Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1156 -dm 7 7 %TEMP%\WERb517.dir00\svchost.exe.mdmp 16325836412032024
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %TEMP%\WERb517.dir00\svchost.exe.mdmp
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '20#.#90.131.67':445
- '20#.#90.90.92':445
- '20#.#90.95.80':445
- '20#.#90.139.52':445
- '20#.#90.19.24':445
- '20#.#90.61.178':445
- '20#.#90.148.185':445
- '20#.#90.135.84':445
- '20#.#90.254.142':445
- '20#.#90.178.217':445
- '20#.#90.66.27':445
- '20#.#90.49.253':445
- '20#.#90.10.102':445
- '20#.#90.5.42':445
- '20#.#90.176.168':445
- '20#.#90.6.134':445
- '20#.#90.14.96':445
- '20#.#90.1.178':445
- '20#.#90.129.228':445
- '20#.#90.175.29':445
- '20#.#90.74.56':445
- '20#.#90.31.146':445
- '20#.#90.113.185':445
- '20#.#90.76.0':445
- '20#.#90.74.22':445
- '20#.#90.139.102':445
- '20#.#90.115.79':445
- '20#.#90.181.6':445
- '20#.#90.123.99':445
- '20#.#90.232.51':445
- '20#.#90.104.186':445
- '20#.#90.70.54':445
- '20#.#90.76.89':445
- '20#.#90.113.185':139
- '20#.#90.76.0':139
- '20#.#90.14.96':139
- '20#.#90.1.178':139
- '20#.#90.16.150':139
- '20#.#90.43.48':139
- '20#.#90.74.56':139
- '20#.#90.31.146':139
- '20#.#90.104.186':139
- '20#.#90.70.54':139
- '20#.#90.74.22':139
- '20#.#90.139.102':139
- '20#.#90.129.228':139
- '20#.#90.175.29':139
- '20#.#90.123.99':139
- '20#.#90.232.51':139
- '20#.#90.77.92':139
- '20#.#90.85.34':139
- '20#.#90.171.69':139
- '20#.#90.2.67':139
- '20#.#90.142.24':445
- '20#.#90.85.142':445
- '20#.#90.36.26':445
- '20#.#90.15.113':445
- '20#.#90.76.94':139
- '20#.#90.151.91':139
- '20#.#90.78.100':139
- '20#.#90.108.2':139
- '20#.#90.86.161':139
- '20#.#90.90.133':139
- '20#.#90.219.118':139
- '20#.#90.52.125':139
- '20#.#90.176.105':139
- '20#.#90.224.108':139
- '20#.#90.152.46':139
- '20#.#90.98.39':139
- '20#.#90.22.191':139
- '20#.#90.6.80':139
- '20#.#90.254.168':139
- '20#.#90.159.123':139
- '20#.#90.159.101':139
- '20#.#90.78.218':139
- '20#.#90.78.33':139
- '20#.#90.102.78':139
- '20#.#90.238.22':139
- '20#.#90.46.57':139
- '20#.#90.130.126':139
- '20#.#90.104.32':139
- '20#.#90.231.74':139
- '20#.#90.121.126':139
- '20#.#90.131.134':139
- '20#.#90.232.43':139
- '20#.#90.159.128':139
- '20#.#90.153.175':139
- '20#.#90.81.244':139
- '20#.#90.19.189':139
- '20#.#90.59.106':139
- '20#.#90.164.206':139
- '20#.#90.72.6':139
- '20#.#90.31.157':139
- '20#.#90.7.146':139
- '20#.#90.128.95':139
- '20#.#90.164.15':139
- '20#.#90.20.236':139
- '20#.#90.33.154':139
- '20#.#90.171.69':445
- '20#.#90.2.67':445
- '20#.#90.86.161':445
- '20#.#90.90.133':445
- '20#.#90.180.236':139
- '20#.#90.209.180':139
- '20#.#90.77.92':445
- '20#.#90.85.34':445
- '20#.#90.78.100':445
- '20#.#90.108.2':445
- '20#.#90.16.150':445
- '20#.#90.43.48':445
- '20#.#90.219.118':445
- '20#.#90.52.125':445
- '20#.#90.76.94':445
- '20#.#90.151.91':445
- '20#.#90.82.57':139
- '20#.#90.11.248':139
- '20#.#90.206.223':139
- '20#.#90.247.43':139
- '20#.#90.106.55':139
- '20#.#90.95.238':139
- '20#.#90.119.11':139
- '20#.#90.129.117':139
- '20#.#90.10.193':139
- '20#.#90.48.37':139
- '20#.#90.110.210':139
- '20#.#90.22.92':139
- '20#.#90.212.168':139
- '20#.#90.160.212':139
- '20#.#90.148.214':139
- '20#.#90.39.33':139
- '20#.#90.168.79':139
- '20#.#90.82.126':139
- '20#.#90.18.233':139
- '20#.#90.196.33':139
- '20#.#90.16.210':139
- '20#.#90.83.200':139
- '20#.#90.76.99':139
- '20#.#90.126.252':139
- '20#.#90.137.111':139
- '20#.#90.232.181':139
- '20#.#90.131.24':139
- '20#.#90.12.25':139
- '20#.#90.29.41':139
- '20#.#90.131.76':139
- '20#.#90.32.232':139
- '20#.#90.25.33':139
- '20#.#90.83.138':445
- '20#.#90.23.147':445
- '20#.#90.70.109':445
- '20#.#90.207.126':445
- '20#.#90.129.13':445
- '20#.#90.16.122':445
- '20#.#90.43.159':445
- '20#.#90.32.194':445
- '20#.#90.255.162':445
- '20#.#90.78.152':445
- '20#.#90.205.99':139
- '20#.#90.144.61':139
- '20#.#90.172.221':445
- '20#.#90.79.178':445
- '20#.#90.44.107':445
- '20#.#90.120.45':445
- '20#.#90.243.221':139
- '20#.#90.43.159':139
- '20#.#90.32.194':139
- '20#.#90.83.138':139
- '20#.#90.23.147':139
- '20#.#90.188.135':139
- '20#.#90.110.117':139
- '20#.#90.129.13':139
- '20#.#90.16.122':139
- '20#.#90.44.107':139
- '20#.#90.70.109':139
- '20#.#90.255.162':139
- '20#.#90.120.45':139
- '20#.#90.79.178':139
- '20#.#90.207.126':139
- '20#.#90.78.152':139
- '20#.#90.172.221':139
- '20#.#90.94.49':139
- '20#.#90.100.76':139
- '20#.#90.11.8':139
- '20#.#90.85.233':139
- '20#.#90.33.201':139
- '20#.#90.254.58':139
- '20#.#90.231.34':139
- '20#.#90.146.219':139
- '20#.#90.147.125':139
- '20#.#90.218.147':139
- '20#.#90.12.17':139
- '20#.#90.125.12':139
- '20#.#90.20.227':139
- '20#.#90.162.159':139
- '20#.#90.198.217':139
- '20#.#90.26.198':139
- '20#.#90.15.113':139
- '20#.#90.142.24':139
- '20#.#90.137.111':9988
- '20#.#90.36.26':139
- '20#.#90.66.27':139
- '20#.#90.49.253':139
- '20#.#90.85.142':139
- '20#.#90.76.89':139
- '20#.#90.205.99':445
- '20#.#90.144.61':445
- '20#.#90.16.210':445
- '20#.#90.83.200':445
- '20#.#90.78.152':9988
- '20#.#90.16.122':9988
- '20#.#90.44.107':9988
- '20#.#90.172.221':9988
- '20#.#90.148.185':139
- '20#.#90.135.84':139
- '20#.#90.131.67':139
- '20#.#90.90.92':139
- '20#.#90.115.79':139
- '20#.#90.181.6':139
- '20#.#90.19.24':139
- '20#.#90.61.178':139
- '20#.#90.176.168':139
- '20#.#90.6.134':139
- '20#.#90.254.142':139
- '20#.#90.178.217':139
- '20#.#90.95.80':139
- '20#.#90.139.52':139
- '20#.#90.10.102':139
- '20#.#90.5.42':139
- '20#.#90.126.252':445
- '20#.#90.11.8':445
- '20#.#90.85.233':445
- '20#.#90.20.227':445
- '20#.#90.162.159':445
- '20#.#90.231.34':445
- '20#.#90.146.219':445
- '20#.#90.94.49':445
- '20#.#90.100.76':445
- '20#.#90.125.12':445
- '20#.#90.12.17':445
- '20#.#90.188.135':445
- '20#.#90.110.117':445
- '20#.#90.198.217':445
- '20#.#90.26.198':445
- '20#.#90.147.125':445
- '20#.#90.218.147':445
- '20#.#90.131.76':445
- '20#.#90.18.233':445
- '20#.#90.25.33':445
- '20#.#90.29.41':445
- '20#.#90.82.126':445
- '20#.#90.76.99':445
- '20#.#90.196.33':445
- '20#.#90.168.79':445
- '20#.#90.243.221':445
- '20#.#90.131.24':445
- '20#.#90.33.201':445
- '20#.#90.254.58':445
- '20#.#90.232.181':445
- '20#.#90.32.232':445
- '20#.#90.12.25':445
- '20#.#90.137.111':445