Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1112 -dm 7 7 %TEMP%\WER2cbe.dir00\svchost.exe.mdmp 16325836412029264
- %WINDIR%\Help\jjlenkbt.exe
- %WINDIR%\Help\tsbjbtvn.exe
- %WINDIR%\Help\hwexrtne.exe
- %WINDIR%\Help\jbnshhqj.exe
- %WINDIR%\Help\bzehxvnz.exe
- '61.##2.16.168':445
- '61.##2.231.16':445
- '61.##2.218.138':445
- '61.##2.112.160':445
- '61.##2.237.44':139
- '61.##2.231.220':445
- '61.##2.71.63':445
- '61.##2.150.41':445
- '61.##2.117.116':445
- '61.##2.237.44':445
- '61.##2.112.227':445
- '61.##2.151.246':445
- '61.##2.191.62':445
- '61.##2.82.177':445
- '61.##2.112.160':139
- '61.##2.16.168':139
- '61.##2.231.16':139
- '61.##2.71.63':139
- '61.##2.216.137':445
- '61.##2.24.131':139
- '61.##2.231.220':139
- '61.##2.112.227':139
- '61.##2.150.41':139
- '61.##2.117.116':139
- '61.##2.82.177':139
- '61.##2.218.138':139
- '61.##2.151.246':139
- '61.##2.191.62':139
- '61.##2.44.237':139
- '61.##2.155.6':139
- '61.##2.232.154':139
- '61.##2.227.190':139
- '61.##2.31.113':139
- '61.##2.43.185':139
- '61.##2.151.121':139
- '61.##2.170.94':139
- '61.##2.16.195':139
- '61.##2.225.26':139
- '61.##2.154.125':139
- '61.##2.183.37':139
- '61.##2.221.24':139
- '61.##2.7.198':139
- '61.##2.37.150':139
- '61.##2.250.210':445
- '61.##2.40.19':139
- '61.##2.138.203':139
- '61.##2.250.210':139
- '61.##2.89.142':139
- '61.##2.5.254':139
- '61.##2.16.202':139
- '61.##2.232.123':139
- '61.#92.2.60':139
- '61.##2.53.141':139
- '61.##2.136.186':139
- '61.##2.15.175':139
- '61.##2.110.119':139
- '61.##2.88.224':139
- '61.##2.217.128':445
- '61.##2.78.89':445
- '61.##2.97.75':445
- '61.##2.216.137':139
- '61.##2.191.223':139
- '61.##2.38.186':139
- '61.##2.138.5':139
- '61.##2.46.36':445
- '61.##2.209.4':445
- '61.##2.20.238':445
- '61.##2.218.86':445
- '61.##2.117.131':445
- '61.##2.143.227':445
- '61.##2.118.192':445
- '61.##2.12.85':139
- '61.##2.23.251':139
- '61.##2.59.102':139
- '61.##2.118.186':139
- '61.##2.153.227':139
- '61.##2.68.222':139
- '61.##2.17.119':139
- '61.##2.52.100':139
- '61.##2.172.160':139
- '61.##2.56.239':139
- '61.#92.98.4':139
- '61.##2.200.39':139
- '61.##2.102.218':139
- '61.##2.110.78':139
- '61.##2.22.81':445
- '61.##2.59.102':445
- '61.##2.200.39':445
- '61.##2.102.218':445
- '61.##2.23.251':445
- '61.##2.17.119':445
- '61.##2.118.186':445
- '61.##2.12.85':445
- '61.##2.56.239':445
- '61.##2.191.223':445
- '61.##2.38.186':445
- '61.##2.172.160':445
- '61.##2.110.78':445
- '61.#92.98.4':445
- '61.##2.52.100':445
- '61.##2.225.21':445
- '61.##2.146.74':445
- '61.##2.56.111':445
- '61.##2.214.22':445
- '61.##2.32.197':445
- '61.##2.56.252':445
- '61.##2.201.53':445
- '61.##2.182.219':445
- '61.##2.153.227':445
- '61.##2.68.222':445
- '61.##2.54.88':445
- '61.##2.253.100':445
- '61.##2.224.253':445
- '61.##2.25.247':445
- '61.##2.114.154':139
- '61.##2.92.143':139
- '61.##2.98.92':139
- '61.##2.87.248':139
- '61.##2.143.126':139
- '61.##2.119.98':445
- '61.##2.159.119':445
- '61.##2.147.42':445
- '61.##2.68.23':139
- '61.##2.63.235':139
- '61.##2.134.56':139
- '61.##2.132.39':139
- '61.##2.87.248':445
- '61.##2.214.95':139
- '61.##2.179.163':139
- '61.##2.40.80':445
- '61.##2.45.228':445
- '61.##2.134.193':445
- '61.##2.147.42':139
- '61.##2.111.66':139
- '61.##2.119.98':139
- '61.##2.159.119':139
- '61.##2.124.246':445
- '61.##2.85.126':445
- '61.##2.111.66':445
- '61.##2.246.156':445
- '61.##2.11.135':445
- '61.##2.154.11':445
- '61.##2.77.154':445
- '61.##2.48.125':139
- '61.##2.78.58':139
- '61.##2.88.78':139
- '61.##2.229.253':139
- '61.##2.95.141':139
- '61.#92.5.49':139
- '61.##2.194.231':139
- '61.##2.33.103':139
- '61.##2.142.34':139
- '61.##2.188.165':139
- '61.##2.124.58':139
- '61.##2.101.169':139
- '61.##2.236.5':139
- '61.##2.114.33':139
- '61.##2.22.231':445
- '61.##2.206.59':139
- '61.##2.175.205':139
- '61.##2.56.176':139
- '61.##2.59.154':139
- '61.##2.44.229':139
- '61.##2.203.66':139
- '61.##2.112.126':139
- '61.##2.182.148':139
- '61.##2.74.182':139
- '61.##2.45.179':139
- '61.##2.24.211':139
- '61.##2.215.212':139
- '61.##2.165.139':139
- '61.##2.221.67':139
- '61.##2.88.224':445
- '61.##2.136.186':445
- '61.##2.232.123':445
- '61.##2.110.119':445
- '61.##2.40.19':445
- '61.##2.138.203':445
- '61.##2.15.175':445
- '61.##2.170.94':445
- '61.##2.31.113':445
- '61.##2.155.6':445
- '61.##2.151.121':445
- '61.#92.2.60':445
- '61.##2.53.141':445
- '61.##2.43.185':445
- '61.##2.128.188':139
- '61.##2.145.74':139
- '61.##2.94.160':139
- '61.##2.250.150':139
- '61.##2.26.115':139
- '61.##2.226.25':139
- '61.##2.24.185':139
- '61.##2.89.142':445
- '61.##2.5.254':445
- '61.##2.16.202':445
- '61.##2.44.237':445
- '61.##2.138.222':139
- '61.##2.43.144':139
- '61.#92.2.7':139
- '61.##2.232.154':445
- '61.#92.2.7':445
- '61.##2.40.80':139
- '61.##2.45.228':139
- '61.##2.43.144':445
- '61.##2.145.74':445
- '61.##2.94.160':445
- '61.##2.138.222':445
- '61.##2.246.156':139
- '61.##2.124.246':139
- '61.##2.85.126':139
- '61.##2.77.154':139
- '61.##2.134.193':139
- '61.##2.11.135':139
- '61.##2.154.11':139
- '61.##2.183.37':445
- '61.##2.16.195':445
- '61.##2.225.26':445
- '61.##2.37.150':445
- '61.##2.227.190':445
- '61.##2.221.24':445
- '61.##2.7.198':445
- '61.##2.24.185':445
- '61.##2.250.150':445
- '61.##2.128.188':445
- '61.##2.226.25':445
- '61.##2.154.125':445
- '61.##2.114.154':445
- '61.##2.26.115':445
- '61.##2.98.68':445
- '61.##2.95.78':445
- '61.##2.202.131':445
- '61.##2.243.19':445
- '61.##2.187.172':445
- '61.##2.121.235':445
- '61.##2.36.70':445
- '61.##2.46.96':445
- '61.##2.146.1':445
- '61.##2.214.210':445
- '61.##2.220.225':445
- '61.##2.138.140':445
- '61.##2.59.51':445
- '61.##2.100.242':445
- '61.##2.235.103':445
- '61.##2.9.160':445
- '61.##2.62.96':445
- '61.##2.78.71':445
- '61.##2.10.12':445
- '61.##2.206.29':445
- '61.##2.237.163':445
- '61.##2.176.21':445
- '61.##2.122.184':445
- '61.##2.235.183':445
- '61.##2.244.195':445
- '61.##2.149.129':445
- '61.##2.12.183':445
- '61.##2.49.225':445
- '61.##2.55.197':445
- '61.##2.114.193':139
- '61.##2.76.114':139
- '61.##2.53.29':139
- '61.##2.132.61':9988
- '61.##2.201.233':445
- '61.##2.116.136':445
- '61.##2.237.163':9988
- '61.##2.85.188':139
- '61.##2.113.68':139
- '61.##2.112.75':139
- '61.##2.208.28':139
- '61.##2.254.212':139
- '61.##2.42.19':139
- '61.##2.180.125':139
- '61.##2.16.28':445
- '61.##2.135.83':445
- '61.##2.100.113':445
- '61.##2.87.170':445
- '61.##2.104.22':445
- '61.##2.127.3':445
- '61.##2.156.209':445
- '61.##2.29.132':445
- '61.##2.151.99':445
- '61.##2.103.116':445
- '61.##2.94.16':445
- '61.##2.127.205':445
- '61.##2.165.27':445
- '61.#92.34.3':445
- '61.##2.94.16':139
- '61.##2.176.21':139
- '61.##2.214.210':139
- '61.##2.49.225':139
- '61.##2.103.116':139
- '61.##2.244.195':139
- '61.##2.151.99':139
- '61.##2.36.70':139
- '61.##2.62.96':139
- '61.##2.243.19':139
- '61.##2.135.83':139
- '61.##2.187.172':139
- '61.##2.46.96':139
- '61.##2.122.184':139
- '61.##2.121.235':139
- '61.##2.92.52':139
- '61.##2.132.61':139
- '61.##2.29.132':139
- '61.##2.42.235':139
- '61.##2.100.242':139
- '61.##2.39.251':139
- '61.##2.138.140':139
- '61.##2.235.183':139
- '61.##2.87.170':139
- '61.##2.79.217':139
- '61.##2.12.183':139
- '61.##2.10.12':139
- '61.##2.242.214':139
- '61.##2.165.27':139
- '61.##2.149.129':139
- '61.##2.104.22':139
- '61.##2.156.209':139
- '61.##2.78.71':139
- '61.##2.59.51':139
- '61.##2.237.163':139
- '61.##2.206.29':139
- '61.##2.92.52':445
- '61.##2.42.235':445
- '61.##2.39.251':445
- '61.##2.242.214':445
- '61.##2.55.197':139
- '61.##2.132.61':445
- '61.##2.79.217':445
- '61.##2.98.68':139
- '61.##2.9.160':139
- '61.##2.100.113':139
- '61.##2.95.78':139
- '61.##2.201.233':139
- '61.##2.127.3':139
- '61.##2.220.225':139
- '61.##2.116.136':139
- '61.##2.146.1':139
- '61.##2.235.103':139
- '61.##2.202.131':139
- '61.#92.34.3':139
- '61.##2.16.28':139
- '61.##2.127.205':139
- '61.##2.203.145':139
- '61.#92.30.9':445
- '61.##2.242.29':445
- '61.##2.196.241':445
- '61.#92.9.79':445
- '61.##2.109.20':445
- '61.##2.197.107':445
- '61.##2.78.197':445
- '61.##2.136.162':445
- '61.##2.217.128':139
- '61.##2.168.189':139
- '61.##2.66.61':445
- '61.##2.123.85':445
- '61.##2.66.61':139
- '61.##2.136.162':139
- '61.#92.0.35':445
- '61.##2.42.253':445
- '61.##2.33.94':445
- '61.##2.23.233':445
- '61.#92.88.5':445
- '61.##2.16.200':445
- '61.##2.94.173':445
- '61.##2.52.164':445
- '61.#92.0.96':445
- '61.##2.237.17':445
- '61.##2.234.94':445
- '61.##2.32.207':445
- '61.##2.56.241':445
- '61.##2.132.91':445
- '61.##2.78.89':139
- '61.##2.176.10':139
- '61.##2.13.238':139
- '61.##2.146.74':139
- '61.##2.39.98':139
- '61.##2.214.22':139
- '61.##2.225.21':139
- '61.##2.166.224':139
- '61.##2.54.88':139
- '61.##2.37.203':139
- '61.##2.182.219':139
- '61.##2.25.247':139
- '61.##2.56.111':139
- '61.##2.253.100':139
- '61.##2.224.253':139
- '61.##2.118.192':139
- '61.##2.218.86':139
- '61.##2.46.36':139
- '61.##2.19.50':139
- '61.##2.97.75':139
- '61.##2.117.131':139
- '61.##2.143.227':139
- '61.##2.116.29':139
- '61.##2.56.252':139
- '61.##2.201.53':139
- '61.##2.32.197':139
- '61.##2.209.4':139
- '61.##2.20.238':139
- '61.##2.22.81':139
- '61.##2.33.94':139
- '61.##2.32.207':139
- '61.##2.56.241':139
- '61.##2.42.253':139
- '61.##2.94.173':139
- '61.##2.23.233':139
- '61.#92.0.35':139
- '61.##2.237.17':139
- '61.##2.109.20':139
- '61.##2.197.107':139
- '61.#92.0.96':139
- '61.##2.132.91':139
- '61.##2.52.164':139
- '61.##2.234.94':139
- '61.##2.137.36':139
- '61.##2.165.198':139
- '61.##2.242.96':139
- '61.##2.35.220':139
- '61.##2.119.57':139
- '61.##2.226.118':139
- '61.##2.219.226':139
- '61.##2.21.64':139
- '61.#92.88.5':139
- '61.##2.16.200':139
- '61.##2.232.58':139
- '61.##2.206.43':139
- '61.##2.163.193':139
- '61.##2.197.78':139
- '61.##2.78.197':139
- '61.##2.219.226':445
- '61.##2.35.220':445
- '61.##2.137.36':445
- '61.##2.226.118':445
- '61.##2.112.75':445
- '61.##2.203.145':445
- '61.##2.119.57':445
- '61.##2.197.78':445
- '61.##2.232.58':445
- '61.##2.21.64':445
- '61.##2.163.193':445
- '61.##2.165.198':445
- '61.##2.242.96':445
- '61.##2.206.43':445
- '61.##2.123.85':139
- '61.##2.114.193':445
- '61.##2.76.114':445
- '61.##2.196.241':139
- '61.#92.9.79':139
- '61.#92.30.9':139
- '61.##2.242.29':139
- '61.##2.208.28':445
- '61.##2.85.188':445
- '61.##2.113.68':445
- '61.##2.180.125':445
- '61.##2.53.29':445
- '61.##2.254.212':445
- '61.##2.42.19':445