Technical Information
- '<Current directory>\dll.exe'
- '<Current directory>\State of War.exe'
- '<Current directory>\dll.exe' (downloaded from the Internet)
- <Current directory>\dll.exe
- %TEMP%\nsp2.tmp\NSISdl.dll
- <Current directory>\State of War.exe
- <Current directory>\dll.exe
- <Current directory>\State of War.exe
- %TEMP%\nsp2.tmp\NSISdl.dll
- <Current directory>\dll.exe
- 'pk.##9991.com':80
- pk.##9991.com/dll.exe
- DNS ASK pk.##9991.com