Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1112 -dm 7 7 %TEMP%\WER85ec.dir00\svchost.exe.mdmp 16325836412032536
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %TEMP%\WER85ec.dir00\svchost.exe.mdmp
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '20#.#23.34.4':139
- '20#.#23.53.178':139
- '20#.#23.10.11':139
- '20#.#23.138.3':139
- '20#.#23.138.3':445
- '20#.#23.34.4':445
- '20#.#23.85.241':139
- '20#.#23.53.178':445
- '20#.#23.10.11':445
- '20#.#23.255.65':139
- '20#.#23.87.82':445
- '20#.#23.238.228':445
- '20#.#23.38.213':445
- '20#.#23.71.15':445
- '20#.#23.95.241':445
- '20#.#23.87.127':445
- '20#.#23.127.34':445
- '20#.#23.80.83':445
- '20#.#23.0.66':445
- '20#.#23.150.249':139
- '20#.#23.27.176':139
- '20#.#23.223.98':139
- '20#.#23.115.24':139
- '20#.#23.172.33':139
- '20#.#23.77.30':139
- '20#.#23.98.84':139
- '20#.#23.252.163':139
- '20#.#23.31.229':139
- '20#.#23.9.246':139
- '20#.#23.148.207':139
- '20#.#23.157.55':139
- '20#.#23.23.86':139
- '20#.#23.31.77':139
- '20#.#23.255.65':445
- '20#.#23.133.46':139
- '20#.#23.71.229':139
- '20#.#23.223.156':139
- '20#.#23.109.236':139
- '20#.#23.129.28':445
- '20#.#23.28.243':445
- '20#.#23.208.185':445
- '20#.#23.242.183':445
- '20#.#23.58.8':445
- '20#.#23.109.54':445
- '20#.#23.127.109':445
- '20#.#23.60.23':445
- '20#.#23.54.68':445
- '20#.#23.127.34':139
- '20#.#23.71.15':139
- '20#.#23.87.82':139
- '20#.#23.40.133':139
- '20#.#23.38.213':139
- '20#.#23.238.228':139
- '20#.#23.0.66':139
- '20#.#23.87.127':139
- '20#.#23.95.241':139
- '20#.#23.80.83':139
- '20#.#23.84.140':445
- '20#.#23.91.190':445
- '20#.#23.89.186':445
- '20#.#23.133.139':445
- '20#.#23.228.137':445
- '20#.#23.69.92':445
- '20#.#23.40.133':445
- '20#.#23.172.98':445
- '20#.#23.20.86':445
- '20#.#23.61.103':445
- '20#.#23.122.238':445
- '20#.#23.222.122':445
- '20#.#23.38.127':445
- '20#.#23.135.136':445
- '20#.#23.136.222':445
- '20#.#23.228.244':445
- '20#.#23.244.228':445
- '20#.#23.7.98':445
- '20#.#23.244.152':445
- '20#.#23.27.70':139
- '20#.#23.54.178':445
- '20#.#23.75.153':445
- '20#.#23.184.30':445
- '20#.#23.50.223':445
- '20#.#23.59.148':445
- '20#.#23.178.119':445
- '20#.#23.133.46':445
- '20#.#23.91.7':445
- '20#.#23.246.152':445
- '20#.#23.18.241':445
- '20#.#23.31.131':445
- '20#.#23.115.24':445
- '20#.#23.27.70':445
- '20#.#23.231.31':445
- '20#.#23.153.89':445
- '20#.#23.25.43':445
- '20#.#23.77.30':445
- '20#.#23.57.112':445
- '20#.#23.98.84':445
- '20#.#23.133.198':445
- '20#.#23.179.7':445
- '20#.#23.95.231':139
- '20#.#23.231.19':139
- '20#.#23.121.17':445
- '20#.#23.210.14':445
- '20#.#23.7.65':445
- '20#.#23.14.179':445
- '20#.#23.8.10':445
- '20#.#23.20.56':445
- '20#.#23.150.249':445
- '20#.#23.46.245':445
- '20#.#23.223.98':445
- '20#.#23.27.176':445
- '20#.#23.71.229':445
- '20#.#23.104.231':445
- '20#.#23.55.210':139
- '20#.#23.171.74':445
- '20#.#23.9.246':445
- '20#.#23.54.178':139
- '20#.#23.59.148':139
- '20#.#23.184.30':139
- '20#.#23.50.223':139
- '20#.#23.75.153':139
- '20#.#23.133.198':139
- '20#.#23.178.119':139
- '20#.#23.91.7':139
- '20#.#23.246.152':139
- '20#.#23.18.241':139
- '20#.#23.171.74':139
- '20#.#23.164.242':139
- '20#.#23.57.112':139
- '20#.#23.25.43':139
- '20#.#23.104.231':139
- '20#.#23.31.131':139
- '20#.#23.231.31':139
- '20#.#23.46.245':139
- '20#.#23.153.89':139
- '20#.#23.148.207':445
- '20#.#23.223.156':445
- '20#.#23.85.241':445
- '20#.#23.157.55':445
- '20#.#23.109.236':445
- '20#.#23.172.33':445
- '20#.#23.164.242':445
- '20#.#23.31.229':445
- '20#.#23.252.163':445
- '20#.#23.23.86':445
- '20#.#23.121.17':139
- '20#.#23.14.179':139
- '20#.#23.8.10':139
- '20#.#23.71.83':139
- '20#.#23.125.172':139
- '20#.#23.7.65':139
- '20#.#23.31.77':445
- '20#.#23.179.7':139
- '20#.#23.210.14':139
- '20#.#23.166.75':139
- '20#.#23.209.156':445
- '20#.#23.227.102':139
- '20#.#23.7.154':139
- '20#.#23.131.6':445
- '20#.#23.91.105':445
- '20#.#23.47.183':445
- '20#.#23.5.211':445
- '20#.#23.43.195':445
- '20#.#23.93.214':139
- '20#.#23.11.182':139
- '20#.#23.133.253':139
- '20#.#23.90.237':139
- '20#.#23.249.115':139
- '20#.#23.97.136':139
- '20#.#23.110.178':139
- '20#.#23.30.73':139
- '20#.223.8.7':139
- '20#.#23.198.15':139
- '20#.#23.81.129':445
- '20#.#23.255.67':445
- '20#.#23.154.111':445
- '20#.#23.127.79':445
- '20#.#23.4.89':445
- '20#.#23.20.188':445
- '20#.#23.137.170':445
- '20#.#23.104.180':445
- '20#.#23.208.12':445
- '20#.#23.52.69':445
- '20#.#23.76.79':445
- '20#.#23.232.127':445
- '20#.#23.85.223':445
- '20#.#23.125.25':445
- '20#.#23.27.32':445
- '20#.#23.17.131':445
- '20#.#23.78.109':445
- '20#.#23.204.104':445
- '20#.#23.32.232':445
- '20#.#23.127.79':139
- '20#.#23.78.109':139
- '20#.#23.43.195':139
- '20#.#23.52.69':139
- '20#.#23.4.89':139
- '20#.#23.32.232':139
- '20#.#23.81.129':139
- '20#.#23.154.111':139
- '20#.#23.204.104':139
- '20#.#23.131.6':139
- '20#.#23.125.25':139
- '20#.#23.27.32':139
- '20#.#23.76.79':139
- '20#.#23.91.105':139
- '20#.#23.5.211':139
- '20#.#23.85.223':139
- '20#.#23.47.183':139
- '20#.#23.209.156':139
- '20#.#23.232.127':139
- '20#.#23.39.31':139
- '20#.#23.116.11':139
- '20#.#23.109.20':139
- '20#.#23.187.168':139
- '20#.#23.24.79':139
- '20#.#23.219.106':139
- '20#.#23.172.85':139
- '20#.#23.28.27':139
- '20#.#23.204.39':139
- '20#.#23.44.143':139
- '20#.#23.104.180':139
- '20#.#23.208.12':139
- '20#.#23.255.67':139
- '20#.#23.17.131':139
- '20#.#23.20.188':139
- '20#.#23.16.144':139
- '20#.#23.137.247':139
- '20#.#23.117.98':139
- '20#.#23.137.170':139
- '20#.#23.44.143':445
- '20#.#23.242.183':139
- '20#.#23.129.28':139
- '20#.#23.185.54':445
- '20#.#23.208.185':139
- '20#.#23.28.243':139
- '20#.#23.54.68':139
- '20#.#23.109.54':139
- '20#.#23.58.8':139
- '20#.#23.60.23':139
- '20#.#23.123.14':445
- '20#.#23.204.104':9988
- '20#.#23.32.232':9988
- '20#.#23.185.54':139
- '20#.#23.91.105':9988
- '20#.#23.110.30':445
- '20#.#23.55.42':445
- '20#.#23.188.130':445
- '20#.#23.170.197':445
- '20#.#23.214.41':445
- '20#.#23.133.139':139
- '20#.#23.84.140':139
- '20#.#23.61.103':139
- '20#.#23.89.186':139
- '20#.#23.91.190':139
- '20#.#23.20.86':139
- '20#.#23.69.92':139
- '20#.#23.228.137':139
- '20#.#23.172.98':139
- '20#.#23.244.228':139
- '20#.#23.135.136':139
- '20#.#23.122.238':139
- '20#.#23.127.109':139
- '20#.#23.38.127':139
- '20#.#23.222.122':139
- '20#.#23.244.152':139
- '20#.#23.228.244':139
- '20#.#23.136.222':139
- '20#.#23.7.98':139
- '20#.#23.204.39':445
- '20#.#23.90.237':445
- '20#.#23.249.115':445
- '20#.#23.28.27':445
- '20#.#23.172.85':445
- '20#.#23.97.136':445
- '20#.223.8.7':445
- '20#.#23.93.214':445
- '20#.#23.133.253':445
- '20#.#23.219.106':445
- '20#.#23.16.144':445
- '20#.#23.109.20':445
- '20#.#23.117.98':445
- '20#.#23.137.247':445
- '20#.#23.187.168':445
- '20#.#23.24.79':445
- '20#.#23.11.182':445
- '20#.#23.39.31':445
- '20#.#23.116.11':445
- '20#.#23.7.154':9988
- '20#.#23.110.30':139
- '20#.#23.97.136':9988
- '20#.#23.90.237':9988
- '20#.#23.170.197':139
- '20#.#23.188.130':139
- '20#.#23.123.14':139
- '20#.#23.214.41':139
- '20#.#23.55.42':139
- '20#.#23.116.11':9988
- '20#.#23.110.178':445
- '20#.#23.30.73':445
- '20#.#23.7.154':445
- '20#.#23.166.75':445
- '20#.#23.227.102':445
- '20#.#23.125.25':9988
- '20#.#23.47.183':9988
- '20#.#23.198.15':445
- '20#.#23.5.211':9988