Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\Hello Kid] 'ImagePath' = '<Full path to file>'
- [<HKLM>\SYSTEM\ControlSet001\Services\Hello Kid] 'Start' = '00000002'
- 'xc#.#322.org':81
- 'se####.hnzwjy.com':81
- DNS ASK xc#.#322.org
- DNS ASK se####.hnzwjy.com