| MD5 | d86b3d87bc92c5c41282e86d16b7e195 | 
| SHA1 | 0cc2c18c50bc5154957e9aeed74a8c14aa227754 | 
| Filename | d1dfda6feab3fbae25a43ba9cf2eee3cf6f90fe4f4699c6013764977dd84804a | 
| IPs | [172.227.144.40] | 
| IPs | [157.56.124.38] | 
| IPs | [134.170.184.137] | 
| Domains | [www.update.microsoft.com] [xjpakmdcfuqe.in] [xjpakmdcfuqe.ru] [xjpakmdcfuqe.com] [xjpakmdcfuqe.biz] [xjpakmdcfuqe.nl] | 
| IP Addresses | [172.227.144.40] [157.56.124.38] [134.170.184.137] [65.55.50.190] [178.79.190.156] [195.22.28.199] [72.5.65.112] [176.58.104.168] | 
| Antivirus | [BackDoor-FANY!D86B3D87BC92] | 
| [BackDoor.Andromeda.22] | |
| [Downloader.Andromeda.Win32.1772] | |
| [Downloader/Win32.Andromeda] | |
| [TR/Dldr.Andromeda.gse] | |
| [Troj.Downloader.W32.Andromeda.gse!c] | |
| [Troj/Inject-ADK] | |
| [Trojan-Downloader.Win32.Andromeda] | |
| [Trojan-Downloader/W32.Andromeda.39424.B] | |
| [Trojan.DL.Andromeda!bmOcAg7XFJ8] |