Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1152 -dm 7 7 %TEMP%\WERed99.dir00\svchost.exe.mdmp 16325836412032404
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %TEMP%\WERed99.dir00\svchost.exe.mdmp
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '21#.#30.100.211':445
- '21#.#30.109.184':445
- '21#.#30.42.230':445
- '21#.#30.127.210':445
- '21#.#30.98.29':445
- '21#.#30.229.69':445
- '21#.#30.12.145':445
- '21#.#30.53.224':445
- '21#.#30.239.14':445
- '21#.#30.58.46':139
- '21#.#30.61.58':139
- '21#.#30.111.25':139
- '21#.#30.45.111':139
- '21#.#30.225.45':139
- '21#.#30.150.146':139
- '21#.#30.217.39':139
- '21#.#30.68.100':139
- '21#.#30.219.78':139
- '21#.#30.169.219':445
- '21#.#30.147.55':445
- '21#.#30.176.170':445
- '21#.#30.234.167':445
- '21#.#30.227.2':445
- '21#.#30.81.88':445
- '21#.#30.1.82':445
- '21#.#30.5.117':445
- '21#.#30.87.117':445
- '21#.#30.231.137':445
- '21#.#30.34.153':445
- '21#.#30.116.169':445
- '21#.#30.237.195':445
- '21#.#30.125.58':445
- '21#.#30.137.12':445
- '21#.#30.121.63':445
- '21#.#30.82.57':445
- '21#.#30.224.55':445
- '21#.#30.66.70':445
- '21#.#30.121.63':139
- '21#.#30.66.70':139
- '21#.#30.137.12':139
- '21#.#30.224.55':139
- '21#.#30.5.117':139
- '21#.#30.227.2':139
- '21#.#30.82.57':139
- '21#.#30.87.117':139
- '21#.#30.234.167':139
- '21#.#30.169.219':139
- '21#.#30.116.169':139
- '21#.#30.53.224':139
- '21#.#30.239.14':139
- '21#.#30.34.153':139
- '21#.#30.237.195':139
- '21#.#30.12.145':139
- '21#.#30.125.58':139
- '21#.#30.229.69':139
- '21#.#30.1.82':139
- '21#.#30.36.187':139
- '21#.#30.67.221':139
- '21#.#30.129.253':139
- '21#.#30.106.96':139
- '21#.#30.91.217':139
- '21#.#30.126.61':139
- '21#.#30.52.41':139
- '21#.#30.82.247':139
- '21#.#30.24.89':139
- '21#.#30.147.55':139
- '21#.#30.81.88':139
- '21#.#30.176.170':139
- '21#.#30.231.137':139
- '21#.#30.234.186':139
- '21#.#30.237.109':139
- '21#.#30.73.237':139
- '21#.#30.27.207':139
- '21#.#30.109.207':139
- '21#.#30.234.186':445
- '21#.#30.255.109':139
- '21#.#30.83.203':139
- '21#.#30.24.83':139
- '21#.#30.110.48':139
- '21#.#30.191.121':139
- '21#.#30.206.143':139
- '21#.#30.5.229':139
- '21#.#30.75.10':139
- '21#.#30.167.91':139
- '21#.#30.90.166':139
- '21#.#30.56.36':139
- '21#.#30.110.67':139
- '21#.#30.184.127':139
- '21#.#30.78.136':139
- '21#.#30.5.203':139
- '21#.#30.143.105':139
- '21#.#30.22.78':139
- '21#.#30.67.238':139
- '21#.#30.58.216':139
- '21#.#30.3.187':139
- '21#.#30.112.17':139
- '21#.#30.173.57':139
- '21#.#30.1.199':139
- '21#.#30.82.12':139
- '21#.#30.216.112':139
- '21#.#30.127.136':445
- '21#.#30.10.5':139
- '21#.#30.117.104':139
- '21#.#30.198.191':139
- '21#.#30.187.33':139
- '21#.#30.35.61':139
- '21#.#30.154.118':139
- '21#.#30.76.248':139
- '21#.#30.81.126':139
- '21#.#30.137.124':139
- '21#.#30.126.181':139
- '21#.#30.126.126':139
- '21#.#30.52.41':445
- '21#.#30.126.61':445
- '21#.#30.82.247':445
- '21#.#30.24.89':445
- '21#.#30.111.25':445
- '21#.#30.61.58':445
- '21#.#30.225.45':445
- '21#.#30.45.111':445
- '21#.#30.58.46':445
- '21#.#30.129.253':445
- '21#.#30.106.96':445
- '21#.#30.237.109':445
- '21#.#30.109.207':445
- '21#.#30.27.207':445
- '21#.#30.67.221':445
- '21#.#30.91.217':445
- '21#.#30.73.237':445
- '21#.#30.36.187':445
- '21#.#30.68.100':445
- '21#.#30.85.135':139
- '21#.#30.199.71':139
- '21#.#30.208.203':139
- '21#.#30.206.18':139
- '21#.#30.58.1':139
- '21#.#30.126.14':139
- '21#.#30.157.136':139
- '21#.#30.49.13':139
- '21#.#30.15.61':139
- '21#.#30.217.39':445
- '21#.#30.127.136':139
- '21#.#30.150.146':445
- '21#.#30.219.78':445
- '21#.#30.146.159':139
- '21#.#30.7.168':139
- '21#.#30.55.8':139
- '21#.#30.124.236':139
- '21#.#30.45.12':139
- '21#.#30.100.89':139
- '21#.#30.221.104':139
- '21#.#30.128.79':139
- '21#.#30.193.235':139
- '21#.#30.226.83':139
- '21#.#30.0.168':445
- '21#.#30.6.54':445
- '21#.#30.38.32':139
- '21#.#30.78.227':139
- '21#.#30.141.129':139
- '21#.#30.231.227':139
- '21#.#30.251.230':139
- '21#.#30.60.253':139
- '21#.#30.39.109':139
- '21#.#30.146.11':139
- '21#.#30.79.146':139
- '21#.#30.97.49':139
- '21#.#30.121.38':139
- '21#.#30.1.141':445
- '21#.#30.113.128':445
- '21#.#30.51.227':445
- '21#.#30.7.175':445
- '21#.#30.103.28':445
- '21#.#30.9.164':445
- '21#.#30.23.127':445
- '21#.#30.107.221':445
- '21#.#30.178.139':445
- '21#.#30.157.224':445
- '21#.#30.152.231':445
- '21#.#30.10.141':445
- '21#.#30.39.198':445
- '21#.#30.32.26':445
- '21#.#30.129.219':445
- '21#.#30.197.155':445
- '21#.#30.185.26':445
- '21#.#30.94.224':445
- '21#.#30.56.114':445
- '21#.#30.103.28':139
- '21#.#30.185.26':139
- '21#.#30.113.128':139
- '21#.#30.56.114':139
- '21#.#30.7.175':139
- '21#.#30.178.139':139
- '21#.#30.9.164':139
- '21#.#30.197.155':139
- '21#.#30.51.227':139
- '21#.#30.32.26':139
- '21#.#30.39.198':139
- '21#.#30.0.168':139
- '21#.#30.1.141':139
- '21#.#30.6.54':139
- '21#.#30.129.219':139
- '21#.#30.94.224':139
- '21#.#30.10.141':139
- '21#.#30.152.231':139
- '21#.#30.157.224':139
- '21#.#30.0.107':139
- '21#.#30.129.0':139
- '21#.#30.6.245':139
- '21#.#30.64.135':139
- '21#.#30.26.76':139
- '21#.#30.114.51':139
- '21#.#30.28.125':139
- '21#.#30.199.79':139
- '21#.#30.159.138':139
- '21#.#30.234.149':139
- '21#.#30.183.210':139
- '21#.#30.107.221':139
- '21#.#30.23.127':139
- '21#.#30.70.126':139
- '21#.#30.145.107':139
- '21#.#30.40.125':139
- '21#.#30.16.242':139
- '21#.#30.60.191':139
- '21#.#30.16.242':445
- '21#.#30.6.245':9988
- '21#.#30.56.114':9988
- '21#.#30.145.107':9988
- '21#.#30.0.107':9988
- '21#.#30.107.221':9988
- '21#.#30.193.235':9988
- '21#.#30.39.109':9988
- '21#.#30.16.242':9988
- '21#.#30.159.138':9988
- '21#.#30.70.126':9988
- '21#.#30.38.32':9988
- '21#.#30.39.198':9988
- '21#.#30.251.230':9988
- '21#.#30.94.224':9988
- '21#.#30.103.28':9988
- '21#.#30.32.26':9988
- '21#.#30.7.175':9988
- '21#.#30.185.26':9988
- '21#.#30.97.49':9988
- '21#.#30.147.10':445
- '21#.#30.198.109':445
- '21#.#30.198.109':139
- '21#.#30.147.10':139
- '21#.#30.98.29':139
- '21#.#30.127.210':139
- '21#.#30.109.184':139
- '21#.#30.100.211':139
- '21#.#30.42.230':139
- '21#.#30.60.253':9988
- '21#.#30.146.11':9988
- '21#.#30.79.146':9988
- '21#.#30.121.38':9988
- '21#.#30.128.79':9988
- '21#.#30.221.104':9988
- '21#.#30.78.227':9988
- '21#.#30.231.227':9988
- '21#.#30.226.83':9988
- '21#.#30.129.0':445
- '21#.#30.159.138':445
- '21#.#30.199.79':445
- '21#.#30.26.76':445
- '21#.#30.114.51':445
- '21#.#30.60.253':445
- '21#.#30.39.109':445
- '21#.#30.28.125':445
- '21#.#30.251.230':445
- '21#.#30.6.245':445
- '21#.#30.40.125':445
- '21#.#30.234.149':445
- '21#.#30.183.210':445
- '21#.#30.60.191':445
- '21#.#30.0.107':445
- '21#.#30.64.135':445
- '21#.#30.70.126':445
- '21#.#30.145.107':445
- '21#.#30.141.129':445
- '21#.#30.78.227':445
- '21#.#30.51.227':9988
- '21#.#30.226.83':445
- '21#.#30.38.32':445
- '21#.#30.10.141':9988
- '21#.#30.199.79':9988
- '21#.#30.64.135':9988
- '21#.#30.60.191':9988
- '21#.#30.0.168':9988
- '21#.#30.121.38':445
- '21#.#30.146.11':445
- '21#.#30.231.227':445
- '21#.#30.97.49':445
- '21#.#30.79.146':445
- '21#.#30.100.89':445
- '21#.#30.221.104':445
- '21#.#30.128.79':445
- '21#.#30.193.235':445