| MD5 | fabc46922561f9c17e1756aec64a05fd |
| SHA1 | 64b22404ce9b6faeac1e625473d98c24f1706996 |
| Domains | [microsoft.com] [a767.dscms.akamai.net] [download.microsoft.com] |
| IP Addresses | [134.170.185.46] [134.170.188.221] [23.3.98.11] [23.3.98.10] |
| Antivirus | [Downloader.Upatre.Win32.50771] |
| [Malware-gen*Win32*Malware-gen] | |
| [Trojan-Downloader.Win32.Upatre.envk] | |
| [Trojan.Girtk.CVQH.hxfc] | |
| [Trojan.MulDrop6.3116] | |
| [Trojan.Ransomlock.AK] | |
| [TrojanDownloader.Upatre] | |
| [W32/Ransom.RYAY-1210] | |
| [W32/Upatre.CVQH!tr.dldr] | |
| [Win.Trojan.Mikey-215] |