| MD5 | 9276a5680ac317445d5c28f9818348ec | 
| SHA1 | 4570fdfd9d31d90654d0b2c7fc6a29fcaec06c98 | 
| Filename | 2015-06-30-traffic-analysis-exercise-EK-payload-deobfuscated.exe | 
| Domains | [199.97.126.209.in-addr.arpa] [microsoft-com.mail.protection.outlook.com] | 
| IP Addresses | [-] | 
| Antivirus | [103!c] | 
| [Backdoor:Win32/Tofsee] | |
| [Heur.AdvML.C] | |
| [Inject2.CKVJ] | |
| [TR/Dropper.VB.4272] | |
| [Trj/Chgt.O] | |
| [Troj.W32.Inject] | |
| [Troj/Miuref-AI] |