Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER2636.dir00\svchost.exe.mdmp 16325836412032280
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %TEMP%\WER2636.dir00\svchost.exe.mdmp
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '22#.#98.3.189':445
- '22#.#98.12.197':445
- '22#.#98.116.129':445
- '22#.#98.134.57':445
- '22#.#98.37.217':445
- '22#.#98.74.80':445
- '22#.#98.135.193':445
- '22#.#98.118.91':445
- '22#.#98.128.176':445
- '22#.#98.131.206':445
- '22#.#98.126.222':445
- '22#.#98.50.57':445
- '22#.#98.111.8':445
- '22#.#98.126.223':445
- '22#.#98.178.246':445
- '22#.#98.41.107':445
- '22#.#98.98.104':445
- '22#.#98.78.45':445
- '22#.#98.176.14':445
- '22#.#98.149.82':445
- '22#.#98.91.149':139
- '22#.#98.236.201':139
- '22#.#98.91.149':445
- '22#.#98.236.201':445
- '22#.#98.246.196':445
- '22#.#98.22.126':445
- '22#.#98.22.126':139
- '22#.#98.62.53':445
- '22#.#98.98.23':445
- '22#.#98.26.131':445
- '22#.#98.20.180':445
- '22#.#98.149.82':139
- '22#.#98.246.196':139
- '22#.#98.221.17':445
- '22#.#98.176.14':139
- '22#.#98.44.150':445
- '22#.#98.62.53':139
- '22#.#98.98.23':139
- '22#.#98.26.131':139
- '22#.#98.20.180':139
- '22#.#98.218.79':445
- '22#.#98.212.44':445
- '22#.#98.221.17':139
- '22#.#98.136.37':445
- '22#.#98.78.45':139
- '22#.#98.3.189':139
- '22#.#98.12.197':139
- '22#.#98.116.129':139
- '22#.#98.134.57':139
- '22#.#98.37.217':139
- '22#.#98.74.80':139
- '22#.#98.135.193':139
- '22#.#98.118.91':139
- '22#.#98.240.211':445
- '22#.#98.108.190':445
- '22#.#98.194.19':445
- '22#.#98.180.50':445
- '22#.#98.60.83':445
- '22#.#98.136.134':445
- '22#.#98.82.75':445
- '22#.#98.76.178':445
- '22#.#98.5.180':445
- '22#.#98.240.253':445
- '22#.#98.67.40':445
- '22#.#98.211.181':445
- '22#.#98.110.77':445
- '22#.#98.45.176':445
- '22#.#98.83.74':445
- '22#.#98.194.170':445
- '22#.#98.121.249':445
- '22#.#98.61.171':445
- '22#.#98.161.134':445
- '22#.#98.151.128':445
- '22#.#98.71.44':445
- '22#.#98.248.244':445
- '22#.#98.173.94':445
- '22#.#98.242.165':445
- '22#.#98.135.23':445
- '22#.#98.83.144':445
- '22#.#98.150.182':139
- '22#.#98.26.211':139
- '22#.#98.46.124':139
- '22#.#98.145.14':139
- '22#.#98.248.144':139
- '22#.#98.255.251':139
- '22#.#98.71.37':139
- '22#.#98.35.75':139
- '22#.#98.22.12':139
- '22#.#98.25.181':445
- '22#.#98.98.147':445
- '22#.#98.173.222':445
- '22#.#98.57.135':445
- '22#.#98.225.125':445
- '22#.#98.197.76':445
- '22#.#98.59.138':445
- '22#.#98.101.112':445
- '22#.#98.114.245':445
- '22#.#98.61.27':445
- '22#.#98.82.115':445
- '22#.#98.109.131':445
- '22#.#98.119.184':445
- '22#.#98.237.252':445
- '22#.#98.194.5':445
- '22#.#98.94.246':445
- '22#.#98.128.92':445
- '22#.#98.157.203':445
- '22#.#98.127.191':139
- '22#.#98.82.115':139
- '22#.#98.109.131':139
- '22#.#98.119.184':139
- '22#.#98.237.252':139
- '22#.#98.194.5':139
- '22#.#98.94.246':139
- '22#.#98.128.92':139
- '22#.#98.157.203':139
- '22#.#98.25.181':139
- '22#.#98.161.134':139
- '22#.#98.151.128':139
- '22#.#98.71.44':139
- '22#.#98.248.244':139
- '22#.#98.173.94':139
- '22#.#98.242.165':139
- '22#.#98.135.23':139
- '22#.#98.83.144':139
- '22#.#98.61.27':139
- '22#.#98.33.26':139
- '22#.#98.242.251':139
- '22#.#98.121.137':139
- '22#.#98.236.161':139
- '22#.#98.106.47':139
- '22#.#98.139.101':139
- '22#.#98.155.243':139
- '22#.#98.22.79':139
- '22#.#98.65.104':139
- '22#.#98.98.147':139
- '22#.#98.173.222':139
- '22#.#98.57.135':139
- '22#.#98.225.125':139
- '22#.#98.197.76':139
- '22#.#98.59.138':139
- '22#.#98.101.112':139
- '22#.#98.114.245':139
- '22#.#98.24.167':139
- '22#.#98.21.191':139
- '22#.#98.64.63':139
- '22#.#98.3.65':139
- '22#.#98.128.10':445
- '22#.#98.58.96':445
- '22#.#98.162.137':139
- '22#.#98.59.142':139
- '22#.#98.35.127':139
- '22#.#98.120.244':139
- '22#.#98.81.189':139
- '22#.#98.129.238':139
- '22#.#98.61.182':139
- '22#.#98.128.166':139
- '22#.#98.238.78':139
- '22#.#98.109.51':139
- '22#.#98.3.78':139
- '22#.#98.11.137':445
- '22#.#98.69.153':445
- '22#.#98.200.68':445
- '22#.#98.153.97':445
- '22#.#98.118.107':445
- '22#.#98.128.215':445
- '22#.#98.150.63':445
- '22#.#98.30.55':445
- '22#.#98.214.215':445
- '22#.#98.48.88':445
- '22#.#98.98.181':445
- '22#.#98.54.38':445
- '22#.#98.131.140':445
- '22#.#98.1.107':445
- '22#.#98.55.54':445
- '22#.#98.201.154':445
- '22#.#98.196.24':445
- '22#.#98.87.162':445
- '22#.#98.69.63':139
- '22#.#98.48.88':139
- '22#.#98.118.107':139
- '22#.#98.54.38':139
- '22#.#98.201.154':139
- '22#.#98.200.68':139
- '22#.#98.30.55':139
- '22#.#98.153.97':139
- '22#.#98.69.153':139
- '22#.#98.196.24':139
- '22#.#98.58.96':139
- '22#.#98.131.140':139
- '22#.#98.1.107':139
- '22#.#98.55.54':139
- '22#.#98.87.162':139
- '22#.#98.98.181':139
- '22#.#98.11.137':139
- '22#.#98.128.10':139
- '22#.#98.214.215':139
- '22#.#98.161.239':139
- '22#.#98.145.161':139
- '22#.#98.146.20':139
- '22#.#98.94.91':139
- '22#.#98.189.134':139
- '22#.#98.233.51':139
- '22#.#98.209.34':139
- '22#.#98.18.250':139
- '22#.#98.241.216':139
- '22#.#98.10.240':139
- '22#.#98.60.105':139
- '22#.#98.128.215':139
- '22#.#98.150.63':139
- '22#.#98.249.243':139
- '22#.#98.217.65':139
- '22#.#98.124.118':139
- '22#.#98.14.244':139
- '22#.#98.211.181':139
- '22#.#98.121.249':139
- '22#.#98.45.176':139
- '22#.#98.67.40':139
- '22#.#98.194.170':139
- '22#.#98.240.253':139
- '22#.#98.61.171':139
- '22#.#98.83.74':139
- '22#.#98.110.77':139
- '22#.#98.24.167':9988
- '22#.#98.162.137':9988
- '22#.#98.129.238':9988
- '22#.#98.120.244':9988
- '22#.#98.212.44':139
- '22#.#98.240.211':139
- '22#.#98.136.37':139
- '22#.#98.218.79':139
- '22#.#98.180.50':139
- '22#.#98.126.222':139
- '22#.#98.41.107':139
- '22#.#98.111.8':139
- '22#.#98.131.206':139
- '22#.#98.178.246':139
- '22#.#98.128.176':139
- '22#.#98.98.104':139
- '22#.#98.126.223':139
- '22#.#98.50.57':139
- '22#.#98.194.19':139
- '22#.#98.76.178':139
- '22#.#98.60.83':139
- '22#.#98.108.190':139
- '22#.#98.82.75':139
- '22#.#98.44.150':139
- '22#.#98.5.180':139
- '22#.#98.136.134':139
- '22#.#98.18.250':9988
- '22#.#98.209.34':445
- '22#.#98.18.250':445
- '22#.#98.161.239':445
- '22#.#98.145.161':445
- '22#.#98.69.63':445
- '22#.#98.129.238':445
- '22#.#98.189.134':445
- '22#.#98.233.51':445
- '22#.#98.94.91':445
- '22#.#98.124.118':445
- '22#.#98.14.244':445
- '22#.#98.10.240':445
- '22#.#98.60.105':445
- '22#.#98.146.20':445
- '22#.#98.241.216':445
- '22#.#98.249.243':445
- '22#.#98.217.65':445
- '22#.#98.61.182':445
- '22#.#98.162.137':445
- '22#.#98.21.191':445
- '22#.#98.24.167':445
- '22#.#98.59.142':445
- '22#.#98.10.240':9988
- '22#.#98.94.91':9988
- '22#.#98.128.215':9988
- '22#.#98.1.107':9988
- '22#.#98.3.65':445
- '22#.#98.109.51':445
- '22#.#98.3.78':445
- '22#.#98.120.244':445
- '22#.#98.81.189':445
- '22#.#98.35.127':445
- '22#.#98.64.63':445
- '22#.#98.128.166':445
- '22#.#98.238.78':445