| index.html | Index of files/directories submitted |
| timestamp.html | Timestamp of MD5 checksums of all files listed and submitted |
| summary.html | The summary for a non-technical audience, such as management or media |
| advisory.html | Advisory for a technical audience, such as administrators and incident handlers within your organization |
| analysis.html | Details showing how I obtained my analysis, showing tools and methods used |
| answers.html | Answers to the questions |
| costs.html | Incident cost-estimate |
| files.tar | Source of the controller program, which controls the-binary behavior, IDA database produced during analysis (using the freeware version of IDA) and the full list of DNS servers used as reflectors |