| MD5 | e83dbdb09e379390df24fd9cb397c29f | 
| SHA1 | 3afa5169f9b91afffbc0b4ff4c046d16e97fe07b | 
| Filename | 39.exe | 
| Domains | [whatismyipaddress.com] [smtp.gmail.com] | 
| IP Addresses | [23.56.112.45] [74.125.25.109] | 
| Antivirus | [Hacktool.Win32.NetPass.cif] | 
| [Mal/MsilKlog-D] | |
| [Msil.Worm.Autorun.Ajll] | |
| [MSIL/Injector.PE!tr] | |
| [not-a-virus:PSWTool.Win32.NetPass.cif] | |
| [PE:Trojan.MSIL.KeyLogger!1.647D[F1]] | |
| [RiskWare[PSWTool]/Win32.NetPass.cif] | |
| [TR/Ransom.243715] | |
| [Trojan-Spy.MSIL.Golroted] |