| MD5 | 2b239a03dcd956f7e48867b36db3605a |
| SHA1 | 7cd636b9b47a19cce89ae670665520eaab4c1098 |
| Domains | [microsoft.com] [a767.dscms.akamai.net] [download.microsoft.com] |
| IP Addresses | [134.170.185.46] [134.170.188.221] [23.72.83.72] [23.72.83.57] |
| Antivirus | [Downloader.Upatre.Win32.49684] |
| [Malware-gen*Win32*Malware-gen] | |
| [Pakes.QYV] | |
| [Troj/Upatre-SY] | |
| [Trojan*Win32/Kovter!rfn] | |
| [Trojan-Downloader.Win32.Upatre.elxd] | |
| [Trojan.DownLoader15.5888] | |
| [Trojan.Kovter] | |
| [Trojan.Ransomlock.AK] | |
| [Trojan.Win32.Kovter] |