Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER0c8d.dir00\svchost.exe.mdmp 16325836412032568
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %TEMP%\WER0c8d.dir00\svchost.exe.mdmp
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '58.##4.21.219':445
- '58.##4.117.237':445
- '58.##4.124.232':445
- '58.##4.58.225':445
- '58.##4.75.224':445
- '58.##4.8.190':445
- '58.##4.162.174':445
- '58.##4.232.128':445
- '58.##4.153.55':445
- '58.##4.153.20':445
- '58.##4.18.171':445
- '58.##4.252.161':445
- '58.##4.130.57':445
- '58.##4.50.130':445
- '58.##4.105.21':445
- '58.##4.57.88':445
- '58.##4.73.200':445
- '58.##4.40.213':445
- '58.##4.86.230':445
- '58.##4.158.98':445
- '58.##4.147.164':445
- '58.##4.204.132':445
- '58.##4.22.228':445
- '58.##4.152.140':445
- '58.##4.74.174':445
- '58.##4.175.233':445
- '58.##4.32.74':445
- '58.##4.138.107':445
- '58.##4.177.227':445
- '58.##4.12.220':445
- '58.##4.74.97':445
- '58.##4.227.237':445
- '58.##4.226.241':445
- '58.##4.40.213':139
- '58.##4.86.230':139
- '58.##4.147.164':139
- '58.##4.152.140':139
- '58.##4.22.228':139
- '58.##4.30.113':139
- '58.##4.204.132':139
- '58.##4.74.174':139
- '58.##4.74.97':139
- '58.##4.158.98':139
- '58.##4.226.241':139
- '58.##4.175.233':139
- '58.##4.177.227':139
- '58.##4.12.220':139
- '58.##4.138.107':139
- '58.##4.227.237':139
- '58.##4.131.227':139
- '58.##4.105.63':139
- '58.##4.10.101':139
- '58.##4.145.215':139
- '58.##4.63.132':139
- '58.##4.110.152':445
- '58.##4.152.138':445
- '58.##4.54.96':139
- '58.##4.77.248':445
- '58.##4.38.238':139
- '58.##4.24.229':139
- '58.##4.4.138':139
- '58.#64.5.69':139
- '58.##4.137.243':139
- '58.##4.228.215':139
- '58.##4.81.16':139
- '58.##4.55.208':139
- '58.#64.7.12':139
- '58.##4.153.110':139
- '58.##4.138.7':139
- '58.##4.229.105':139
- '58.##4.13.118':139
- '58.##4.15.150':139
- '58.##4.85.153':139
- '58.#64.9.85':139
- '58.##4.70.177':139
- '58.##4.188.21':139
- '58.##4.148.52':139
- '58.##4.122.172':139
- '58.##4.32.177':139
- '58.##4.151.235':139
- '58.#64.94.2':139
- '58.##4.177.71':139
- '58.##4.52.98':139
- '58.##4.216.254':139
- '58.##4.32.120':139
- '58.##4.234.221':139
- '58.##4.64.234':139
- '58.##4.225.105':139
- '58.##4.117.45':139
- '58.##4.228.9':139
- '58.##4.251.227':139
- '58.##4.171.177':139
- '58.##4.223.183':139
- '58.##4.246.220':139
- '58.##4.118.43':139
- '58.##4.102.61':139
- '58.##4.136.221':139
- '58.##4.101.149':139
- '58.##4.109.172':139
- '58.##4.63.132':445
- '58.##4.145.215':445
- '58.##4.137.243':445
- '58.##4.228.215':445
- '58.##4.54.96':445
- '58.##4.72.61':139
- '58.##4.105.63':445
- '58.##4.10.101':445
- '58.##4.4.138':445
- '58.##4.38.238':445
- '58.##4.131.227':445
- '58.##4.30.113':445
- '58.##4.81.16':445
- '58.##4.55.208':445
- '58.#64.5.69':445
- '58.##4.24.229':445
- '58.##4.91.71':139
- '58.##4.186.152':139
- '58.##4.74.232':139
- '58.##4.231.213':139
- '58.##4.212.67':139
- '58.##4.91.182':139
- '58.##4.76.113':139
- '58.##4.108.203':139
- '58.##4.119.220':139
- '58.##4.72.212':139
- '58.##4.230.160':139
- '58.##4.20.217':139
- '58.##4.77.123':139
- '58.##4.45.170':139
- '58.##4.53.17':139
- '58.##4.31.213':139
- '58.##4.215.171':139
- '58.##4.32.74':139
- '58.##4.213.1':139
- '58.##4.27.144':139
- '58.##4.24.21':139
- '58.##4.159.150':139
- '58.#64.11.3':139
- '58.##4.178.219':139
- '58.##4.11.71':139
- '58.##4.234.14':139
- '58.##4.4.103':139
- '58.##4.177.65':139
- '58.##4.25.66':139
- '58.##4.246.148':139
- '58.##4.102.97':139
- '58.##4.91.217':139
- '58.##4.97.152':139
- '58.##4.7.146':139
- '58.##4.143.212':139
- '58.##4.83.211':445
- '58.##4.28.90':445
- '58.##4.91.116':445
- '58.##4.138.58':445
- '58.##4.235.197':445
- '58.##4.2.213':445
- '58.##4.243.61':445
- '58.##4.53.123':445
- '58.##4.127.149':445
- '58.##4.130.176':445
- '58.##4.41.125':139
- '58.##4.124.14':445
- '58.##4.62.215':445
- '58.##4.233.99':445
- '58.##4.176.139':445
- '58.##4.192.84':445
- '58.##4.138.58':139
- '58.##4.233.99':139
- '58.##4.83.211':139
- '58.##4.192.84':139
- '58.##4.2.213':139
- '58.##4.45.243':139
- '58.##4.91.116':139
- '58.##4.53.123':139
- '58.##4.130.176':139
- '58.##4.62.215':139
- '58.##4.243.61':139
- '58.##4.28.90':139
- '58.##4.127.149':139
- '58.##4.124.14':139
- '58.##4.235.197':139
- '58.##4.176.139':139
- '58.##4.70.12':139
- '58.##4.188.95':139
- '58.##4.242.126':139
- '58.##4.73.202':139
- '58.##4.152.73':139
- '58.##4.37.238':139
- '58.##4.30.142':139
- '58.##4.37.24':139
- '58.##4.238.36':139
- '58.##4.169.74':139
- '58.##4.219.168':139
- '58.##4.84.163':139
- '58.##4.55.231':139
- '58.##4.203.27':139
- '58.##4.197.128':139
- '58.##4.142.121':139
- '58.##4.213.235':139
- '58.##4.242.126':9988
- '58.##4.235.197':9988
- '58.##4.73.202':9988
- '58.##4.177.65':9988
- '58.##4.152.138':139
- '58.##4.110.152':139
- '58.##4.246.148':9988
- '58.##4.77.248':139
- '58.##4.41.125':445
- '58.##4.233.99':9988
- '58.##4.178.219':445
- '58.##4.143.212':445
- '58.##4.130.176':9988
- '58.##4.53.123':9988
- '58.##4.37.238':9988
- '58.##4.197.128':9988
- '58.##4.252.161':139
- '58.##4.21.219':139
- '58.##4.162.174':139
- '58.##4.232.128':139
- '58.##4.124.232':139
- '58.##4.117.237':139
- '58.##4.73.200':139
- '58.##4.75.224':139
- '58.##4.58.225':139
- '58.##4.153.20':139
- '58.##4.105.21':139
- '58.##4.153.55':139
- '58.##4.18.171':139
- '58.##4.50.130':139
- '58.##4.8.190':139
- '58.##4.57.88':139
- '58.##4.130.57':139
- '58.##4.73.202':445
- '58.##4.152.73':445
- '58.##4.203.27':445
- '58.##4.197.128':445
- '58.##4.242.126':445
- '58.##4.238.36':445
- '58.##4.188.95':445
- '58.##4.37.24':445
- '58.##4.84.163':445
- '58.##4.55.231':445
- '58.##4.45.243':445
- '58.##4.70.12':445
- '58.##4.213.235':445
- '58.##4.142.121':445
- '58.##4.169.74':445
- '58.##4.219.168':445
- '58.##4.37.238':445
- '58.##4.159.150':445
- '58.##4.213.1':445
- '58.##4.91.217':445
- '58.##4.24.21':445
- '58.##4.234.14':445
- '58.#64.11.3':445
- '58.##4.27.144':445
- '58.##4.11.71':445
- '58.##4.25.66':445
- '58.##4.4.103':445
- '58.##4.30.142':445
- '58.##4.246.148':445
- '58.##4.7.146':445
- '58.##4.102.97':445
- '58.##4.177.65':445
- '58.##4.97.152':445