| MD5 | a646c90dce3d3896f9106ca1a6690a7b |
| SHA1 | 741aa001dbd091ac2f255217b7e4963098c2f5e8 |
| Domains | [www.update.microsoft.com.nsatc.net] [update.microsoft.com] [yearbeesales.com] |
| IP Addresses | [65.55.50.190] [65.55.50.189] |
| Antivirus | [Backdoor.Androm] |
| [Backdoor.Androm.fpie.uzjp] | |
| [Backdoor.Androm.Win32.13312] | |
| [Backdoor.Win32.Androm.fpie] | |
| [Inject2.BHDV] | |
| [Mal/VB-ANY] | |
| [Malware-gen*Win32*Malware-gen] | |
| [TR/Dropper.VB.24873] | |
| [Trojan.DorkBot.ED] | |
| [Trojan.Siggen.65341] |