The hidden payload (often svchost.dll renamed) collects:
Distributing or using an unauthorized repack with surveillance features could violate: zimbra police gov ua repack