Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERc63c.dir00\svchost.exe.mdmp 16325836412032512
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %TEMP%\WERc63c.dir00\svchost.exe.mdmp
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '14#.#35.175.93':445
- '14#.#35.107.26':445
- '14#.#35.31.74':445
- '14#.#35.2.104':445
- '14#.#35.128.123':445
- '14#.#35.121.194':445
- '14#.#35.37.82':445
- '14#.#35.238.36':445
- '14#.#35.73.59':445
- '14#.#35.33.199':445
- '14#.#35.116.135':445
- '14#.#35.253.94':445
- '14#.#35.122.239':445
- '14#.#35.115.87':445
- '14#.#35.251.87':445
- '14#.#35.238.230':445
- '14#.#35.234.172':445
- '14#.#35.176.234':445
- '14#.#35.40.46':445
- '14#.#35.14.125':445
- '14#.#35.97.191':445
- '14#.#35.126.78':445
- '14#.#35.53.176':445
- '14#.#35.201.76':445
- '14#.#35.16.207':445
- '14#.#35.165.16':445
- '14#.#35.29.92':445
- '14#.#35.143.186':445
- '14#.#35.151.114':445
- '14#.#35.23.26':445
- '14#.#35.235.162':445
- '14#.#35.106.227':445
- '14#.#35.9.57':445
- '14#.#35.53.176':139
- '14#.#35.201.76':139
- '14#.#35.234.172':139
- '14#.#35.176.234':139
- '14#.#35.250.88':139
- '14#.#35.142.171':139
- '14#.#35.97.191':139
- '14#.#35.126.78':139
- '14#.#35.235.162':139
- '14#.#35.106.227':139
- '14#.#35.16.207':139
- '14#.#35.165.16':139
- '14#.#35.40.46':139
- '14#.#35.14.125':139
- '14#.#35.151.114':139
- '14#.#35.23.26':139
- '14#.#35.70.223':139
- '14#.#35.39.46':139
- '14#.#35.170.132':139
- '14#.#35.147.242':139
- '14#.#35.162.185':445
- '14#.#35.58.199':445
- '14#.#35.82.92':445
- '14#.#35.89.201':445
- '14#.#35.151.148':139
- '14#.#35.105.225':139
- '14#.#35.18.217':139
- '14#.#35.223.57':139
- '14#.#35.28.28':139
- '14#.#35.126.28':139
- '14#.#35.2.21':139
- '14#.#35.28.66':139
- '14#.#35.1.172':139
- '14#.#35.72.153':139
- '14#.#35.24.117':139
- '14#.#35.162.24':139
- '14#.#35.57.184':139
- '14#.#35.53.241':139
- '14#.#35.119.0':139
- '14#.#35.183.237':139
- '14#.#35.103.3':139
- '14#.#35.140.102':139
- '14#.#35.213.14':139
- '14#.#35.2.130':139
- '14#.#35.37.24':139
- '14#.#35.117.73':139
- '14#.#35.222.140':139
- '14#.#35.54.222':139
- '14#.#35.11.68':139
- '14#.#35.145.251':139
- '14#.#35.178.236':139
- '14#.#35.40.179':139
- '14#.#35.102.44':139
- '14#.#35.33.219':139
- '14#.#35.165.41':139
- '14#.#35.66.178':139
- '14#.#35.69.138':139
- '14#.#35.222.143':139
- '14#.#35.73.46':139
- '14#.#35.202.215':139
- '14#.#35.70.209':139
- '14#.#35.15.138':139
- '14#.#35.100.44':139
- '14#.#35.50.129':139
- '14#.#35.251.2':139
- '14#.#35.170.132':445
- '14#.#35.147.242':445
- '14#.#35.28.28':445
- '14#.#35.126.28':445
- '14#.#35.91.247':139
- '14#.#35.122.210':139
- '14#.#35.70.223':445
- '14#.#35.39.46':445
- '14#.#35.18.217':445
- '14#.#35.223.57':445
- '14#.#35.250.88':445
- '14#.#35.142.171':445
- '14#.#35.2.21':445
- '14#.#35.28.66':445
- '14#.#35.151.148':445
- '14#.#35.105.225':445
- '14#.#35.129.19':139
- '14#.#35.60.138':139
- '14#.#35.146.100':139
- '14#.#35.187.207':139
- '14#.#35.79.99':139
- '14#.#35.2.106':139
- '14#.#35.160.234':139
- '14#.#35.145.84':139
- '14#.#35.157.227':139
- '14#.#35.41.113':139
- '14#.#35.218.176':139
- '14#.#35.227.236':139
- '14#.#35.91.233':139
- '14#.#35.154.234':139
- '14#.#35.177.39':139
- '14#.#35.43.79':139
- '14#.#35.143.186':139
- '14#.#35.79.200':139
- '14#.#35.240.237':139
- '14#.#35.111.193':139
- '14#.#35.100.233':139
- '14#.#35.46.182':139
- '14#.#35.8.172':139
- '14#.#35.62.63':139
- '14#.#35.156.111':139
- '14#.#35.20.115':139
- '14#.#35.100.91':139
- '14#.#35.29.216':139
- '14#.#35.117.171':139
- '14#.#35.165.62':139
- '14#.#35.168.228':139
- '14#.#35.7.177':139
- '14#.#35.133.192':139
- '14#.#35.57.78':445
- '14#.#35.189.121':445
- '14#.#35.183.239':445
- '14#.#35.239.55':445
- '14#.#35.132.140':445
- '14#.#35.30.13':445
- '14#.#35.231.79':445
- '14#.#35.116.231':445
- '14#.#35.8.214':445
- '14#.#35.60.66':445
- '14#.#35.229.231':139
- '14#.#35.82.38':139
- '14#.#35.67.130':445
- '14#.#35.51.226':445
- '14#.#35.66.184':445
- '14#.#35.102.1':445
- '14#.#35.35.131':139
- '14#.#35.231.79':139
- '14#.#35.116.231':139
- '14#.#35.57.78':139
- '14#.#35.189.121':139
- '14#.#35.187.22':139
- '14#.#35.171.165':139
- '14#.#35.132.140':139
- '14#.#35.30.13':139
- '14#.#35.102.1':139
- '14#.#35.183.239':139
- '14#.#35.239.55':139
- '14#.#35.60.66':139
- '14#.#35.51.226':139
- '14#.#35.67.130':139
- '14#.#35.8.214':139
- '14#.#35.66.184':139
- '14#.#35.149.189':139
- '14#.#35.223.172':139
- '14#.#35.125.207':139
- '14#.#35.189.111':139
- '14#.#35.59.0':139
- '14#.#35.52.220':139
- '14#.#35.95.239':139
- '14#.#35.184.163':139
- '14#.#35.49.141':139
- '14#.#35.94.143':139
- '14#.#35.145.183':139
- '14#.#35.91.145':139
- '14#.#35.168.188':139
- '14#.#35.129.82':139
- '14#.#35.105.3':139
- '14#.#35.67.212':139
- '14#.#35.82.92':139
- '14#.#35.89.201':139
- '14#.#35.129.82':9988
- '14#.#35.29.216':9988
- '14#.#35.9.57':139
- '14#.#35.116.135':139
- '14#.#35.162.185':139
- '14#.#35.58.199':139
- '14#.#35.229.231':445
- '14#.#35.82.38':445
- '14#.#35.46.182':445
- '14#.#35.8.172':445
- '14#.#35.102.1':9988
- '14#.#35.94.143':9988
- '14#.#35.35.131':9988
- '14#.#35.125.207':9988
- '14#.#35.107.26':139
- '14#.#35.37.82':139
- '14#.#35.2.104':139
- '14#.#35.175.93':139
- '14#.#35.121.194':139
- '14#.#35.29.92':139
- '14#.#35.238.36':139
- '14#.#35.128.123':139
- '14#.#35.33.199':139
- '14#.#35.251.87':139
- '14#.#35.253.94':139
- '14#.#35.73.59':139
- '14#.#35.115.87':139
- '14#.#35.31.74':139
- '14#.#35.238.230':139
- '14#.#35.122.239':139
- '14#.#35.156.111':445
- '14#.#35.125.207':445
- '14#.#35.189.111':445
- '14#.#35.168.188':445
- '14#.#35.129.82':445
- '14#.#35.95.239':445
- '14#.#35.184.163':445
- '14#.#35.149.189':445
- '14#.#35.223.172':445
- '14#.#35.145.183':445
- '14#.#35.91.145':445
- '14#.#35.187.22':445
- '14#.#35.171.165':445
- '14#.#35.105.3':445
- '14#.#35.67.212':445
- '14#.#35.49.141':445
- '14#.#35.94.143':445
- '14#.#35.168.228':445
- '14#.#35.111.193':445
- '14#.#35.133.192':445
- '14#.#35.165.62':445
- '14#.#35.240.237':445
- '14#.#35.62.63':445
- '14#.#35.100.233':445
- '14#.#35.79.200':445
- '14#.#35.35.131':445
- '14#.#35.29.216':445
- '14#.#35.59.0':445
- '14#.#35.52.220':445
- '14#.#35.100.91':445
- '14#.#35.7.177':445
- '14#.#35.117.171':445
- '14#.#35.20.115':445