| MD5 | e61113af8007ba9fdcac47f1350cd6ad | 
| SHA1 | 67b302ee6a71a7fbeb595e533afb887b3f66cd72 | 
| Filename | LI.exe | 
| Domains | [www.geoplugin.net] [7h49ng63.su] | 
| IP Addresses | [178.237.36.10] | 
| Antivirus | [Artemis!E61113AF8007] | 
| [Mal/RarMal-K] | |
| [Malware.RDM.01!5.7] | |
| [MSIL/Injector.K!tr] |