Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WER1c4b.dir00\svchost.exe.mdmp 16325836412032200
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %TEMP%\WER1c4b.dir00\svchost.exe.mdmp
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '60.##0.81.139':139
- '60.##0.79.172':139
- '60.##0.117.45':139
- '60.##0.23.65':139
- '60.##0.68.73':139
- '60.##0.17.131':139
- '60.##0.100.84':139
- '60.##0.160.172':139
- '60.##0.91.156':139
- '60.##0.34.132':139
- '60.##0.127.157':139
- '60.##0.249.9':139
- '60.##0.143.156':139
- '60.##0.186.189':139
- '60.##0.115.195':139
- '60.##0.107.251':139
- '60.##0.249.123':139
- '60.##0.22.147':445
- '60.##0.206.206':139
- '60.##0.115.214':445
- '60.##0.205.220':445
- '60.##0.3.213':445
- '60.##0.18.191':139
- '60.#60.35.3':139
- '60.##0.115.168':139
- '60.##0.16.116':139
- '60.##0.183.142':139
- '60.##0.115.84':139
- '60.##0.13.244':139
- '60.##0.161.35':139
- '60.#60.1.16':139
- '60.##0.0.117':139
- '60.##0.198.204':139
- '60.##0.100.251':9988
- '60.##0.202.155':9988
- '60.##0.99.60':9988
- '60.##0.46.85':9988
- '60.##0.68.237':9988
- '60.##0.42.68':9988
- '60.##0.226.105':9988
- '60.##0.194.237':9988
- '60.#60.30.7':9988
- '60.##0.53.204':9988
- '60.##0.40.137':9988
- '60.##0.141.231':9988
- '60.##0.235.214':9988
- '60.##0.186.141':9988
- '60.##0.216.215':9988
- '60.##0.36.69':9988
- '60.##0.220.161':139
- '60.##0.124.13':139
- '60.##0.86.18':139
- '60.##0.170.56':139
- '60.##0.156.50':139
- '60.##0.157.155':139
- '60.##0.76.223':139
- '60.##0.51.50':139
- '60.##0.115.214':139
- '60.##0.22.147':139
- '60.##0.155.216':9988
- '60.##0.119.34':9988
- '60.##0.200.205':139
- '60.#60.2.44':139
- '60.##0.3.213':139
- '60.##0.205.220':139
- '60.##0.38.35':139
- '60.##0.249.123':445
- '60.#60.35.3':445
- '60.##0.206.206':445
- '60.##0.161.35':445
- '60.##0.75.236':445
- '60.##0.205.165':445
- '60.##0.18.191':445
- '60.##0.38.35':445
- '60.##0.115.84':445
- '60.##0.115.168':445
- '60.##0.17.131':445
- '60.##0.183.142':445
- '60.##0.13.244':445
- '60.#60.1.16':445
- '60.##0.16.116':445
- '60.##0.0.117':445
- '60.##0.251.14':139
- '60.##0.203.243':139
- '60.##0.123.112':139
- '60.##0.119.252':139
- '60.##0.167.156':139
- '60.##0.85.238':139
- '60.##0.68.102':139
- '60.##0.210.116':139
- '60.##0.250.172':445
- '60.##0.196.253':445
- '60.#60.6.33':445
- '60.##0.32.202':445
- '60.##0.20.102':139
- '60.##0.19.20':139
- '60.##0.115.238':445
- '60.##0.13.74':139
- '60.##0.68.73':445
- '60.##0.170.56':445
- '60.##0.220.161':445
- '60.##0.115.238':139
- '60.##0.86.18':445
- '60.##0.51.50':445
- '60.##0.156.50':445
- '60.##0.124.13':445
- '60.##0.76.223':445
- '60.#60.6.33':139
- '60.##0.32.202':139
- '60.##0.75.236':139
- '60.##0.205.165':139
- '60.#60.2.44':445
- '60.##0.200.205':445
- '60.##0.250.172':139
- '60.##0.196.253':139
- '60.##0.186.189':445
- '60.##0.23.65':445
- '60.##0.143.156':445
- '60.##0.117.45':445
- '60.##0.100.84':445
- '60.##0.160.172':445
- '60.##0.79.172':445
- '60.##0.81.139':445
- '60.##0.127.157':445
- '60.##0.249.9':445
- '60.##0.157.155':445
- '60.##0.198.204':445
- '60.##0.91.156':445
- '60.##0.107.251':445
- '60.##0.34.132':445
- '60.##0.115.195':445
- '60.##0.89.89':9988
- '60.##0.235.214':139
- '60.#60.30.7':139
- '60.##0.186.141':139
- '60.##0.216.215':139
- '60.##0.100.251':139
- '60.##0.46.85':139
- '60.##0.53.204':139
- '60.##0.36.69':139
- '60.##0.241.33':139
- '60.##0.222.177':139
- '60.##0.101.219':139
- '60.##0.81.18':139
- '60.##0.40.137':139
- '60.##0.141.231':139
- '60.##0.89.89':139
- '60.##0.101.186':139
- '60.##0.40.18':445
- '60.##0.88.244':445
- '60.##0.193.233':445
- '60.##0.18.195':445
- '60.##0.187.112':445
- '60.##0.46.253':445
- '60.##0.226.105':445
- '60.##0.43.149':445
- '60.##0.115.216':445
- '60.##0.43.131':445
- '60.##0.99.60':139
- '60.##0.202.155':139
- '60.##0.10.10':445
- '60.##0.195.158':445
- '60.##0.134.85':445
- '60.##0.194.237':445
- '60.##0.50.238':139
- '60.##0.10.10':139
- '60.##0.46.253':139
- '60.##0.134.85':139
- '60.##0.43.131':139
- '60.##0.88.244':139
- '60.##0.226.105':139
- '60.##0.192.54':139
- '60.##0.187.112':139
- '60.##0.40.18':139
- '60.##0.65.186':139
- '60.##0.43.149':139
- '60.##0.193.233':139
- '60.##0.115.216':139
- '60.##0.194.237':139
- '60.##0.195.158':139
- '60.##0.18.195':139
- '60.##0.155.216':139
- '60.##0.126.209':139
- '60.##0.145.120':139
- '60.##0.116.60':139
- '60.##0.119.34':139
- '60.##0.61.190':139
- '60.##0.123.127':139
- '60.##0.97.64':139
- '60.##0.68.237':139
- '60.##0.65.127':139
- '60.##0.229.125':139
- '60.##0.224.95':139
- '60.##0.46.66':139
- '60.##0.15.162':139
- '60.##0.106.38':139
- '60.##0.42.68':139
- '60.##0.192.54':445
- '60.##0.116.60':9988
- '60.##0.241.33':9988
- '60.##0.145.120':9988
- '60.##0.97.64':9988
- '60.##0.224.95':9988
- '60.##0.187.112':9988
- '60.##0.88.244':9988
- '60.##0.65.186':9988
- '60.##0.202.155':445
- '60.##0.115.216':9988
- '60.##0.46.85':445
- '60.##0.100.251':445
- '60.##0.46.253':9988
- '60.##0.46.66':9988
- '60.##0.134.85':9988
- '60.##0.43.131':9988
- '60.##0.15.162':9988
- '60.##0.123.127':9988
- '60.##0.65.127':9988
- '60.##0.106.38':9988
- '60.##0.61.190':9988
- '60.##0.101.186':9988
- '60.##0.126.209':9988
- '60.##0.101.219':9988
- '60.##0.43.149':9988
- '60.##0.195.158':9988
- '60.##0.192.54':9988
- '60.##0.10.10':9988
- '60.##0.40.18':9988
- '60.##0.193.233':9988
- '60.##0.229.125':9988
- '60.##0.18.195':9988
- '60.##0.99.60':445
- '60.##0.116.60':445
- '60.##0.126.209':445
- '60.##0.145.120':445
- '60.##0.15.162':445
- '60.##0.97.64':445
- '60.##0.119.34':445
- '60.##0.155.216':445
- '60.##0.123.127':445
- '60.##0.224.95':445
- '60.##0.68.237':445
- '60.##0.65.186':445
- '60.##0.229.125':445
- '60.##0.42.68':445
- '60.##0.46.66':445
- '60.##0.106.38':445
- '60.##0.65.127':445
- '60.##0.235.214':445
- '60.##0.186.141':445
- '60.##0.40.137':445
- '60.#60.30.7':445
- '60.##0.53.204':445
- '60.##0.36.69':445
- '60.##0.141.231':445
- '60.##0.216.215':445
- '60.##0.101.219':445
- '60.##0.81.18':445
- '60.##0.61.190':445
- '60.##0.50.238':445
- '60.##0.89.89':445
- '60.##0.222.177':445
- '60.##0.241.33':445
- '60.##0.101.186':445