Technical Information
- 'C:\vKINSTALLERS_49_5000.exe'
- 'C:\vKINSTALLERS_49_5000.exe' (downloaded from the Internet)
- C:\vKINSTALLERS_49_5000.exe
- 'd.#####.ijinshan.com':80
- d.#####.ijinshan.com/duba/link/vKINSTALLERS_49_5000.exe
- DNS ASK d.#####.ijinshan.com