| MD5 | 9ef3a35b3d2eea25ba68688b896cc39e |
| SHA1 | ab7112f357306c5c77452e6e3b2d19a70bab8af7 |
| Filename | syshost.exe_ |
| IPs | [134.170.185.46] |
| IPs | [108.61.73.243] |
| IPs | [67.227.252.196] |
| IPs | [208.75.89.4] |
| IPs | [85.25.243.245] |
| Domains | [microsoft.com] [dxtygqilhlxmq.com] [tzfptlmypfbitpe.com] [mucixxsgpkfwi.com] [fbeqmoeowcejunk.com] [0.pool.ntp.org] [1.pool.ntp.org] [2.pool.ntp.org] [npkxghmoru.biz] |
| IP Addresses | [134.170.185.46] [108.61.73.243] [67.227.252.196] [208.75.89.4] [85.25.243.245] |
| Antivirus | [Artemis!9EF3A35B3D2E] |
| [Dropper/Win32.Necurs] | |
| [Generic36.AHFC] | |
| [HEUR/QVM20.1.Malware.Gen] | |
| [HW32.Packed.70BB] | |
| [Mal/Generic-S] | |
| [PE:Trojan.Win32.Generic.178DBBFD!395164669] | |
| [Rootkit.Necurs.FMSGen] | |
| [TR/Necurs.A.756] |