Technical Information
- <LS_APPDATA>\14e.exe (downloaded from the Internet)
- <LS_APPDATA>\14k.exe (downloaded from the Internet)
- <LS_APPDATA>\14e.exe
- <LS_APPDATA>\14k.exe
- 'ar######lmdel.arcnet.org':80
- ar######lmdel.arcnet.org/Retail/xx2.exe
- ar######lmdel.arcnet.org/Retail/yc000.exe
- DNS ASK ar######lmdel.arcnet.org