Technical Information
- '<SYSTEM32>\768360\haozip.exe'
- '<SYSTEM32>\768360\haozip.exe' (downloaded from the Internet)
- <SYSTEM32>\768360\haozip.exe
- 'do####ad.haozip.com':80
- do####ad.haozip.com/uniondown/haozip_silence.200228.exe
- DNS ASK do####ad.haozip.com