Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERfd0c.dir00\svchost.exe.mdmp 16325836412031988
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %TEMP%\WERfd0c.dir00\svchost.exe.mdmp
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '65.#.194.235':139
- '65.#.178.84':139
- '65.#.7.251':139
- '65.#.216.8':445
- '65.#.86.17':445
- '65.#.1.49':139
- '65.#.115.1':139
- '65.#.48.228':139
- '65.#.105.104':139
- '65.#.227.226':139
- '65.#.112.218':445
- '65.#.112.218':139
- '65.#.216.8':139
- '65.#.38.108':139
- '65.#.192.50':139
- '65.#.249.203':139
- '65.#.249.203':445
- '65.#.38.108':445
- '65.#.192.50':445
- '65.#.86.17':139
- '65.#.44.122':445
- '65.#.143.81':139
- '65.#.85.143':139
- '65.#.200.40':139
- '65.#.167.21':139
- '65.#.163.112':139
- '65.#.214.104':139
- '65.#.71.247':139
- '65.#.57.64':139
- '65.#.79.95':139
- '65.#.1.118':139
- '65.#.21.178':139
- '65.#.92.178':139
- '65.#.84.65':139
- '65.#.143.117':139
- '65.#.6.214':139
- '65.#.117.211':139
- '65.#.106.52':139
- '65.#.84.27':139
- '65.#.198.199':139
- '65.#.126.84':139
- '65.#.127.171':139
- '65.#.232.107':445
- '65.#.157.183':445
- '65.#.90.21':445
- '65.#.0.178':445
- '65.#.81.169':445
- '65.#.165.95':445
- '65.#.24.52':445
- '65.#.190.140':445
- '65.#.18.233':445
- '65.#.65.197':445
- '65.#.194.129':445
- '65.#.26.226':445
- '65.#.16.182':445
- '65.#.91.26':445
- '65.#.81.9':445
- '65.#.172.90':445
- '65.#.44.73':445
- '65.#.130.83':445
- '65.#.82.173':445
- '65.#.131.239':445
- '65.#.217.104':445
- '65.#.210.88':445
- '65.#.230.190':445
- '65.#.69.216':445
- '65.#.229.34':445
- '65.#.86.183':445
- '65.#.167.186':445
- '65.#.44.122':139
- '65.#.14.140':445
- '65.#.48.70':445
- '65.#.176.230':445
- '65.#.171.66':445
- '65.#.83.70':445
- '65.#.192.219':445
- '65.#.163.22':445
- '65.#.20.102':445
- '65.#.83.72':445
- '65.#.42.21':445
- '65.#.190.138':445
- '65.#.49.7':445
- '65.#.7.121':445
- '65.#.95.27':445
- '65.#.138.251':139
- '65.#.28.224':445
- '65.#.110.218':445
- '65.#.132.71':445
- '65.#.251.67':445
- '65.#.32.25':445
- '65.#.87.43':139
- '65.#.162.170':139
- '65.#.202.179':139
- '65.#.236.110':139
- '65.#.26.198':139
- '65.#.162.93':445
- '65.#.47.100':445
- '65.#.140.211':445
- '65.#.251.194':445
- '65.#.71.247':445
- '65.#.138.251':445
- '65.#.51.143':445
- '65.#.84.185':445
- '65.#.227.72':445
- '65.#.140.248':445
- '65.#.137.86':445
- '65.#.15.236':139
- '65.#.140.206':139
- '65.#.57.136':139
- '65.#.157.123':139
- '65.#.156.217':139
- '65.#.175.185':139
- '65.#.251.60':139
- '65.#.128.233':139
- '65.#.182.5':139
- '65.#.26.113':139
- '65.#.32.180':139
- '65.#.26.198':445
- '65.#.202.179':445
- '65.#.236.110':445
- '65.#.130.216':139
- '65.#.196.115':139
- '65.#.196.115':445
- '65.#.68.55':139
- '65.#.130.216':445
- '65.#.87.43':445
- '65.#.162.170':445
- '65.#.7.251':445
- '65.#.48.228':445
- '65.#.110.218':139
- '65.#.28.224':139
- '65.#.32.25':139
- '65.#.1.49':445
- '65.#.227.226':445
- '65.#.178.84':445
- '65.#.6.214':445
- '65.#.105.104':445
- '65.#.251.67':139
- '65.#.140.248':139
- '65.#.137.86':139
- '65.#.140.211':139
- '65.#.47.100':139
- '65.#.251.194':139
- '65.#.132.71':139
- '65.#.162.93':139
- '65.#.84.185':139
- '65.#.227.72':139
- '65.#.51.143':139
- '65.#.200.40':445
- '65.#.143.81':445
- '65.#.163.112':445
- '65.#.198.199':445
- '65.#.167.21':445
- '65.#.57.64':445
- '65.#.214.104':445
- '65.#.1.118':445
- '65.#.79.95':445
- '65.#.85.143':445
- '65.#.126.84':445
- '65.#.21.178':445
- '65.#.143.117':445
- '65.#.127.171':445
- '65.#.115.1':445
- '65.#.194.235':445
- '65.#.84.65':445
- '65.#.117.211':445
- '65.#.106.52':445
- '65.#.84.27':445
- '65.#.92.178':445
- '65.#.166.135':445
- '65.#.149.181':445
- '65.#.104.20':445
- '65.#.40.128':445
- '65.#.6.168':445
- '65.#.45.41':445
- '65.#.71.35':445
- '65.#.22.87':445
- '65.#.171.77':445
- '65.#.9.78':445
- '65.#.87.150':445
- '65.#.35.157':139
- '65.#.170.97':139
- '65.#.24.164':139
- '65.#.105.181':139
- '65.#.71.49':139
- '65.#.228.6':139
- '65.#.41.237':445
- '65.#.56.212':139
- '65.#.246.222':139
- '65.#.179.157':139
- '65.#.125.139':445
- '65.#.249.198':445
- '65.#.151.121':445
- '65.#.131.120':445
- '65.#.73.136':445
- '65.#.113.170':445
- '65.#.36.214':445
- '65.#.1.96':445
- '65.#.199.14':445
- '65.#.159.77':445
- '65.#.121.131':445
- '65.#.218.196':445
- '65.#.146.160':445
- '65.#.85.195':445
- '65.#.65.209':445
- '65.#.217.214':445
- '65.#.110.47':445
- '65.#.196.107':445
- '65.#.132.143':445
- '65.#.138.43':445
- '65.#.70.115':445
- '65.#.217.214':139
- '65.#.85.195':139
- '65.#.65.209':139
- '65.#.149.181':139
- '65.#.218.196':139
- '65.#.132.143':139
- '65.#.110.47':139
- '65.#.70.115':139
- '65.#.146.160':139
- '65.#.138.43':139
- '65.#.166.135':139
- '65.#.22.87':139
- '65.#.40.128':139
- '65.#.171.77':139
- '65.#.41.237':139
- '65.#.87.150':139
- '65.#.6.168':139
- '65.#.71.35':139
- '65.#.104.20':139
- '65.#.9.78':139
- '65.#.45.41':139
- '65.#.59.40':139
- '65.#.63.134':139
- '65.#.21.242':139
- '65.#.36.214':139
- '65.#.168.214':139
- '65.#.173.232':139
- '65.#.61.24':139
- '65.#.11.124':139
- '65.#.96.153':139
- '65.#.101.169':139
- '65.#.113.170':139
- '65.#.121.131':139
- '65.#.151.121':139
- '65.#.131.120':139
- '65.#.196.107':139
- '65.#.73.136':139
- '65.#.159.77':139
- '65.#.1.96':139
- '65.#.249.198':139
- '65.#.125.139':139
- '65.#.199.14':139
- '65.#.168.214':445
- '65.#.192.219':139
- '65.#.163.22':139
- '65.#.83.72':139
- '65.#.24.52':139
- '65.#.20.102':139
- '65.#.49.7':139
- '65.#.171.66':139
- '65.#.7.121':139
- '65.#.83.70':139
- '65.#.169.140':445
- '65.#.165.95':139
- '65.#.81.169':139
- '65.#.90.21':139
- '65.#.0.178':139
- '65.#.130.83':139
- '65.#.194.129':139
- '65.#.65.197':139
- '65.#.190.140':139
- '65.#.18.233':139
- '65.#.157.183':139
- '65.#.232.107':139
- '65.#.128.33':445
- '65.#.34.239':445
- '65.#.14.140':139
- '65.#.176.230':139
- '65.#.48.70':139
- '65.#.94.172':445
- '65.#.146.223':445
- '65.#.178.247':445
- '65.#.167.186':139
- '65.#.197.64':445
- '65.#.230.190':139
- '65.#.229.34':139
- '65.#.86.183':139
- '65.#.95.27':139
- '65.#.42.21':139
- '65.#.190.138':139
- '65.#.210.88':139
- '65.#.121.154':445
- '65.#.0.94':445
- '65.#.69.216':139
- '65.#.150.180':445
- '65.#.179.157':445
- '65.#.56.212':445
- '65.#.246.222':445
- '65.#.170.97':445
- '65.#.35.157':445
- '65.#.24.164':9988
- '65.#.35.157':9988
- '65.#.22.87':9988
- '65.#.228.6':445
- '65.#.104.20':9988
- '65.#.71.49':445
- '65.#.96.153':445
- '65.#.101.169':445
- '65.#.63.134':445
- '65.#.21.242':445
- '65.#.59.40':445
- '65.#.173.232':445
- '65.#.24.164':445
- '65.#.61.24':445
- '65.#.11.124':445
- '65.#.105.181':445
- '65.#.91.26':139
- '65.#.172.90':139
- '65.#.26.226':139
- '65.#.146.223':139
- '65.#.81.9':139
- '65.#.217.104':139
- '65.#.82.173':139
- '65.#.44.73':139
- '65.#.131.239':139
- '65.#.16.182':139
- '65.#.94.172':139
- '65.#.150.180':139
- '65.#.0.94':139
- '65.#.169.140':139
- '65.#.246.222':9988
- '65.#.56.212':9988
- '65.#.197.64':139
- '65.#.178.247':139
- '65.#.34.239':139
- '65.#.121.154':139
- '65.#.128.33':139