| MD5 | bf726a10637599b77cadc3e470614f25 |
| SHA1 | 42d242328c3cdb08334ce358a4ab84f179dcdd5c |
| Domains | [amazingfloorrestoration.com] [glynwedasia.com] |
| IP Addresses | [103.6.244.180] [203.174.83.138] |
| Antivirus | [Downloader-FVO!BF726A106375] |
| [Mal/EncPk-ZC] | |
| [TR/Yarwi.B.19] | |
| [Trojan-Downloader.Win32.Upatre] | |
| [Trojan.Bublik] | |
| [Trojan.DownLoad3.28161] | |
| [Trojan.Win32.Bublik.bjwh] | |
| [TrojanDownloader*Win32/Upatre.A] | |
| [TrojanDownloader.Upatre.A6] |