Malware Analysis Report

2025-01-02 15:05

Sample ID 201025-k28z2wg9dj
Target 131d1e05649216da7d3aac86cb0cb1ed
SHA256 0d56de71fd541b777edbd246e23360cbcab6bddd2ed18ac078fcf29533738a93
Tags
ransomware evasion persistence cerber
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V6

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

0d56de71fd541b777edbd246e23360cbcab6bddd2ed18ac078fcf29533738a93

Threat Level: Known bad

The file 131d1e05649216da7d3aac86cb0cb1ed was found to be: Known bad.

Malicious Activity Summary

ransomware evasion persistence cerber

Cerber

Modifies Windows Firewall

Blacklisted process makes network request

Deletes itself

Drops startup file

Modifies service

Drops file in System32 directory

Suspicious use of SetThreadContext

Drops file in Windows directory

Drops file in Program Files directory

Suspicious use of SetWindowsHookEx

Modifies Internet Explorer settings

Runs ping.exe

Modifies system certificate store

Kills process with taskkill

Suspicious use of WriteProcessMemory

Modifies registry class

Suspicious use of AdjustPrivilegeToken

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2020-10-25 21:45

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2020-10-25 21:45

Reported

2020-10-25 23:14

Platform

win7

Max time kernel

67s

Max time network

151s

Command Line

"C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe"

Signatures

Cerber

ransomware cerber

Blacklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

Modifies Windows Firewall

evasion

Deletes itself

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\cmd.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\desktop C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\documents C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A

Modifies service

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Qecs C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\UI C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\LocalConfig C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\UI C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\LocalConfig C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Shas C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\Enroll\HcsGroups C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Shas C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Qecs C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\Enroll\HcsGroups C:\Windows\SysWOW64\netsh.exe N/A

Suspicious use of SetThreadContext

Description Indicator Process Target
PID 316 set thread context of 1664 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\documents C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\documents C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\desktop C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\desktop C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-4210623931-3856158591-1213714290-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SysWOW64\mshta.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C C:\Windows\SysWOW64\mshta.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Windows\SysWOW64\mshta.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Windows\SysWOW64\mshta.exe N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 316 wrote to memory of 1664 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 316 wrote to memory of 1664 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 316 wrote to memory of 1664 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 316 wrote to memory of 1664 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 316 wrote to memory of 1664 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 316 wrote to memory of 1664 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 316 wrote to memory of 1664 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 316 wrote to memory of 1664 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 316 wrote to memory of 1664 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 316 wrote to memory of 1664 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 316 wrote to memory of 1664 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 316 wrote to memory of 1664 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 1664 wrote to memory of 1648 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\netsh.exe
PID 1664 wrote to memory of 1648 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\netsh.exe
PID 1664 wrote to memory of 1648 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\netsh.exe
PID 1664 wrote to memory of 1648 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\netsh.exe
PID 1664 wrote to memory of 1960 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\netsh.exe
PID 1664 wrote to memory of 1960 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\netsh.exe
PID 1664 wrote to memory of 1960 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\netsh.exe
PID 1664 wrote to memory of 1960 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\netsh.exe
PID 1664 wrote to memory of 1072 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\mshta.exe
PID 1664 wrote to memory of 1072 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\mshta.exe
PID 1664 wrote to memory of 1072 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\mshta.exe
PID 1664 wrote to memory of 1072 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\mshta.exe
PID 1664 wrote to memory of 1288 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1664 wrote to memory of 1288 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1664 wrote to memory of 1288 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1664 wrote to memory of 1288 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1664 wrote to memory of 1424 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\cmd.exe
PID 1664 wrote to memory of 1424 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\cmd.exe
PID 1664 wrote to memory of 1424 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\cmd.exe
PID 1664 wrote to memory of 1424 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\cmd.exe
PID 1424 wrote to memory of 1324 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1424 wrote to memory of 1324 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1424 wrote to memory of 1324 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1424 wrote to memory of 1324 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1424 wrote to memory of 1696 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1424 wrote to memory of 1696 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1424 wrote to memory of 1696 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1424 wrote to memory of 1696 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe

"C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe"

C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe

"C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe"

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall set allprofiles state on

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall reset

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_READ_THI$_FILE_UQ34M5B_.hta"

C:\Windows\SysWOW64\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\_READ_THI$_FILE_URO93_.txt

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "131d1e05649216da7d3aac86cb0cb1ed.exe"

C:\Windows\SysWOW64\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 205.185.216.10:80 tcp
N/A 8.8.8.8:53 api.blockcypher.com udp
N/A 172.67.2.88:80 api.blockcypher.com tcp
N/A 8.8.8.8:53 btc.blockr.io udp
N/A 8.8.8.8:53 bitaps.com udp
N/A 178.128.255.179:443 bitaps.com tcp
N/A 8.8.8.8:53 www.download.windowsupdate.com udp
N/A 205.185.216.42:80 www.download.windowsupdate.com tcp
N/A 151.101.2.133:80 ocsp.globalsign.com tcp
N/A 151.101.2.133:80 ocsp2.globalsign.com tcp
N/A 8.8.8.8:53 chain.so udp
N/A 104.24.104.254:443 chain.so tcp
N/A 93.184.220.29:80 ocsp.digicert.com tcp
N/A 8.8.8.8:53 crl.verisign.com udp
N/A 72.21.91.29:80 crl.verisign.com tcp

Files

memory/1664-3-0x000000000040A2FD-mapping.dmp

memory/1664-2-0x0000000000400000-0x000000000043A000-memory.dmp

memory/1664-4-0x0000000000400000-0x000000000043A000-memory.dmp

memory/1648-5-0x0000000000000000-mapping.dmp

memory/1960-6-0x0000000000000000-mapping.dmp

memory/1072-7-0x0000000000000000-mapping.dmp

memory/1288-8-0x0000000000000000-mapping.dmp

memory/1424-9-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_READ_THI$_FILE_URO93_.txt

MD5 296e0f907e61ff05197e9d6e12b46fb1
SHA1 b7db7a008e6074c521aebada3feb750329651cb1
SHA256 1d391dd9e05deef7a3a991b2640cab7a72bef1f51715446ee34ef4adaeda4942
SHA512 a1cb7a3e781e091437ab81c0a33390667fdc2fba667aca8d5491016ee4885b5c578c2b7b42b59828040d3247fec967361f17ea37e403d6cfc01e12556d6784c1

memory/1324-11-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_READ_THI$_FILE_UQ34M5B_.hta

MD5 646ba9afb38b66ab3324384280655515
SHA1 db53193a2f1703cdf07672ed8ae161a5d59448bf
SHA256 c6565b182116081170685f5707b9af272787dc183414adc08af9109ae55a778d
SHA512 74131349cf96f72adb98e56a7846530d4cf1f88610d736dd3f5b17d6531d7daf454651ca6d222deb52c257e14f5773c0dcd73a8ea05df464b042a156efa685cc

memory/1696-13-0x0000000000000000-mapping.dmp

memory/1356-14-0x000007FEF6C30000-0x000007FEF6EAA000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2020-10-25 21:45

Reported

2020-10-25 23:14

Platform

win10

Max time kernel

110s

Max time network

147s

Command Line

"C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe"

Signatures

Cerber

ransomware cerber

Blacklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

Modifies Windows Firewall

evasion

Drops startup file

Description Indicator Process Target
File opened for modification \??\c:\users\admin\appdata\roaming\microsoft\word\startup\ C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\desktop C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\documents C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A

Suspicious use of SetThreadContext

Description Indicator Process Target
PID 3848 set thread context of 2024 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\serviceprofiles\networkservice\desktop C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\documents C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\desktop C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\documents C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2627584638-3284755310-3019450177-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3848 wrote to memory of 2024 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 3848 wrote to memory of 2024 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 3848 wrote to memory of 2024 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 3848 wrote to memory of 2024 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 3848 wrote to memory of 2024 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 3848 wrote to memory of 2024 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 3848 wrote to memory of 2024 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 3848 wrote to memory of 2024 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 3848 wrote to memory of 2024 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 3848 wrote to memory of 2024 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 3848 wrote to memory of 2024 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe
PID 2024 wrote to memory of 2364 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\netsh.exe
PID 2024 wrote to memory of 2364 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\netsh.exe
PID 2024 wrote to memory of 2364 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\netsh.exe
PID 2024 wrote to memory of 2656 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\netsh.exe
PID 2024 wrote to memory of 2656 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\netsh.exe
PID 2024 wrote to memory of 2656 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\netsh.exe
PID 2024 wrote to memory of 752 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\mshta.exe
PID 2024 wrote to memory of 752 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\mshta.exe
PID 2024 wrote to memory of 752 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\mshta.exe
PID 2024 wrote to memory of 1260 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 2024 wrote to memory of 1260 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 2024 wrote to memory of 1260 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 2024 wrote to memory of 2120 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\cmd.exe
PID 2024 wrote to memory of 2120 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\cmd.exe
PID 2024 wrote to memory of 2120 N/A C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe C:\Windows\SysWOW64\cmd.exe
PID 2120 wrote to memory of 3140 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 2120 wrote to memory of 3140 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 2120 wrote to memory of 3140 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 2120 wrote to memory of 2376 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 2120 wrote to memory of 2376 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 2120 wrote to memory of 2376 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe

"C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe"

C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe

"C:\Users\Admin\AppData\Local\Temp\131d1e05649216da7d3aac86cb0cb1ed.exe"

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall set allprofiles state on

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall reset

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_READ_THI$_FILE_Y6HG_.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}

C:\Windows\SysWOW64\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\_READ_THI$_FILE_D4TH_.txt

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "131d1e05649216da7d3aac86cb0cb1ed.exe"

C:\Windows\SysWOW64\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 8.8.8.8:53 api.blockcypher.com udp
N/A 104.20.21.251:80 api.blockcypher.com tcp
N/A 8.8.8.8:53 btc.blockr.io udp
N/A 8.8.8.8:53 bitaps.com udp
N/A 178.128.255.179:443 bitaps.com tcp
N/A 93.184.221.240:80 ctldl.windowsupdate.com tcp
N/A 151.101.2.133:80 ocsp.globalsign.com tcp
N/A 151.101.2.133:80 ocsp2.globalsign.com tcp
N/A 8.8.8.8:53 chain.so udp
N/A 104.24.104.254:443 chain.so tcp
N/A 93.184.220.29:80 ocsp.digicert.com tcp
N/A 8.8.8.8:53 sochain.com udp
N/A 104.26.15.247:443 sochain.com tcp
N/A 8.8.8.8:53 p27dokhpz2n7nvgr.1j9r76.top udp

Files

memory/2024-3-0x000000000040A2FD-mapping.dmp

memory/2024-2-0x0000000000400000-0x000000000043A000-memory.dmp

memory/2024-4-0x0000000000400000-0x000000000043A000-memory.dmp

memory/2364-5-0x0000000000000000-mapping.dmp

memory/2656-6-0x0000000000000000-mapping.dmp

memory/752-7-0x0000000000000000-mapping.dmp

memory/1260-8-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_READ_THI$_FILE_D4TH_.txt

MD5 8ea2ce803c731066f4a8301e79aef82b
SHA1 b49f59b5273b6c6c9bba954f73199cf2535f639c
SHA256 3685588422dbe9138f19608a087e4eb3053b88f7d4bb4ecdfa51ff3e286b4ce4
SHA512 6a3a6eeb6aee36e9e816330bff9234eb08d905449c03f8698c6363f3143acc6cf1acb6411244b397690f5147cb5b99d2162e321efe937ab0858b437e5ce9c1c7

C:\Users\Admin\Desktop\_READ_THI$_FILE_Y6HG_.hta

MD5 e9b6f563f7dc2b22d58dac869f79f274
SHA1 59e22374493183ffe34ec1c434bfddbaef38d365
SHA256 f5da8fb61b96e83122eae4b89eaaab2daa35216972e4854973979ab04a2e2357
SHA512 b34395d057e0e107606a48064f0272ee3fad2a8cb1a425ad5254cfc7fd28118ab2fe3894ee625a7d5da7afa5b11b1ea8858a7cb57e47547d575ad574a53147a3

memory/2120-11-0x0000000000000000-mapping.dmp

memory/3140-12-0x0000000000000000-mapping.dmp

memory/2376-13-0x0000000000000000-mapping.dmp