| MD5 | fe1627b270d27ecd1d5dd0e45148ea11 | 
| SHA1 | 5382c0610a07e411906385c29c882e6607d23c2c | 
| Filename | Express.exe | 
| IPs | [190.93.249.164] | 
| IPs | [190.93.248.164] | 
| IPs | [199.30.228.77] | 
| Domains | [whatismyip.com] [ip-address.domaintools.com] | 
| IP Addresses | [190.93.249.164] [190.93.248.164] [199.30.228.77] | 
| Antivirus | [PSW.ILSpy] | 
| [WIN.Spy.Agent-11] | |
| [Worm*MSIL/Rapzo.A] |