| MD5 | cd7e8a3183089098effa0b6d37820cdf |
| SHA1 | c415589819ceef62992f95a08d18d319804f7747 |
| Domains | [cordovabooks.com] [paramountairport.com] |
| IP Addresses | [202.150.213.60] |
| Antivirus | [Mal/Zbot-OP] |
| [TR/ATRAPS.A.1487] | |
| [Trojan-Spy.Zbot] | |
| [Trojan.Bublik] | |
| [Trojan.Bublik.Win32.13016] | |
| [Trojan.DownLoader11.35251] | |
| [Trojan.Girtk.BSNC.pjww] | |
| [Trojan.Upatre] | |
| [TrojanDownloader*Win32/Upatre.A] | |
| [TROJ_UPATRE.SM37] |