Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- '58.##.238.212':445
- '58.##.152.173':445
- '58.##.206.191':445
- '58.#8.9.178':445
- '58.##.69.172':445
- '58.##.105.55':139
- '58.##.167.90':139
- '58.##.171.247':445
- '58.##.170.101':445
- '58.#8.84.59':445
- '58.##.209.111':445
- '58.##.118.163':445
- '58.##.46.243':445
- '58.##.69.252':445
- '58.##.241.164':445
- '58.##.73.137':445
- '58.#8.46.41':445
- '58.#8.50.77':445
- '58.##.128.141':445
- '58.##.159.12':139
- '58.#8.84.59':139
- '58.##.206.191':139
- '58.##.73.137':139
- '58.#8.46.41':139
- '58.#8.9.178':139
- '58.##.69.172':139
- '58.##.171.247':139
- '58.##.238.212':139
- '58.##.152.173':139
- '58.##.128.141':139
- '58.##.107.206':139
- '58.##.46.243':139
- '58.##.51.147':139
- '58.##.248.217':139
- '58.##.69.252':139
- '58.##.241.164':139
- '58.#8.50.77':139
- '58.##.209.111':139
- '58.##.118.163':139
- '58.##.29.170':139
- '58.##.63.189':139
- '58.##.242.32':139
- '58.##.158.235':139
- '58.##.15.114':139
- '58.##.157.245':139
- '58.##.145.102':139
- '58.##.113.200':139
- '58.##.143.209':139
- '58.##.187.197':139
- '58.##.35.250':445
- '58.##.132.62':445
- '58.##.24.151':445
- '58.##.128.76':445
- '58.#8.63.40':445
- '58.##.138.245':139
- '58.##.52.244':139
- '58.#8.69.14':139
- '58.#8.54.87':139
- '58.#8.94.38':139
- '58.#8.63.40':139
- '58.##.105.55':445
- '58.##.35.250':139
- '58.##.132.62':139
- '58.##.167.90':445
- '58.##.248.217':445
- '58.##.107.206':445
- '58.##.159.12':445
- '58.##.51.147':445
- '58.##.128.76':139
- '58.##.24.151':139
- '58.##.183.155':139
- '58.##.59.163':139
- '58.##.189.178':139
- '58.##.96.208':139
- '58.##.148.204':139
- '58.##.199.174':139
- '58.#8.21.43':139
- '58.#8.61.7':139
- '58.##.170.101':139
- '58.#8.159.5':445
- '58.#8.130.7':445
- '58.##.96.162':445
- '58.#8.73.30':445
- '58.##.111.58':445
- '58.#8.1.240':445
- '58.##.189.128':139
- '58.##.219.137':445
- '58.##.176.135':445
- '58.##.149.203':139
- '58.##.43.235':139
- '58.##.184.196':139
- '58.##.126.228':139
- '58.##.175.47':139
- '58.##.22.125':139
- '58.##.253.254':445
- '58.##.91.176':139
- '58.##.238.22':139
- '58.##.169.243':445
- '58.##.172.173':139
- '58.##.109.215':445
- '58.##.46.220':445
- '58.##.183.253':139
- '58.#8.40.37':445
- '58.##.117.209':445
- '58.##.34.151':445
- '58.##.115.199':445
- '58.#8.7.185':445
- '58.##.171.171':445
- '58.##.73.105':139
- '58.##.164.170':445
- '58.##.116.219':139
- '58.##.27.179':445
- '58.##.237.192':445
- '58.##.146.252':445
- '58.##.216.73':139
- '58.#8.15.92':139
- '58.#8.40.78':139
- '58.##.225.204':139
- '58.##.126.228':445
- '58.##.22.125':445
- '58.##.149.203':445
- '58.##.189.128':445
- '58.##.228.159':445
- '58.##.91.176':445
- '58.##.121.30':445
- '58.##.114.175':445
- '58.#8.35.65':445
- '58.##.245.225':445
- '58.#8.30.50':445
- '58.#8.47.44':445
- '58.##.117.229':445
- '58.##.225.178':445
- '58.##.175.47':445
- '58.#8.15.92':445
- '58.##.61.143':445
- '58.##.181.240':445
- '58.##.43.235':445
- '58.##.184.196':445
- '58.##.181.240':139
- '58.##.61.143':139
- '58.##.228.159':139
- '58.##.114.175':139
- '58.##.245.225':139
- '58.##.121.30':139
- '58.#8.30.50':139
- '58.##.225.178':139
- '58.#8.35.65':139
- '58.##.117.229':139
- '58.##.73.105':445
- '58.##.238.22':445
- '58.##.172.173':445
- '58.#8.40.78':445
- '58.##.116.219':445
- '58.##.225.204':445
- '58.#8.47.44':139
- '58.##.183.253':445
- '58.##.216.73':445
- '58.##.118.60':139
- '58.##.155.140':139
- '58.##.168.137':445
- '58.##.199.71':445
- '58.##.86.253':139
- '58.##.207.100':139
- '58.##.199.71':139
- '58.#8.71.8':139
- '58.##.18.135':139
- '58.##.192.159':445
- '58.##.235.185':445
- '58.##.201.109':445
- '58.##.207.88':445
- '58.##.102.111':445
- '58.##.132.52':445
- '58.##.246.47':445
- '58.##.183.28':445
- '58.##.243.230':445
- '58.##.63.122':445
- '58.#8.60.71':139
- '58.##.247.207':139
- '58.##.207.88':139
- '58.##.188.62':139
- '58.##.32.248':139
- '58.##.58.226':139
- '58.##.107.161':139
- '58.##.201.109':139
- '58.##.243.230':139
- '58.##.235.185':139
- '58.##.35.155':139
- '58.##.34.235':139
- '58.##.83.183':139
- '58.##.109.31':139
- '58.##.135.69':139
- '58.#8.2.215':139
- '58.##.227.232':139
- '58.##.247.32':139
- '58.##.75.133':139
- '58.##.131.218':139
- '58.#8.2.215':445
- '58.##.86.253':445
- '58.##.35.155':445
- '58.##.247.32':445
- '58.##.109.31':445
- '58.##.83.183':445
- '58.##.34.235':445
- '58.##.188.62':445
- '58.##.155.140':445
- '58.##.88.186':139
- '58.##.18.135':445
- '58.#8.60.71':445
- '58.##.131.218':445
- '58.#8.71.8':445
- '58.##.207.100':445
- '58.##.118.60':445
- '58.#8.85.90':139
- '58.##.210.88':139
- '58.##.135.69':445
- '58.##.75.133':445
- '58.##.24.100':445
- '58.##.107.161':445
- '58.##.94.188':139
- '58.#8.22.17':139
- '58.#8.79.74':445
- '58.##.144.71':445
- '58.##.58.226':445
- '58.##.247.207':445
- '58.##.32.248':445
- '58.##.237.40':139
- '58.#8.78.67':139
- '58.##.107.21':139
- '58.##.160.74':139
- '58.##.152.14':139
- '58.##.178.85':139
- '58.##.17.194':139
- '58.#8.64.33':139
- '58.##.227.232':445
- '58.##.210.43':139
- '58.##.132.52':139
- '58.##.144.89':139
- '58.#8.3.16':139
- '58.##.151.13':139
- '58.##.229.143':139
- '58.##.201.54':139
- '58.##.187.197':445
- '58.#8.54.87':445
- '58.##.148.200':139
- '58.##.138.245':445
- '58.##.83.132':139
- '58.#8.26.39':139
- '58.#8.13.28':139
- '58.##.123.88':139
- '58.#8.27.54':139
- '58.#8.22.55':139
- '58.##.181.214':139
- '58.#8.3.82':139
- '58.##.170.133':139
- '58.##.145.72':139
- '58.#8.69.14':445
- '58.##.189.178':445
- '58.##.148.204':445
- '58.##.59.163':445
- '58.#8.94.38':445
- '58.##.199.174':445
- '58.##.183.155':445
- '58.#8.61.7':445
- '58.##.96.208':445
- '58.#8.21.43':445
- '58.##.157.245':445
- '58.##.29.170':445
- '58.##.113.200':445
- '58.##.52.244':445
- '58.##.242.32':445
- '58.##.145.102':445
- '58.##.158.235':445
- '58.##.15.114':445
- '58.##.143.209':445
- '58.##.63.189':445
- '58.##.228.28':445
- '58.#8.29.1':445
- '58.##.244.93':445
- '58.##.182.227':445
- '58.##.161.63':445
- '58.#8.27.54':445
- '58.#8.26.39':445
- '58.#8.18.28':445
- '58.##.123.88':445
- '58.##.189.105':445
- '58.##.24.100':139
- '58.#8.79.74':139
- '58.##.144.71':139
- '58.##.102.111':139
- '58.##.192.159':139
- '58.##.183.28':139
- '58.##.246.47':139
- '58.##.168.137':139
- '58.##.63.122':139
- '58.#8.13.28':445
- '58.##.189.105':139
- '58.##.244.93':139
- '58.##.201.54':445
- '58.##.148.200':445
- '58.##.182.227':139
- '58.##.161.63':139
- '58.#8.18.28':139
- '58.##.228.28':139
- '58.#8.29.1':139
- '58.#8.3.16':445
- '58.##.145.72':445
- '58.##.181.214':445
- '58.#8.22.55':445
- '58.##.170.133':445
- '58.#8.3.82':445
- '58.##.229.143':445
- '58.##.144.89':445
- '58.##.83.132':445
- '58.##.151.13':445
- '58.##.16.227':445
- '58.##.253.150':9988
- '58.##.145.71':9988
- '58.##.224.44':139
- '58.#8.69.25':9988
- '58.#8.72.67':9988
- '58.##.129.42':445
- '58.##.134.162':445
- '58.#8.11.34':9988
- '58.##.235.221':445
- '58.##.71.239':139
- '58.##.63.131':139
- '58.#8.70.94':139
- '58.##.214.20':139
- '58.##.159.91':139
- '58.##.211.112':139
- '58.##.144.218':139
- '58.##.187.189':139
- '58.##.112.90':139
- '58.##.90.138':139
- '58.##.165.235':445
- '58.#8.23.59':445
- '58.##.185.135':445
- '58.#8.17.68':445
- '58.#8.6.130':445
- '58.##.78.153':445
- '58.##.37.172':445
- '58.##.211.77':445
- '58.##.156.246':445
- '58.#8.27.16':445
- '58.##.239.152':445
- '58.##.253.150':445
- '58.##.52.108':445
- '58.##.115.229':445
- '58.#8.10.52':445
- '58.##.174.148':445
- '58.##.88.229':445
- '58.##.128.230':445
- '58.##.180.31':445
- '58.##.13.254':445
- '58.##.96.222':139
- '58.##.71.113':139
- '58.##.60.139':139
- '58.##.156.207':139
- '58.##.232.192':139
- '58.##.33.141':139
- '58.##.141.177':139
- '58.##.67.101':139
- '58.##.171.33':139
- '58.##.190.217':139
- '58.##.211.112':445
- '58.##.112.90':445
- '58.##.63.131':445
- '58.#8.70.94':445
- '58.##.90.138':445
- '58.##.71.239':445
- '58.##.224.44':445
- '58.##.144.218':445
- '58.##.187.189':445
- '58.##.252.172':139
- '58.#8.9.252':139
- '58.#8.63.71':139
- '58.##.194.253':139
- '58.##.206.118':139
- '58.#8.52.41':139
- '58.#8.3.117':139
- '58.#8.88.7':139
- '58.#8.92.26':139
- '58.##.187.224':139
- '58.##.179.194':139
- '58.##.243.197':139
- '58.##.25.150':139
- '58.#8.14.5':139
- '58.#8.5.17':139
- '58.##.155.222':139
- '58.##.93.251':139
- '58.##.114.151':139
- '58.##.69.137':139
- '58.##.118.94':139
- '58.#8.67.32':445
- '58.##.145.71':139
- '58.#8.67.32':139
- '58.##.211.77':139
- '58.##.68.198':139
- '58.##.28.150':139
- '58.##.173.213':139
- '58.#8.77.80':139
- '58.#8.27.16':139
- '58.##.24.132':139
- '58.##.107.217':139
- '58.#8.23.59':139
- '58.##.239.152':139
- '58.#8.17.68':139
- '58.##.128.230':139
- '58.##.78.153':139
- '58.##.185.135':139
- '58.##.37.172':139
- '58.#8.6.130':139
- '58.##.156.246':139
- '58.#8.89.87':139
- '58.#8.32.22':139
- '58.#8.0.122':139
- '58.##.17.131':139
- '58.##.205.116':139
- '58.#8.90.69':139
- '58.##.25.145':139
- '58.#8.69.25':139
- '58.##.23.108':139
- '58.#8.72.67':139
- '58.##.173.219':139
- '58.##.228.36':139
- '58.#8.66.18':139
- '58.##.114.87':139
- '58.##.36.139':139
- '58.#8.11.34':139
- '58.##.195.159':139
- '58.##.131.154':139
- '58.##.164.184':139
- '58.##.254.236':139
- '58.#8.11.34':445
- '58.##.164.184':445
- '58.##.228.36':445
- '58.##.36.139':445
- '58.##.254.236':445
- '58.#8.90.69':445
- '58.##.17.131':445
- '58.##.195.159':445
- '58.##.131.154':445
- '58.#8.66.18':445
- '58.##.145.71':445
- '58.##.28.150':445
- '58.##.68.198':445
- '58.##.107.217':445
- '58.##.173.213':445
- '58.#8.89.87':445
- '58.#8.77.80':445
- '58.##.24.132':445
- '58.##.114.87':445
- '58.##.173.219':445
- '58.#8.10.52':139
- '58.##.134.162':139
- '58.##.235.221':139
- '58.##.52.108':139
- '58.##.180.31':139
- '58.##.88.229':139
- '58.##.13.254':139
- '58.##.174.148':139
- '58.##.115.229':139
- '58.##.253.150':139
- '58.#8.0.122':445
- '58.##.23.108':445
- '58.#8.32.22':445
- '58.##.205.116':445
- '58.#8.72.67':445
- '58.##.129.42':139
- '58.##.165.235':139
- '58.##.25.145':445
- '58.#8.69.25':445
- '58.##.152.138':139
- '58.##.139.232':139
- '58.##.184.106':445
- '58.##.19.155':445
- '58.##.129.64':139
- '58.##.129.143':139
- '58.#8.1.139':139
- '58.##.128.162':139
- '58.##.187.244':139
- '58.##.154.243':445
- '58.#8.10.19':445
- '58.##.188.95':445
- '58.#8.43.16':445
- '58.##.27.112':445
- '58.##.30.238':445
- '58.##.222.38':445
- '58.##.46.228':445
- '58.#8.5.123':445
- '58.##.129.199':445
- '58.##.171.170':139
- '58.##.71.192':445
- '58.##.27.112':139
- '58.#8.48.98':445
- '58.##.208.186':445
- '58.##.43.103':445
- '58.#8.1.192':445
- '58.##.217.135':445
- '58.##.62.215':445
- '58.##.72.248':445
- '58.##.107.74':445
- '58.##.30.223':139
- '58.##.77.212':139
- '58.##.188.250':139
- '58.##.216.192':139
- '58.#8.213.6':139
- '58.#8.34.82':139
- '58.#8.43.16':139
- '58.##.159.72':139
- '58.##.180.214':139
- '58.##.27.179':139
- '58.##.146.252':139
- '58.##.96.162':139
- '58.#8.159.5':139
- '58.#8.40.37':139
- '58.##.152.138':445
- '58.##.128.162':445
- '58.##.109.215':139
- '58.##.129.64':445
- '58.##.237.192':139
- '58.#8.73.30':139
- '58.##.111.58':139
- '58.##.253.254':139
- '58.#8.130.7':139
- '58.#8.1.240':139
- '58.##.176.135':139
- '58.##.164.170':139
- '58.##.169.243':139
- '58.##.219.137':139
- '58.##.139.232':445
- '58.##.216.192':445
- '58.##.30.223':445
- '58.##.171.170':445
- '58.##.188.250':445
- '58.##.77.212':445
- '58.##.180.214':445
- '58.#8.34.82':445
- '58.#8.213.6':445
- '58.##.159.72':445
- '58.#8.1.139':445
- '58.##.171.171':139
- '58.##.117.209':139
- '58.##.46.220':139
- '58.##.187.244':445
- '58.##.115.199':139
- '58.##.16.227':139
- '58.##.129.143':445
- '58.#8.7.185':139
- '58.##.34.151':139
- '58.##.48.162':445
- '58.##.67.101':445
- '58.##.114.151':445
- '58.##.190.217':445
- '58.##.60.139':445
- '58.##.69.137':445
- '58.##.25.150':445
- '58.##.96.222':445
- '58.#8.39.66':139
- '58.##.171.33':445
- '58.##.252.172':445
- '58.##.190.208':139
- '58.##.71.113':445
- '58.##.247.56':139
- '58.##.156.207':445
- '58.##.33.141':445
- '58.##.232.192':445
- '58.##.187.139':139
- '58.##.155.222':445
- '58.#8.5.17':445
- '58.#8.91.75':139
- '58.##.187.224':445
- '58.#8.92.26':445
- '58.#8.9.252':445
- '58.#8.63.71':445
- '58.#8.52.41':445
- '58.##.214.20':445
- '58.##.159.91':445
- '58.#8.3.117':445
- '58.#8.88.7':445
- '58.##.211.183':139
- '58.##.72.234':139
- '58.##.118.94':445
- '58.##.141.177':445
- '58.##.98.123':139
- '58.##.93.251':445
- '58.##.206.118':445
- '58.#8.10.25':139
- '58.##.179.194':445
- '58.##.194.253':445
- '58.##.46.228':139
- '58.#8.91.75':445
- '58.##.19.155':139
- '58.##.154.243':139
- '58.##.211.183':445
- '58.##.224.247':445
- '58.##.98.123':445
- '58.##.187.139':445
- '58.##.247.56':445
- '58.#8.5.123':139
- '58.##.188.95':139
- '58.##.219.190':445
- '58.#8.10.19':139
- '58.##.172.106':445
- '58.#8.56.17':445
- '58.##.129.199':139
- '58.##.222.38':139
- '58.##.30.238':139
- '58.##.184.106':139
- '58.##.190.208':445
- '58.##.48.162':139
- '58.##.172.106':139
- '58.##.62.215':139
- '58.##.217.135':139
- '58.##.219.190':139
- '58.##.243.197':445
- '58.#8.14.5':445
- '58.#8.56.17':139
- '58.##.224.247':139
- '58.#8.1.192':139
- '58.#8.10.25':445
- '58.#8.48.98':139
- '58.#8.39.66':445
- '58.##.72.234':445
- '58.##.107.74':139
- '58.##.43.103':139
- '58.##.72.248':139
- '58.##.71.192':139
- '58.##.208.186':139