Technical Information
- '%PROGRAM_FILES%\4.exe' (downloaded from the Internet)
- '%PROGRAM_FILES%\5.exe' (downloaded from the Internet)
- '%PROGRAM_FILES%\1.exe' (downloaded from the Internet)
- '%PROGRAM_FILES%\2.exe' (downloaded from the Internet)
- 'do##.21195.com':80
- do##.21195.com/4.exe
- do##.21195.com/5.exe
- do##.21195.com/3.exe
- do##.21195.com/1.exe
- do##.21195.com/2.exe
- DNS ASK do##.21195.com