Technical Information
- %TEMP%\zionloaderhw.exe
- %TEMP%\hwid.bat
- 'no###ally.ru':443
- 'microsoft.com':80
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- 'no###ally.ru':443
- DNS ASK no###ally.ru
- DNS ASK microsoft.com
- '%TEMP%\zionloaderhw.exe'
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\HWID.bat" "