Technical Information
- %WINDIR%\syswow64\svchost.exe
- 'xi###.v5ba.com':88
- http://xi###.v5ba.com:88/1.txt via xi###.v5ba.com
- DNS ASK xi###.v5ba.com
- DNS ASK j1##8.com
- DNS ASK ds####.qsdun.com
- DNS ASK cj##jh.com
- 'localhost':53080
- '%WINDIR%\syswow64\svchost.exe'