Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER5e79.dir00\svchost.exe.mdmp 16325836412032396
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '58.##2.46.184':445
- '58.##2.131.233':445
- '58.#72.15.3':445
- '58.##2.209.88':445
- '58.##2.79.223':445
- '58.##2.143.4':139
- '58.##2.40.204':139
- '58.##2.119.14':445
- '58.##2.125.184':139
- '58.##2.118.31':445
- '58.##2.66.93':445
- '58.##2.171.66':445
- '58.##2.50.115':445
- '58.##2.21.205':445
- '58.##2.43.200':445
- '58.##2.174.176':445
- '58.##2.47.174':445
- '58.##2.122.1':445
- '58.##2.13.85':445
- '58.##2.146.14':139
- '58.##2.221.36':139
- '58.##2.26.163':139
- '58.##2.202.51':139
- '58.##2.73.101':139
- '58.##2.29.202':139
- '58.##2.1.219':139
- '58.##2.17.112':139
- '58.##2.151.158':139
- '58.##2.147.124':139
- '58.##2.191.3':139
- '58.##2.186.237':139
- '58.##2.28.105':139
- '58.##2.122.168':139
- '58.##2.4.138':139
- '58.##2.173.166':139
- '58.##2.15.62':139
- '58.##2.170.251':139
- '58.##2.212.206':139
- '58.##2.190.203':139
- '58.##2.166.183':445
- '58.##2.72.50':445
- '58.##2.19.196':445
- '58.##2.247.39':445
- '58.##2.48.160':445
- '58.##2.76.240':445
- '58.##2.193.36':445
- '58.##2.129.210':445
- '58.##2.224.189':445
- '58.##2.68.250':445
- '58.##2.79.223':139
- '58.##2.119.14':139
- '58.##2.209.88':139
- '58.##2.131.233':139
- '58.##2.117.26':445
- '58.##2.140.110':445
- '58.##2.47.20':445
- '58.##2.121.39':445
- '58.##2.240.46':445
- '58.##2.79.116':445
- '58.##2.241.179':445
- '58.##2.200.65':445
- '58.##2.53.17':445
- '58.##2.176.224':445
- '58.##2.165.11':445
- '58.##2.195.51':445
- '58.##2.151.142':445
- '58.##2.57.99':445
- '58.##2.186.105':445
- '58.##2.128.214':445
- '58.##2.95.219':445
- '58.##2.243.120':445
- '58.##2.87.196':445
- '58.##2.60.61':445
- '58.#72.4.21':445
- '58.##2.37.207':445
- '58.##2.51.69':445
- '58.##2.2.252':445
- '58.##2.44.17':445
- '58.##2.60.214':139
- '58.##2.205.224':445
- '58.##2.167.92':445
- '58.##2.17.112':445
- '58.##2.60.214':445
- '58.##2.91.133':445
- '58.##2.32.110':445
- '58.##2.35.84':445
- '58.##2.246.177':445
- '58.##2.168.74':445
- '58.##2.1.219':445
- '58.##2.202.51':445
- '58.##2.73.101':445
- '58.##2.170.251':445
- '58.##2.191.3':445
- '58.##2.221.36':445
- '58.##2.151.158':445
- '58.##2.147.124':445
- '58.##2.26.163':445
- '58.##2.29.202':445
- '58.##2.20.35':445
- '58.##2.14.80':445
- '58.##2.9.182':445
- '58.##2.216.169':445
- '58.##2.30.56':445
- '58.##2.55.62':445
- '58.##2.178.34':445
- '58.##2.218.11':445
- '58.##2.11.28':445
- '58.##2.80.33':445
- '58.##2.40.243':445
- '58.##2.43.14':445
- '58.##2.213.189':445
- '58.##2.122.99':445
- '58.##2.137.64':445
- '58.##2.106.97':445
- '58.##2.24.26':445
- '58.##2.171.97':445
- '58.##2.89.228':445
- '58.##2.117.207':445
- '58.##2.106.97':139
- '58.##2.89.228':139
- '58.##2.43.14':139
- '58.##2.213.189':139
- '58.##2.117.207':139
- '58.##2.40.243':139
- '58.##2.216.169':139
- '58.##2.24.26':139
- '58.##2.171.97':139
- '58.##2.137.64':139
- '58.##2.91.133':139
- '58.##2.246.177':139
- '58.##2.205.224':139
- '58.##2.167.92':139
- '58.##2.168.74':139
- '58.##2.20.35':139
- '58.##2.122.99':139
- '58.##2.32.110':139
- '58.##2.35.84':139
- '58.##2.30.56':139
- '58.##2.4.138':445
- '58.##2.186.237':445
- '58.##2.146.14':445
- '58.##2.122.168':445
- '58.##2.28.105':445
- '58.##2.190.203':445
- '58.##2.15.62':445
- '58.##2.173.166':445
- '58.##2.212.206':445
- '58.##2.40.204':445
- '58.##2.55.62':139
- '58.##2.11.28':139
- '58.##2.14.80':139
- '58.##2.9.182':139
- '58.##2.80.33':139
- '58.##2.125.184':445
- '58.##2.143.4':445
- '58.##2.178.34':139
- '58.##2.218.11':139
- '58.##2.18.251':445
- '58.##2.193.185':445
- '58.##2.62.27':139
- '58.##2.114.175':139
- '58.##2.164.146':445
- '58.##2.200.6':445
- '58.##2.170.132':445
- '58.##2.83.142':445
- '58.##2.90.79':445
- '58.##2.149.147':139
- '58.##2.193.227':139
- '58.##2.58.42':139
- '58.##2.252.231':139
- '58.##2.209.223':139
- '58.##2.172.80':139
- '58.##2.131.102':139
- '58.##2.53.68':139
- '58.##2.133.116':139
- '58.##2.127.223':139
- '58.##2.79.45':445
- '58.##2.107.61':445
- '58.##2.59.100':445
- '58.##2.39.128':445
- '58.##2.191.132':445
- '58.##2.125.228':445
- '58.##2.58.90':445
- '58.##2.151.193':445
- '58.##2.108.240':445
- '58.##2.62.109':445
- '58.##2.183.46':445
- '58.##2.227.105':445
- '58.##2.90.89':445
- '58.##2.141.51':445
- '58.##2.162.254':445
- '58.##2.84.177':445
- '58.##2.93.13':445
- '58.##2.227.92':445
- '58.##2.216.186':445
- '58.##2.125.233':445
- '58.##2.84.177':139
- '58.##2.216.186':139
- '58.##2.227.105':139
- '58.##2.90.89':139
- '58.##2.125.233':139
- '58.##2.183.46':139
- '58.##2.39.128':139
- '58.##2.93.13':139
- '58.##2.227.92':139
- '58.##2.162.254':139
- '58.##2.193.185':139
- '58.##2.18.251':139
- '58.##2.200.6':139
- '58.##2.164.146':139
- '58.##2.83.142':139
- '58.##2.79.45':139
- '58.##2.141.51':139
- '58.##2.90.79':139
- '58.##2.170.132':139
- '58.##2.191.132':139
- '58.##2.126.213':139
- '58.##2.243.233':139
- '58.##2.146.43':139
- '58.##2.183.73':139
- '58.##2.125.244':139
- '58.##2.139.164':139
- '58.##2.60.107':139
- '58.##2.102.88':139
- '58.##2.165.5':139
- '58.##2.150.213':139
- '58.##2.125.228':139
- '58.##2.108.240':139
- '58.##2.107.61':139
- '58.##2.59.100':139
- '58.##2.62.109':139
- '58.##2.84.151':139
- '58.#72.59.3':139
- '58.##2.58.90':139
- '58.##2.151.193':139
- '58.##2.84.151':445
- '58.#72.4.21':139
- '58.##2.2.252':139
- '58.##2.95.219':139
- '58.##2.243.120':139
- '58.##2.44.17':139
- '58.##2.128.214':139
- '58.##2.53.17':139
- '58.##2.37.207':139
- '58.##2.51.69':139
- '58.##2.60.61':139
- '58.##2.48.160':139
- '58.##2.129.210':139
- '58.##2.166.183':139
- '58.##2.72.50':139
- '58.##2.224.189':139
- '58.##2.79.116':139
- '58.##2.87.196':139
- '58.##2.76.240':139
- '58.##2.193.36':139
- '58.##2.176.224':139
- '58.##2.122.1':139
- '58.##2.13.85':139
- '58.##2.171.66':139
- '58.##2.43.200':139
- '58.##2.174.176':139
- '58.#72.15.3':139
- '58.##2.46.184':139
- '58.##2.47.174':139
- '58.##2.118.31':139
- '58.##2.66.93':139
- '58.##2.165.11':139
- '58.##2.57.99':139
- '58.##2.241.179':139
- '58.##2.200.65':139
- '58.##2.186.105':139
- '58.##2.21.205':139
- '58.##2.50.115':139
- '58.##2.195.51':139
- '58.##2.151.142':139
- '58.##2.209.223':445
- '58.##2.193.227':445
- '58.##2.60.107':445
- '58.##2.252.231':445
- '58.##2.58.42':445
- '58.##2.127.223':445
- '58.##2.131.102':445
- '58.##2.172.80':445
- '58.##2.133.116':445
- '58.##2.139.164':445
- '58.##2.146.43':445
- '58.##2.183.73':445
- '58.#72.59.3':445
- '58.##2.150.213':445
- '58.##2.126.213':445
- '58.##2.102.88':445
- '58.##2.165.5':445
- '58.##2.243.233':445
- '58.##2.125.244':445
- '58.##2.53.68':445
- '58.##2.121.39':139
- '58.##2.240.46':139
- '58.##2.183.73':9988
- '58.##2.117.26':139
- '58.##2.140.110':139
- '58.##2.19.196':139
- '58.##2.247.39':139
- '58.##2.47.20':139
- '58.##2.68.250':139
- '58.##2.39.128':9988
- '58.##2.114.175':445
- '58.##2.183.46':9988
- '58.##2.149.147':445
- '58.##2.62.27':445
- '58.##2.125.233':9988
- '58.##2.164.146':9988
- '58.##2.227.92':9988
- '58.##2.108.240':9988
- '58.##2.59.100':9988