| MD5 | 6af3c39dc467711763c0cdea42bdf686 | 
| SHA1 | 8e8870ebcce635be6305584c38c976a3ff6bf2a7 | 
| Filename | 9412.exe | 
| Domains | [ipgeoapi.com] [logs.rgbdomsrv.com] [mystats.rgbdomsrv.com] [err.rgbdomsrv.com] [zip.rgbdomsrv.com] [zipf.rgbdomsrv.com] [dl.keyprobox.com] [download.rgbdomsrv.com] [tracking.instnode.com] [s1.symcb.com] | 
| IP Addresses | [50.19.93.13] [69.16.175.10] [54.231.34.100] [69.16.175.42] [198.58.120.143] [23.49.133.163] [8.254.230.30] [50.116.29.84] [54.231.10.12] [54.243.161.21] | 
| Antivirus | [Adware.Win32.CrossAd.CT] | 
| [ADWARE/CrossRider.1979976] | |
| [AppRider] | |
| [Artemis!6AF3C39DC467] | |
| [Artemis!Trojan] | |
| [Crossrider] | |
| [PUA.CrossRider!] | |
| [PUP.Optional.CrossBrowse] |