| MD5 | d3ee3afd361f6d488f6a66cb7f152147 |
| SHA1 | 8db9b9080cbf25fdbf672a80a9306950c0eb1f05 |
| Filename | werf.exe |
| IPs | [93.171.172.240] |
| IPs | [23.62.99.17] |
| Domains | [tuneshodenmaidek.com] [www.download.windowsupdate.com] |
| IP Addresses | [93.171.172.240] [23.62.99.17] |
| Antivirus | [Spyware.Zbot.ED] |