Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\Mnofmw bcygmc] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Mnofmw bcygmc] 'ImagePath' = '%ProgramFiles%\mulong.exe'
- %ProgramFiles%\mulong.exe
- 'bb#.#7dmu.net':1728
- 'lf##.vicp.net':2013
- DNS ASK bb#.#7dmu.net
- DNS ASK lf##.vicp.net
- '%ProgramFiles%\mulong.exe'