Have a look at the movie that's embedded in the blog post. He's explaining which piece of malware is downloaded.