| MD5 | 04c3cd5ca1d5a6c247e601d0c7fd4074 |
| SHA1 | 22f443c934ee684de46e78089ed88c5dc33cce67 |
| Domains | [microsoft.com] [a767.dscms.akamai.net] [download.microsoft.com] |
| IP Addresses | [134.170.185.46] [134.170.188.221] [23.3.98.41] [23.3.98.11] |
| Antivirus | [Downloader.Upatre.Win32.51567] |
| [Pakes.RDW] | |
| [Trojan*Win32/Kovter!rfn] | |
| [Trojan.Kovter] | |
| [Trojan.MulDrop6.3116] | |
| [Trojan.Ransomlock.AK] | |
| [Trojan.Win32.Kovter] | |
| [W32/Ransom.GCYP-6092] | |
| [W32/Upatre.C!tr.dldr] | |
| [Win32/Kovter.C] |