| MD5 | 42264f8f8d4c68e16310d5a1eff76f8d |
| SHA1 | 003cedc9bd8ee852d07b772329c1b5ffc7517fa9 |
| IPs | [209.99.40.223] |
| Domains | [cordovabooks.com] [paramountairport.com] |
| IP Addresses | [209.99.40.223] |
| Antivirus | [Generic-FAOB!42264F8F8D4C] |
| [Generic_r.DKA] | |
| [Mal/Zbot-OP] | |
| [Malware-gen*Win32*Malware-gen] | |
| [TR/ATRAPS.A.1487] | |
| [Trojan-Spy.Zbot] | |
| [Trojan.Bublik] | |
| [Trojan.Downloader.Upatre] | |
| [Trojan.Win32.Generic] | |
| [TrojanDownloader*Win32/Upatre.A] |