Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER1952.dir00\svchost.exe.mdmp 16325836412030768
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '20#.#16.45.126':445
- '20#.#16.192.17':445
- '20#.#16.35.76':445
- '20#.#16.109.224':445
- '20#.#16.5.194':139
- '20#.#16.103.154':139
- '20#.#16.120.152':139
- '20#.#16.127.156':139
- '20#.#16.4.91':445
- '20#.#16.96.30':445
- '20#.#16.42.154':445
- '20#.#16.192.102':445
- '20#.#16.206.44':445
- '20#.#16.60.184':445
- '20#.#16.61.250':445
- '20#.#16.11.128':445
- '20#.#16.87.180':139
- '20#.#16.211.191':139
- '20#.#16.59.142':139
- '20#.#16.90.118':139
- '20#.#16.120.152':445
- '20#.#16.127.156':445
- '20#.#16.223.0':139
- '20#.#16.61.4':139
- '20#.#16.75.73':139
- '20#.#16.177.125':139
- '20#.#16.182.240':139
- '20#.#16.66.181':139
- '20#.#16.149.145':139
- '20#.#16.200.216':139
- '20#.#16.142.229':139
- '20#.#16.37.228':139
- '20#.#16.13.46':445
- '20#.#16.45.126':139
- '20#.#16.192.17':139
- '20#.#16.35.76':139
- '20#.#16.109.224':139
- '20#.#16.159.166':445
- '20#.#16.188.219':445
- '20#.#16.214.73':445
- '20#.#16.89.61':445
- '20#.#16.4.91':139
- '20#.#16.96.30':139
- '20#.#16.42.154':139
- '20#.#16.192.102':139
- '20#.#16.206.44':139
- '20#.#16.60.184':139
- '20#.#16.61.250':139
- '20#.#16.11.128':139
- '20#.#16.15.246':445
- '20#.#16.228.63':445
- '20#.#16.36.66':445
- '20#.#16.199.36':445
- '20#.#16.91.187':445
- '20#.#16.187.90':445
- '20#.#16.114.25':445
- '20#.#16.74.235':445
- '20#.#16.19.212':445
- '20#.#16.122.119':445
- '20#.#16.100.201':445
- '20#.#16.164.139':445
- '20#.#16.242.149':445
- '20#.#16.66.166':445
- '20#.#16.71.245':445
- '20#.#16.203.191':445
- '20#.#16.5.194':445
- '20#.#16.41.11':139
- '20#.#16.178.43':139
- '20#.#16.53.161':139
- '20#.#16.48.28':139
- '20#.#16.228.28':139
- '20#.#16.158.130':445
- '20#.#16.195.225':139
- '20#.#16.132.167':139
- '20#.#16.233.184':139
- '20#.#16.84.112':139
- '20#.#16.154.31':139
- '20#.#16.23.166':139
- '20#.#16.173.5':139
- '20#.#16.152.173':139
- '20#.#16.48.120':139
- '20#.#16.149.177':139
- '20#.#16.27.193':445
- '20#.#16.134.176':445
- '20#.#16.143.154':445
- '20#.#16.193.143':445
- '20#.#16.15.29':445
- '20#.#16.211.3':445
- '20#.#16.172.131':445
- '20#.#16.69.118':445
- '20#.#16.173.178':445
- '20#.#16.133.173':445
- '20#.#16.44.253':445
- '20#.#16.178.130':445
- '20#.#16.64.229':445
- '20#.#16.53.125':445
- '20#.#16.253.133':445
- '20#.#16.22.17':445
- '20#.#16.127.62':139
- '20#.#16.90.118':445
- '20#.#16.87.180':445
- '20#.#16.200.216':445
- '20#.#16.59.142':445
- '20#.#16.61.4':445
- '20#.#16.158.130':139
- '20#.#16.211.191':445
- '20#.#16.223.0':445
- '20#.#16.66.181':445
- '20#.#16.75.73':445
- '20#.#16.103.154':445
- '20#.#16.182.240':445
- '20#.#16.37.228':445
- '20#.#16.149.145':445
- '20#.#16.177.125':445
- '20#.#16.142.229':445
- '20#.#16.27.193':139
- '20#.#16.134.176':139
- '20#.#16.143.154':139
- '20#.#16.193.143':139
- '20#.#16.15.29':139
- '20#.#16.211.3':139
- '20#.#16.172.131':139
- '20#.#16.69.118':139
- '20#.#16.173.178':139
- '20#.#16.133.173':139
- '20#.#16.44.253':139
- '20#.#16.178.130':139
- '20#.#16.64.229':139
- '20#.#16.53.125':139
- '20#.#16.253.133':139
- '20#.#16.22.17':139
- '20#.#16.13.46':139
- '20#.#16.228.191':139
- '20#.#16.241.199':139
- '20#.#16.97.52':139
- '20#.#16.251.57':139
- '20#.#16.40.42':139
- '20#.#16.110.128':139
- '20#.#16.67.62':139
- '20#.#16.130.177':139
- '20#.#16.69.106':139
- '20#.#16.9.31':139
- '20#.#16.73.182':139
- '20#.#16.106.73':139
- '20#.#16.253.181':139
- '20#.#16.27.96':139
- '20#.#16.82.191':139
- '20#.#16.149.187':139
- '20#.#16.164.62':445
- '20#.#16.208.164':445
- '20#.#16.11.213':445
- '20#.#16.227.23':445
- '20#.#16.4.116':445
- '20#.#16.149.35':445
- '20#.#16.194.139':445
- '20#.#16.121.164':445
- '20#.#16.42.176':445
- '20#.#16.68.234':445
- '20#.#16.19.74':139
- '20#.#16.166.222':139
- '20#.#16.2.184':445
- '20#.#16.2.129':445
- '20#.#16.250.47':445
- '20#.#16.83.2':445
- '20#.#16.10.136':139
- '20#.#16.194.139':139
- '20#.#16.121.164':139
- '20#.#16.164.62':139
- '20#.#16.208.164':139
- '20#.#16.201.142':139
- '20#.#16.131.157':139
- '20#.#16.4.116':139
- '20#.#16.149.35':139
- '20#.#16.42.176':139
- '20#.#16.2.184':139
- '20#.#16.250.47':139
- '20#.#16.68.234':139
- '20#.#16.11.213':139
- '20#.#16.227.23':139
- '20#.#16.2.129':139
- '20#.#16.83.2':139
- '20#.#16.13.14':139
- '20#.#16.179.185':139
- '20#.#16.13.73':139
- '20#.#16.31.91':139
- '20#.#16.204.204':139
- '20#.#16.188.7':139
- '20#.#16.93.233':139
- '20#.#16.154.93':139
- '20#.#16.181.188':139
- '20#.#16.120.137':139
- '20#.#16.159.6':139
- '20#.#16.13.67':139
- '20#.#16.116.251':139
- '20#.#16.199.236':139
- '20#.#16.64.207':139
- '20#.#16.234.105':139
- '20#.#16.201.142':445
- '20#.#16.130.177':9988
- '20#.#16.19.74':9988
- '20#.#16.159.6':9988
- '20#.#16.83.2':9988
- '20#.#16.159.166':139
- '20#.#16.188.219':139
- '20#.#16.214.73':139
- '20#.#16.89.61':139
- '20#.#16.166.222':445
- '20#.#16.227.23':9988
- '20#.#16.19.74':445
- '20#.#16.110.128':445
- '20#.#16.149.35':9988
- '20#.#16.4.116':9988
- '20#.#16.228.191':9988
- '20#.#16.69.106':9988
- '20#.#16.15.246':139
- '20#.#16.228.63':139
- '20#.#16.36.66':139
- '20#.#16.199.36':139
- '20#.#16.187.90':139
- '20#.#16.91.187':139
- '20#.#16.114.25':139
- '20#.#16.74.235':139
- '20#.#16.19.212':139
- '20#.#16.122.119':139
- '20#.#16.100.201':139
- '20#.#16.164.139':139
- '20#.#16.242.149':139
- '20#.#16.66.166':139
- '20#.#16.71.245':139
- '20#.#16.203.191':139
- '20#.#16.40.42':445
- '20#.#16.13.73':445
- '20#.#16.13.14':445
- '20#.#16.199.236':445
- '20#.#16.31.91':445
- '20#.#16.154.93':445
- '20#.#16.204.204':445
- '20#.#16.179.185':445
- '20#.#16.93.233':445
- '20#.#16.13.67':445
- '20#.#16.181.188':445
- '20#.#16.131.157':445
- '20#.#16.159.6':445
- '20#.#16.234.105':445
- '20#.#16.116.251':445
- '20#.#16.120.137':445
- '20#.#16.64.207':445
- '20#.#16.97.52':445
- '20#.#16.251.57':445
- '20#.#16.253.181':445
- '20#.#16.27.96':445
- '20#.#16.67.62':445
- '20#.#16.130.177':445
- '20#.#16.228.191':445
- '20#.#16.241.199':445
- '20#.#16.73.182':445
- '20#.#16.106.73':445
- '20#.#16.188.7':445
- '20#.#16.10.136':445
- '20#.#16.82.191':445
- '20#.#16.149.187':445
- '20#.#16.69.106':445
- '20#.#16.9.31':445