerkezi.com] |
| IP Addresses | [206.190.152.224] [97.74.144.149] [188.166.246.184] [184.168.24.1] [94.73.151.173] |
| Antivirus | [0x59a841e6] |
| [Mal/Wonton-CB] | |
| [Ransom*Win32/Tescrypt.E] | |
| [Ransom.Crowti.WR7] | |
| [Trojan-FHTP!614CBA2137D4] | |
| [Trojan-Ransom.Win32.Bitman.hjc] | |
| [Trojan.Bitman.Win32.880] | |
| [Trojan.Encoder.3677] | |
| [W32/Agent.XL.gen!Eldorado] | |
| [W32/Kryptik.EMOB!tr] |