Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WERa981.dir00\svchost.exe.mdmp 16325836412029464
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %TEMP%\WERa981.dir00\svchost.exe.mdmp
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '19#.#25.122.45':445
- '19#.#25.175.48':445
- '19#.#25.189.44':445
- '19#.#25.237.189':445
- '19#.#25.80.6':445
- '19#.#25.28.217':445
- '19#.#25.89.214':445
- '19#.#25.102.121':445
- '19#.#25.113.208':445
- '19#.#25.0.233':445
- '19#.#25.189.71':445
- '19#.#25.14.236':445
- '19#.#25.30.83':445
- '19#.#25.86.37':445
- '19#.#25.57.212':445
- '19#.#25.141.57':445
- '19#.#25.54.231':445
- '19#.#25.249.165':445
- '19#.#25.158.133':445
- '19#.#25.204.100':445
- '19#.#25.98.68':445
- '19#.#25.51.243':445
- '19#.#25.70.138':445
- '19#.#25.24.4':445
- '19#.#25.15.12':445
- '19#.#25.28.105':445
- '19#.#25.89.176':445
- '19#.#25.32.22':445
- '19#.#25.11.1':445
- '19#.#25.244.233':445
- '19#.#25.138.244':445
- '19#.#25.55.72':445
- '19#.#25.127.88':445
- '19#.#25.158.133':139
- '19#.#25.24.4':139
- '19#.#25.98.68':139
- '19#.#25.249.165':139
- '19#.#25.70.138':139
- '19#.#25.38.225':139
- '19#.#25.15.12':139
- '19#.#25.51.243':139
- '19#.#25.89.176':139
- '19#.#25.55.72':139
- '19#.#25.11.1':139
- '19#.#25.28.105':139
- '19#.#25.138.244':139
- '19#.#25.204.100':139
- '19#.#25.127.88':139
- '19#.#25.244.233':139
- '19#.#25.182.38':139
- '19#.#25.145.123':139
- '19#.#25.125.185':445
- '19#.#25.208.111':139
- '19#.#25.149.85':139
- '19#.#25.42.247':445
- '19#.#25.46.115':445
- '19#.#25.83.126':445
- '19#.#25.98.83':445
- '19#.#25.231.143':139
- '19#.#25.236.150':139
- '19#.#25.112.181':139
- '19#.#25.228.112':139
- '19#.#25.153.67':139
- '19#.#25.228.211':139
- '19#.#25.234.83':139
- '19#.#25.36.218':139
- '19#.#25.78.121':139
- '19#.#25.56.131':139
- '19#.#25.6.118':139
- '19#.#25.228.171':139
- '19#.#25.122.47':139
- '19#.#25.188.121':139
- '19#.#25.185.55':139
- '19#.#25.193.185':139
- '19#.#25.106.229':139
- '19#.#25.92.39':139
- '19#.#25.197.61':139
- '19#.#25.123.147':139
- '19#.#25.212.96':139
- '19#.#25.21.239':139
- '19#.#25.140.91':139
- '19#.#25.19.247':139
- '19#.#25.57.132':139
- '19#.#25.1.147':139
- '19#.#25.122.135':139
- '19#.#25.227.191':139
- '19#.#25.18.62':139
- '19#.#25.74.183':445
- '19#.#25.204.74':445
- '19#.#25.83.53':139
- '19#.#25.15.71':139
- '19#.#25.167.172':139
- '19#.#25.148.188':139
- '19#.#25.2.17':139
- '19#.#25.207.73':139
- '19#.#25.217.33':139
- '19#.#25.158.117':139
- '19#.#25.160.116':139
- '19#.#25.241.224':139
- '19#.#25.208.111':445
- '19#.#25.149.85':445
- '19#.#25.153.67':445
- '19#.#25.228.211':445
- '19#.#25.204.74':139
- '19#.#25.55.219':139
- '19#.#25.145.123':445
- '19#.#25.74.183':139
- '19#.#25.112.181':445
- '19#.#25.228.112':445
- '19#.#25.38.225':445
- '19#.#25.182.38':445
- '19#.#25.234.83':445
- '19#.#25.36.218':445
- '19#.#25.231.143':445
- '19#.#25.236.150':445
- '19#.#25.49.177':139
- '19#.#25.95.185':139
- '19#.#25.192.15':139
- '19#.#25.217.65':139
- '19#.#25.242.82':139
- '19#.#25.0.83':139
- '19#.#25.191.204':139
- '19#.#25.84.22':139
- '19#.#25.198.115':139
- '19#.#25.3.76':139
- '19#.#25.99.223':139
- '19#.#25.4.177':139
- '19#.#25.173.4':139
- '19#.#25.156.93':139
- '19#.#25.226.2':139
- '19#.#25.123.212':139
- '19#.#25.37.230':139
- '19#.#25.199.176':139
- '19#.#25.19.73':139
- '19#.#25.108.160':139
- '19#.#25.93.149':139
- '19#.#25.156.57':139
- '19#.#25.117.199':139
- '19#.#25.85.210':139
- '19#.#25.6.135':139
- '19#.#25.146.122':139
- '19#.#25.168.189':139
- '19#.#25.55.241':139
- '19#.#25.118.97':139
- '19#.#25.125.20':139
- '19#.#25.160.92':139
- '19#.#25.176.130':139
- '19#.#25.177.8':139
- '19#.#25.175.26':139
- '19#.#25.171.144':445
- '19#.#25.249.233':445
- '19#.#25.101.203':445
- '19#.#25.115.196':445
- '19#.#25.17.161':445
- '19#.#25.190.17':445
- '19#.#25.134.249':445
- '19#.#25.160.135':445
- '19#.#25.177.98':445
- '19#.#25.77.48':445
- '19#.#25.78.191':139
- '19#.#25.75.168':445
- '19#.#25.197.159':445
- '19#.#25.196.97':445
- '19#.#25.94.32':445
- '19#.#25.73.84':445
- '19#.#25.249.233':139
- '19#.#25.134.249':139
- '19#.#25.115.196':139
- '19#.#25.171.144':139
- '19#.#25.190.17':139
- '19#.#25.139.190':139
- '19#.#25.160.135':139
- '19#.#25.17.161':139
- '19#.#25.75.168':139
- '19#.#25.94.32':139
- '19#.#25.77.48':139
- '19#.#25.73.84':139
- '19#.#25.101.203':139
- '19#.#25.196.97':139
- '19#.#25.177.98':139
- '19#.#25.197.159':139
- '19#.#25.94.220':139
- '19#.#25.11.185':139
- '19#.#25.13.9':139
- '19#.#25.101.27':139
- '19#.#25.56.76':139
- '19#.#25.154.222':139
- '19#.#25.39.27':139
- '19#.#25.214.12':139
- '19#.#25.40.69':139
- '19#.#25.143.241':139
- '19#.#25.85.143':139
- '19#.#25.17.114':139
- '19#.#25.147.78':139
- '19#.#25.38.124':139
- '19#.#25.11.175':139
- '19#.#25.212.85':139
- '19#.#25.80.25':139
- '19#.#25.125.185':139
- '19#.#25.83.126':139
- '19#.#25.146.122':9988
- '19#.#25.176.130':9988
- '19#.#25.46.115':139
- '19#.#25.189.71':139
- '19#.#25.98.83':139
- '19#.#25.42.247':139
- '19#.#25.78.191':445
- '19#.#25.17.114':9988
- '19#.#25.117.199':445
- '19#.#25.175.26':445
- '19#.#25.115.196':9988
- '19#.#25.55.241':9988
- '19#.#25.196.97':9988
- '19#.#25.75.168':9988
- '19#.#25.14.236':139
- '19#.#25.89.214':139
- '19#.#25.102.121':139
- '19#.#25.122.45':139
- '19#.#25.175.48':139
- '19#.#25.54.231':139
- '19#.#25.32.22':139
- '19#.#25.80.6':139
- '19#.#25.28.217':139
- '19#.#25.57.212':139
- '19#.#25.141.57':139
- '19#.#25.113.208':139
- '19#.#25.0.233':139
- '19#.#25.189.44':139
- '19#.#25.237.189':139
- '19#.#25.30.83':139
- '19#.#25.86.37':139
- '19#.#25.101.27':445
- '19#.#25.56.76':445
- '19#.#25.38.124':445
- '19#.#25.11.175':445
- '19#.#25.214.12':445
- '19#.#25.40.69':445
- '19#.#25.11.185':445
- '19#.#25.13.9':445
- '19#.#25.17.114':445
- '19#.#25.147.78':445
- '19#.#25.139.190':445
- '19#.#25.94.220':445
- '19#.#25.212.85':445
- '19#.#25.80.25':445
- '19#.#25.143.241':445
- '19#.#25.85.143':445
- '19#.#25.154.222':445
- '19#.#25.93.149':445
- '19#.#25.199.176':445
- '19#.#25.160.92':445
- '19#.#25.108.160':445
- '19#.#25.6.135':445
- '19#.#25.156.57':445
- '19#.#25.19.73':445
- '19#.#25.85.210':445
- '19#.#25.118.97':445
- '19#.#25.146.122':445
- '19#.#25.39.27':445
- '19#.#25.55.241':445
- '19#.#25.177.8':445
- '19#.#25.125.20':445
- '19#.#25.168.189':445
- '19#.#25.176.130':445