Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WERd82b.dir00\svchost.exe.mdmp 16325836412030476
- %TEMP%\WERd82b.dir00\svchost.exe.mdmp
- '66.##1.176.164':139
- '66.##1.242.97':139
- '66.#81.9.17':139
- '66.##1.226.200':139
- '66.##1.68.154':139
- '66.##1.167.158':139
- '66.##1.129.222':139
- '66.##1.41.57':139
- '66.##1.112.221':139
- '66.##1.57.15':139
- '66.##1.7.194':9988
- '66.##1.86.240':139
- '66.##1.84.206':139
- '66.##1.155.12':139
- '66.##1.79.42':139
- '66.##1.100.177':139
- '66.##1.6.230':139
- '66.##1.76.39':139
- '66.#81.7.35':139
- '66.#81.3.71':139
- '66.##1.62.95':139
- '66.##1.8.186':139
- '66.##1.15.99':139
- '66.##1.235.183':139
- '66.##1.183.46':139
- '66.##1.171.154':139
- '66.##1.1.130':139
- '66.##1.21.17':139
- '66.##1.248.81':139
- '66.##1.146.44':139
- '66.##1.186.25':9988
- '66.##1.50.142':9988
- '66.##1.255.86':9988
- '66.##1.227.94':9988
- '66.##1.247.108':9988
- '66.#81.5.61':9988
- '66.##1.254.246':9988
- '66.#81.24.4':9988
- '66.##1.60.83':9988
- '66.##1.73.31':9988
- '66.##1.130.175':9988
- '66.##1.32.204':9988
- '66.##1.168.5':9988
- '66.##1.40.172':9988
- '66.##1.233.99':9988
- '66.##1.58.108':9988
- '66.##1.129.234':9988
- '66.##1.201.81':9988
- '66.##1.243.186':9988
- '66.##1.209.173':9988
- '66.##1.157.222':9988
- '66.##1.46.106':9988
- '66.##1.106.203':9988
- '66.##1.122.84':9988
- '66.##1.131.165':9988
- '66.##1.75.194':9988
- '66.##1.94.137':9988
- '66.##1.150.147':9988
- '66.##1.150.24':9988
- '66.##1.192.179':9988
- '66.##1.98.71':139
- '66.##1.6.230':445
- '66.##1.183.46':445
- '66.##1.68.154':445
- '66.##1.153.99':445
- '66.##1.171.154':445
- '66.##1.112.221':445
- '66.##1.84.206':445
- '66.##1.55.92':445
- '66.##1.62.95':445
- '66.##1.79.42':445
- '66.##1.8.186':445
- '66.##1.15.99':445
- '66.##1.226.200':445
- '66.##1.21.17':445
- '66.##1.1.130':445
- '66.##1.76.247':445
- '66.##1.142.142':445
- '66.##1.15.89':445
- '66.##1.68.116':445
- '66.##1.22.225':445
- '66.##1.45.43':445
- '66.##1.242.6':445
- '66.##1.221.38':445
- '66.#81.9.17':445
- '66.#81.3.71':445
- '66.##1.155.12':445
- '66.##1.239.9':445
- '66.##1.78.176':445
- '66.##1.213.193':445
- '66.##1.89.200':445
- '66.##1.142.142':139
- '66.##1.76.247':139
- '66.##1.45.43':139
- '66.##1.221.38':139
- '66.##1.15.89':139
- '66.##1.89.200':139
- '66.##1.213.193':139
- '66.##1.78.176':139
- '66.##1.153.99':139
- '66.##1.199.221':139
- '66.##1.55.92':139
- '66.##1.68.116':139
- '66.##1.22.225':139
- '66.##1.242.6':139
- '66.##1.239.9':139
- '66.##1.176.164':445
- '66.##1.86.240':445
- '66.##1.199.221':445
- '66.##1.248.81':445
- '66.##1.76.39':445
- '66.##1.98.71':445
- '66.##1.100.177':445
- '66.##1.41.57':445
- '66.##1.167.158':445
- '66.##1.129.222':445
- '66.##1.57.15':445
- '66.##1.235.183':445
- '66.##1.242.97':445
- '66.#81.7.35':445
- '66.##1.146.44':445
- '66.#81.32.8':9988
- '66.##1.129.234':139
- '66.##1.75.194':139
- '66.##1.59.35':139
- '66.##1.108.130':139
- '66.##1.106.203':139
- '66.##1.254.246':139
- '66.##1.247.108':139
- '66.##1.45.187':139
- '66.##1.150.24':139
- '66.##1.50.142':139
- '66.##1.243.186':139
- '66.##1.58.108':139
- '66.##1.150.147':139
- '66.##1.203.127':139
- '66.#81.5.61':139
- '66.##1.64.20':445
- '66.##1.46.106':445
- '66.##1.179.226':445
- '66.##1.168.5':445
- '66.##1.94.95':445
- '66.##1.127.57':445
- '66.##1.31.96':445
- '66.##1.73.31':445
- '66.##1.130.175':139
- '66.##1.201.81':139
- '66.##1.255.86':139
- '66.##1.220.117':139
- '66.##1.94.137':445
- '66.##1.15.12':139
- '66.#81.24.4':139
- '66.##1.94.137':139
- '66.##1.73.31':139
- '66.##1.46.106':139
- '66.##1.131.165':139
- '66.##1.129.167':139
- '66.##1.168.5':139
- '66.##1.149.217':139
- '66.##1.127.57':139
- '66.##1.132.90':139
- '66.##1.94.95':139
- '66.##1.227.94':139
- '66.##1.64.20':139
- '66.##1.179.226':139
- '66.##1.247.38':139
- '66.##1.31.96':139
- '66.##1.93.64':139
- '66.#81.51.3':139
- '66.##1.192.179':139
- '66.##1.40.172':139
- '66.##1.186.25':139
- '66.##1.122.84':139
- '66.##1.60.83':139
- '66.#81.32.8':139
- '66.##1.233.99':139
- '66.##1.53.74':139
- '66.##1.209.173':139
- '66.##1.157.222':139
- '66.##1.7.194':139
- '66.##1.32.204':139
- '66.##1.207.40':139
- '66.##1.131.165':445
- '66.##1.15.12':445
- '66.#81.24.4':445
- '66.##1.220.117':445
- '66.##1.129.167':9988
- '66.##1.220.117':9988
- '66.##1.108.130':9988
- '66.##1.207.40':9988
- '66.##1.130.175':445
- '66.##1.247.108':445
- '66.##1.108.130':445
- '66.##1.129.234':445
- '66.##1.254.246':445
- '66.##1.201.81':445
- '66.##1.255.86':445
- '66.##1.106.203':445
- '66.##1.45.187':9988
- '66.##1.53.74':9988
- '66.#81.51.3':9988
- '66.##1.203.127':9988
- '66.##1.15.12':9988
- '66.##1.247.38':9988
- '66.##1.59.35':9988
- '66.##1.127.57':9988
- '66.##1.132.90':9988
- '66.##1.31.96':9988
- '66.##1.94.95':9988
- '66.##1.179.226':9988
- '66.##1.64.20':9988
- '66.##1.93.64':9988
- '66.##1.149.217':9988
- '66.##1.157.222':445
- '66.##1.32.204':445
- '66.##1.7.194':445
- '66.##1.207.40':445
- '66.##1.93.64':445
- '66.#81.32.8':445
- '66.#81.51.3':445
- '66.##1.53.74':445
- '66.##1.247.38':445
- '66.##1.227.94':445
- '66.##1.149.217':445
- '66.##1.132.90':445
- '66.##1.233.99':445
- '66.##1.209.173':445
- '66.##1.129.167':445
- '66.##1.203.127':445
- '66.#81.5.61':445
- '66.##1.58.108':445
- '66.##1.150.147':445
- '66.##1.75.194':445
- '66.##1.45.187':445
- '66.##1.59.35':445
- '66.##1.150.24':445
- '66.##1.122.84':445
- '66.##1.40.172':445
- '66.##1.192.179':445
- '66.##1.60.83':445
- '66.##1.50.142':445
- '66.##1.186.25':445
- '66.##1.243.186':445