Technical Information
- %TEMP%\krnl_bootstrapper.exe
- %TEMP%\ginzo.exe
- 'cd#.#rnl.place':443
- 'no###ally.ru':443
- 'microsoft.com':80
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- 'cd#.#rnl.place':443
- 'no###ally.ru':443
- DNS ASK cd#.#rnl.place
- DNS ASK no###ally.ru
- DNS ASK microsoft.com
- '%TEMP%\krnl_bootstrapper.exe'
- '%TEMP%\ginzo.exe'