Technical Information
- [<HKLM>\System\CurrentControlSet\Services\Wssems qumccmmq] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\Wssems qumccmmq] 'ImagePath' = '%WINDIR%\Lngltyn.exe'
- 'Wssems qumccmmq' %WINDIR%\Lngltyn.exe
- %WINDIR%\lngltyn.exe
- 'us##.#zone.qq.com':80
- DNS ASK ja###e.ddns.net
- DNS ASK us##.#zone.qq.com
- '%WINDIR%\lngltyn.exe'