Technical Information
- <LS_APPDATA>\14e.exe (downloaded from the Internet)
- <LS_APPDATA>\14k.exe (downloaded from the Internet)
- <LS_APPDATA>\14e.exe
- <LS_APPDATA>\14k.exe
- 'www.op####nsearch.com':80
- www.op####nsearch.com/js/2z.exe
- www.op####nsearch.com/js/1z.exe
- DNS ASK www.op####nsearch.com
- '<Private IP address>':1036