| MD5 | 68f133eeded97e2d62243053fdda2c85 | 
| SHA1 | 4ecb84f645c1cddc9c619aa3ae1f339c1ebe1e9f | 
| IPs | [157.56.77.155] | 
| IPs | [95.211.120.23] | 
| IPs | [64.74.223.41] | 
| IPs | [208.73.211.28] | 
| IPs | [8.8.4.4] | 
| Domains | [update.microsoft.com.nsatc.net] [photoserv10.info] [photoserv20.info] [photoserv40.info] [www.update.microsoft.com] [photoserv30.info] [photoserv50.info] [photoserv60.info] | 
| IP Addresses | [157.56.77.155] [95.211.120.23] [64.74.223.41] [208.73.211.28] [8.8.4.4] | 
| Antivirus | [Dropper.Generic6.BEXN] | 
| [TR/Ransom.EB.69] | |
| [Win.Trojan.Tepfer-371] |