| MD5 | 7a41f908fe575b5944b45ecbcbade76f |
| SHA1 | 6479eb3523ba40842dd6f188c5d01caf811325dd |
| Domains | [xx.liw2.com] [rat2.100geili.com] [rat3.100geili.com] |
| IP Addresses | [183.60.204.166] [50.63.202.56] |
| Antivirus | [DDoS*Win32/Nitol!rfn] |
| [DDoS/Nitol.aoua] | |
| [Troj/Nitol-R] | |
| [Trojan-FCKS!7A41F908FE57] | |
| [Trojan.Cap15101316.nwjs] | |
| [Trojan.DownLoader9.55930] | |
| [Trojan.Jorik.Win32.246037] | |
| [Trojan.ServStart] |