| MD5 | 803602d299d577f727c66ded9c2e4213 |
| SHA1 | 59c614f0d315c5e39c39ccda0c898c5cc414616e |
| Filename | Move.exe |
| IPs | [65.55.27.220] |
| IPs | [8.8.4.4] |
| IPs | [217.23.4.155] |
| IPs | [217.23.4.107] |
| IPs | [46.183.217.148] |
| IPs | [87.245.242.10] |
| Domains | [www.update.microsoft.com] [bighecks.net] [sonic4us.ru] [imageshells.com] [www.yahgodz.com] |
| IP Addresses | [65.55.27.220] [8.8.4.4] [217.23.4.155] [217.23.4.107] [46.183.217.148] [87.245.242.10] |
| Antivirus | [BackDoor.Andromeda.22] |
| [Heur.Suspicious] | |
| [SHeur4.AZQI] | |
| [Spyware/Win32.Zbot] | |
| [Trj/Dtcontx.A] | |
| [Trojan-Downloader.Win32.Andromeda.qkp] | |
| [W32/Andromeda.QKP!tr.dldr] | |
| [Win32.TrojDownloader.Andromeda.q.(kcloud)] | |
| [Worm:Win32/Gamarue.I] |