| MD5 | d629d0edf08c0332f30c202dd8536cd1 |
| SHA1 | 4eaa1d76b7b99cd7453a78f75930c6798ef65fd1 |
| Domains | [cordovabooks.com] [paramountairport.com] |
| IP Addresses | [23.89.184.155] |
| Antivirus | [Mal/Zbot-OP] |
| [Malware-gen*Win32*Malware-gen] | |
| [TR/ATRAPS.A.1487] | |
| [Trojan-Spy.Zbot] | |
| [Trojan.Bublik] | |
| [Trojan.Bublik.Win32.13016] | |
| [Trojan.Downloader.Upatre] | |
| [Trojan.DownLoader11.35251] | |
| [Trojan.Win32.Waledac.fr] | |
| [TrojanDownloader*Win32/Upatre.A] |