Malware Analysis Report

2025-01-02 15:05

Sample ID 201026-dkfegag8cx
Target 885d65249f0289d8b7c88ff90907d94a
SHA256 a44a932f0ae375fab03a7098806bec205b2692bd50fdb533c39c0eb94797feae
Tags
ransomware evasion persistence cerber
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V6

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

a44a932f0ae375fab03a7098806bec205b2692bd50fdb533c39c0eb94797feae

Threat Level: Known bad

The file 885d65249f0289d8b7c88ff90907d94a was found to be: Known bad.

Malicious Activity Summary

ransomware evasion persistence cerber

Cerber

Modifies Windows Firewall

Blacklisted process makes network request

Drops startup file

Enumerates connected drives

Drops file in System32 directory

Sets desktop wallpaper using registry

Modifies service

Drops file in Program Files directory

Drops file in Windows directory

Modifies registry class

Runs ping.exe

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Opens file in notepad (likely ransom note)

Modifies Internet Explorer settings

Kills process with taskkill

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2020-10-26 07:59

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2020-10-26 07:59

Reported

2020-10-26 08:06

Platform

win7

Max time kernel

63s

Max time network

64s

Command Line

"C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe"

Signatures

Cerber

ransomware cerber

Blacklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

Modifies Windows Firewall

evasion

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\a: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\b: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\g: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\o: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\v: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\z: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\j: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\l: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\p: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\r: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\u: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\f: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\i: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\k: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\n: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\x: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\t: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\w: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\y: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\e: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\h: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\m: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\q: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\s: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\desktop C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\documents C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A

Modifies service

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\LocalConfig C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Shas C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\LocalConfig C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\UI C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Shas C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Qecs C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\Enroll\HcsGroups C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Qecs C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\UI C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\Enroll\HcsGroups C:\Windows\SysWOW64\netsh.exe N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-4210623931-3856158591-1213714290-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\tmpDF38.bmp" C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\documents C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\documents C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\desktop C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\desktop C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-4210623931-3856158591-1213714290-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SysWOW64\mshta.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\NOTEPAD.EXE N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1492 wrote to memory of 1684 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\netsh.exe
PID 1492 wrote to memory of 1684 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\netsh.exe
PID 1492 wrote to memory of 1684 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\netsh.exe
PID 1492 wrote to memory of 1684 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\netsh.exe
PID 1492 wrote to memory of 2016 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\netsh.exe
PID 1492 wrote to memory of 2016 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\netsh.exe
PID 1492 wrote to memory of 2016 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\netsh.exe
PID 1492 wrote to memory of 2016 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\netsh.exe
PID 1492 wrote to memory of 1340 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\mshta.exe
PID 1492 wrote to memory of 1340 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\mshta.exe
PID 1492 wrote to memory of 1340 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\mshta.exe
PID 1492 wrote to memory of 1340 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\mshta.exe
PID 1492 wrote to memory of 268 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1492 wrote to memory of 268 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1492 wrote to memory of 268 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1492 wrote to memory of 268 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1492 wrote to memory of 1368 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\cmd.exe
PID 1492 wrote to memory of 1368 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\cmd.exe
PID 1492 wrote to memory of 1368 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\cmd.exe
PID 1492 wrote to memory of 1368 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\cmd.exe
PID 1368 wrote to memory of 688 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1368 wrote to memory of 688 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1368 wrote to memory of 688 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1368 wrote to memory of 688 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1368 wrote to memory of 1712 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1368 wrote to memory of 1712 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1368 wrote to memory of 1712 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1368 wrote to memory of 1712 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe

"C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe"

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall set allprofiles state on

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall reset

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___T2EM4PTN_.hta"

C:\Windows\SysWOW64\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___HGIGO9_.txt

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\system32\cmd.exe" /d /c taskkill /f /im "8" > NUL & ping -n 1 127.0.0.1 > NUL & del "C" > NUL && exit

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "8"

C:\Windows\SysWOW64\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
N/A 73.107.12.0:6893 udp
N/A 73.107.12.1:6893 udp
N/A 73.107.12.2:6893 udp
N/A 73.107.12.3:6893 udp
N/A 73.107.12.4:6893 udp
N/A 73.107.12.5:6893 udp
N/A 73.107.12.6:6893 udp
N/A 73.107.12.7:6893 udp
N/A 73.107.12.8:6893 udp
N/A 73.107.12.9:6893 udp
N/A 73.107.12.10:6893 udp
N/A 73.107.12.11:6893 udp
N/A 73.107.12.12:6893 udp
N/A 73.107.12.13:6893 udp
N/A 73.107.12.14:6893 udp
N/A 73.107.12.15:6893 udp
N/A 73.107.12.16:6893 udp
N/A 73.107.12.17:6893 udp
N/A 73.107.12.18:6893 udp
N/A 73.107.12.19:6893 udp
N/A 73.107.12.20:6893 udp
N/A 73.107.12.21:6893 udp
N/A 73.107.12.22:6893 udp
N/A 73.107.12.23:6893 udp
N/A 73.107.12.24:6893 udp
N/A 73.107.12.25:6893 udp
N/A 73.107.12.26:6893 udp
N/A 73.107.12.27:6893 udp
N/A 73.107.12.28:6893 udp
N/A 73.107.12.29:6893 udp
N/A 73.107.12.30:6893 udp
N/A 73.107.12.31:6893 udp
N/A 75.1.200.0:6893 udp
N/A 75.1.200.1:6893 udp
N/A 75.1.200.2:6893 udp
N/A 75.1.200.3:6893 udp
N/A 75.1.200.4:6893 udp
N/A 75.1.200.5:6893 udp
N/A 75.1.200.6:6893 udp
N/A 75.1.200.7:6893 udp
N/A 75.1.200.8:6893 udp
N/A 75.1.200.9:6893 udp
N/A 75.1.200.10:6893 udp
N/A 75.1.200.11:6893 udp
N/A 75.1.200.12:6893 udp
N/A 75.1.200.13:6893 udp
N/A 75.1.200.14:6893 udp
N/A 75.1.200.15:6893 udp
N/A 75.1.200.16:6893 udp
N/A 75.1.200.17:6893 udp
N/A 75.1.200.18:6893 udp
N/A 75.1.200.19:6893 udp
N/A 75.1.200.20:6893 udp
N/A 75.1.200.21:6893 udp
N/A 75.1.200.22:6893 udp
N/A 75.1.200.23:6893 udp
N/A 75.1.200.24:6893 udp
N/A 75.1.200.25:6893 udp
N/A 75.1.200.26:6893 udp
N/A 75.1.200.27:6893 udp
N/A 75.1.200.28:6893 udp
N/A 75.1.200.29:6893 udp
N/A 75.1.200.30:6893 udp
N/A 75.1.200.31:6893 udp
N/A 87.98.176.0:6893 udp
N/A 87.98.176.1:6893 udp
N/A 87.98.176.2:6893 udp
N/A 87.98.176.3:6893 udp
N/A 87.98.176.4:6893 udp
N/A 87.98.176.5:6893 udp
N/A 87.98.176.6:6893 udp
N/A 87.98.176.7:6893 udp
N/A 87.98.176.8:6893 udp
N/A 87.98.176.9:6893 udp
N/A 87.98.176.10:6893 udp
N/A 87.98.176.11:6893 udp
N/A 87.98.176.12:6893 udp
N/A 87.98.176.13:6893 udp
N/A 87.98.176.14:6893 udp
N/A 87.98.176.15:6893 udp
N/A 87.98.176.16:6893 udp
N/A 87.98.176.17:6893 udp
N/A 87.98.176.18:6893 udp
N/A 87.98.176.19:6893 udp
N/A 87.98.176.20:6893 udp
N/A 87.98.176.21:6893 udp
N/A 87.98.176.22:6893 udp
N/A 87.98.176.23:6893 udp
N/A 87.98.176.24:6893 udp
N/A 87.98.176.25:6893 udp
N/A 87.98.176.26:6893 udp
N/A 87.98.176.27:6893 udp
N/A 87.98.176.28:6893 udp
N/A 87.98.176.29:6893 udp
N/A 87.98.176.30:6893 udp
N/A 87.98.176.31:6893 udp
N/A 87.98.176.32:6893 udp
N/A 87.98.176.33:6893 udp
N/A 87.98.176.34:6893 udp
N/A 87.98.176.35:6893 udp
N/A 87.98.176.36:6893 udp
N/A 87.98.176.37:6893 udp
N/A 87.98.176.38:6893 udp
N/A 87.98.176.39:6893 udp
N/A 87.98.176.40:6893 udp
N/A 87.98.176.41:6893 udp
N/A 87.98.176.42:6893 udp
N/A 87.98.176.43:6893 udp
N/A 87.98.176.44:6893 udp
N/A 87.98.176.45:6893 udp
N/A 87.98.176.46:6893 udp
N/A 87.98.176.47:6893 udp
N/A 87.98.176.48:6893 udp
N/A 87.98.176.49:6893 udp
N/A 87.98.176.50:6893 udp
N/A 87.98.176.51:6893 udp
N/A 87.98.176.52:6893 udp
N/A 87.98.176.53:6893 udp
N/A 87.98.176.54:6893 udp
N/A 87.98.176.55:6893 udp
N/A 87.98.176.56:6893 udp
N/A 87.98.176.57:6893 udp
N/A 87.98.176.58:6893 udp
N/A 87.98.176.59:6893 udp
N/A 87.98.176.60:6893 udp
N/A 87.98.176.61:6893 udp
N/A 87.98.176.62:6893 udp
N/A 87.98.176.63:6893 udp
N/A 87.98.176.64:6893 udp
N/A 87.98.176.65:6893 udp
N/A 87.98.176.66:6893 udp
N/A 87.98.176.67:6893 udp
N/A 87.98.176.68:6893 udp
N/A 87.98.176.69:6893 udp
N/A 87.98.176.70:6893 udp
N/A 87.98.176.71:6893 udp
N/A 87.98.176.72:6893 udp
N/A 87.98.176.73:6893 udp
N/A 87.98.176.74:6893 udp
N/A 87.98.176.75:6893 udp
N/A 87.98.176.76:6893 udp
N/A 87.98.176.77:6893 udp
N/A 87.98.176.78:6893 udp
N/A 87.98.176.79:6893 udp
N/A 87.98.176.80:6893 udp
N/A 87.98.176.81:6893 udp
N/A 87.98.176.82:6893 udp
N/A 87.98.176.83:6893 udp
N/A 87.98.176.84:6893 udp
N/A 87.98.176.85:6893 udp
N/A 87.98.176.86:6893 udp
N/A 87.98.176.87:6893 udp
N/A 87.98.176.88:6893 udp
N/A 87.98.176.89:6893 udp
N/A 87.98.176.90:6893 udp
N/A 87.98.176.91:6893 udp
N/A 87.98.176.92:6893 udp
N/A 87.98.176.93:6893 udp
N/A 87.98.176.94:6893 udp
N/A 87.98.176.95:6893 udp
N/A 87.98.176.96:6893 udp
N/A 87.98.176.97:6893 udp
N/A 87.98.176.98:6893 udp
N/A 87.98.176.99:6893 udp
N/A 87.98.176.100:6893 udp
N/A 87.98.176.101:6893 udp
N/A 87.98.176.102:6893 udp
N/A 87.98.176.103:6893 udp
N/A 87.98.176.104:6893 udp
N/A 87.98.176.105:6893 udp
N/A 87.98.176.106:6893 udp
N/A 87.98.176.107:6893 udp
N/A 87.98.176.108:6893 udp
N/A 87.98.176.109:6893 udp
N/A 87.98.176.110:6893 udp
N/A 87.98.176.111:6893 udp
N/A 87.98.176.112:6893 udp
N/A 87.98.176.113:6893 udp
N/A 87.98.176.114:6893 udp
N/A 87.98.176.115:6893 udp
N/A 87.98.176.116:6893 udp
N/A 87.98.176.117:6893 udp
N/A 87.98.176.118:6893 udp
N/A 87.98.176.119:6893 udp
N/A 87.98.176.120:6893 udp
N/A 87.98.176.121:6893 udp
N/A 87.98.176.122:6893 udp
N/A 87.98.176.123:6893 udp
N/A 87.98.176.124:6893 udp
N/A 87.98.176.125:6893 udp
N/A 87.98.176.126:6893 udp
N/A 87.98.176.127:6893 udp
N/A 87.98.176.128:6893 udp
N/A 87.98.176.129:6893 udp
N/A 87.98.176.130:6893 udp
N/A 87.98.176.131:6893 udp
N/A 87.98.176.132:6893 udp
N/A 87.98.176.133:6893 udp
N/A 87.98.176.134:6893 udp
N/A 87.98.176.135:6893 udp
N/A 87.98.176.136:6893 udp
N/A 87.98.176.137:6893 udp
N/A 87.98.176.138:6893 udp
N/A 87.98.176.139:6893 udp
N/A 87.98.176.140:6893 udp
N/A 87.98.176.141:6893 udp
N/A 87.98.176.142:6893 udp
N/A 87.98.176.143:6893 udp
N/A 87.98.176.144:6893 udp
N/A 87.98.176.145:6893 udp
N/A 87.98.176.146:6893 udp
N/A 87.98.176.147:6893 udp
N/A 87.98.176.148:6893 udp
N/A 87.98.176.149:6893 udp
N/A 87.98.176.150:6893 udp
N/A 87.98.176.151:6893 udp
N/A 87.98.176.152:6893 udp
N/A 87.98.176.153:6893 udp
N/A 87.98.176.154:6893 udp
N/A 87.98.176.155:6893 udp
N/A 87.98.176.156:6893 udp
N/A 87.98.176.157:6893 udp
N/A 87.98.176.158:6893 udp
N/A 87.98.176.159:6893 udp
N/A 87.98.176.160:6893 udp
N/A 87.98.176.161:6893 udp
N/A 87.98.176.162:6893 udp
N/A 87.98.176.163:6893 udp
N/A 87.98.176.164:6893 udp
N/A 87.98.176.165:6893 udp
N/A 87.98.176.166:6893 udp
N/A 87.98.176.167:6893 udp
N/A 87.98.176.168:6893 udp
N/A 87.98.176.169:6893 udp
N/A 87.98.176.170:6893 udp
N/A 87.98.176.171:6893 udp
N/A 87.98.176.172:6893 udp
N/A 87.98.176.173:6893 udp
N/A 87.98.176.174:6893 udp
N/A 87.98.176.175:6893 udp
N/A 87.98.176.176:6893 udp
N/A 87.98.176.177:6893 udp
N/A 87.98.176.178:6893 udp
N/A 87.98.176.179:6893 udp
N/A 87.98.176.180:6893 udp
N/A 87.98.176.181:6893 udp
N/A 87.98.176.182:6893 udp
N/A 87.98.176.183:6893 udp
N/A 87.98.176.184:6893 udp
N/A 87.98.176.185:6893 udp
N/A 87.98.176.186:6893 udp
N/A 87.98.176.187:6893 udp
N/A 87.98.176.188:6893 udp
N/A 87.98.176.189:6893 udp
N/A 87.98.176.190:6893 udp
N/A 87.98.176.191:6893 udp
N/A 87.98.176.192:6893 udp
N/A 87.98.176.193:6893 udp
N/A 87.98.176.194:6893 udp
N/A 87.98.176.195:6893 udp
N/A 87.98.176.196:6893 udp
N/A 87.98.176.197:6893 udp
N/A 87.98.176.198:6893 udp
N/A 87.98.176.199:6893 udp
N/A 87.98.176.200:6893 udp
N/A 87.98.176.201:6893 udp
N/A 87.98.176.202:6893 udp
N/A 87.98.176.203:6893 udp
N/A 87.98.176.204:6893 udp
N/A 87.98.176.205:6893 udp
N/A 87.98.176.206:6893 udp
N/A 87.98.176.207:6893 udp
N/A 87.98.176.208:6893 udp
N/A 87.98.176.209:6893 udp
N/A 87.98.176.210:6893 udp
N/A 87.98.176.211:6893 udp
N/A 87.98.176.212:6893 udp
N/A 87.98.176.213:6893 udp
N/A 87.98.176.214:6893 udp
N/A 87.98.176.215:6893 udp
N/A 87.98.176.216:6893 udp
N/A 87.98.176.217:6893 udp
N/A 87.98.176.218:6893 udp
N/A 87.98.176.219:6893 udp
N/A 87.98.176.220:6893 udp
N/A 87.98.176.221:6893 udp
N/A 87.98.176.222:6893 udp
N/A 87.98.176.223:6893 udp
N/A 87.98.176.224:6893 udp
N/A 87.98.176.225:6893 udp
N/A 87.98.176.226:6893 udp
N/A 87.98.176.227:6893 udp
N/A 87.98.176.228:6893 udp
N/A 87.98.176.229:6893 udp
N/A 87.98.176.230:6893 udp
N/A 87.98.176.231:6893 udp
N/A 87.98.176.232:6893 udp
N/A 87.98.176.233:6893 udp
N/A 87.98.176.234:6893 udp
N/A 87.98.176.235:6893 udp
N/A 87.98.176.236:6893 udp
N/A 87.98.176.237:6893 udp
N/A 87.98.176.238:6893 udp
N/A 87.98.176.239:6893 udp
N/A 87.98.176.240:6893 udp
N/A 87.98.176.241:6893 udp
N/A 87.98.176.242:6893 udp
N/A 87.98.176.243:6893 udp
N/A 87.98.176.244:6893 udp
N/A 87.98.176.245:6893 udp
N/A 87.98.176.246:6893 udp
N/A 87.98.176.247:6893 udp
N/A 87.98.176.248:6893 udp
N/A 87.98.176.249:6893 udp
N/A 87.98.176.250:6893 udp
N/A 87.98.176.251:6893 udp
N/A 87.98.176.252:6893 udp
N/A 87.98.176.253:6893 udp
N/A 87.98.176.254:6893 udp
N/A 87.98.176.255:6893 udp
N/A 87.98.177.0:6893 udp
N/A 87.98.177.1:6893 udp
N/A 87.98.177.2:6893 udp
N/A 87.98.177.3:6893 udp
N/A 87.98.177.4:6893 udp
N/A 87.98.177.5:6893 udp
N/A 87.98.177.6:6893 udp
N/A 87.98.177.7:6893 udp
N/A 87.98.177.8:6893 udp
N/A 87.98.177.9:6893 udp
N/A 87.98.177.10:6893 udp
N/A 87.98.177.11:6893 udp
N/A 87.98.177.12:6893 udp
N/A 87.98.177.13:6893 udp
N/A 87.98.177.14:6893 udp
N/A 87.98.177.15:6893 udp
N/A 87.98.177.16:6893 udp
N/A 87.98.177.17:6893 udp
N/A 87.98.177.18:6893 udp
N/A 87.98.177.19:6893 udp
N/A 87.98.177.20:6893 udp
N/A 87.98.177.21:6893 udp
N/A 87.98.177.22:6893 udp
N/A 87.98.177.23:6893 udp
N/A 87.98.177.24:6893 udp
N/A 87.98.177.25:6893 udp
N/A 87.98.177.26:6893 udp
N/A 87.98.177.27:6893 udp
N/A 87.98.177.28:6893 udp
N/A 87.98.177.29:6893 udp
N/A 87.98.177.30:6893 udp
N/A 87.98.177.31:6893 udp
N/A 87.98.177.32:6893 udp
N/A 87.98.177.33:6893 udp
N/A 87.98.177.34:6893 udp
N/A 87.98.177.35:6893 udp
N/A 87.98.177.36:6893 udp
N/A 87.98.177.37:6893 udp
N/A 87.98.177.38:6893 udp
N/A 87.98.177.39:6893 udp
N/A 87.98.177.40:6893 udp
N/A 87.98.177.41:6893 udp
N/A 87.98.177.42:6893 udp
N/A 87.98.177.43:6893 udp
N/A 87.98.177.44:6893 udp
N/A 87.98.177.45:6893 udp
N/A 87.98.177.46:6893 udp
N/A 87.98.177.47:6893 udp
N/A 87.98.177.48:6893 udp
N/A 87.98.177.49:6893 udp
N/A 87.98.177.50:6893 udp
N/A 87.98.177.51:6893 udp
N/A 87.98.177.52:6893 udp
N/A 87.98.177.53:6893 udp
N/A 87.98.177.54:6893 udp
N/A 87.98.177.55:6893 udp
N/A 87.98.177.56:6893 udp
N/A 87.98.177.57:6893 udp
N/A 87.98.177.58:6893 udp
N/A 87.98.177.59:6893 udp
N/A 87.98.177.60:6893 udp
N/A 87.98.177.61:6893 udp
N/A 87.98.177.62:6893 udp
N/A 87.98.177.63:6893 udp
N/A 87.98.177.64:6893 udp
N/A 87.98.177.65:6893 udp
N/A 87.98.177.66:6893 udp
N/A 87.98.177.67:6893 udp
N/A 87.98.177.68:6893 udp
N/A 87.98.177.69:6893 udp
N/A 87.98.177.70:6893 udp
N/A 87.98.177.71:6893 udp
N/A 87.98.177.72:6893 udp
N/A 87.98.177.73:6893 udp
N/A 87.98.177.74:6893 udp
N/A 87.98.177.75:6893 udp
N/A 87.98.177.76:6893 udp
N/A 87.98.177.77:6893 udp
N/A 87.98.177.78:6893 udp
N/A 87.98.177.79:6893 udp
N/A 87.98.177.80:6893 udp
N/A 87.98.177.81:6893 udp
N/A 87.98.177.82:6893 udp
N/A 87.98.177.83:6893 udp
N/A 87.98.177.84:6893 udp
N/A 87.98.177.85:6893 udp
N/A 87.98.177.86:6893 udp
N/A 87.98.177.87:6893 udp
N/A 87.98.177.88:6893 udp
N/A 87.98.177.89:6893 udp
N/A 87.98.177.90:6893 udp
N/A 87.98.177.91:6893 udp
N/A 87.98.177.92:6893 udp
N/A 87.98.177.93:6893 udp
N/A 87.98.177.94:6893 udp
N/A 87.98.177.95:6893 udp
N/A 87.98.177.96:6893 udp
N/A 87.98.177.97:6893 udp
N/A 87.98.177.98:6893 udp
N/A 87.98.177.99:6893 udp
N/A 87.98.177.100:6893 udp
N/A 87.98.177.101:6893 udp
N/A 87.98.177.102:6893 udp
N/A 87.98.177.103:6893 udp
N/A 87.98.177.104:6893 udp
N/A 87.98.177.105:6893 udp
N/A 87.98.177.106:6893 udp
N/A 87.98.177.107:6893 udp
N/A 87.98.177.108:6893 udp
N/A 87.98.177.109:6893 udp
N/A 87.98.177.110:6893 udp
N/A 87.98.177.111:6893 udp
N/A 87.98.177.112:6893 udp
N/A 87.98.177.113:6893 udp
N/A 87.98.177.114:6893 udp
N/A 87.98.177.115:6893 udp
N/A 87.98.177.116:6893 udp
N/A 87.98.177.117:6893 udp
N/A 87.98.177.118:6893 udp
N/A 87.98.177.119:6893 udp
N/A 87.98.177.120:6893 udp
N/A 87.98.177.121:6893 udp
N/A 87.98.177.122:6893 udp
N/A 87.98.177.123:6893 udp
N/A 87.98.177.124:6893 udp
N/A 87.98.177.125:6893 udp
N/A 87.98.177.126:6893 udp
N/A 87.98.177.127:6893 udp
N/A 87.98.177.128:6893 udp
N/A 87.98.177.129:6893 udp
N/A 87.98.177.130:6893 udp
N/A 87.98.177.131:6893 udp
N/A 87.98.177.132:6893 udp
N/A 87.98.177.133:6893 udp
N/A 87.98.177.134:6893 udp
N/A 87.98.177.135:6893 udp
N/A 87.98.177.136:6893 udp
N/A 87.98.177.137:6893 udp
N/A 87.98.177.138:6893 udp
N/A 87.98.177.139:6893 udp
N/A 87.98.177.140:6893 udp
N/A 87.98.177.141:6893 udp
N/A 87.98.177.142:6893 udp
N/A 87.98.177.143:6893 udp
N/A 87.98.177.144:6893 udp
N/A 87.98.177.145:6893 udp
N/A 87.98.177.146:6893 udp
N/A 87.98.177.147:6893 udp
N/A 87.98.177.148:6893 udp
N/A 87.98.177.149:6893 udp
N/A 87.98.177.150:6893 udp
N/A 87.98.177.151:6893 udp
N/A 87.98.177.152:6893 udp
N/A 87.98.177.153:6893 udp
N/A 87.98.177.154:6893 udp
N/A 87.98.177.155:6893 udp
N/A 87.98.177.156:6893 udp
N/A 87.98.177.157:6893 udp
N/A 87.98.177.158:6893 udp
N/A 87.98.177.159:6893 udp
N/A 87.98.177.160:6893 udp
N/A 87.98.177.161:6893 udp
N/A 87.98.177.162:6893 udp
N/A 87.98.177.163:6893 udp
N/A 87.98.177.164:6893 udp
N/A 87.98.177.165:6893 udp
N/A 87.98.177.166:6893 udp
N/A 87.98.177.167:6893 udp
N/A 87.98.177.168:6893 udp
N/A 87.98.177.169:6893 udp
N/A 87.98.177.170:6893 udp
N/A 87.98.177.171:6893 udp
N/A 87.98.177.172:6893 udp
N/A 87.98.177.173:6893 udp
N/A 87.98.177.174:6893 udp
N/A 87.98.177.175:6893 udp
N/A 87.98.177.176:6893 udp
N/A 87.98.177.177:6893 udp
N/A 87.98.177.178:6893 udp
N/A 87.98.177.179:6893 udp
N/A 87.98.177.180:6893 udp
N/A 87.98.177.181:6893 udp
N/A 87.98.177.182:6893 udp
N/A 87.98.177.183:6893 udp
N/A 87.98.177.184:6893 udp
N/A 87.98.177.185:6893 udp
N/A 87.98.177.186:6893 udp
N/A 87.98.177.187:6893 udp
N/A 87.98.177.188:6893 udp
N/A 87.98.177.189:6893 udp
N/A 87.98.177.190:6893 udp
N/A 87.98.177.191:6893 udp
N/A 87.98.177.192:6893 udp
N/A 87.98.177.193:6893 udp
N/A 87.98.177.194:6893 udp
N/A 87.98.177.195:6893 udp
N/A 87.98.177.196:6893 udp
N/A 87.98.177.197:6893 udp
N/A 87.98.177.198:6893 udp
N/A 87.98.177.199:6893 udp
N/A 87.98.177.200:6893 udp
N/A 87.98.177.201:6893 udp
N/A 87.98.177.202:6893 udp
N/A 87.98.177.203:6893 udp
N/A 87.98.177.204:6893 udp
N/A 87.98.177.205:6893 udp
N/A 87.98.177.206:6893 udp
N/A 87.98.177.207:6893 udp
N/A 87.98.177.208:6893 udp
N/A 87.98.177.209:6893 udp
N/A 87.98.177.210:6893 udp
N/A 87.98.177.211:6893 udp
N/A 87.98.177.212:6893 udp
N/A 87.98.177.213:6893 udp
N/A 87.98.177.214:6893 udp
N/A 87.98.177.215:6893 udp
N/A 87.98.177.216:6893 udp
N/A 87.98.177.217:6893 udp
N/A 87.98.177.218:6893 udp
N/A 87.98.177.219:6893 udp
N/A 87.98.177.220:6893 udp
N/A 87.98.177.221:6893 udp
N/A 87.98.177.222:6893 udp
N/A 87.98.177.223:6893 udp
N/A 87.98.177.224:6893 udp
N/A 87.98.177.225:6893 udp
N/A 87.98.177.226:6893 udp
N/A 87.98.177.227:6893 udp
N/A 87.98.177.228:6893 udp
N/A 87.98.177.229:6893 udp
N/A 87.98.177.230:6893 udp
N/A 87.98.177.231:6893 udp
N/A 87.98.177.232:6893 udp
N/A 87.98.177.233:6893 udp
N/A 87.98.177.234:6893 udp
N/A 87.98.177.235:6893 udp
N/A 87.98.177.236:6893 udp
N/A 87.98.177.237:6893 udp
N/A 87.98.177.238:6893 udp
N/A 87.98.177.239:6893 udp
N/A 87.98.177.240:6893 udp
N/A 87.98.177.241:6893 udp
N/A 87.98.177.242:6893 udp
N/A 87.98.177.243:6893 udp
N/A 87.98.177.244:6893 udp
N/A 87.98.177.245:6893 udp
N/A 87.98.177.246:6893 udp
N/A 87.98.177.247:6893 udp
N/A 87.98.177.248:6893 udp
N/A 87.98.177.249:6893 udp
N/A 87.98.177.250:6893 udp
N/A 87.98.177.251:6893 udp
N/A 87.98.177.252:6893 udp
N/A 87.98.177.253:6893 udp
N/A 87.98.177.254:6893 udp
N/A 87.98.177.255:6893 udp
N/A 87.98.178.0:6893 udp
N/A 87.98.178.1:6893 udp
N/A 87.98.178.2:6893 udp
N/A 87.98.178.3:6893 udp
N/A 87.98.178.4:6893 udp
N/A 87.98.178.5:6893 udp
N/A 87.98.178.6:6893 udp
N/A 87.98.178.7:6893 udp
N/A 87.98.178.8:6893 udp
N/A 87.98.178.9:6893 udp
N/A 87.98.178.10:6893 udp
N/A 87.98.178.11:6893 udp
N/A 87.98.178.12:6893 udp
N/A 87.98.178.13:6893 udp
N/A 87.98.178.14:6893 udp
N/A 87.98.178.15:6893 udp
N/A 87.98.178.16:6893 udp
N/A 87.98.178.17:6893 udp
N/A 87.98.178.18:6893 udp
N/A 87.98.178.19:6893 udp
N/A 87.98.178.20:6893 udp
N/A 87.98.178.21:6893 udp
N/A 87.98.178.22:6893 udp
N/A 87.98.178.23:6893 udp
N/A 87.98.178.24:6893 udp
N/A 87.98.178.25:6893 udp
N/A 87.98.178.26:6893 udp
N/A 87.98.178.27:6893 udp
N/A 87.98.178.28:6893 udp
N/A 87.98.178.29:6893 udp
N/A 87.98.178.30:6893 udp
N/A 87.98.178.31:6893 udp
N/A 87.98.178.32:6893 udp
N/A 87.98.178.33:6893 udp
N/A 87.98.178.34:6893 udp
N/A 87.98.178.35:6893 udp
N/A 87.98.178.36:6893 udp
N/A 87.98.178.37:6893 udp
N/A 87.98.178.38:6893 udp
N/A 87.98.178.39:6893 udp
N/A 87.98.178.40:6893 udp
N/A 87.98.178.41:6893 udp
N/A 87.98.178.42:6893 udp
N/A 87.98.178.43:6893 udp
N/A 87.98.178.44:6893 udp
N/A 87.98.178.45:6893 udp
N/A 87.98.178.46:6893 udp
N/A 87.98.178.47:6893 udp
N/A 87.98.178.48:6893 udp
N/A 87.98.178.49:6893 udp
N/A 87.98.178.50:6893 udp
N/A 87.98.178.51:6893 udp
N/A 87.98.178.52:6893 udp
N/A 87.98.178.53:6893 udp
N/A 87.98.178.54:6893 udp
N/A 87.98.178.55:6893 udp
N/A 87.98.178.56:6893 udp
N/A 87.98.178.57:6893 udp
N/A 87.98.178.58:6893 udp
N/A 87.98.178.59:6893 udp
N/A 87.98.178.60:6893 udp
N/A 87.98.178.61:6893 udp
N/A 87.98.178.62:6893 udp
N/A 87.98.178.63:6893 udp
N/A 87.98.178.64:6893 udp
N/A 87.98.178.65:6893 udp
N/A 87.98.178.66:6893 udp
N/A 87.98.178.67:6893 udp
N/A 87.98.178.68:6893 udp
N/A 87.98.178.69:6893 udp
N/A 87.98.178.70:6893 udp
N/A 87.98.178.71:6893 udp
N/A 87.98.178.72:6893 udp
N/A 87.98.178.73:6893 udp
N/A 87.98.178.74:6893 udp
N/A 87.98.178.75:6893 udp
N/A 87.98.178.76:6893 udp
N/A 87.98.178.77:6893 udp
N/A 87.98.178.78:6893 udp
N/A 87.98.178.79:6893 udp
N/A 87.98.178.80:6893 udp
N/A 87.98.178.81:6893 udp
N/A 87.98.178.82:6893 udp
N/A 87.98.178.83:6893 udp
N/A 87.98.178.84:6893 udp
N/A 87.98.178.85:6893 udp
N/A 87.98.178.86:6893 udp
N/A 87.98.178.87:6893 udp
N/A 87.98.178.88:6893 udp
N/A 87.98.178.89:6893 udp
N/A 87.98.178.90:6893 udp
N/A 87.98.178.91:6893 udp
N/A 87.98.178.92:6893 udp
N/A 87.98.178.93:6893 udp
N/A 87.98.178.94:6893 udp
N/A 87.98.178.95:6893 udp
N/A 87.98.178.96:6893 udp
N/A 87.98.178.97:6893 udp
N/A 87.98.178.98:6893 udp
N/A 87.98.178.99:6893 udp
N/A 87.98.178.100:6893 udp
N/A 87.98.178.101:6893 udp
N/A 87.98.178.102:6893 udp
N/A 87.98.178.103:6893 udp
N/A 87.98.178.104:6893 udp
N/A 87.98.178.105:6893 udp
N/A 87.98.178.106:6893 udp
N/A 87.98.178.107:6893 udp
N/A 87.98.178.108:6893 udp
N/A 87.98.178.109:6893 udp
N/A 87.98.178.110:6893 udp
N/A 87.98.178.111:6893 udp
N/A 87.98.178.112:6893 udp
N/A 87.98.178.113:6893 udp
N/A 87.98.178.114:6893 udp
N/A 87.98.178.115:6893 udp
N/A 87.98.178.116:6893 udp
N/A 87.98.178.117:6893 udp
N/A 87.98.178.118:6893 udp
N/A 87.98.178.119:6893 udp
N/A 87.98.178.120:6893 udp
N/A 87.98.178.121:6893 udp
N/A 87.98.178.122:6893 udp
N/A 87.98.178.123:6893 udp
N/A 87.98.178.124:6893 udp
N/A 87.98.178.125:6893 udp
N/A 87.98.178.126:6893 udp
N/A 87.98.178.127:6893 udp
N/A 87.98.178.128:6893 udp
N/A 87.98.178.129:6893 udp
N/A 87.98.178.130:6893 udp
N/A 87.98.178.131:6893 udp
N/A 87.98.178.132:6893 udp
N/A 87.98.178.133:6893 udp
N/A 87.98.178.134:6893 udp
N/A 87.98.178.135:6893 udp
N/A 87.98.178.136:6893 udp
N/A 87.98.178.137:6893 udp
N/A 87.98.178.138:6893 udp
N/A 87.98.178.139:6893 udp
N/A 87.98.178.140:6893 udp
N/A 87.98.178.141:6893 udp
N/A 87.98.178.142:6893 udp
N/A 87.98.178.143:6893 udp
N/A 87.98.178.144:6893 udp
N/A 87.98.178.145:6893 udp
N/A 87.98.178.146:6893 udp
N/A 87.98.178.147:6893 udp
N/A 87.98.178.148:6893 udp
N/A 87.98.178.149:6893 udp
N/A 87.98.178.150:6893 udp
N/A 87.98.178.151:6893 udp
N/A 87.98.178.152:6893 udp
N/A 87.98.178.153:6893 udp
N/A 87.98.178.154:6893 udp
N/A 87.98.178.155:6893 udp
N/A 87.98.178.156:6893 udp
N/A 87.98.178.157:6893 udp
N/A 87.98.178.158:6893 udp
N/A 87.98.178.159:6893 udp
N/A 87.98.178.160:6893 udp
N/A 87.98.178.161:6893 udp
N/A 87.98.178.162:6893 udp
N/A 87.98.178.163:6893 udp
N/A 87.98.178.164:6893 udp
N/A 87.98.178.165:6893 udp
N/A 87.98.178.166:6893 udp
N/A 87.98.178.167:6893 udp
N/A 87.98.178.168:6893 udp
N/A 87.98.178.169:6893 udp
N/A 87.98.178.170:6893 udp
N/A 87.98.178.171:6893 udp
N/A 87.98.178.172:6893 udp
N/A 87.98.178.173:6893 udp
N/A 87.98.178.174:6893 udp
N/A 87.98.178.175:6893 udp
N/A 87.98.178.176:6893 udp
N/A 87.98.178.177:6893 udp
N/A 87.98.178.178:6893 udp
N/A 87.98.178.179:6893 udp
N/A 87.98.178.180:6893 udp
N/A 87.98.178.181:6893 udp
N/A 87.98.178.182:6893 udp
N/A 87.98.178.183:6893 udp
N/A 87.98.178.184:6893 udp
N/A 87.98.178.185:6893 udp
N/A 87.98.178.186:6893 udp
N/A 87.98.178.187:6893 udp
N/A 87.98.178.188:6893 udp
N/A 87.98.178.189:6893 udp
N/A 87.98.178.190:6893 udp
N/A 87.98.178.191:6893 udp
N/A 87.98.178.192:6893 udp
N/A 87.98.178.193:6893 udp
N/A 87.98.178.194:6893 udp
N/A 87.98.178.195:6893 udp
N/A 87.98.178.196:6893 udp
N/A 87.98.178.197:6893 udp
N/A 87.98.178.198:6893 udp
N/A 87.98.178.199:6893 udp
N/A 87.98.178.200:6893 udp
N/A 87.98.178.201:6893 udp
N/A 87.98.178.202:6893 udp
N/A 87.98.178.203:6893 udp
N/A 87.98.178.204:6893 udp
N/A 87.98.178.205:6893 udp
N/A 87.98.178.206:6893 udp
N/A 87.98.178.207:6893 udp
N/A 87.98.178.208:6893 udp
N/A 87.98.178.209:6893 udp
N/A 87.98.178.210:6893 udp
N/A 87.98.178.211:6893 udp
N/A 87.98.178.212:6893 udp
N/A 87.98.178.213:6893 udp
N/A 87.98.178.214:6893 udp
N/A 87.98.178.215:6893 udp
N/A 87.98.178.216:6893 udp
N/A 87.98.178.217:6893 udp
N/A 87.98.178.218:6893 udp
N/A 87.98.178.219:6893 udp
N/A 87.98.178.220:6893 udp
N/A 87.98.178.221:6893 udp
N/A 87.98.178.222:6893 udp
N/A 87.98.178.223:6893 udp
N/A 87.98.178.224:6893 udp
N/A 87.98.178.225:6893 udp
N/A 87.98.178.226:6893 udp
N/A 87.98.178.227:6893 udp
N/A 87.98.178.228:6893 udp
N/A 87.98.178.229:6893 udp
N/A 87.98.178.230:6893 udp
N/A 87.98.178.231:6893 udp
N/A 87.98.178.232:6893 udp
N/A 87.98.178.233:6893 udp
N/A 87.98.178.234:6893 udp
N/A 87.98.178.235:6893 udp
N/A 87.98.178.236:6893 udp
N/A 87.98.178.237:6893 udp
N/A 87.98.178.238:6893 udp
N/A 87.98.178.239:6893 udp
N/A 87.98.178.240:6893 udp
N/A 87.98.178.241:6893 udp
N/A 87.98.178.242:6893 udp
N/A 87.98.178.243:6893 udp
N/A 87.98.178.244:6893 udp
N/A 87.98.178.245:6893 udp
N/A 87.98.178.246:6893 udp
N/A 87.98.178.247:6893 udp
N/A 87.98.178.248:6893 udp
N/A 87.98.178.249:6893 udp
N/A 87.98.178.250:6893 udp
N/A 87.98.178.251:6893 udp
N/A 87.98.178.252:6893 udp
N/A 87.98.178.253:6893 udp
N/A 87.98.178.254:6893 udp
N/A 87.98.178.255:6893 udp
N/A 87.98.179.0:6893 udp
N/A 87.98.179.1:6893 udp
N/A 87.98.179.2:6893 udp
N/A 87.98.179.3:6893 udp
N/A 87.98.179.4:6893 udp
N/A 87.98.179.5:6893 udp
N/A 87.98.179.6:6893 udp
N/A 87.98.179.7:6893 udp
N/A 87.98.179.8:6893 udp
N/A 87.98.179.9:6893 udp
N/A 87.98.179.10:6893 udp
N/A 87.98.179.11:6893 udp
N/A 87.98.179.12:6893 udp
N/A 87.98.179.13:6893 udp
N/A 87.98.179.14:6893 udp
N/A 87.98.179.15:6893 udp
N/A 87.98.179.16:6893 udp
N/A 87.98.179.17:6893 udp
N/A 87.98.179.18:6893 udp
N/A 87.98.179.19:6893 udp
N/A 87.98.179.20:6893 udp
N/A 87.98.179.21:6893 udp
N/A 87.98.179.22:6893 udp
N/A 87.98.179.23:6893 udp
N/A 87.98.179.24:6893 udp
N/A 87.98.179.25:6893 udp
N/A 87.98.179.26:6893 udp
N/A 87.98.179.27:6893 udp
N/A 87.98.179.28:6893 udp
N/A 87.98.179.29:6893 udp
N/A 87.98.179.30:6893 udp
N/A 87.98.179.31:6893 udp
N/A 87.98.179.32:6893 udp
N/A 87.98.179.33:6893 udp
N/A 87.98.179.34:6893 udp
N/A 87.98.179.35:6893 udp
N/A 87.98.179.36:6893 udp
N/A 87.98.179.37:6893 udp
N/A 87.98.179.38:6893 udp
N/A 87.98.179.39:6893 udp
N/A 87.98.179.40:6893 udp
N/A 87.98.179.41:6893 udp
N/A 87.98.179.42:6893 udp
N/A 87.98.179.43:6893 udp
N/A 87.98.179.44:6893 udp
N/A 87.98.179.45:6893 udp
N/A 87.98.179.46:6893 udp
N/A 87.98.179.47:6893 udp
N/A 87.98.179.48:6893 udp
N/A 87.98.179.49:6893 udp
N/A 87.98.179.50:6893 udp
N/A 87.98.179.51:6893 udp
N/A 87.98.179.52:6893 udp
N/A 87.98.179.53:6893 udp
N/A 87.98.179.54:6893 udp
N/A 87.98.179.55:6893 udp
N/A 87.98.179.56:6893 udp
N/A 87.98.179.57:6893 udp
N/A 87.98.179.58:6893 udp
N/A 87.98.179.59:6893 udp
N/A 87.98.179.60:6893 udp
N/A 87.98.179.61:6893 udp
N/A 87.98.179.62:6893 udp
N/A 87.98.179.63:6893 udp
N/A 87.98.179.64:6893 udp
N/A 87.98.179.65:6893 udp
N/A 87.98.179.66:6893 udp
N/A 87.98.179.67:6893 udp
N/A 87.98.179.68:6893 udp
N/A 87.98.179.69:6893 udp
N/A 87.98.179.70:6893 udp
N/A 87.98.179.71:6893 udp
N/A 87.98.179.72:6893 udp
N/A 87.98.179.73:6893 udp
N/A 87.98.179.74:6893 udp
N/A 87.98.179.75:6893 udp
N/A 87.98.179.76:6893 udp
N/A 87.98.179.77:6893 udp
N/A 87.98.179.78:6893 udp
N/A 87.98.179.79:6893 udp
N/A 87.98.179.80:6893 udp
N/A 87.98.179.81:6893 udp
N/A 87.98.179.82:6893 udp
N/A 87.98.179.83:6893 udp
N/A 87.98.179.84:6893 udp
N/A 87.98.179.85:6893 udp
N/A 87.98.179.86:6893 udp
N/A 87.98.179.87:6893 udp
N/A 87.98.179.88:6893 udp
N/A 87.98.179.89:6893 udp
N/A 87.98.179.90:6893 udp
N/A 87.98.179.91:6893 udp
N/A 87.98.179.92:6893 udp
N/A 87.98.179.93:6893 udp
N/A 87.98.179.94:6893 udp
N/A 87.98.179.95:6893 udp
N/A 87.98.179.96:6893 udp
N/A 87.98.179.97:6893 udp
N/A 87.98.179.98:6893 udp
N/A 87.98.179.99:6893 udp
N/A 87.98.179.100:6893 udp
N/A 87.98.179.101:6893 udp
N/A 87.98.179.102:6893 udp
N/A 87.98.179.103:6893 udp
N/A 87.98.179.104:6893 udp
N/A 87.98.179.105:6893 udp
N/A 87.98.179.106:6893 udp
N/A 87.98.179.107:6893 udp
N/A 87.98.179.108:6893 udp
N/A 87.98.179.109:6893 udp
N/A 87.98.179.110:6893 udp
N/A 87.98.179.111:6893 udp
N/A 87.98.179.112:6893 udp
N/A 87.98.179.113:6893 udp
N/A 87.98.179.114:6893 udp
N/A 87.98.179.115:6893 udp
N/A 87.98.179.116:6893 udp
N/A 87.98.179.117:6893 udp
N/A 87.98.179.118:6893 udp
N/A 87.98.179.119:6893 udp
N/A 87.98.179.120:6893 udp
N/A 87.98.179.121:6893 udp
N/A 87.98.179.122:6893 udp
N/A 87.98.179.123:6893 udp
N/A 87.98.179.124:6893 udp
N/A 87.98.179.125:6893 udp
N/A 87.98.179.126:6893 udp
N/A 87.98.179.127:6893 udp
N/A 87.98.179.128:6893 udp
N/A 87.98.179.129:6893 udp
N/A 87.98.179.130:6893 udp
N/A 87.98.179.131:6893 udp
N/A 87.98.179.132:6893 udp
N/A 87.98.179.133:6893 udp
N/A 87.98.179.134:6893 udp
N/A 87.98.179.135:6893 udp
N/A 87.98.179.136:6893 udp
N/A 87.98.179.137:6893 udp
N/A 87.98.179.138:6893 udp
N/A 87.98.179.139:6893 udp
N/A 87.98.179.140:6893 udp
N/A 87.98.179.141:6893 udp
N/A 87.98.179.142:6893 udp
N/A 87.98.179.143:6893 udp
N/A 87.98.179.144:6893 udp
N/A 87.98.179.145:6893 udp
N/A 87.98.179.146:6893 udp
N/A 87.98.179.147:6893 udp
N/A 87.98.179.148:6893 udp
N/A 87.98.179.149:6893 udp
N/A 87.98.179.150:6893 udp
N/A 87.98.179.151:6893 udp
N/A 87.98.179.152:6893 udp
N/A 87.98.179.153:6893 udp
N/A 87.98.179.154:6893 udp
N/A 87.98.179.155:6893 udp
N/A 87.98.179.156:6893 udp
N/A 87.98.179.157:6893 udp
N/A 87.98.179.158:6893 udp
N/A 87.98.179.159:6893 udp
N/A 87.98.179.160:6893 udp
N/A 87.98.179.161:6893 udp
N/A 87.98.179.162:6893 udp
N/A 87.98.179.163:6893 udp
N/A 87.98.179.164:6893 udp
N/A 87.98.179.165:6893 udp
N/A 87.98.179.166:6893 udp
N/A 87.98.179.167:6893 udp
N/A 87.98.179.168:6893 udp
N/A 87.98.179.169:6893 udp
N/A 87.98.179.170:6893 udp
N/A 87.98.179.171:6893 udp
N/A 87.98.179.172:6893 udp
N/A 87.98.179.173:6893 udp
N/A 87.98.179.174:6893 udp
N/A 87.98.179.175:6893 udp
N/A 87.98.179.176:6893 udp
N/A 87.98.179.177:6893 udp
N/A 87.98.179.178:6893 udp
N/A 87.98.179.179:6893 udp
N/A 87.98.179.180:6893 udp
N/A 87.98.179.181:6893 udp
N/A 87.98.179.182:6893 udp
N/A 87.98.179.183:6893 udp
N/A 87.98.179.184:6893 udp
N/A 87.98.179.185:6893 udp
N/A 87.98.179.186:6893 udp
N/A 87.98.179.187:6893 udp
N/A 87.98.179.188:6893 udp
N/A 87.98.179.189:6893 udp
N/A 87.98.179.190:6893 udp
N/A 87.98.179.191:6893 udp
N/A 87.98.179.192:6893 udp
N/A 87.98.179.193:6893 udp
N/A 87.98.179.194:6893 udp
N/A 87.98.179.195:6893 udp
N/A 87.98.179.196:6893 udp
N/A 87.98.179.197:6893 udp
N/A 87.98.179.198:6893 udp
N/A 87.98.179.199:6893 udp
N/A 87.98.179.200:6893 udp
N/A 87.98.179.201:6893 udp
N/A 87.98.179.202:6893 udp
N/A 87.98.179.203:6893 udp
N/A 87.98.179.204:6893 udp
N/A 87.98.179.205:6893 udp
N/A 87.98.179.206:6893 udp
N/A 87.98.179.207:6893 udp
N/A 87.98.179.208:6893 udp
N/A 87.98.179.209:6893 udp
N/A 87.98.179.210:6893 udp
N/A 87.98.179.211:6893 udp
N/A 87.98.179.212:6893 udp
N/A 87.98.179.213:6893 udp
N/A 87.98.179.214:6893 udp
N/A 87.98.179.215:6893 udp
N/A 87.98.179.216:6893 udp
N/A 87.98.179.217:6893 udp
N/A 87.98.179.218:6893 udp
N/A 87.98.179.219:6893 udp
N/A 87.98.179.220:6893 udp
N/A 87.98.179.221:6893 udp
N/A 87.98.179.222:6893 udp
N/A 87.98.179.223:6893 udp
N/A 87.98.179.224:6893 udp
N/A 87.98.179.225:6893 udp
N/A 87.98.179.226:6893 udp
N/A 87.98.179.227:6893 udp
N/A 87.98.179.228:6893 udp
N/A 87.98.179.229:6893 udp
N/A 87.98.179.230:6893 udp
N/A 87.98.179.231:6893 udp
N/A 87.98.179.232:6893 udp
N/A 87.98.179.233:6893 udp
N/A 87.98.179.234:6893 udp
N/A 87.98.179.235:6893 udp
N/A 87.98.179.236:6893 udp
N/A 87.98.179.237:6893 udp
N/A 87.98.179.238:6893 udp
N/A 87.98.179.239:6893 udp
N/A 87.98.179.240:6893 udp
N/A 87.98.179.241:6893 udp
N/A 87.98.179.242:6893 udp
N/A 87.98.179.243:6893 udp
N/A 87.98.179.244:6893 udp
N/A 87.98.179.245:6893 udp
N/A 87.98.179.246:6893 udp
N/A 87.98.179.247:6893 udp
N/A 87.98.179.248:6893 udp
N/A 87.98.179.249:6893 udp
N/A 87.98.179.250:6893 udp
N/A 87.98.179.251:6893 udp
N/A 87.98.179.252:6893 udp
N/A 87.98.179.253:6893 udp
N/A 87.98.179.254:6893 udp
N/A 87.98.179.255:6893 udp
N/A 73.107.12.0:6893 udp
N/A 73.107.12.1:6893 udp
N/A 73.107.12.2:6893 udp
N/A 73.107.12.3:6893 udp
N/A 73.107.12.4:6893 udp
N/A 73.107.12.5:6893 udp
N/A 73.107.12.6:6893 udp
N/A 73.107.12.7:6893 udp
N/A 73.107.12.8:6893 udp
N/A 73.107.12.9:6893 udp
N/A 73.107.12.10:6893 udp
N/A 73.107.12.11:6893 udp
N/A 73.107.12.12:6893 udp
N/A 73.107.12.13:6893 udp
N/A 73.107.12.14:6893 udp
N/A 73.107.12.15:6893 udp
N/A 73.107.12.16:6893 udp
N/A 73.107.12.17:6893 udp
N/A 73.107.12.18:6893 udp
N/A 73.107.12.19:6893 udp
N/A 73.107.12.20:6893 udp
N/A 73.107.12.21:6893 udp
N/A 73.107.12.22:6893 udp
N/A 73.107.12.23:6893 udp
N/A 73.107.12.24:6893 udp
N/A 73.107.12.25:6893 udp
N/A 73.107.12.26:6893 udp
N/A 73.107.12.27:6893 udp
N/A 73.107.12.28:6893 udp
N/A 73.107.12.29:6893 udp
N/A 73.107.12.30:6893 udp
N/A 73.107.12.31:6893 udp
N/A 75.1.200.0:6893 udp
N/A 75.1.200.1:6893 udp
N/A 75.1.200.2:6893 udp
N/A 75.1.200.3:6893 udp
N/A 75.1.200.4:6893 udp
N/A 75.1.200.5:6893 udp
N/A 75.1.200.6:6893 udp
N/A 75.1.200.7:6893 udp
N/A 75.1.200.8:6893 udp
N/A 75.1.200.9:6893 udp
N/A 75.1.200.10:6893 udp
N/A 75.1.200.11:6893 udp
N/A 75.1.200.12:6893 udp
N/A 75.1.200.13:6893 udp
N/A 75.1.200.14:6893 udp
N/A 75.1.200.15:6893 udp
N/A 75.1.200.16:6893 udp
N/A 75.1.200.17:6893 udp
N/A 75.1.200.18:6893 udp
N/A 75.1.200.19:6893 udp
N/A 75.1.200.20:6893 udp
N/A 75.1.200.21:6893 udp
N/A 75.1.200.22:6893 udp
N/A 75.1.200.23:6893 udp
N/A 75.1.200.24:6893 udp
N/A 75.1.200.25:6893 udp
N/A 75.1.200.26:6893 udp
N/A 75.1.200.27:6893 udp
N/A 75.1.200.28:6893 udp
N/A 75.1.200.29:6893 udp
N/A 75.1.200.30:6893 udp
N/A 75.1.200.31:6893 udp
N/A 87.98.176.0:6893 udp
N/A 87.98.176.1:6893 udp
N/A 87.98.176.2:6893 udp
N/A 87.98.176.3:6893 udp
N/A 87.98.176.4:6893 udp
N/A 87.98.176.5:6893 udp
N/A 87.98.176.6:6893 udp
N/A 87.98.176.7:6893 udp
N/A 87.98.176.8:6893 udp
N/A 87.98.176.9:6893 udp
N/A 87.98.176.10:6893 udp
N/A 87.98.176.11:6893 udp
N/A 87.98.176.12:6893 udp
N/A 87.98.176.13:6893 udp
N/A 87.98.176.14:6893 udp
N/A 87.98.176.15:6893 udp
N/A 87.98.176.16:6893 udp
N/A 87.98.176.17:6893 udp
N/A 87.98.176.18:6893 udp
N/A 87.98.176.19:6893 udp
N/A 87.98.176.20:6893 udp
N/A 87.98.176.21:6893 udp
N/A 87.98.176.22:6893 udp
N/A 87.98.176.23:6893 udp
N/A 87.98.176.24:6893 udp
N/A 87.98.176.25:6893 udp
N/A 87.98.176.26:6893 udp
N/A 87.98.176.27:6893 udp
N/A 87.98.176.28:6893 udp
N/A 87.98.176.29:6893 udp
N/A 87.98.176.30:6893 udp
N/A 87.98.176.31:6893 udp
N/A 87.98.176.32:6893 udp
N/A 87.98.176.33:6893 udp
N/A 87.98.176.34:6893 udp
N/A 87.98.176.35:6893 udp
N/A 87.98.176.36:6893 udp
N/A 87.98.176.37:6893 udp
N/A 87.98.176.38:6893 udp
N/A 87.98.176.39:6893 udp
N/A 87.98.176.40:6893 udp
N/A 87.98.176.41:6893 udp
N/A 87.98.176.42:6893 udp
N/A 87.98.176.43:6893 udp
N/A 87.98.176.44:6893 udp
N/A 87.98.176.45:6893 udp
N/A 87.98.176.46:6893 udp
N/A 87.98.176.47:6893 udp
N/A 87.98.176.48:6893 udp
N/A 87.98.176.49:6893 udp
N/A 87.98.176.50:6893 udp
N/A 87.98.176.51:6893 udp
N/A 87.98.176.52:6893 udp
N/A 87.98.176.53:6893 udp
N/A 87.98.176.54:6893 udp
N/A 87.98.176.55:6893 udp
N/A 87.98.176.56:6893 udp
N/A 87.98.176.57:6893 udp
N/A 87.98.176.58:6893 udp
N/A 87.98.176.59:6893 udp
N/A 87.98.176.60:6893 udp
N/A 87.98.176.61:6893 udp
N/A 87.98.176.62:6893 udp
N/A 87.98.176.63:6893 udp
N/A 87.98.176.64:6893 udp
N/A 87.98.176.65:6893 udp
N/A 87.98.176.66:6893 udp
N/A 87.98.176.67:6893 udp
N/A 87.98.176.68:6893 udp
N/A 87.98.176.69:6893 udp
N/A 87.98.176.70:6893 udp
N/A 87.98.176.71:6893 udp
N/A 87.98.176.72:6893 udp
N/A 87.98.176.73:6893 udp
N/A 87.98.176.74:6893 udp
N/A 87.98.176.75:6893 udp
N/A 87.98.176.76:6893 udp
N/A 87.98.176.77:6893 udp
N/A 87.98.176.78:6893 udp
N/A 87.98.176.79:6893 udp
N/A 87.98.176.80:6893 udp
N/A 87.98.176.81:6893 udp
N/A 87.98.176.82:6893 udp
N/A 87.98.176.83:6893 udp
N/A 87.98.176.84:6893 udp
N/A 87.98.176.85:6893 udp
N/A 87.98.176.86:6893 udp
N/A 87.98.176.87:6893 udp
N/A 87.98.176.88:6893 udp
N/A 87.98.176.89:6893 udp
N/A 87.98.176.90:6893 udp
N/A 87.98.176.91:6893 udp
N/A 87.98.176.92:6893 udp
N/A 87.98.176.93:6893 udp
N/A 87.98.176.94:6893 udp
N/A 87.98.176.95:6893 udp
N/A 87.98.176.96:6893 udp
N/A 87.98.176.97:6893 udp
N/A 87.98.176.98:6893 udp
N/A 87.98.176.99:6893 udp
N/A 87.98.176.100:6893 udp
N/A 87.98.176.101:6893 udp
N/A 87.98.176.102:6893 udp
N/A 87.98.176.103:6893 udp
N/A 87.98.176.104:6893 udp
N/A 87.98.176.105:6893 udp
N/A 87.98.176.106:6893 udp
N/A 87.98.176.107:6893 udp
N/A 87.98.176.108:6893 udp
N/A 87.98.176.109:6893 udp
N/A 87.98.176.110:6893 udp
N/A 87.98.176.111:6893 udp
N/A 87.98.176.112:6893 udp
N/A 87.98.176.113:6893 udp
N/A 87.98.176.114:6893 udp
N/A 87.98.176.115:6893 udp
N/A 87.98.176.116:6893 udp
N/A 87.98.176.117:6893 udp
N/A 87.98.176.118:6893 udp
N/A 87.98.176.119:6893 udp
N/A 87.98.176.120:6893 udp
N/A 87.98.176.121:6893 udp
N/A 87.98.176.122:6893 udp
N/A 87.98.176.123:6893 udp
N/A 87.98.176.124:6893 udp
N/A 87.98.176.125:6893 udp
N/A 87.98.176.126:6893 udp
N/A 87.98.176.127:6893 udp
N/A 87.98.176.128:6893 udp
N/A 87.98.176.129:6893 udp
N/A 87.98.176.130:6893 udp
N/A 87.98.176.131:6893 udp
N/A 87.98.176.132:6893 udp
N/A 87.98.176.133:6893 udp
N/A 87.98.176.134:6893 udp
N/A 87.98.176.135:6893 udp
N/A 87.98.176.136:6893 udp
N/A 87.98.176.137:6893 udp
N/A 87.98.176.138:6893 udp
N/A 87.98.176.139:6893 udp
N/A 87.98.176.140:6893 udp
N/A 87.98.176.141:6893 udp
N/A 87.98.176.142:6893 udp
N/A 87.98.176.143:6893 udp
N/A 87.98.176.144:6893 udp
N/A 87.98.176.145:6893 udp
N/A 87.98.176.146:6893 udp
N/A 87.98.176.147:6893 udp
N/A 87.98.176.148:6893 udp
N/A 87.98.176.149:6893 udp
N/A 87.98.176.150:6893 udp
N/A 87.98.176.151:6893 udp
N/A 87.98.176.152:6893 udp
N/A 87.98.176.153:6893 udp
N/A 87.98.176.154:6893 udp
N/A 87.98.176.155:6893 udp
N/A 87.98.176.156:6893 udp
N/A 87.98.176.157:6893 udp
N/A 87.98.176.158:6893 udp
N/A 87.98.176.159:6893 udp
N/A 87.98.176.160:6893 udp
N/A 87.98.176.161:6893 udp
N/A 87.98.176.162:6893 udp
N/A 87.98.176.163:6893 udp
N/A 87.98.176.164:6893 udp
N/A 87.98.176.165:6893 udp
N/A 87.98.176.166:6893 udp
N/A 87.98.176.167:6893 udp
N/A 87.98.176.168:6893 udp
N/A 87.98.176.169:6893 udp
N/A 87.98.176.170:6893 udp
N/A 87.98.176.171:6893 udp
N/A 87.98.176.172:6893 udp
N/A 87.98.176.173:6893 udp
N/A 87.98.176.174:6893 udp
N/A 87.98.176.175:6893 udp
N/A 87.98.176.176:6893 udp
N/A 87.98.176.177:6893 udp
N/A 87.98.176.178:6893 udp
N/A 87.98.176.179:6893 udp
N/A 87.98.176.180:6893 udp
N/A 87.98.176.181:6893 udp
N/A 87.98.176.182:6893 udp
N/A 87.98.176.183:6893 udp
N/A 87.98.176.184:6893 udp
N/A 87.98.176.185:6893 udp
N/A 87.98.176.186:6893 udp
N/A 87.98.176.187:6893 udp
N/A 87.98.176.188:6893 udp
N/A 87.98.176.189:6893 udp
N/A 87.98.176.190:6893 udp
N/A 87.98.176.191:6893 udp
N/A 87.98.176.192:6893 udp
N/A 87.98.176.193:6893 udp
N/A 87.98.176.194:6893 udp
N/A 87.98.176.195:6893 udp
N/A 87.98.176.196:6893 udp
N/A 87.98.176.197:6893 udp
N/A 87.98.176.198:6893 udp
N/A 87.98.176.199:6893 udp
N/A 87.98.176.200:6893 udp
N/A 87.98.176.201:6893 udp
N/A 87.98.176.202:6893 udp
N/A 87.98.176.203:6893 udp
N/A 87.98.176.204:6893 udp
N/A 87.98.176.205:6893 udp
N/A 87.98.176.206:6893 udp
N/A 87.98.176.207:6893 udp
N/A 87.98.176.208:6893 udp
N/A 87.98.176.209:6893 udp
N/A 87.98.176.210:6893 udp
N/A 87.98.176.211:6893 udp
N/A 87.98.176.212:6893 udp
N/A 87.98.176.213:6893 udp
N/A 87.98.176.214:6893 udp
N/A 87.98.176.215:6893 udp
N/A 87.98.176.216:6893 udp
N/A 87.98.176.217:6893 udp
N/A 87.98.176.218:6893 udp
N/A 87.98.176.219:6893 udp
N/A 87.98.176.220:6893 udp
N/A 87.98.176.221:6893 udp
N/A 87.98.176.222:6893 udp
N/A 87.98.176.223:6893 udp
N/A 87.98.176.224:6893 udp
N/A 87.98.176.225:6893 udp
N/A 87.98.176.226:6893 udp
N/A 87.98.176.227:6893 udp
N/A 87.98.176.228:6893 udp
N/A 87.98.176.229:6893 udp
N/A 87.98.176.230:6893 udp
N/A 87.98.176.231:6893 udp
N/A 87.98.176.232:6893 udp
N/A 87.98.176.233:6893 udp
N/A 87.98.176.234:6893 udp
N/A 87.98.176.235:6893 udp
N/A 87.98.176.236:6893 udp
N/A 87.98.176.237:6893 udp
N/A 87.98.176.238:6893 udp
N/A 87.98.176.239:6893 udp
N/A 87.98.176.240:6893 udp
N/A 87.98.176.241:6893 udp
N/A 87.98.176.242:6893 udp
N/A 87.98.176.243:6893 udp
N/A 87.98.176.244:6893 udp
N/A 87.98.176.245:6893 udp
N/A 87.98.176.246:6893 udp
N/A 87.98.176.247:6893 udp
N/A 87.98.176.248:6893 udp
N/A 87.98.176.249:6893 udp
N/A 87.98.176.250:6893 udp
N/A 87.98.176.251:6893 udp
N/A 87.98.176.252:6893 udp
N/A 87.98.176.253:6893 udp
N/A 87.98.176.254:6893 udp
N/A 87.98.176.255:6893 udp
N/A 87.98.177.0:6893 udp
N/A 87.98.177.1:6893 udp
N/A 87.98.177.2:6893 udp
N/A 87.98.177.3:6893 udp
N/A 87.98.177.4:6893 udp
N/A 87.98.177.5:6893 udp
N/A 87.98.177.6:6893 udp
N/A 87.98.177.7:6893 udp
N/A 87.98.177.8:6893 udp
N/A 87.98.177.9:6893 udp
N/A 87.98.177.10:6893 udp
N/A 87.98.177.11:6893 udp
N/A 87.98.177.12:6893 udp
N/A 87.98.177.13:6893 udp
N/A 87.98.177.14:6893 udp
N/A 87.98.177.15:6893 udp
N/A 87.98.177.16:6893 udp
N/A 87.98.177.17:6893 udp
N/A 87.98.177.18:6893 udp
N/A 87.98.177.19:6893 udp
N/A 87.98.177.20:6893 udp
N/A 87.98.177.21:6893 udp
N/A 87.98.177.22:6893 udp
N/A 87.98.177.23:6893 udp
N/A 87.98.177.24:6893 udp
N/A 87.98.177.25:6893 udp
N/A 87.98.177.26:6893 udp
N/A 87.98.177.27:6893 udp
N/A 87.98.177.28:6893 udp
N/A 87.98.177.29:6893 udp
N/A 87.98.177.30:6893 udp
N/A 87.98.177.31:6893 udp
N/A 87.98.177.32:6893 udp
N/A 87.98.177.33:6893 udp
N/A 87.98.177.34:6893 udp
N/A 87.98.177.35:6893 udp
N/A 87.98.177.36:6893 udp
N/A 87.98.177.37:6893 udp
N/A 87.98.177.38:6893 udp
N/A 87.98.177.39:6893 udp
N/A 87.98.177.40:6893 udp
N/A 87.98.177.41:6893 udp
N/A 87.98.177.42:6893 udp
N/A 87.98.177.43:6893 udp
N/A 87.98.177.44:6893 udp
N/A 87.98.177.45:6893 udp
N/A 87.98.177.46:6893 udp
N/A 87.98.177.47:6893 udp
N/A 87.98.177.48:6893 udp
N/A 87.98.177.49:6893 udp
N/A 87.98.177.50:6893 udp
N/A 87.98.177.51:6893 udp
N/A 87.98.177.52:6893 udp
N/A 87.98.177.53:6893 udp
N/A 87.98.177.54:6893 udp
N/A 87.98.177.55:6893 udp
N/A 87.98.177.56:6893 udp
N/A 87.98.177.57:6893 udp
N/A 87.98.177.58:6893 udp
N/A 87.98.177.59:6893 udp
N/A 87.98.177.60:6893 udp
N/A 87.98.177.61:6893 udp
N/A 87.98.177.62:6893 udp
N/A 87.98.177.63:6893 udp
N/A 87.98.177.64:6893 udp
N/A 87.98.177.65:6893 udp
N/A 87.98.177.66:6893 udp
N/A 87.98.177.67:6893 udp
N/A 87.98.177.68:6893 udp
N/A 87.98.177.69:6893 udp
N/A 87.98.177.70:6893 udp
N/A 87.98.177.71:6893 udp
N/A 87.98.177.72:6893 udp
N/A 87.98.177.73:6893 udp
N/A 87.98.177.74:6893 udp
N/A 87.98.177.75:6893 udp
N/A 87.98.177.76:6893 udp
N/A 87.98.177.77:6893 udp
N/A 87.98.177.78:6893 udp
N/A 87.98.177.79:6893 udp
N/A 87.98.177.80:6893 udp
N/A 87.98.177.81:6893 udp
N/A 87.98.177.82:6893 udp
N/A 87.98.177.83:6893 udp
N/A 87.98.177.84:6893 udp
N/A 87.98.177.85:6893 udp
N/A 87.98.177.86:6893 udp
N/A 87.98.177.87:6893 udp
N/A 87.98.177.88:6893 udp
N/A 87.98.177.89:6893 udp
N/A 87.98.177.90:6893 udp
N/A 87.98.177.91:6893 udp
N/A 87.98.177.92:6893 udp
N/A 87.98.177.93:6893 udp
N/A 87.98.177.94:6893 udp
N/A 87.98.177.95:6893 udp
N/A 87.98.177.96:6893 udp
N/A 87.98.177.97:6893 udp
N/A 87.98.177.98:6893 udp
N/A 87.98.177.99:6893 udp
N/A 87.98.177.100:6893 udp
N/A 87.98.177.101:6893 udp
N/A 87.98.177.102:6893 udp
N/A 87.98.177.103:6893 udp
N/A 87.98.177.104:6893 udp
N/A 87.98.177.105:6893 udp
N/A 87.98.177.106:6893 udp
N/A 87.98.177.107:6893 udp
N/A 87.98.177.108:6893 udp
N/A 87.98.177.109:6893 udp
N/A 87.98.177.110:6893 udp
N/A 87.98.177.111:6893 udp
N/A 87.98.177.112:6893 udp
N/A 87.98.177.113:6893 udp
N/A 87.98.177.114:6893 udp
N/A 87.98.177.115:6893 udp
N/A 87.98.177.116:6893 udp
N/A 87.98.177.117:6893 udp
N/A 87.98.177.118:6893 udp
N/A 87.98.177.119:6893 udp
N/A 87.98.177.120:6893 udp
N/A 87.98.177.121:6893 udp
N/A 87.98.177.122:6893 udp
N/A 87.98.177.123:6893 udp
N/A 87.98.177.124:6893 udp
N/A 87.98.177.125:6893 udp
N/A 87.98.177.126:6893 udp
N/A 87.98.177.127:6893 udp
N/A 87.98.177.128:6893 udp
N/A 87.98.177.129:6893 udp
N/A 87.98.177.130:6893 udp
N/A 87.98.177.131:6893 udp
N/A 87.98.177.132:6893 udp
N/A 87.98.177.133:6893 udp
N/A 87.98.177.134:6893 udp
N/A 87.98.177.135:6893 udp
N/A 87.98.177.136:6893 udp
N/A 87.98.177.137:6893 udp
N/A 87.98.177.138:6893 udp
N/A 87.98.177.139:6893 udp
N/A 87.98.177.140:6893 udp
N/A 87.98.177.141:6893 udp
N/A 87.98.177.142:6893 udp
N/A 87.98.177.143:6893 udp
N/A 87.98.177.144:6893 udp
N/A 87.98.177.145:6893 udp
N/A 87.98.177.146:6893 udp
N/A 87.98.177.147:6893 udp
N/A 87.98.177.148:6893 udp
N/A 87.98.177.149:6893 udp
N/A 87.98.177.150:6893 udp
N/A 87.98.177.151:6893 udp
N/A 87.98.177.152:6893 udp
N/A 87.98.177.153:6893 udp
N/A 87.98.177.154:6893 udp
N/A 87.98.177.155:6893 udp
N/A 87.98.177.156:6893 udp
N/A 87.98.177.157:6893 udp
N/A 87.98.177.158:6893 udp
N/A 87.98.177.159:6893 udp
N/A 87.98.177.160:6893 udp
N/A 87.98.177.161:6893 udp
N/A 87.98.177.162:6893 udp
N/A 87.98.177.163:6893 udp
N/A 87.98.177.164:6893 udp
N/A 87.98.177.165:6893 udp
N/A 87.98.177.166:6893 udp
N/A 87.98.177.167:6893 udp
N/A 87.98.177.168:6893 udp
N/A 87.98.177.169:6893 udp
N/A 87.98.177.170:6893 udp
N/A 87.98.177.171:6893 udp
N/A 87.98.177.172:6893 udp
N/A 87.98.177.173:6893 udp
N/A 87.98.177.174:6893 udp
N/A 87.98.177.175:6893 udp
N/A 87.98.177.176:6893 udp
N/A 87.98.177.177:6893 udp
N/A 87.98.177.178:6893 udp
N/A 87.98.177.179:6893 udp
N/A 87.98.177.180:6893 udp
N/A 87.98.177.181:6893 udp
N/A 87.98.177.182:6893 udp
N/A 87.98.177.183:6893 udp
N/A 87.98.177.184:6893 udp
N/A 87.98.177.185:6893 udp
N/A 87.98.177.186:6893 udp
N/A 87.98.177.187:6893 udp
N/A 87.98.177.188:6893 udp
N/A 87.98.177.189:6893 udp
N/A 87.98.177.190:6893 udp
N/A 87.98.177.191:6893 udp
N/A 87.98.177.192:6893 udp
N/A 87.98.177.193:6893 udp
N/A 87.98.177.194:6893 udp
N/A 87.98.177.195:6893 udp
N/A 87.98.177.196:6893 udp
N/A 87.98.177.197:6893 udp
N/A 87.98.177.198:6893 udp
N/A 87.98.177.199:6893 udp
N/A 87.98.177.200:6893 udp
N/A 87.98.177.201:6893 udp
N/A 87.98.177.202:6893 udp
N/A 87.98.177.203:6893 udp
N/A 87.98.177.204:6893 udp
N/A 87.98.177.205:6893 udp
N/A 87.98.177.206:6893 udp
N/A 87.98.177.207:6893 udp
N/A 87.98.177.208:6893 udp
N/A 87.98.177.209:6893 udp
N/A 87.98.177.210:6893 udp
N/A 87.98.177.211:6893 udp
N/A 87.98.177.212:6893 udp
N/A 87.98.177.213:6893 udp
N/A 87.98.177.214:6893 udp
N/A 87.98.177.215:6893 udp
N/A 87.98.177.216:6893 udp
N/A 87.98.177.217:6893 udp
N/A 87.98.177.218:6893 udp
N/A 87.98.177.219:6893 udp
N/A 87.98.177.220:6893 udp
N/A 87.98.177.221:6893 udp
N/A 87.98.177.222:6893 udp
N/A 87.98.177.223:6893 udp
N/A 87.98.177.224:6893 udp
N/A 87.98.177.225:6893 udp
N/A 87.98.177.226:6893 udp
N/A 87.98.177.227:6893 udp
N/A 87.98.177.228:6893 udp
N/A 87.98.177.229:6893 udp
N/A 87.98.177.230:6893 udp
N/A 87.98.177.231:6893 udp
N/A 87.98.177.232:6893 udp
N/A 87.98.177.233:6893 udp
N/A 87.98.177.234:6893 udp
N/A 87.98.177.235:6893 udp
N/A 87.98.177.236:6893 udp
N/A 87.98.177.237:6893 udp
N/A 87.98.177.238:6893 udp
N/A 87.98.177.239:6893 udp
N/A 87.98.177.240:6893 udp
N/A 87.98.177.241:6893 udp
N/A 87.98.177.242:6893 udp
N/A 87.98.177.243:6893 udp
N/A 87.98.177.244:6893 udp
N/A 87.98.177.245:6893 udp
N/A 87.98.177.246:6893 udp
N/A 87.98.177.247:6893 udp
N/A 87.98.177.248:6893 udp
N/A 87.98.177.249:6893 udp
N/A 87.98.177.250:6893 udp
N/A 87.98.177.251:6893 udp
N/A 87.98.177.252:6893 udp
N/A 87.98.177.253:6893 udp
N/A 87.98.177.254:6893 udp
N/A 87.98.177.255:6893 udp
N/A 87.98.178.0:6893 udp
N/A 87.98.178.1:6893 udp
N/A 87.98.178.2:6893 udp
N/A 87.98.178.3:6893 udp
N/A 87.98.178.4:6893 udp
N/A 87.98.178.5:6893 udp
N/A 87.98.178.6:6893 udp
N/A 87.98.178.7:6893 udp
N/A 87.98.178.8:6893 udp
N/A 87.98.178.9:6893 udp
N/A 87.98.178.10:6893 udp
N/A 87.98.178.11:6893 udp
N/A 87.98.178.12:6893 udp
N/A 87.98.178.13:6893 udp
N/A 87.98.178.14:6893 udp
N/A 87.98.178.15:6893 udp
N/A 87.98.178.16:6893 udp
N/A 87.98.178.17:6893 udp
N/A 87.98.178.18:6893 udp
N/A 87.98.178.19:6893 udp
N/A 87.98.178.20:6893 udp
N/A 87.98.178.21:6893 udp
N/A 87.98.178.22:6893 udp
N/A 87.98.178.23:6893 udp
N/A 87.98.178.24:6893 udp
N/A 87.98.178.25:6893 udp
N/A 87.98.178.26:6893 udp
N/A 87.98.178.27:6893 udp
N/A 87.98.178.28:6893 udp
N/A 87.98.178.29:6893 udp
N/A 87.98.178.30:6893 udp
N/A 87.98.178.31:6893 udp
N/A 87.98.178.32:6893 udp
N/A 87.98.178.33:6893 udp
N/A 87.98.178.34:6893 udp
N/A 87.98.178.35:6893 udp
N/A 87.98.178.36:6893 udp
N/A 87.98.178.37:6893 udp
N/A 87.98.178.38:6893 udp
N/A 87.98.178.39:6893 udp
N/A 87.98.178.40:6893 udp
N/A 87.98.178.41:6893 udp
N/A 87.98.178.42:6893 udp
N/A 87.98.178.43:6893 udp
N/A 87.98.178.44:6893 udp
N/A 87.98.178.45:6893 udp
N/A 87.98.178.46:6893 udp
N/A 87.98.178.47:6893 udp
N/A 87.98.178.48:6893 udp
N/A 87.98.178.49:6893 udp
N/A 87.98.178.50:6893 udp
N/A 87.98.178.51:6893 udp
N/A 87.98.178.52:6893 udp
N/A 87.98.178.53:6893 udp
N/A 87.98.178.54:6893 udp
N/A 87.98.178.55:6893 udp
N/A 87.98.178.56:6893 udp
N/A 87.98.178.57:6893 udp
N/A 87.98.178.58:6893 udp
N/A 87.98.178.59:6893 udp
N/A 87.98.178.60:6893 udp
N/A 87.98.178.61:6893 udp
N/A 87.98.178.62:6893 udp
N/A 87.98.178.63:6893 udp
N/A 87.98.178.64:6893 udp
N/A 87.98.178.65:6893 udp
N/A 87.98.178.66:6893 udp
N/A 87.98.178.67:6893 udp
N/A 87.98.178.68:6893 udp
N/A 87.98.178.69:6893 udp
N/A 87.98.178.70:6893 udp
N/A 87.98.178.71:6893 udp
N/A 87.98.178.72:6893 udp
N/A 87.98.178.73:6893 udp
N/A 87.98.178.74:6893 udp
N/A 87.98.178.75:6893 udp
N/A 87.98.178.76:6893 udp
N/A 87.98.178.77:6893 udp
N/A 87.98.178.78:6893 udp
N/A 87.98.178.79:6893 udp
N/A 87.98.178.80:6893 udp
N/A 87.98.178.81:6893 udp
N/A 87.98.178.82:6893 udp
N/A 87.98.178.83:6893 udp
N/A 87.98.178.84:6893 udp
N/A 87.98.178.85:6893 udp
N/A 87.98.178.86:6893 udp
N/A 87.98.178.87:6893 udp
N/A 87.98.178.88:6893 udp
N/A 87.98.178.89:6893 udp
N/A 87.98.178.90:6893 udp
N/A 87.98.178.91:6893 udp
N/A 87.98.178.92:6893 udp
N/A 87.98.178.93:6893 udp
N/A 87.98.178.94:6893 udp
N/A 87.98.178.95:6893 udp
N/A 87.98.178.96:6893 udp
N/A 87.98.178.97:6893 udp
N/A 87.98.178.98:6893 udp
N/A 87.98.178.99:6893 udp
N/A 87.98.178.100:6893 udp
N/A 87.98.178.101:6893 udp
N/A 87.98.178.102:6893 udp
N/A 87.98.178.103:6893 udp
N/A 87.98.178.104:6893 udp
N/A 87.98.178.105:6893 udp
N/A 87.98.178.106:6893 udp
N/A 87.98.178.107:6893 udp
N/A 87.98.178.108:6893 udp
N/A 87.98.178.109:6893 udp
N/A 87.98.178.110:6893 udp
N/A 87.98.178.111:6893 udp
N/A 87.98.178.112:6893 udp
N/A 87.98.178.113:6893 udp
N/A 87.98.178.114:6893 udp
N/A 87.98.178.115:6893 udp
N/A 87.98.178.116:6893 udp
N/A 87.98.178.117:6893 udp
N/A 87.98.178.118:6893 udp
N/A 87.98.178.119:6893 udp
N/A 87.98.178.120:6893 udp
N/A 87.98.178.121:6893 udp
N/A 87.98.178.122:6893 udp
N/A 87.98.178.123:6893 udp
N/A 87.98.178.124:6893 udp
N/A 87.98.178.125:6893 udp
N/A 87.98.178.126:6893 udp
N/A 87.98.178.127:6893 udp
N/A 87.98.178.128:6893 udp
N/A 87.98.178.129:6893 udp
N/A 87.98.178.130:6893 udp
N/A 87.98.178.131:6893 udp
N/A 87.98.178.132:6893 udp
N/A 87.98.178.133:6893 udp
N/A 87.98.178.134:6893 udp
N/A 87.98.178.135:6893 udp
N/A 87.98.178.136:6893 udp
N/A 87.98.178.137:6893 udp
N/A 87.98.178.138:6893 udp
N/A 87.98.178.139:6893 udp
N/A 87.98.178.140:6893 udp
N/A 87.98.178.141:6893 udp
N/A 87.98.178.142:6893 udp
N/A 87.98.178.143:6893 udp
N/A 87.98.178.144:6893 udp
N/A 87.98.178.145:6893 udp
N/A 87.98.178.146:6893 udp
N/A 87.98.178.147:6893 udp
N/A 87.98.178.148:6893 udp
N/A 87.98.178.149:6893 udp
N/A 87.98.178.150:6893 udp
N/A 87.98.178.151:6893 udp
N/A 87.98.178.152:6893 udp
N/A 87.98.178.153:6893 udp
N/A 87.98.178.154:6893 udp
N/A 87.98.178.155:6893 udp
N/A 87.98.178.156:6893 udp
N/A 87.98.178.157:6893 udp
N/A 87.98.178.158:6893 udp
N/A 87.98.178.159:6893 udp
N/A 87.98.178.160:6893 udp
N/A 87.98.178.161:6893 udp
N/A 87.98.178.162:6893 udp
N/A 87.98.178.163:6893 udp
N/A 87.98.178.164:6893 udp
N/A 87.98.178.165:6893 udp
N/A 87.98.178.166:6893 udp
N/A 87.98.178.167:6893 udp
N/A 87.98.178.168:6893 udp
N/A 87.98.178.169:6893 udp
N/A 87.98.178.170:6893 udp
N/A 87.98.178.171:6893 udp
N/A 87.98.178.172:6893 udp
N/A 87.98.178.173:6893 udp
N/A 87.98.178.174:6893 udp
N/A 87.98.178.175:6893 udp
N/A 87.98.178.176:6893 udp
N/A 87.98.178.177:6893 udp
N/A 87.98.178.178:6893 udp
N/A 87.98.178.179:6893 udp
N/A 87.98.178.180:6893 udp
N/A 87.98.178.181:6893 udp
N/A 87.98.178.182:6893 udp
N/A 87.98.178.183:6893 udp
N/A 87.98.178.184:6893 udp
N/A 87.98.178.185:6893 udp
N/A 87.98.178.186:6893 udp
N/A 87.98.178.187:6893 udp
N/A 87.98.178.188:6893 udp
N/A 87.98.178.189:6893 udp
N/A 87.98.178.190:6893 udp
N/A 87.98.178.191:6893 udp
N/A 87.98.178.192:6893 udp
N/A 87.98.178.193:6893 udp
N/A 87.98.178.194:6893 udp
N/A 87.98.178.195:6893 udp
N/A 87.98.178.196:6893 udp
N/A 87.98.178.197:6893 udp
N/A 87.98.178.198:6893 udp
N/A 87.98.178.199:6893 udp
N/A 87.98.178.200:6893 udp
N/A 87.98.178.201:6893 udp
N/A 87.98.178.202:6893 udp
N/A 87.98.178.203:6893 udp
N/A 87.98.178.204:6893 udp
N/A 87.98.178.205:6893 udp
N/A 87.98.178.206:6893 udp
N/A 87.98.178.207:6893 udp
N/A 87.98.178.208:6893 udp
N/A 87.98.178.209:6893 udp
N/A 87.98.178.210:6893 udp
N/A 87.98.178.211:6893 udp
N/A 87.98.178.212:6893 udp
N/A 87.98.178.213:6893 udp
N/A 87.98.178.214:6893 udp
N/A 87.98.178.215:6893 udp
N/A 87.98.178.216:6893 udp
N/A 87.98.178.217:6893 udp
N/A 87.98.178.218:6893 udp
N/A 87.98.178.219:6893 udp
N/A 87.98.178.220:6893 udp
N/A 87.98.178.221:6893 udp
N/A 87.98.178.222:6893 udp
N/A 87.98.178.223:6893 udp
N/A 87.98.178.224:6893 udp
N/A 87.98.178.225:6893 udp
N/A 87.98.178.226:6893 udp
N/A 87.98.178.227:6893 udp
N/A 87.98.178.228:6893 udp
N/A 87.98.178.229:6893 udp
N/A 87.98.178.230:6893 udp
N/A 87.98.178.231:6893 udp
N/A 87.98.178.232:6893 udp
N/A 87.98.178.233:6893 udp
N/A 87.98.178.234:6893 udp
N/A 87.98.178.235:6893 udp
N/A 87.98.178.236:6893 udp
N/A 87.98.178.237:6893 udp
N/A 87.98.178.238:6893 udp
N/A 87.98.178.239:6893 udp
N/A 87.98.178.240:6893 udp
N/A 87.98.178.241:6893 udp
N/A 87.98.178.242:6893 udp
N/A 87.98.178.243:6893 udp
N/A 87.98.178.244:6893 udp
N/A 87.98.178.245:6893 udp
N/A 87.98.178.246:6893 udp
N/A 87.98.178.247:6893 udp
N/A 87.98.178.248:6893 udp
N/A 87.98.178.249:6893 udp
N/A 87.98.178.250:6893 udp
N/A 87.98.178.251:6893 udp
N/A 87.98.178.252:6893 udp
N/A 87.98.178.253:6893 udp
N/A 87.98.178.254:6893 udp
N/A 87.98.178.255:6893 udp
N/A 87.98.179.0:6893 udp
N/A 87.98.179.1:6893 udp
N/A 87.98.179.2:6893 udp
N/A 87.98.179.3:6893 udp
N/A 87.98.179.4:6893 udp
N/A 87.98.179.5:6893 udp
N/A 87.98.179.6:6893 udp
N/A 87.98.179.7:6893 udp
N/A 87.98.179.8:6893 udp
N/A 87.98.179.9:6893 udp
N/A 87.98.179.10:6893 udp
N/A 87.98.179.11:6893 udp
N/A 87.98.179.12:6893 udp
N/A 87.98.179.13:6893 udp
N/A 87.98.179.14:6893 udp
N/A 87.98.179.15:6893 udp
N/A 87.98.179.16:6893 udp
N/A 87.98.179.17:6893 udp
N/A 87.98.179.18:6893 udp
N/A 87.98.179.19:6893 udp
N/A 87.98.179.20:6893 udp
N/A 87.98.179.21:6893 udp
N/A 87.98.179.22:6893 udp
N/A 87.98.179.23:6893 udp
N/A 87.98.179.24:6893 udp
N/A 87.98.179.25:6893 udp
N/A 87.98.179.26:6893 udp
N/A 87.98.179.27:6893 udp
N/A 87.98.179.28:6893 udp
N/A 87.98.179.29:6893 udp
N/A 87.98.179.30:6893 udp
N/A 87.98.179.31:6893 udp
N/A 87.98.179.32:6893 udp
N/A 87.98.179.33:6893 udp
N/A 87.98.179.34:6893 udp
N/A 87.98.179.35:6893 udp
N/A 87.98.179.36:6893 udp
N/A 87.98.179.37:6893 udp
N/A 87.98.179.38:6893 udp
N/A 87.98.179.39:6893 udp
N/A 87.98.179.40:6893 udp
N/A 87.98.179.41:6893 udp
N/A 87.98.179.42:6893 udp
N/A 87.98.179.43:6893 udp
N/A 87.98.179.44:6893 udp
N/A 87.98.179.45:6893 udp
N/A 87.98.179.46:6893 udp
N/A 87.98.179.47:6893 udp
N/A 87.98.179.48:6893 udp
N/A 87.98.179.49:6893 udp
N/A 87.98.179.50:6893 udp
N/A 87.98.179.51:6893 udp
N/A 87.98.179.52:6893 udp
N/A 87.98.179.53:6893 udp
N/A 87.98.179.54:6893 udp
N/A 87.98.179.55:6893 udp
N/A 87.98.179.56:6893 udp
N/A 87.98.179.57:6893 udp
N/A 87.98.179.58:6893 udp
N/A 87.98.179.59:6893 udp
N/A 87.98.179.60:6893 udp
N/A 87.98.179.61:6893 udp
N/A 87.98.179.62:6893 udp
N/A 87.98.179.63:6893 udp
N/A 87.98.179.64:6893 udp
N/A 87.98.179.65:6893 udp
N/A 87.98.179.66:6893 udp
N/A 87.98.179.67:6893 udp
N/A 87.98.179.68:6893 udp
N/A 87.98.179.69:6893 udp
N/A 87.98.179.70:6893 udp
N/A 87.98.179.71:6893 udp
N/A 87.98.179.72:6893 udp
N/A 87.98.179.73:6893 udp
N/A 87.98.179.74:6893 udp
N/A 87.98.179.75:6893 udp
N/A 87.98.179.76:6893 udp
N/A 87.98.179.77:6893 udp
N/A 87.98.179.78:6893 udp
N/A 87.98.179.79:6893 udp
N/A 87.98.179.80:6893 udp
N/A 87.98.179.81:6893 udp
N/A 87.98.179.82:6893 udp
N/A 87.98.179.83:6893 udp
N/A 87.98.179.84:6893 udp
N/A 87.98.179.85:6893 udp
N/A 87.98.179.86:6893 udp
N/A 87.98.179.87:6893 udp
N/A 87.98.179.88:6893 udp
N/A 87.98.179.89:6893 udp
N/A 87.98.179.90:6893 udp
N/A 87.98.179.91:6893 udp
N/A 87.98.179.92:6893 udp
N/A 87.98.179.93:6893 udp
N/A 87.98.179.94:6893 udp
N/A 87.98.179.95:6893 udp
N/A 87.98.179.96:6893 udp
N/A 87.98.179.97:6893 udp
N/A 87.98.179.98:6893 udp
N/A 87.98.179.99:6893 udp
N/A 87.98.179.100:6893 udp
N/A 87.98.179.101:6893 udp
N/A 87.98.179.102:6893 udp
N/A 87.98.179.103:6893 udp
N/A 87.98.179.104:6893 udp
N/A 87.98.179.105:6893 udp
N/A 87.98.179.106:6893 udp
N/A 87.98.179.107:6893 udp
N/A 87.98.179.108:6893 udp
N/A 87.98.179.109:6893 udp
N/A 87.98.179.110:6893 udp
N/A 87.98.179.111:6893 udp
N/A 87.98.179.112:6893 udp
N/A 87.98.179.113:6893 udp
N/A 87.98.179.114:6893 udp
N/A 87.98.179.115:6893 udp
N/A 87.98.179.116:6893 udp
N/A 87.98.179.117:6893 udp
N/A 87.98.179.118:6893 udp
N/A 87.98.179.119:6893 udp
N/A 87.98.179.120:6893 udp
N/A 87.98.179.121:6893 udp
N/A 87.98.179.122:6893 udp
N/A 87.98.179.123:6893 udp
N/A 87.98.179.124:6893 udp
N/A 87.98.179.125:6893 udp
N/A 87.98.179.126:6893 udp
N/A 87.98.179.127:6893 udp
N/A 87.98.179.128:6893 udp
N/A 87.98.179.129:6893 udp
N/A 87.98.179.130:6893 udp
N/A 87.98.179.131:6893 udp
N/A 87.98.179.132:6893 udp
N/A 87.98.179.133:6893 udp
N/A 87.98.179.134:6893 udp
N/A 87.98.179.135:6893 udp
N/A 87.98.179.136:6893 udp
N/A 87.98.179.137:6893 udp
N/A 87.98.179.138:6893 udp
N/A 87.98.179.139:6893 udp
N/A 87.98.179.140:6893 udp
N/A 87.98.179.141:6893 udp
N/A 87.98.179.142:6893 udp
N/A 87.98.179.143:6893 udp
N/A 87.98.179.144:6893 udp
N/A 87.98.179.145:6893 udp
N/A 87.98.179.146:6893 udp
N/A 87.98.179.147:6893 udp
N/A 87.98.179.148:6893 udp
N/A 87.98.179.149:6893 udp
N/A 87.98.179.150:6893 udp
N/A 87.98.179.151:6893 udp
N/A 87.98.179.152:6893 udp
N/A 87.98.179.153:6893 udp
N/A 87.98.179.154:6893 udp
N/A 87.98.179.155:6893 udp
N/A 87.98.179.156:6893 udp
N/A 87.98.179.157:6893 udp
N/A 87.98.179.158:6893 udp
N/A 87.98.179.159:6893 udp
N/A 87.98.179.160:6893 udp
N/A 87.98.179.161:6893 udp
N/A 87.98.179.162:6893 udp
N/A 87.98.179.163:6893 udp
N/A 87.98.179.164:6893 udp
N/A 87.98.179.165:6893 udp
N/A 87.98.179.166:6893 udp
N/A 87.98.179.167:6893 udp
N/A 87.98.179.168:6893 udp
N/A 87.98.179.169:6893 udp
N/A 87.98.179.170:6893 udp
N/A 87.98.179.171:6893 udp
N/A 87.98.179.172:6893 udp
N/A 87.98.179.173:6893 udp
N/A 87.98.179.174:6893 udp
N/A 87.98.179.175:6893 udp
N/A 87.98.179.176:6893 udp
N/A 87.98.179.177:6893 udp
N/A 87.98.179.178:6893 udp
N/A 87.98.179.179:6893 udp
N/A 87.98.179.180:6893 udp
N/A 87.98.179.181:6893 udp
N/A 87.98.179.182:6893 udp
N/A 87.98.179.183:6893 udp
N/A 87.98.179.184:6893 udp
N/A 87.98.179.185:6893 udp
N/A 87.98.179.186:6893 udp
N/A 87.98.179.187:6893 udp
N/A 87.98.179.188:6893 udp
N/A 87.98.179.189:6893 udp
N/A 87.98.179.190:6893 udp
N/A 87.98.179.191:6893 udp
N/A 87.98.179.192:6893 udp
N/A 87.98.179.193:6893 udp
N/A 87.98.179.194:6893 udp
N/A 87.98.179.195:6893 udp
N/A 87.98.179.196:6893 udp
N/A 87.98.179.197:6893 udp
N/A 87.98.179.198:6893 udp
N/A 87.98.179.199:6893 udp
N/A 87.98.179.200:6893 udp
N/A 87.98.179.201:6893 udp
N/A 87.98.179.202:6893 udp
N/A 87.98.179.203:6893 udp
N/A 87.98.179.204:6893 udp
N/A 87.98.179.205:6893 udp
N/A 87.98.179.206:6893 udp
N/A 87.98.179.207:6893 udp
N/A 87.98.179.208:6893 udp
N/A 87.98.179.209:6893 udp
N/A 87.98.179.210:6893 udp
N/A 87.98.179.211:6893 udp
N/A 87.98.179.212:6893 udp
N/A 87.98.179.213:6893 udp
N/A 87.98.179.214:6893 udp
N/A 87.98.179.215:6893 udp
N/A 87.98.179.216:6893 udp
N/A 87.98.179.217:6893 udp
N/A 87.98.179.218:6893 udp
N/A 87.98.179.219:6893 udp
N/A 87.98.179.220:6893 udp
N/A 87.98.179.221:6893 udp
N/A 87.98.179.222:6893 udp
N/A 87.98.179.223:6893 udp
N/A 87.98.179.224:6893 udp
N/A 87.98.179.225:6893 udp
N/A 87.98.179.226:6893 udp
N/A 87.98.179.227:6893 udp
N/A 87.98.179.228:6893 udp
N/A 87.98.179.229:6893 udp
N/A 87.98.179.230:6893 udp
N/A 87.98.179.231:6893 udp
N/A 87.98.179.232:6893 udp
N/A 87.98.179.233:6893 udp
N/A 87.98.179.234:6893 udp
N/A 87.98.179.235:6893 udp
N/A 87.98.179.236:6893 udp
N/A 87.98.179.237:6893 udp
N/A 87.98.179.238:6893 udp
N/A 87.98.179.239:6893 udp
N/A 87.98.179.240:6893 udp
N/A 87.98.179.241:6893 udp
N/A 87.98.179.242:6893 udp
N/A 87.98.179.243:6893 udp
N/A 87.98.179.244:6893 udp
N/A 87.98.179.245:6893 udp
N/A 87.98.179.246:6893 udp
N/A 87.98.179.247:6893 udp
N/A 87.98.179.248:6893 udp
N/A 87.98.179.249:6893 udp
N/A 87.98.179.250:6893 udp
N/A 87.98.179.251:6893 udp
N/A 87.98.179.252:6893 udp
N/A 87.98.179.253:6893 udp
N/A 87.98.179.254:6893 udp
N/A 87.98.179.255:6893 udp
N/A 8.8.8.8:53 api.blockcypher.com udp
N/A 104.20.20.251:80 api.blockcypher.com tcp
N/A 8.8.8.8:53 qfjhpgbefuhenjp7.1bxzyr.top udp

Files

memory/1684-0-0x0000000000000000-mapping.dmp

memory/2016-1-0x0000000000000000-mapping.dmp

memory/1340-2-0x0000000000000000-mapping.dmp

memory/268-3-0x0000000000000000-mapping.dmp

memory/1368-4-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___HGIGO9_.txt

MD5 01f4d5a5f5c4c464242f9054032fb2f2
SHA1 a1c235bb7f9d237443d178126509a833fb8bd96e
SHA256 16cc7d42e98e779df97794c6dd7a58da4b614518743329090aa44e4ddb8d4a14
SHA512 4e0b8d8fc4c5c268dae5263edb8f7a057ea460e6ad4e81fdcd0469c81c60b38779c9dac3494dc1fff3af5aafb5fb3080d8bb36384849b3db9e49388aff332a81

memory/688-6-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___T2EM4PTN_.hta

MD5 b7fb813f5c66428d845f519ffed90050
SHA1 efbbcb56690ee93aea4c69c32f3e4a60fdd9916d
SHA256 096d5d9002dfb0645818368d792528f653c1d7aebdd0fd7b0a835c78d93e3339
SHA512 a7b0d4dc8384731dce842356530763d86bbd6e0efa21ccd2a46a3d92b213e3a82149fec5ee0177a2a1a7827752cfe3153e21ae5eaca5f5843ef07ceac035ebb4

memory/1712-8-0x0000000000000000-mapping.dmp

memory/1484-9-0x000007FEF7F20000-0x000007FEF819A000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2020-10-26 07:59

Reported

2020-10-26 08:06

Platform

win10

Max time kernel

111s

Max time network

115s

Command Line

"C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe"

Signatures

Cerber

ransomware cerber

Blacklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

Modifies Windows Firewall

evasion

Drops startup file

Description Indicator Process Target
File opened for modification \??\c:\users\admin\appdata\roaming\microsoft\word\startup\ C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\k: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\l: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\o: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\s: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\t: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\x: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\z: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\f: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\r: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\m: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\g: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\h: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\j: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\p: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\q: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\u: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\v: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\e: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\y: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\w: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\b: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\i: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\n: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened (read-only) \??\a: C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\documents C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\desktop C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2627584638-3284755310-3019450177-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\tmpC5B7.bmp" C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\desktop C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\desktop C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\documents C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\documents C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2627584638-3284755310-3019450177-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\NOTEPAD.EXE N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3980 wrote to memory of 2444 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\netsh.exe
PID 3980 wrote to memory of 2444 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\netsh.exe
PID 3980 wrote to memory of 2444 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\netsh.exe
PID 3980 wrote to memory of 3520 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\netsh.exe
PID 3980 wrote to memory of 3520 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\netsh.exe
PID 3980 wrote to memory of 3520 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\netsh.exe
PID 3980 wrote to memory of 68 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\mshta.exe
PID 3980 wrote to memory of 68 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\mshta.exe
PID 3980 wrote to memory of 68 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\mshta.exe
PID 3980 wrote to memory of 3932 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 3980 wrote to memory of 3932 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 3980 wrote to memory of 3932 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 3980 wrote to memory of 1768 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\cmd.exe
PID 3980 wrote to memory of 1768 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\cmd.exe
PID 3980 wrote to memory of 1768 N/A C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe C:\Windows\SysWOW64\cmd.exe
PID 1768 wrote to memory of 3252 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1768 wrote to memory of 3252 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1768 wrote to memory of 3252 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1768 wrote to memory of 2160 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1768 wrote to memory of 2160 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1768 wrote to memory of 2160 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe

"C:\Users\Admin\AppData\Local\Temp\885d65249f0289d8b7c88ff90907d94a.exe"

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall set allprofiles state on

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall reset

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___XPYQQ_.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}

C:\Windows\SysWOW64\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___VVRA5EL4_.txt

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\system32\cmd.exe" /d /c taskkill /f /im "8" > NUL & ping -n 1 127.0.0.1 > NUL & del "C" > NUL && exit

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "8"

C:\Windows\SysWOW64\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
N/A 118.7.227.42:443 tcp
N/A 52.109.88.36:443 nexusrules.officeapps.live.com tcp
N/A 73.107.12.0:6893 udp
N/A 73.107.12.1:6893 udp
N/A 73.107.12.2:6893 udp
N/A 73.107.12.3:6893 udp
N/A 73.107.12.4:6893 udp
N/A 73.107.12.5:6893 udp
N/A 73.107.12.6:6893 udp
N/A 73.107.12.7:6893 udp
N/A 73.107.12.8:6893 udp
N/A 73.107.12.9:6893 udp
N/A 73.107.12.10:6893 udp
N/A 73.107.12.11:6893 udp
N/A 73.107.12.12:6893 udp
N/A 73.107.12.13:6893 udp
N/A 73.107.12.14:6893 udp
N/A 73.107.12.15:6893 udp
N/A 73.107.12.16:6893 udp
N/A 73.107.12.17:6893 udp
N/A 73.107.12.18:6893 udp
N/A 73.107.12.19:6893 udp
N/A 73.107.12.20:6893 udp
N/A 73.107.12.21:6893 udp
N/A 73.107.12.22:6893 udp
N/A 73.107.12.23:6893 udp
N/A 73.107.12.24:6893 udp
N/A 73.107.12.25:6893 udp
N/A 73.107.12.26:6893 udp
N/A 73.107.12.27:6893 udp
N/A 73.107.12.28:6893 udp
N/A 73.107.12.29:6893 udp
N/A 73.107.12.30:6893 udp
N/A 73.107.12.31:6893 udp
N/A 75.1.200.0:6893 udp
N/A 75.1.200.1:6893 udp
N/A 75.1.200.2:6893 udp
N/A 75.1.200.3:6893 udp
N/A 75.1.200.4:6893 udp
N/A 75.1.200.5:6893 udp
N/A 75.1.200.6:6893 udp
N/A 75.1.200.7:6893 udp
N/A 75.1.200.8:6893 udp
N/A 75.1.200.9:6893 udp
N/A 75.1.200.10:6893 udp
N/A 75.1.200.11:6893 udp
N/A 75.1.200.12:6893 udp
N/A 75.1.200.13:6893 udp
N/A 75.1.200.14:6893 udp
N/A 75.1.200.15:6893 udp
N/A 75.1.200.16:6893 udp
N/A 75.1.200.17:6893 udp
N/A 75.1.200.18:6893 udp
N/A 75.1.200.19:6893 udp
N/A 75.1.200.20:6893 udp
N/A 75.1.200.21:6893 udp
N/A 75.1.200.22:6893 udp
N/A 75.1.200.23:6893 udp
N/A 75.1.200.24:6893 udp
N/A 75.1.200.25:6893 udp
N/A 75.1.200.26:6893 udp
N/A 75.1.200.27:6893 udp
N/A 75.1.200.28:6893 udp
N/A 75.1.200.29:6893 udp
N/A 75.1.200.30:6893 udp
N/A 75.1.200.31:6893 udp
N/A 87.98.176.0:6893 udp
N/A 87.98.176.1:6893 udp
N/A 87.98.176.2:6893 udp
N/A 87.98.176.3:6893 udp
N/A 87.98.176.4:6893 udp
N/A 87.98.176.5:6893 udp
N/A 87.98.176.6:6893 udp
N/A 87.98.176.7:6893 udp
N/A 87.98.176.8:6893 udp
N/A 87.98.176.9:6893 udp
N/A 87.98.176.10:6893 udp
N/A 87.98.176.11:6893 udp
N/A 87.98.176.12:6893 udp
N/A 87.98.176.13:6893 udp
N/A 87.98.176.14:6893 udp
N/A 87.98.176.15:6893 udp
N/A 87.98.176.16:6893 udp
N/A 87.98.176.17:6893 udp
N/A 87.98.176.18:6893 udp
N/A 87.98.176.19:6893 udp
N/A 87.98.176.20:6893 udp
N/A 87.98.176.21:6893 udp
N/A 87.98.176.22:6893 udp
N/A 87.98.176.23:6893 udp
N/A 87.98.176.24:6893 udp
N/A 87.98.176.25:6893 udp
N/A 87.98.176.26:6893 udp
N/A 87.98.176.27:6893 udp
N/A 87.98.176.28:6893 udp
N/A 87.98.176.29:6893 udp
N/A 87.98.176.30:6893 udp
N/A 87.98.176.31:6893 udp
N/A 87.98.176.32:6893 udp
N/A 87.98.176.33:6893 udp
N/A 87.98.176.34:6893 udp
N/A 87.98.176.35:6893 udp
N/A 87.98.176.36:6893 udp
N/A 87.98.176.37:6893 udp
N/A 87.98.176.38:6893 udp
N/A 87.98.176.39:6893 udp
N/A 87.98.176.40:6893 udp
N/A 87.98.176.41:6893 udp
N/A 87.98.176.42:6893 udp
N/A 87.98.176.43:6893 udp
N/A 87.98.176.44:6893 udp
N/A 87.98.176.45:6893 udp
N/A 87.98.176.46:6893 udp
N/A 87.98.176.47:6893 udp
N/A 87.98.176.48:6893 udp
N/A 87.98.176.49:6893 udp
N/A 87.98.176.50:6893 udp
N/A 87.98.176.51:6893 udp
N/A 87.98.176.52:6893 udp
N/A 87.98.176.53:6893 udp
N/A 87.98.176.54:6893 udp
N/A 87.98.176.55:6893 udp
N/A 87.98.176.56:6893 udp
N/A 87.98.176.57:6893 udp
N/A 87.98.176.58:6893 udp
N/A 87.98.176.59:6893 udp
N/A 87.98.176.60:6893 udp
N/A 87.98.176.61:6893 udp
N/A 87.98.176.62:6893 udp
N/A 87.98.176.63:6893 udp
N/A 87.98.176.64:6893 udp
N/A 87.98.176.65:6893 udp
N/A 87.98.176.66:6893 udp
N/A 87.98.176.67:6893 udp
N/A 87.98.176.68:6893 udp
N/A 87.98.176.69:6893 udp
N/A 87.98.176.70:6893 udp
N/A 87.98.176.71:6893 udp
N/A 87.98.176.72:6893 udp
N/A 87.98.176.73:6893 udp
N/A 87.98.176.74:6893 udp
N/A 87.98.176.75:6893 udp
N/A 87.98.176.76:6893 udp
N/A 87.98.176.77:6893 udp
N/A 87.98.176.78:6893 udp
N/A 87.98.176.79:6893 udp
N/A 87.98.176.80:6893 udp
N/A 87.98.176.81:6893 udp
N/A 87.98.176.82:6893 udp
N/A 87.98.176.83:6893 udp
N/A 87.98.176.84:6893 udp
N/A 87.98.176.85:6893 udp
N/A 87.98.176.86:6893 udp
N/A 87.98.176.87:6893 udp
N/A 87.98.176.88:6893 udp
N/A 87.98.176.89:6893 udp
N/A 87.98.176.90:6893 udp
N/A 87.98.176.91:6893 udp
N/A 87.98.176.92:6893 udp
N/A 87.98.176.93:6893 udp
N/A 87.98.176.94:6893 udp
N/A 87.98.176.95:6893 udp
N/A 87.98.176.96:6893 udp
N/A 87.98.176.97:6893 udp
N/A 87.98.176.98:6893 udp
N/A 87.98.176.99:6893 udp
N/A 87.98.176.100:6893 udp
N/A 87.98.176.101:6893 udp
N/A 87.98.176.102:6893 udp
N/A 87.98.176.103:6893 udp
N/A 87.98.176.104:6893 udp
N/A 87.98.176.105:6893 udp
N/A 87.98.176.106:6893 udp
N/A 87.98.176.107:6893 udp
N/A 87.98.176.108:6893 udp
N/A 87.98.176.109:6893 udp
N/A 87.98.176.110:6893 udp
N/A 87.98.176.111:6893 udp
N/A 87.98.176.112:6893 udp
N/A 87.98.176.113:6893 udp
N/A 87.98.176.114:6893 udp
N/A 87.98.176.115:6893 udp
N/A 87.98.176.116:6893 udp
N/A 87.98.176.117:6893 udp
N/A 87.98.176.118:6893 udp
N/A 87.98.176.119:6893 udp
N/A 87.98.176.120:6893 udp
N/A 87.98.176.121:6893 udp
N/A 87.98.176.122:6893 udp
N/A 87.98.176.123:6893 udp
N/A 87.98.176.124:6893 udp
N/A 87.98.176.125:6893 udp
N/A 87.98.176.126:6893 udp
N/A 87.98.176.127:6893 udp
N/A 87.98.176.128:6893 udp
N/A 87.98.176.129:6893 udp
N/A 87.98.176.130:6893 udp
N/A 87.98.176.131:6893 udp
N/A 87.98.176.132:6893 udp
N/A 87.98.176.133:6893 udp
N/A 87.98.176.134:6893 udp
N/A 87.98.176.135:6893 udp
N/A 87.98.176.136:6893 udp
N/A 87.98.176.137:6893 udp
N/A 87.98.176.138:6893 udp
N/A 87.98.176.139:6893 udp
N/A 87.98.176.140:6893 udp
N/A 87.98.176.141:6893 udp
N/A 87.98.176.142:6893 udp
N/A 87.98.176.143:6893 udp
N/A 87.98.176.144:6893 udp
N/A 87.98.176.145:6893 udp
N/A 87.98.176.146:6893 udp
N/A 87.98.176.147:6893 udp
N/A 87.98.176.148:6893 udp
N/A 87.98.176.149:6893 udp
N/A 87.98.176.150:6893 udp
N/A 87.98.176.151:6893 udp
N/A 87.98.176.152:6893 udp
N/A 87.98.176.153:6893 udp
N/A 87.98.176.154:6893 udp
N/A 87.98.176.155:6893 udp
N/A 87.98.176.156:6893 udp
N/A 87.98.176.157:6893 udp
N/A 87.98.176.158:6893 udp
N/A 87.98.176.159:6893 udp
N/A 87.98.176.160:6893 udp
N/A 87.98.176.161:6893 udp
N/A 87.98.176.162:6893 udp
N/A 87.98.176.163:6893 udp
N/A 87.98.176.164:6893 udp
N/A 87.98.176.165:6893 udp
N/A 87.98.176.166:6893 udp
N/A 87.98.176.167:6893 udp
N/A 87.98.176.168:6893 udp
N/A 87.98.176.169:6893 udp
N/A 87.98.176.170:6893 udp
N/A 87.98.176.171:6893 udp
N/A 87.98.176.172:6893 udp
N/A 87.98.176.173:6893 udp
N/A 87.98.176.174:6893 udp
N/A 87.98.176.175:6893 udp
N/A 87.98.176.176:6893 udp
N/A 87.98.176.177:6893 udp
N/A 87.98.176.178:6893 udp
N/A 87.98.176.179:6893 udp
N/A 87.98.176.180:6893 udp
N/A 87.98.176.181:6893 udp
N/A 87.98.176.182:6893 udp
N/A 87.98.176.183:6893 udp
N/A 87.98.176.184:6893 udp
N/A 87.98.176.185:6893 udp
N/A 87.98.176.186:6893 udp
N/A 87.98.176.187:6893 udp
N/A 87.98.176.188:6893 udp
N/A 87.98.176.189:6893 udp
N/A 87.98.176.190:6893 udp
N/A 87.98.176.191:6893 udp
N/A 87.98.176.192:6893 udp
N/A 87.98.176.193:6893 udp
N/A 87.98.176.194:6893 udp
N/A 87.98.176.195:6893 udp
N/A 87.98.176.196:6893 udp
N/A 87.98.176.197:6893 udp
N/A 87.98.176.198:6893 udp
N/A 87.98.176.199:6893 udp
N/A 87.98.176.200:6893 udp
N/A 87.98.176.201:6893 udp
N/A 87.98.176.202:6893 udp
N/A 87.98.176.203:6893 udp
N/A 87.98.176.204:6893 udp
N/A 87.98.176.205:6893 udp
N/A 87.98.176.206:6893 udp
N/A 87.98.176.207:6893 udp
N/A 87.98.176.208:6893 udp
N/A 87.98.176.209:6893 udp
N/A 87.98.176.210:6893 udp
N/A 87.98.176.211:6893 udp
N/A 87.98.176.212:6893 udp
N/A 87.98.176.213:6893 udp
N/A 87.98.176.214:6893 udp
N/A 87.98.176.215:6893 udp
N/A 87.98.176.216:6893 udp
N/A 87.98.176.217:6893 udp
N/A 87.98.176.218:6893 udp
N/A 87.98.176.219:6893 udp
N/A 87.98.176.220:6893 udp
N/A 87.98.176.221:6893 udp
N/A 87.98.176.222:6893 udp
N/A 87.98.176.223:6893 udp
N/A 87.98.176.224:6893 udp
N/A 87.98.176.225:6893 udp
N/A 87.98.176.226:6893 udp
N/A 87.98.176.227:6893 udp
N/A 87.98.176.228:6893 udp
N/A 87.98.176.229:6893 udp
N/A 87.98.176.230:6893 udp
N/A 87.98.176.231:6893 udp
N/A 87.98.176.232:6893 udp
N/A 87.98.176.233:6893 udp
N/A 87.98.176.234:6893 udp
N/A 87.98.176.235:6893 udp
N/A 87.98.176.236:6893 udp
N/A 87.98.176.237:6893 udp
N/A 87.98.176.238:6893 udp
N/A 87.98.176.239:6893 udp
N/A 87.98.176.240:6893 udp
N/A 87.98.176.241:6893 udp
N/A 87.98.176.242:6893 udp
N/A 87.98.176.243:6893 udp
N/A 87.98.176.244:6893 udp
N/A 87.98.176.245:6893 udp
N/A 87.98.176.246:6893 udp
N/A 87.98.176.247:6893 udp
N/A 87.98.176.248:6893 udp
N/A 87.98.176.249:6893 udp
N/A 87.98.176.250:6893 udp
N/A 87.98.176.251:6893 udp
N/A 87.98.176.252:6893 udp
N/A 87.98.176.253:6893 udp
N/A 87.98.176.254:6893 udp
N/A 87.98.176.255:6893 udp
N/A 87.98.177.0:6893 udp
N/A 87.98.177.1:6893 udp
N/A 87.98.177.2:6893 udp
N/A 87.98.177.3:6893 udp
N/A 87.98.177.4:6893 udp
N/A 87.98.177.5:6893 udp
N/A 87.98.177.6:6893 udp
N/A 87.98.177.7:6893 udp
N/A 87.98.177.8:6893 udp
N/A 87.98.177.9:6893 udp
N/A 87.98.177.10:6893 udp
N/A 87.98.177.11:6893 udp
N/A 87.98.177.12:6893 udp
N/A 87.98.177.13:6893 udp
N/A 87.98.177.14:6893 udp
N/A 87.98.177.15:6893 udp
N/A 87.98.177.16:6893 udp
N/A 87.98.177.17:6893 udp
N/A 87.98.177.18:6893 udp
N/A 87.98.177.19:6893 udp
N/A 87.98.177.20:6893 udp
N/A 87.98.177.21:6893 udp
N/A 87.98.177.22:6893 udp
N/A 87.98.177.23:6893 udp
N/A 87.98.177.24:6893 udp
N/A 87.98.177.25:6893 udp
N/A 87.98.177.26:6893 udp
N/A 87.98.177.27:6893 udp
N/A 87.98.177.28:6893 udp
N/A 87.98.177.29:6893 udp
N/A 87.98.177.30:6893 udp
N/A 87.98.177.31:6893 udp
N/A 87.98.177.32:6893 udp
N/A 87.98.177.33:6893 udp
N/A 87.98.177.34:6893 udp
N/A 87.98.177.35:6893 udp
N/A 87.98.177.36:6893 udp
N/A 87.98.177.37:6893 udp
N/A 87.98.177.38:6893 udp
N/A 87.98.177.39:6893 udp
N/A 87.98.177.40:6893 udp
N/A 87.98.177.41:6893 udp
N/A 87.98.177.42:6893 udp
N/A 87.98.177.43:6893 udp
N/A 87.98.177.44:6893 udp
N/A 87.98.177.45:6893 udp
N/A 87.98.177.46:6893 udp
N/A 87.98.177.47:6893 udp
N/A 87.98.177.48:6893 udp
N/A 87.98.177.49:6893 udp
N/A 87.98.177.50:6893 udp
N/A 87.98.177.51:6893 udp
N/A 87.98.177.52:6893 udp
N/A 87.98.177.53:6893 udp
N/A 87.98.177.54:6893 udp
N/A 87.98.177.55:6893 udp
N/A 87.98.177.56:6893 udp
N/A 87.98.177.57:6893 udp
N/A 87.98.177.58:6893 udp
N/A 87.98.177.59:6893 udp
N/A 87.98.177.60:6893 udp
N/A 87.98.177.61:6893 udp
N/A 87.98.177.62:6893 udp
N/A 87.98.177.63:6893 udp
N/A 87.98.177.64:6893 udp
N/A 87.98.177.65:6893 udp
N/A 87.98.177.66:6893 udp
N/A 87.98.177.67:6893 udp
N/A 87.98.177.68:6893 udp
N/A 87.98.177.69:6893 udp
N/A 87.98.177.70:6893 udp
N/A 87.98.177.71:6893 udp
N/A 87.98.177.72:6893 udp
N/A 87.98.177.73:6893 udp
N/A 87.98.177.74:6893 udp
N/A 87.98.177.75:6893 udp
N/A 87.98.177.76:6893 udp
N/A 87.98.177.77:6893 udp
N/A 87.98.177.78:6893 udp
N/A 87.98.177.79:6893 udp
N/A 87.98.177.80:6893 udp
N/A 87.98.177.81:6893 udp
N/A 87.98.177.82:6893 udp
N/A 87.98.177.83:6893 udp
N/A 87.98.177.84:6893 udp
N/A 87.98.177.85:6893 udp
N/A 87.98.177.86:6893 udp
N/A 87.98.177.87:6893 udp
N/A 87.98.177.88:6893 udp
N/A 87.98.177.89:6893 udp
N/A 87.98.177.90:6893 udp
N/A 87.98.177.91:6893 udp
N/A 87.98.177.92:6893 udp
N/A 87.98.177.93:6893 udp
N/A 87.98.177.94:6893 udp
N/A 87.98.177.95:6893 udp
N/A 87.98.177.96:6893 udp
N/A 87.98.177.97:6893 udp
N/A 87.98.177.98:6893 udp
N/A 87.98.177.99:6893 udp
N/A 87.98.177.100:6893 udp
N/A 87.98.177.101:6893 udp
N/A 87.98.177.102:6893 udp
N/A 87.98.177.103:6893 udp
N/A 87.98.177.104:6893 udp
N/A 87.98.177.105:6893 udp
N/A 87.98.177.106:6893 udp
N/A 87.98.177.107:6893 udp
N/A 87.98.177.108:6893 udp
N/A 87.98.177.109:6893 udp
N/A 87.98.177.110:6893 udp
N/A 87.98.177.111:6893 udp
N/A 87.98.177.112:6893 udp
N/A 87.98.177.113:6893 udp
N/A 87.98.177.114:6893 udp
N/A 87.98.177.115:6893 udp
N/A 87.98.177.116:6893 udp
N/A 87.98.177.117:6893 udp
N/A 87.98.177.118:6893 udp
N/A 87.98.177.119:6893 udp
N/A 87.98.177.120:6893 udp
N/A 87.98.177.121:6893 udp
N/A 87.98.177.122:6893 udp
N/A 87.98.177.123:6893 udp
N/A 87.98.177.124:6893 udp
N/A 87.98.177.125:6893 udp
N/A 87.98.177.126:6893 udp
N/A 87.98.177.127:6893 udp
N/A 87.98.177.128:6893 udp
N/A 87.98.177.129:6893 udp
N/A 87.98.177.130:6893 udp
N/A 87.98.177.131:6893 udp
N/A 87.98.177.132:6893 udp
N/A 87.98.177.133:6893 udp
N/A 87.98.177.134:6893 udp
N/A 87.98.177.135:6893 udp
N/A 87.98.177.136:6893 udp
N/A 87.98.177.137:6893 udp
N/A 87.98.177.138:6893 udp
N/A 87.98.177.139:6893 udp
N/A 87.98.177.140:6893 udp
N/A 87.98.177.141:6893 udp
N/A 87.98.177.142:6893 udp
N/A 87.98.177.143:6893 udp
N/A 87.98.177.144:6893 udp
N/A 87.98.177.145:6893 udp
N/A 87.98.177.146:6893 udp
N/A 87.98.177.147:6893 udp
N/A 87.98.177.148:6893 udp
N/A 87.98.177.149:6893 udp
N/A 87.98.177.150:6893 udp
N/A 87.98.177.151:6893 udp
N/A 87.98.177.152:6893 udp
N/A 87.98.177.153:6893 udp
N/A 87.98.177.154:6893 udp
N/A 87.98.177.155:6893 udp
N/A 87.98.177.156:6893 udp
N/A 87.98.177.157:6893 udp
N/A 87.98.177.158:6893 udp
N/A 87.98.177.159:6893 udp
N/A 87.98.177.160:6893 udp
N/A 87.98.177.161:6893 udp
N/A 87.98.177.162:6893 udp
N/A 87.98.177.163:6893 udp
N/A 87.98.177.164:6893 udp
N/A 87.98.177.165:6893 udp
N/A 87.98.177.166:6893 udp
N/A 87.98.177.167:6893 udp
N/A 87.98.177.168:6893 udp
N/A 87.98.177.169:6893 udp
N/A 87.98.177.170:6893 udp
N/A 87.98.177.171:6893 udp
N/A 87.98.177.172:6893 udp
N/A 87.98.177.173:6893 udp
N/A 87.98.177.174:6893 udp
N/A 87.98.177.175:6893 udp
N/A 87.98.177.176:6893 udp
N/A 87.98.177.177:6893 udp
N/A 87.98.177.178:6893 udp
N/A 87.98.177.179:6893 udp
N/A 87.98.177.180:6893 udp
N/A 87.98.177.181:6893 udp
N/A 87.98.177.182:6893 udp
N/A 87.98.177.183:6893 udp
N/A 87.98.177.184:6893 udp
N/A 87.98.177.185:6893 udp
N/A 87.98.177.186:6893 udp
N/A 87.98.177.187:6893 udp
N/A 87.98.177.188:6893 udp
N/A 87.98.177.189:6893 udp
N/A 87.98.177.190:6893 udp
N/A 87.98.177.191:6893 udp
N/A 87.98.177.192:6893 udp
N/A 87.98.177.193:6893 udp
N/A 87.98.177.194:6893 udp
N/A 87.98.177.195:6893 udp
N/A 87.98.177.196:6893 udp
N/A 87.98.177.197:6893 udp
N/A 87.98.177.198:6893 udp
N/A 87.98.177.199:6893 udp
N/A 87.98.177.200:6893 udp
N/A 87.98.177.201:6893 udp
N/A 87.98.177.202:6893 udp
N/A 87.98.177.203:6893 udp
N/A 87.98.177.204:6893 udp
N/A 87.98.177.205:6893 udp
N/A 87.98.177.206:6893 udp
N/A 87.98.177.207:6893 udp
N/A 87.98.177.208:6893 udp
N/A 87.98.177.209:6893 udp
N/A 87.98.177.210:6893 udp
N/A 87.98.177.211:6893 udp
N/A 87.98.177.212:6893 udp
N/A 87.98.177.213:6893 udp
N/A 87.98.177.214:6893 udp
N/A 87.98.177.215:6893 udp
N/A 87.98.177.216:6893 udp
N/A 87.98.177.217:6893 udp
N/A 87.98.177.218:6893 udp
N/A 87.98.177.219:6893 udp
N/A 87.98.177.220:6893 udp
N/A 87.98.177.221:6893 udp
N/A 87.98.177.222:6893 udp
N/A 87.98.177.223:6893 udp
N/A 87.98.177.224:6893 udp
N/A 87.98.177.225:6893 udp
N/A 87.98.177.226:6893 udp
N/A 87.98.177.227:6893 udp
N/A 87.98.177.228:6893 udp
N/A 87.98.177.229:6893 udp
N/A 87.98.177.230:6893 udp
N/A 87.98.177.231:6893 udp
N/A 87.98.177.232:6893 udp
N/A 87.98.177.233:6893 udp
N/A 87.98.177.234:6893 udp
N/A 87.98.177.235:6893 udp
N/A 87.98.177.236:6893 udp
N/A 87.98.177.237:6893 udp
N/A 87.98.177.238:6893 udp
N/A 87.98.177.239:6893 udp
N/A 87.98.177.240:6893 udp
N/A 87.98.177.241:6893 udp
N/A 87.98.177.242:6893 udp
N/A 87.98.177.243:6893 udp
N/A 87.98.177.244:6893 udp
N/A 87.98.177.245:6893 udp
N/A 87.98.177.246:6893 udp
N/A 87.98.177.247:6893 udp
N/A 87.98.177.248:6893 udp
N/A 87.98.177.249:6893 udp
N/A 87.98.177.250:6893 udp
N/A 87.98.177.251:6893 udp
N/A 87.98.177.252:6893 udp
N/A 87.98.177.253:6893 udp
N/A 87.98.177.254:6893 udp
N/A 87.98.177.255:6893 udp
N/A 87.98.178.0:6893 udp
N/A 87.98.178.1:6893 udp
N/A 87.98.178.2:6893 udp
N/A 87.98.178.3:6893 udp
N/A 87.98.178.4:6893 udp
N/A 87.98.178.5:6893 udp
N/A 87.98.178.6:6893 udp
N/A 87.98.178.7:6893 udp
N/A 87.98.178.8:6893 udp
N/A 87.98.178.9:6893 udp
N/A 87.98.178.10:6893 udp
N/A 87.98.178.11:6893 udp
N/A 87.98.178.12:6893 udp
N/A 87.98.178.13:6893 udp
N/A 87.98.178.14:6893 udp
N/A 87.98.178.15:6893 udp
N/A 87.98.178.16:6893 udp
N/A 87.98.178.17:6893 udp
N/A 87.98.178.18:6893 udp
N/A 87.98.178.19:6893 udp
N/A 87.98.178.20:6893 udp
N/A 87.98.178.21:6893 udp
N/A 87.98.178.22:6893 udp
N/A 87.98.178.23:6893 udp
N/A 87.98.178.24:6893 udp
N/A 87.98.178.25:6893 udp
N/A 87.98.178.26:6893 udp
N/A 87.98.178.27:6893 udp
N/A 87.98.178.28:6893 udp
N/A 87.98.178.29:6893 udp
N/A 87.98.178.30:6893 udp
N/A 87.98.178.31:6893 udp
N/A 87.98.178.32:6893 udp
N/A 87.98.178.33:6893 udp
N/A 87.98.178.34:6893 udp
N/A 87.98.178.35:6893 udp
N/A 87.98.178.36:6893 udp
N/A 87.98.178.37:6893 udp
N/A 87.98.178.38:6893 udp
N/A 87.98.178.39:6893 udp
N/A 87.98.178.40:6893 udp
N/A 87.98.178.41:6893 udp
N/A 87.98.178.42:6893 udp
N/A 87.98.178.43:6893 udp
N/A 87.98.178.44:6893 udp
N/A 87.98.178.45:6893 udp
N/A 87.98.178.46:6893 udp
N/A 87.98.178.47:6893 udp
N/A 87.98.178.48:6893 udp
N/A 87.98.178.49:6893 udp
N/A 87.98.178.50:6893 udp
N/A 87.98.178.51:6893 udp
N/A 87.98.178.52:6893 udp
N/A 87.98.178.53:6893 udp
N/A 87.98.178.54:6893 udp
N/A 87.98.178.55:6893 udp
N/A 87.98.178.56:6893 udp
N/A 87.98.178.57:6893 udp
N/A 87.98.178.58:6893 udp
N/A 87.98.178.59:6893 udp
N/A 87.98.178.60:6893 udp
N/A 87.98.178.61:6893 udp
N/A 87.98.178.62:6893 udp
N/A 87.98.178.63:6893 udp
N/A 87.98.178.64:6893 udp
N/A 87.98.178.65:6893 udp
N/A 87.98.178.66:6893 udp
N/A 87.98.178.67:6893 udp
N/A 87.98.178.68:6893 udp
N/A 87.98.178.69:6893 udp
N/A 87.98.178.70:6893 udp
N/A 87.98.178.71:6893 udp
N/A 87.98.178.72:6893 udp
N/A 87.98.178.73:6893 udp
N/A 87.98.178.74:6893 udp
N/A 87.98.178.75:6893 udp
N/A 87.98.178.76:6893 udp
N/A 87.98.178.77:6893 udp
N/A 87.98.178.78:6893 udp
N/A 87.98.178.79:6893 udp
N/A 87.98.178.80:6893 udp
N/A 87.98.178.81:6893 udp
N/A 87.98.178.82:6893 udp
N/A 87.98.178.83:6893 udp
N/A 87.98.178.84:6893 udp
N/A 87.98.178.85:6893 udp
N/A 87.98.178.86:6893 udp
N/A 87.98.178.87:6893 udp
N/A 87.98.178.88:6893 udp
N/A 87.98.178.89:6893 udp
N/A 87.98.178.90:6893 udp
N/A 87.98.178.91:6893 udp
N/A 87.98.178.92:6893 udp
N/A 87.98.178.93:6893 udp
N/A 87.98.178.94:6893 udp
N/A 87.98.178.95:6893 udp
N/A 87.98.178.96:6893 udp
N/A 87.98.178.97:6893 udp
N/A 87.98.178.98:6893 udp
N/A 87.98.178.99:6893 udp
N/A 87.98.178.100:6893 udp
N/A 87.98.178.101:6893 udp
N/A 87.98.178.102:6893 udp
N/A 87.98.178.103:6893 udp
N/A 87.98.178.104:6893 udp
N/A 87.98.178.105:6893 udp
N/A 87.98.178.106:6893 udp
N/A 87.98.178.107:6893 udp
N/A 87.98.178.108:6893 udp
N/A 87.98.178.109:6893 udp
N/A 87.98.178.110:6893 udp
N/A 87.98.178.111:6893 udp
N/A 87.98.178.112:6893 udp
N/A 87.98.178.113:6893 udp
N/A 87.98.178.114:6893 udp
N/A 87.98.178.115:6893 udp
N/A 87.98.178.116:6893 udp
N/A 87.98.178.117:6893 udp
N/A 87.98.178.118:6893 udp
N/A 87.98.178.119:6893 udp
N/A 87.98.178.120:6893 udp
N/A 87.98.178.121:6893 udp
N/A 87.98.178.122:6893 udp
N/A 87.98.178.123:6893 udp
N/A 87.98.178.124:6893 udp
N/A 87.98.178.125:6893 udp
N/A 87.98.178.126:6893 udp
N/A 87.98.178.127:6893 udp
N/A 87.98.178.128:6893 udp
N/A 87.98.178.129:6893 udp
N/A 87.98.178.130:6893 udp
N/A 87.98.178.131:6893 udp
N/A 87.98.178.132:6893 udp
N/A 87.98.178.133:6893 udp
N/A 87.98.178.134:6893 udp
N/A 87.98.178.135:6893 udp
N/A 87.98.178.136:6893 udp
N/A 87.98.178.137:6893 udp
N/A 87.98.178.138:6893 udp
N/A 87.98.178.139:6893 udp
N/A 87.98.178.140:6893 udp
N/A 87.98.178.141:6893 udp
N/A 87.98.178.142:6893 udp
N/A 87.98.178.143:6893 udp
N/A 87.98.178.144:6893 udp
N/A 87.98.178.145:6893 udp
N/A 87.98.178.146:6893 udp
N/A 87.98.178.147:6893 udp
N/A 87.98.178.148:6893 udp
N/A 87.98.178.149:6893 udp
N/A 87.98.178.150:6893 udp
N/A 87.98.178.151:6893 udp
N/A 87.98.178.152:6893 udp
N/A 87.98.178.153:6893 udp
N/A 87.98.178.154:6893 udp
N/A 87.98.178.155:6893 udp
N/A 87.98.178.156:6893 udp
N/A 87.98.178.157:6893 udp
N/A 87.98.178.158:6893 udp
N/A 87.98.178.159:6893 udp
N/A 87.98.178.160:6893 udp
N/A 87.98.178.161:6893 udp
N/A 87.98.178.162:6893 udp
N/A 87.98.178.163:6893 udp
N/A 87.98.178.164:6893 udp
N/A 87.98.178.165:6893 udp
N/A 87.98.178.166:6893 udp
N/A 87.98.178.167:6893 udp
N/A 87.98.178.168:6893 udp
N/A 87.98.178.169:6893 udp
N/A 87.98.178.170:6893 udp
N/A 87.98.178.171:6893 udp
N/A 87.98.178.172:6893 udp
N/A 87.98.178.173:6893 udp
N/A 87.98.178.174:6893 udp
N/A 87.98.178.175:6893 udp
N/A 87.98.178.176:6893 udp
N/A 87.98.178.177:6893 udp
N/A 87.98.178.178:6893 udp
N/A 87.98.178.179:6893 udp
N/A 87.98.178.180:6893 udp
N/A 87.98.178.181:6893 udp
N/A 87.98.178.182:6893 udp
N/A 87.98.178.183:6893 udp
N/A 87.98.178.184:6893 udp
N/A 87.98.178.185:6893 udp
N/A 87.98.178.186:6893 udp
N/A 87.98.178.187:6893 udp
N/A 87.98.178.188:6893 udp
N/A 87.98.178.189:6893 udp
N/A 87.98.178.190:6893 udp
N/A 87.98.178.191:6893 udp
N/A 87.98.178.192:6893 udp
N/A 87.98.178.193:6893 udp
N/A 87.98.178.194:6893 udp
N/A 87.98.178.195:6893 udp
N/A 87.98.178.196:6893 udp
N/A 87.98.178.197:6893 udp
N/A 87.98.178.198:6893 udp
N/A 87.98.178.199:6893 udp
N/A 87.98.178.200:6893 udp
N/A 87.98.178.201:6893 udp
N/A 87.98.178.202:6893 udp
N/A 87.98.178.203:6893 udp
N/A 87.98.178.204:6893 udp
N/A 87.98.178.205:6893 udp
N/A 87.98.178.206:6893 udp
N/A 87.98.178.207:6893 udp
N/A 87.98.178.208:6893 udp
N/A 87.98.178.209:6893 udp
N/A 87.98.178.210:6893 udp
N/A 87.98.178.211:6893 udp
N/A 87.98.178.212:6893 udp
N/A 87.98.178.213:6893 udp
N/A 87.98.178.214:6893 udp
N/A 87.98.178.215:6893 udp
N/A 87.98.178.216:6893 udp
N/A 87.98.178.217:6893 udp
N/A 87.98.178.218:6893 udp
N/A 87.98.178.219:6893 udp
N/A 87.98.178.220:6893 udp
N/A 87.98.178.221:6893 udp
N/A 87.98.178.222:6893 udp
N/A 87.98.178.223:6893 udp
N/A 87.98.178.224:6893 udp
N/A 87.98.178.225:6893 udp
N/A 87.98.178.226:6893 udp
N/A 87.98.178.227:6893 udp
N/A 87.98.178.228:6893 udp
N/A 87.98.178.229:6893 udp
N/A 87.98.178.230:6893 udp
N/A 87.98.178.231:6893 udp
N/A 87.98.178.232:6893 udp
N/A 87.98.178.233:6893 udp
N/A 87.98.178.234:6893 udp
N/A 87.98.178.235:6893 udp
N/A 87.98.178.236:6893 udp
N/A 87.98.178.237:6893 udp
N/A 87.98.178.238:6893 udp
N/A 87.98.178.239:6893 udp
N/A 87.98.178.240:6893 udp
N/A 87.98.178.241:6893 udp
N/A 87.98.178.242:6893 udp
N/A 87.98.178.243:6893 udp
N/A 87.98.178.244:6893 udp
N/A 87.98.178.245:6893 udp
N/A 87.98.178.246:6893 udp
N/A 87.98.178.247:6893 udp
N/A 87.98.178.248:6893 udp
N/A 87.98.178.249:6893 udp
N/A 87.98.178.250:6893 udp
N/A 87.98.178.251:6893 udp
N/A 87.98.178.252:6893 udp
N/A 87.98.178.253:6893 udp
N/A 87.98.178.254:6893 udp
N/A 87.98.178.255:6893 udp
N/A 87.98.179.0:6893 udp
N/A 87.98.179.1:6893 udp
N/A 87.98.179.2:6893 udp
N/A 87.98.179.3:6893 udp
N/A 87.98.179.4:6893 udp
N/A 87.98.179.5:6893 udp
N/A 87.98.179.6:6893 udp
N/A 87.98.179.7:6893 udp
N/A 87.98.179.8:6893 udp
N/A 87.98.179.9:6893 udp
N/A 87.98.179.10:6893 udp
N/A 87.98.179.11:6893 udp
N/A 87.98.179.12:6893 udp
N/A 87.98.179.13:6893 udp
N/A 87.98.179.14:6893 udp
N/A 87.98.179.15:6893 udp
N/A 87.98.179.16:6893 udp
N/A 87.98.179.17:6893 udp
N/A 87.98.179.18:6893 udp
N/A 87.98.179.19:6893 udp
N/A 87.98.179.20:6893 udp
N/A 87.98.179.21:6893 udp
N/A 87.98.179.22:6893 udp
N/A 87.98.179.23:6893 udp
N/A 87.98.179.24:6893 udp
N/A 87.98.179.25:6893 udp
N/A 87.98.179.26:6893 udp
N/A 87.98.179.27:6893 udp
N/A 87.98.179.28:6893 udp
N/A 87.98.179.29:6893 udp
N/A 87.98.179.30:6893 udp
N/A 87.98.179.31:6893 udp
N/A 87.98.179.32:6893 udp
N/A 87.98.179.33:6893 udp
N/A 87.98.179.34:6893 udp
N/A 87.98.179.35:6893 udp
N/A 87.98.179.36:6893 udp
N/A 87.98.179.37:6893 udp
N/A 87.98.179.38:6893 udp
N/A 87.98.179.39:6893 udp
N/A 87.98.179.40:6893 udp
N/A 87.98.179.41:6893 udp
N/A 87.98.179.42:6893 udp
N/A 87.98.179.43:6893 udp
N/A 87.98.179.44:6893 udp
N/A 87.98.179.45:6893 udp
N/A 87.98.179.46:6893 udp
N/A 87.98.179.47:6893 udp
N/A 87.98.179.48:6893 udp
N/A 87.98.179.49:6893 udp
N/A 87.98.179.50:6893 udp
N/A 87.98.179.51:6893 udp
N/A 87.98.179.52:6893 udp
N/A 87.98.179.53:6893 udp
N/A 87.98.179.54:6893 udp
N/A 87.98.179.55:6893 udp
N/A 87.98.179.56:6893 udp
N/A 87.98.179.57:6893 udp
N/A 87.98.179.58:6893 udp
N/A 87.98.179.59:6893 udp
N/A 87.98.179.60:6893 udp
N/A 87.98.179.61:6893 udp
N/A 87.98.179.62:6893 udp
N/A 87.98.179.63:6893 udp
N/A 87.98.179.64:6893 udp
N/A 87.98.179.65:6893 udp
N/A 87.98.179.66:6893 udp
N/A 87.98.179.67:6893 udp
N/A 87.98.179.68:6893 udp
N/A 87.98.179.69:6893 udp
N/A 87.98.179.70:6893 udp
N/A 87.98.179.71:6893 udp
N/A 87.98.179.72:6893 udp
N/A 87.98.179.73:6893 udp
N/A 87.98.179.74:6893 udp
N/A 87.98.179.75:6893 udp
N/A 87.98.179.76:6893 udp
N/A 87.98.179.77:6893 udp
N/A 87.98.179.78:6893 udp
N/A 87.98.179.79:6893 udp
N/A 87.98.179.80:6893 udp
N/A 87.98.179.81:6893 udp
N/A 87.98.179.82:6893 udp
N/A 87.98.179.83:6893 udp
N/A 87.98.179.84:6893 udp
N/A 87.98.179.85:6893 udp
N/A 87.98.179.86:6893 udp
N/A 87.98.179.87:6893 udp
N/A 87.98.179.88:6893 udp
N/A 87.98.179.89:6893 udp
N/A 87.98.179.90:6893 udp
N/A 87.98.179.91:6893 udp
N/A 87.98.179.92:6893 udp
N/A 87.98.179.93:6893 udp
N/A 87.98.179.94:6893 udp
N/A 87.98.179.95:6893 udp
N/A 87.98.179.96:6893 udp
N/A 87.98.179.97:6893 udp
N/A 87.98.179.98:6893 udp
N/A 87.98.179.99:6893 udp
N/A 87.98.179.100:6893 udp
N/A 87.98.179.101:6893 udp
N/A 87.98.179.102:6893 udp
N/A 87.98.179.103:6893 udp
N/A 87.98.179.104:6893 udp
N/A 87.98.179.105:6893 udp
N/A 87.98.179.106:6893 udp
N/A 87.98.179.107:6893 udp
N/A 87.98.179.108:6893 udp
N/A 87.98.179.109:6893 udp
N/A 87.98.179.110:6893 udp
N/A 87.98.179.111:6893 udp
N/A 87.98.179.112:6893 udp
N/A 87.98.179.113:6893 udp
N/A 87.98.179.114:6893 udp
N/A 87.98.179.115:6893 udp
N/A 87.98.179.116:6893 udp
N/A 87.98.179.117:6893 udp
N/A 87.98.179.118:6893 udp
N/A 87.98.179.119:6893 udp
N/A 87.98.179.120:6893 udp
N/A 87.98.179.121:6893 udp
N/A 87.98.179.122:6893 udp
N/A 87.98.179.123:6893 udp
N/A 87.98.179.124:6893 udp
N/A 87.98.179.125:6893 udp
N/A 87.98.179.126:6893 udp
N/A 87.98.179.127:6893 udp
N/A 87.98.179.128:6893 udp
N/A 87.98.179.129:6893 udp
N/A 87.98.179.130:6893 udp
N/A 87.98.179.131:6893 udp
N/A 87.98.179.132:6893 udp
N/A 87.98.179.133:6893 udp
N/A 87.98.179.134:6893 udp
N/A 87.98.179.135:6893 udp
N/A 87.98.179.136:6893 udp
N/A 87.98.179.137:6893 udp
N/A 87.98.179.138:6893 udp
N/A 87.98.179.139:6893 udp
N/A 87.98.179.140:6893 udp
N/A 87.98.179.141:6893 udp
N/A 87.98.179.142:6893 udp
N/A 87.98.179.143:6893 udp
N/A 87.98.179.144:6893 udp
N/A 87.98.179.145:6893 udp
N/A 87.98.179.146:6893 udp
N/A 87.98.179.147:6893 udp
N/A 87.98.179.148:6893 udp
N/A 87.98.179.149:6893 udp
N/A 87.98.179.150:6893 udp
N/A 87.98.179.151:6893 udp
N/A 87.98.179.152:6893 udp
N/A 87.98.179.153:6893 udp
N/A 87.98.179.154:6893 udp
N/A 87.98.179.155:6893 udp
N/A 87.98.179.156:6893 udp
N/A 87.98.179.157:6893 udp
N/A 87.98.179.158:6893 udp
N/A 87.98.179.159:6893 udp
N/A 87.98.179.160:6893 udp
N/A 87.98.179.161:6893 udp
N/A 87.98.179.162:6893 udp
N/A 87.98.179.163:6893 udp
N/A 87.98.179.164:6893 udp
N/A 87.98.179.165:6893 udp
N/A 87.98.179.166:6893 udp
N/A 87.98.179.167:6893 udp
N/A 87.98.179.168:6893 udp
N/A 87.98.179.169:6893 udp
N/A 87.98.179.170:6893 udp
N/A 87.98.179.171:6893 udp
N/A 87.98.179.172:6893 udp
N/A 87.98.179.173:6893 udp
N/A 87.98.179.174:6893 udp
N/A 87.98.179.175:6893 udp
N/A 87.98.179.176:6893 udp
N/A 87.98.179.177:6893 udp
N/A 87.98.179.178:6893 udp
N/A 87.98.179.179:6893 udp
N/A 87.98.179.180:6893 udp
N/A 87.98.179.181:6893 udp
N/A 87.98.179.182:6893 udp
N/A 87.98.179.183:6893 udp
N/A 87.98.179.184:6893 udp
N/A 87.98.179.185:6893 udp
N/A 87.98.179.186:6893 udp
N/A 87.98.179.187:6893 udp
N/A 87.98.179.188:6893 udp
N/A 87.98.179.189:6893 udp
N/A 87.98.179.190:6893 udp
N/A 87.98.179.191:6893 udp
N/A 87.98.179.192:6893 udp
N/A 87.98.179.193:6893 udp
N/A 87.98.179.194:6893 udp
N/A 87.98.179.195:6893 udp
N/A 87.98.179.196:6893 udp
N/A 87.98.179.197:6893 udp
N/A 87.98.179.198:6893 udp
N/A 87.98.179.199:6893 udp
N/A 87.98.179.200:6893 udp
N/A 87.98.179.201:6893 udp
N/A 87.98.179.202:6893 udp
N/A 87.98.179.203:6893 udp
N/A 87.98.179.204:6893 udp
N/A 87.98.179.205:6893 udp
N/A 87.98.179.206:6893 udp
N/A 87.98.179.207:6893 udp
N/A 87.98.179.208:6893 udp
N/A 87.98.179.209:6893 udp
N/A 87.98.179.210:6893 udp
N/A 87.98.179.211:6893 udp
N/A 87.98.179.212:6893 udp
N/A 87.98.179.213:6893 udp
N/A 87.98.179.214:6893 udp
N/A 87.98.179.215:6893 udp
N/A 87.98.179.216:6893 udp
N/A 87.98.179.217:6893 udp
N/A 87.98.179.218:6893 udp
N/A 87.98.179.219:6893 udp
N/A 87.98.179.220:6893 udp
N/A 87.98.179.221:6893 udp
N/A 87.98.179.222:6893 udp
N/A 87.98.179.223:6893 udp
N/A 87.98.179.224:6893 udp
N/A 87.98.179.225:6893 udp
N/A 87.98.179.226:6893 udp
N/A 87.98.179.227:6893 udp
N/A 87.98.179.228:6893 udp
N/A 87.98.179.229:6893 udp
N/A 87.98.179.230:6893 udp
N/A 87.98.179.231:6893 udp
N/A 87.98.179.232:6893 udp
N/A 87.98.179.233:6893 udp
N/A 87.98.179.234:6893 udp
N/A 87.98.179.235:6893 udp
N/A 87.98.179.236:6893 udp
N/A 87.98.179.237:6893 udp
N/A 87.98.179.238:6893 udp
N/A 87.98.179.239:6893 udp
N/A 87.98.179.240:6893 udp
N/A 87.98.179.241:6893 udp
N/A 87.98.179.242:6893 udp
N/A 87.98.179.243:6893 udp
N/A 87.98.179.244:6893 udp
N/A 87.98.179.245:6893 udp
N/A 87.98.179.246:6893 udp
N/A 87.98.179.247:6893 udp
N/A 87.98.179.248:6893 udp
N/A 87.98.179.249:6893 udp
N/A 87.98.179.250:6893 udp
N/A 87.98.179.251:6893 udp
N/A 87.98.179.252:6893 udp
N/A 87.98.179.253:6893 udp
N/A 87.98.179.254:6893 udp
N/A 87.98.179.255:6893 udp
N/A 73.107.12.0:6893 udp
N/A 73.107.12.1:6893 udp
N/A 73.107.12.2:6893 udp
N/A 73.107.12.3:6893 udp
N/A 73.107.12.4:6893 udp
N/A 73.107.12.5:6893 udp
N/A 73.107.12.6:6893 udp
N/A 73.107.12.7:6893 udp
N/A 73.107.12.8:6893 udp
N/A 73.107.12.9:6893 udp
N/A 73.107.12.10:6893 udp
N/A 73.107.12.11:6893 udp
N/A 73.107.12.12:6893 udp
N/A 73.107.12.13:6893 udp
N/A 73.107.12.14:6893 udp
N/A 73.107.12.15:6893 udp
N/A 73.107.12.16:6893 udp
N/A 73.107.12.17:6893 udp
N/A 73.107.12.18:6893 udp
N/A 73.107.12.19:6893 udp
N/A 73.107.12.20:6893 udp
N/A 73.107.12.21:6893 udp
N/A 73.107.12.22:6893 udp
N/A 73.107.12.23:6893 udp
N/A 73.107.12.24:6893 udp
N/A 73.107.12.25:6893 udp
N/A 73.107.12.26:6893 udp
N/A 73.107.12.27:6893 udp
N/A 73.107.12.28:6893 udp
N/A 73.107.12.29:6893 udp
N/A 73.107.12.30:6893 udp
N/A 73.107.12.31:6893 udp
N/A 75.1.200.0:6893 udp
N/A 75.1.200.1:6893 udp
N/A 75.1.200.2:6893 udp
N/A 75.1.200.3:6893 udp
N/A 75.1.200.4:6893 udp
N/A 75.1.200.5:6893 udp
N/A 75.1.200.6:6893 udp
N/A 75.1.200.7:6893 udp
N/A 75.1.200.8:6893 udp
N/A 75.1.200.9:6893 udp
N/A 75.1.200.10:6893 udp
N/A 75.1.200.11:6893 udp
N/A 75.1.200.12:6893 udp
N/A 75.1.200.13:6893 udp
N/A 75.1.200.14:6893 udp
N/A 75.1.200.15:6893 udp
N/A 75.1.200.16:6893 udp
N/A 75.1.200.17:6893 udp
N/A 75.1.200.18:6893 udp
N/A 75.1.200.19:6893 udp
N/A 75.1.200.20:6893 udp
N/A 75.1.200.21:6893 udp
N/A 75.1.200.22:6893 udp
N/A 75.1.200.23:6893 udp
N/A 75.1.200.24:6893 udp
N/A 75.1.200.25:6893 udp
N/A 75.1.200.26:6893 udp
N/A 75.1.200.27:6893 udp
N/A 75.1.200.28:6893 udp
N/A 75.1.200.29:6893 udp
N/A 75.1.200.30:6893 udp
N/A 75.1.200.31:6893 udp
N/A 87.98.176.0:6893 udp
N/A 87.98.176.1:6893 udp
N/A 87.98.176.2:6893 udp
N/A 87.98.176.3:6893 udp
N/A 87.98.176.4:6893 udp
N/A 87.98.176.5:6893 udp
N/A 87.98.176.6:6893 udp
N/A 87.98.176.7:6893 udp
N/A 87.98.176.8:6893 udp
N/A 87.98.176.9:6893 udp
N/A 87.98.176.10:6893 udp
N/A 87.98.176.11:6893 udp
N/A 87.98.176.12:6893 udp
N/A 87.98.176.13:6893 udp
N/A 87.98.176.14:6893 udp
N/A 87.98.176.15:6893 udp
N/A 87.98.176.16:6893 udp
N/A 87.98.176.17:6893 udp
N/A 87.98.176.18:6893 udp
N/A 87.98.176.19:6893 udp
N/A 87.98.176.20:6893 udp
N/A 87.98.176.21:6893 udp
N/A 87.98.176.22:6893 udp
N/A 87.98.176.23:6893 udp
N/A 87.98.176.24:6893 udp
N/A 87.98.176.25:6893 udp
N/A 87.98.176.26:6893 udp
N/A 87.98.176.27:6893 udp
N/A 87.98.176.28:6893 udp
N/A 87.98.176.29:6893 udp
N/A 87.98.176.30:6893 udp
N/A 87.98.176.31:6893 udp
N/A 87.98.176.32:6893 udp
N/A 87.98.176.33:6893 udp
N/A 87.98.176.34:6893 udp
N/A 87.98.176.35:6893 udp
N/A 87.98.176.36:6893 udp
N/A 87.98.176.37:6893 udp
N/A 87.98.176.38:6893 udp
N/A 87.98.176.39:6893 udp
N/A 87.98.176.40:6893 udp
N/A 87.98.176.41:6893 udp
N/A 87.98.176.42:6893 udp
N/A 87.98.176.43:6893 udp
N/A 87.98.176.44:6893 udp
N/A 87.98.176.45:6893 udp
N/A 87.98.176.46:6893 udp
N/A 87.98.176.47:6893 udp
N/A 87.98.176.48:6893 udp
N/A 87.98.176.49:6893 udp
N/A 87.98.176.50:6893 udp
N/A 87.98.176.51:6893 udp
N/A 87.98.176.52:6893 udp
N/A 87.98.176.53:6893 udp
N/A 87.98.176.54:6893 udp
N/A 87.98.176.55:6893 udp
N/A 87.98.176.56:6893 udp
N/A 87.98.176.57:6893 udp
N/A 87.98.176.58:6893 udp
N/A 87.98.176.59:6893 udp
N/A 87.98.176.60:6893 udp
N/A 87.98.176.61:6893 udp
N/A 87.98.176.62:6893 udp
N/A 87.98.176.63:6893 udp
N/A 87.98.176.64:6893 udp
N/A 87.98.176.65:6893 udp
N/A 87.98.176.66:6893 udp
N/A 87.98.176.67:6893 udp
N/A 87.98.176.68:6893 udp
N/A 87.98.176.69:6893 udp
N/A 87.98.176.70:6893 udp
N/A 87.98.176.71:6893 udp
N/A 87.98.176.72:6893 udp
N/A 87.98.176.73:6893 udp
N/A 87.98.176.74:6893 udp
N/A 87.98.176.75:6893 udp
N/A 87.98.176.76:6893 udp
N/A 87.98.176.77:6893 udp
N/A 87.98.176.78:6893 udp
N/A 87.98.176.79:6893 udp
N/A 87.98.176.80:6893 udp
N/A 87.98.176.81:6893 udp
N/A 87.98.176.82:6893 udp
N/A 87.98.176.83:6893 udp
N/A 87.98.176.84:6893 udp
N/A 87.98.176.85:6893 udp
N/A 87.98.176.86:6893 udp
N/A 87.98.176.87:6893 udp
N/A 87.98.176.88:6893 udp
N/A 87.98.176.89:6893 udp
N/A 87.98.176.90:6893 udp
N/A 87.98.176.91:6893 udp
N/A 87.98.176.92:6893 udp
N/A 87.98.176.93:6893 udp
N/A 87.98.176.94:6893 udp
N/A 87.98.176.95:6893 udp
N/A 87.98.176.96:6893 udp
N/A 87.98.176.97:6893 udp
N/A 87.98.176.98:6893 udp
N/A 87.98.176.99:6893 udp
N/A 87.98.176.100:6893 udp
N/A 87.98.176.101:6893 udp
N/A 87.98.176.102:6893 udp
N/A 87.98.176.103:6893 udp
N/A 87.98.176.104:6893 udp
N/A 87.98.176.105:6893 udp
N/A 87.98.176.106:6893 udp
N/A 87.98.176.107:6893 udp
N/A 87.98.176.108:6893 udp
N/A 87.98.176.109:6893 udp
N/A 87.98.176.110:6893 udp
N/A 87.98.176.111:6893 udp
N/A 87.98.176.112:6893 udp
N/A 87.98.176.113:6893 udp
N/A 87.98.176.114:6893 udp
N/A 87.98.176.115:6893 udp
N/A 87.98.176.116:6893 udp
N/A 87.98.176.117:6893 udp
N/A 87.98.176.118:6893 udp
N/A 87.98.176.119:6893 udp
N/A 87.98.176.120:6893 udp
N/A 87.98.176.121:6893 udp
N/A 87.98.176.122:6893 udp
N/A 87.98.176.123:6893 udp
N/A 87.98.176.124:6893 udp
N/A 87.98.176.125:6893 udp
N/A 87.98.176.126:6893 udp
N/A 87.98.176.127:6893 udp
N/A 87.98.176.128:6893 udp
N/A 87.98.176.129:6893 udp
N/A 87.98.176.130:6893 udp
N/A 87.98.176.131:6893 udp
N/A 87.98.176.132:6893 udp
N/A 87.98.176.133:6893 udp
N/A 87.98.176.134:6893 udp
N/A 87.98.176.135:6893 udp
N/A 87.98.176.136:6893 udp
N/A 87.98.176.137:6893 udp
N/A 87.98.176.138:6893 udp
N/A 87.98.176.139:6893 udp
N/A 87.98.176.140:6893 udp
N/A 87.98.176.141:6893 udp
N/A 87.98.176.142:6893 udp
N/A 87.98.176.143:6893 udp
N/A 87.98.176.144:6893 udp
N/A 87.98.176.145:6893 udp
N/A 87.98.176.146:6893 udp
N/A 87.98.176.147:6893 udp
N/A 87.98.176.148:6893 udp
N/A 87.98.176.149:6893 udp
N/A 87.98.176.150:6893 udp
N/A 87.98.176.151:6893 udp
N/A 87.98.176.152:6893 udp
N/A 87.98.176.153:6893 udp
N/A 87.98.176.154:6893 udp
N/A 87.98.176.155:6893 udp
N/A 87.98.176.156:6893 udp
N/A 87.98.176.157:6893 udp
N/A 87.98.176.158:6893 udp
N/A 87.98.176.159:6893 udp
N/A 87.98.176.160:6893 udp
N/A 87.98.176.161:6893 udp
N/A 87.98.176.162:6893 udp
N/A 87.98.176.163:6893 udp
N/A 87.98.176.164:6893 udp
N/A 87.98.176.165:6893 udp
N/A 87.98.176.166:6893 udp
N/A 87.98.176.167:6893 udp
N/A 87.98.176.168:6893 udp
N/A 87.98.176.169:6893 udp
N/A 87.98.176.170:6893 udp
N/A 87.98.176.171:6893 udp
N/A 87.98.176.172:6893 udp
N/A 87.98.176.173:6893 udp
N/A 87.98.176.174:6893 udp
N/A 87.98.176.175:6893 udp
N/A 87.98.176.176:6893 udp
N/A 87.98.176.177:6893 udp
N/A 87.98.176.178:6893 udp
N/A 87.98.176.179:6893 udp
N/A 87.98.176.180:6893 udp
N/A 87.98.176.181:6893 udp
N/A 87.98.176.182:6893 udp
N/A 87.98.176.183:6893 udp
N/A 87.98.176.184:6893 udp
N/A 87.98.176.185:6893 udp
N/A 87.98.176.186:6893 udp
N/A 87.98.176.187:6893 udp
N/A 87.98.176.188:6893 udp
N/A 87.98.176.189:6893 udp
N/A 87.98.176.190:6893 udp
N/A 87.98.176.191:6893 udp
N/A 87.98.176.192:6893 udp
N/A 87.98.176.193:6893 udp
N/A 87.98.176.194:6893 udp
N/A 87.98.176.195:6893 udp
N/A 87.98.176.196:6893 udp
N/A 87.98.176.197:6893 udp
N/A 87.98.176.198:6893 udp
N/A 87.98.176.199:6893 udp
N/A 87.98.176.200:6893 udp
N/A 87.98.176.201:6893 udp
N/A 87.98.176.202:6893 udp
N/A 87.98.176.203:6893 udp
N/A 87.98.176.204:6893 udp
N/A 87.98.176.205:6893 udp
N/A 87.98.176.206:6893 udp
N/A 87.98.176.207:6893 udp
N/A 87.98.176.208:6893 udp
N/A 87.98.176.209:6893 udp
N/A 87.98.176.210:6893 udp
N/A 87.98.176.211:6893 udp
N/A 87.98.176.212:6893 udp
N/A 87.98.176.213:6893 udp
N/A 87.98.176.214:6893 udp
N/A 87.98.176.215:6893 udp
N/A 87.98.176.216:6893 udp
N/A 87.98.176.217:6893 udp
N/A 87.98.176.218:6893 udp
N/A 87.98.176.219:6893 udp
N/A 87.98.176.220:6893 udp
N/A 87.98.176.221:6893 udp
N/A 87.98.176.222:6893 udp
N/A 87.98.176.223:6893 udp
N/A 87.98.176.224:6893 udp
N/A 87.98.176.225:6893 udp
N/A 87.98.176.226:6893 udp
N/A 87.98.176.227:6893 udp
N/A 87.98.176.228:6893 udp
N/A 87.98.176.229:6893 udp
N/A 87.98.176.230:6893 udp
N/A 87.98.176.231:6893 udp
N/A 87.98.176.232:6893 udp
N/A 87.98.176.233:6893 udp
N/A 87.98.176.234:6893 udp
N/A 87.98.176.235:6893 udp
N/A 87.98.176.236:6893 udp
N/A 87.98.176.237:6893 udp
N/A 87.98.176.238:6893 udp
N/A 87.98.176.239:6893 udp
N/A 87.98.176.240:6893 udp
N/A 87.98.176.241:6893 udp
N/A 87.98.176.242:6893 udp
N/A 87.98.176.243:6893 udp
N/A 87.98.176.244:6893 udp
N/A 87.98.176.245:6893 udp
N/A 87.98.176.246:6893 udp
N/A 87.98.176.247:6893 udp
N/A 87.98.176.248:6893 udp
N/A 87.98.176.249:6893 udp
N/A 87.98.176.250:6893 udp
N/A 87.98.176.251:6893 udp
N/A 87.98.176.252:6893 udp
N/A 87.98.176.253:6893 udp
N/A 87.98.176.254:6893 udp
N/A 87.98.176.255:6893 udp
N/A 87.98.177.0:6893 udp
N/A 87.98.177.1:6893 udp
N/A 87.98.177.2:6893 udp
N/A 87.98.177.3:6893 udp
N/A 87.98.177.4:6893 udp
N/A 87.98.177.5:6893 udp
N/A 87.98.177.6:6893 udp
N/A 87.98.177.7:6893 udp
N/A 87.98.177.8:6893 udp
N/A 87.98.177.9:6893 udp
N/A 87.98.177.10:6893 udp
N/A 87.98.177.11:6893 udp
N/A 87.98.177.12:6893 udp
N/A 87.98.177.13:6893 udp
N/A 87.98.177.14:6893 udp
N/A 87.98.177.15:6893 udp
N/A 87.98.177.16:6893 udp
N/A 87.98.177.17:6893 udp
N/A 87.98.177.18:6893 udp
N/A 87.98.177.19:6893 udp
N/A 87.98.177.20:6893 udp
N/A 87.98.177.21:6893 udp
N/A 87.98.177.22:6893 udp
N/A 87.98.177.23:6893 udp
N/A 87.98.177.24:6893 udp
N/A 87.98.177.25:6893 udp
N/A 87.98.177.26:6893 udp
N/A 87.98.177.27:6893 udp
N/A 87.98.177.28:6893 udp
N/A 87.98.177.29:6893 udp
N/A 87.98.177.30:6893 udp
N/A 87.98.177.31:6893 udp
N/A 87.98.177.32:6893 udp
N/A 87.98.177.33:6893 udp
N/A 87.98.177.34:6893 udp
N/A 87.98.177.35:6893 udp
N/A 87.98.177.36:6893 udp
N/A 87.98.177.37:6893 udp
N/A 87.98.177.38:6893 udp
N/A 87.98.177.39:6893 udp
N/A 87.98.177.40:6893 udp
N/A 87.98.177.41:6893 udp
N/A 87.98.177.42:6893 udp
N/A 87.98.177.43:6893 udp
N/A 87.98.177.44:6893 udp
N/A 87.98.177.45:6893 udp
N/A 87.98.177.46:6893 udp
N/A 87.98.177.47:6893 udp
N/A 87.98.177.48:6893 udp
N/A 87.98.177.49:6893 udp
N/A 87.98.177.50:6893 udp
N/A 87.98.177.51:6893 udp
N/A 87.98.177.52:6893 udp
N/A 87.98.177.53:6893 udp
N/A 87.98.177.54:6893 udp
N/A 87.98.177.55:6893 udp
N/A 87.98.177.56:6893 udp
N/A 87.98.177.57:6893 udp
N/A 87.98.177.58:6893 udp
N/A 87.98.177.59:6893 udp
N/A 87.98.177.60:6893 udp
N/A 87.98.177.61:6893 udp
N/A 87.98.177.62:6893 udp
N/A 87.98.177.63:6893 udp
N/A 87.98.177.64:6893 udp
N/A 87.98.177.65:6893 udp
N/A 87.98.177.66:6893 udp
N/A 87.98.177.67:6893 udp
N/A 87.98.177.68:6893 udp
N/A 87.98.177.69:6893 udp
N/A 87.98.177.70:6893 udp
N/A 87.98.177.71:6893 udp
N/A 87.98.177.72:6893 udp
N/A 87.98.177.73:6893 udp
N/A 87.98.177.74:6893 udp
N/A 87.98.177.75:6893 udp
N/A 87.98.177.76:6893 udp
N/A 87.98.177.77:6893 udp
N/A 87.98.177.78:6893 udp
N/A 87.98.177.79:6893 udp
N/A 87.98.177.80:6893 udp
N/A 87.98.177.81:6893 udp
N/A 87.98.177.82:6893 udp
N/A 87.98.177.83:6893 udp
N/A 87.98.177.84:6893 udp
N/A 87.98.177.85:6893 udp
N/A 87.98.177.86:6893 udp
N/A 87.98.177.87:6893 udp
N/A 87.98.177.88:6893 udp
N/A 87.98.177.89:6893 udp
N/A 87.98.177.90:6893 udp
N/A 87.98.177.91:6893 udp
N/A 87.98.177.92:6893 udp
N/A 87.98.177.93:6893 udp
N/A 87.98.177.94:6893 udp
N/A 87.98.177.95:6893 udp
N/A 87.98.177.96:6893 udp
N/A 87.98.177.97:6893 udp
N/A 87.98.177.98:6893 udp
N/A 87.98.177.99:6893 udp
N/A 87.98.177.100:6893 udp
N/A 87.98.177.101:6893 udp
N/A 87.98.177.102:6893 udp
N/A 87.98.177.103:6893 udp
N/A 87.98.177.104:6893 udp
N/A 87.98.177.105:6893 udp
N/A 87.98.177.106:6893 udp
N/A 87.98.177.107:6893 udp
N/A 87.98.177.108:6893 udp
N/A 87.98.177.109:6893 udp
N/A 87.98.177.110:6893 udp
N/A 87.98.177.111:6893 udp
N/A 87.98.177.112:6893 udp
N/A 87.98.177.113:6893 udp
N/A 87.98.177.114:6893 udp
N/A 87.98.177.115:6893 udp
N/A 87.98.177.116:6893 udp
N/A 87.98.177.117:6893 udp
N/A 87.98.177.118:6893 udp
N/A 87.98.177.119:6893 udp
N/A 87.98.177.120:6893 udp
N/A 87.98.177.121:6893 udp
N/A 87.98.177.122:6893 udp
N/A 87.98.177.123:6893 udp
N/A 87.98.177.124:6893 udp
N/A 87.98.177.125:6893 udp
N/A 87.98.177.126:6893 udp
N/A 87.98.177.127:6893 udp
N/A 87.98.177.128:6893 udp
N/A 87.98.177.129:6893 udp
N/A 87.98.177.130:6893 udp
N/A 87.98.177.131:6893 udp
N/A 87.98.177.132:6893 udp
N/A 87.98.177.133:6893 udp
N/A 87.98.177.134:6893 udp
N/A 87.98.177.135:6893 udp
N/A 87.98.177.136:6893 udp
N/A 87.98.177.137:6893 udp
N/A 87.98.177.138:6893 udp
N/A 87.98.177.139:6893 udp
N/A 87.98.177.140:6893 udp
N/A 87.98.177.141:6893 udp
N/A 87.98.177.142:6893 udp
N/A 87.98.177.143:6893 udp
N/A 87.98.177.144:6893 udp
N/A 87.98.177.145:6893 udp
N/A 87.98.177.146:6893 udp
N/A 87.98.177.147:6893 udp
N/A 87.98.177.148:6893 udp
N/A 87.98.177.149:6893 udp
N/A 87.98.177.150:6893 udp
N/A 87.98.177.151:6893 udp
N/A 87.98.177.152:6893 udp
N/A 87.98.177.153:6893 udp
N/A 87.98.177.154:6893 udp
N/A 87.98.177.155:6893 udp
N/A 87.98.177.156:6893 udp
N/A 87.98.177.157:6893 udp
N/A 87.98.177.158:6893 udp
N/A 87.98.177.159:6893 udp
N/A 87.98.177.160:6893 udp
N/A 87.98.177.161:6893 udp
N/A 87.98.177.162:6893 udp
N/A 87.98.177.163:6893 udp
N/A 87.98.177.164:6893 udp
N/A 87.98.177.165:6893 udp
N/A 87.98.177.166:6893 udp
N/A 87.98.177.167:6893 udp
N/A 87.98.177.168:6893 udp
N/A 87.98.177.169:6893 udp
N/A 87.98.177.170:6893 udp
N/A 87.98.177.171:6893 udp
N/A 87.98.177.172:6893 udp
N/A 87.98.177.173:6893 udp
N/A 87.98.177.174:6893 udp
N/A 87.98.177.175:6893 udp
N/A 87.98.177.176:6893 udp
N/A 87.98.177.177:6893 udp
N/A 87.98.177.178:6893 udp
N/A 87.98.177.179:6893 udp
N/A 87.98.177.180:6893 udp
N/A 87.98.177.181:6893 udp
N/A 87.98.177.182:6893 udp
N/A 87.98.177.183:6893 udp
N/A 87.98.177.184:6893 udp
N/A 87.98.177.185:6893 udp
N/A 87.98.177.186:6893 udp
N/A 87.98.177.187:6893 udp
N/A 87.98.177.188:6893 udp
N/A 87.98.177.189:6893 udp
N/A 87.98.177.190:6893 udp
N/A 87.98.177.191:6893 udp
N/A 87.98.177.192:6893 udp
N/A 87.98.177.193:6893 udp
N/A 87.98.177.194:6893 udp
N/A 87.98.177.195:6893 udp
N/A 87.98.177.196:6893 udp
N/A 87.98.177.197:6893 udp
N/A 87.98.177.198:6893 udp
N/A 87.98.177.199:6893 udp
N/A 87.98.177.200:6893 udp
N/A 87.98.177.201:6893 udp
N/A 87.98.177.202:6893 udp
N/A 87.98.177.203:6893 udp
N/A 87.98.177.204:6893 udp
N/A 87.98.177.205:6893 udp
N/A 87.98.177.206:6893 udp
N/A 87.98.177.207:6893 udp
N/A 87.98.177.208:6893 udp
N/A 87.98.177.209:6893 udp
N/A 87.98.177.210:6893 udp
N/A 87.98.177.211:6893 udp
N/A 87.98.177.212:6893 udp
N/A 87.98.177.213:6893 udp
N/A 87.98.177.214:6893 udp
N/A 87.98.177.215:6893 udp
N/A 87.98.177.216:6893 udp
N/A 87.98.177.217:6893 udp
N/A 87.98.177.218:6893 udp
N/A 87.98.177.219:6893 udp
N/A 87.98.177.220:6893 udp
N/A 87.98.177.221:6893 udp
N/A 87.98.177.222:6893 udp
N/A 87.98.177.223:6893 udp
N/A 87.98.177.224:6893 udp
N/A 87.98.177.225:6893 udp
N/A 87.98.177.226:6893 udp
N/A 87.98.177.227:6893 udp
N/A 87.98.177.228:6893 udp
N/A 87.98.177.229:6893 udp
N/A 87.98.177.230:6893 udp
N/A 87.98.177.231:6893 udp
N/A 87.98.177.232:6893 udp
N/A 87.98.177.233:6893 udp
N/A 87.98.177.234:6893 udp
N/A 87.98.177.235:6893 udp
N/A 87.98.177.236:6893 udp
N/A 87.98.177.237:6893 udp
N/A 87.98.177.238:6893 udp
N/A 87.98.177.239:6893 udp
N/A 87.98.177.240:6893 udp
N/A 87.98.177.241:6893 udp
N/A 87.98.177.242:6893 udp
N/A 87.98.177.243:6893 udp
N/A 87.98.177.244:6893 udp
N/A 87.98.177.245:6893 udp
N/A 87.98.177.246:6893 udp
N/A 87.98.177.247:6893 udp
N/A 87.98.177.248:6893 udp
N/A 87.98.177.249:6893 udp
N/A 87.98.177.250:6893 udp
N/A 87.98.177.251:6893 udp
N/A 87.98.177.252:6893 udp
N/A 87.98.177.253:6893 udp
N/A 87.98.177.254:6893 udp
N/A 87.98.177.255:6893 udp
N/A 87.98.178.0:6893 udp
N/A 87.98.178.1:6893 udp
N/A 87.98.178.2:6893 udp
N/A 87.98.178.3:6893 udp
N/A 87.98.178.4:6893 udp
N/A 87.98.178.5:6893 udp
N/A 87.98.178.6:6893 udp
N/A 87.98.178.7:6893 udp
N/A 87.98.178.8:6893 udp
N/A 87.98.178.9:6893 udp
N/A 87.98.178.10:6893 udp
N/A 87.98.178.11:6893 udp
N/A 87.98.178.12:6893 udp
N/A 87.98.178.13:6893 udp
N/A 87.98.178.14:6893 udp
N/A 87.98.178.15:6893 udp
N/A 87.98.178.16:6893 udp
N/A 87.98.178.17:6893 udp
N/A 87.98.178.18:6893 udp
N/A 87.98.178.19:6893 udp
N/A 87.98.178.20:6893 udp
N/A 87.98.178.21:6893 udp
N/A 87.98.178.22:6893 udp
N/A 87.98.178.23:6893 udp
N/A 87.98.178.24:6893 udp
N/A 87.98.178.25:6893 udp
N/A 87.98.178.26:6893 udp
N/A 87.98.178.27:6893 udp
N/A 87.98.178.28:6893 udp
N/A 87.98.178.29:6893 udp
N/A 87.98.178.30:6893 udp
N/A 87.98.178.31:6893 udp
N/A 87.98.178.32:6893 udp
N/A 87.98.178.33:6893 udp
N/A 87.98.178.34:6893 udp
N/A 87.98.178.35:6893 udp
N/A 87.98.178.36:6893 udp
N/A 87.98.178.37:6893 udp
N/A 87.98.178.38:6893 udp
N/A 87.98.178.39:6893 udp
N/A 87.98.178.40:6893 udp
N/A 87.98.178.41:6893 udp
N/A 87.98.178.42:6893 udp
N/A 87.98.178.43:6893 udp
N/A 87.98.178.44:6893 udp
N/A 87.98.178.45:6893 udp
N/A 87.98.178.46:6893 udp
N/A 87.98.178.47:6893 udp
N/A 87.98.178.48:6893 udp
N/A 87.98.178.49:6893 udp
N/A 87.98.178.50:6893 udp
N/A 87.98.178.51:6893 udp
N/A 87.98.178.52:6893 udp
N/A 87.98.178.53:6893 udp
N/A 87.98.178.54:6893 udp
N/A 87.98.178.55:6893 udp
N/A 87.98.178.56:6893 udp
N/A 87.98.178.57:6893 udp
N/A 87.98.178.58:6893 udp
N/A 87.98.178.59:6893 udp
N/A 87.98.178.60:6893 udp
N/A 87.98.178.61:6893 udp
N/A 87.98.178.62:6893 udp
N/A 87.98.178.63:6893 udp
N/A 87.98.178.64:6893 udp
N/A 87.98.178.65:6893 udp
N/A 87.98.178.66:6893 udp
N/A 87.98.178.67:6893 udp
N/A 87.98.178.68:6893 udp
N/A 87.98.178.69:6893 udp
N/A 87.98.178.70:6893 udp
N/A 87.98.178.71:6893 udp
N/A 87.98.178.72:6893 udp
N/A 87.98.178.73:6893 udp
N/A 87.98.178.74:6893 udp
N/A 87.98.178.75:6893 udp
N/A 87.98.178.76:6893 udp
N/A 87.98.178.77:6893 udp
N/A 87.98.178.78:6893 udp
N/A 87.98.178.79:6893 udp
N/A 87.98.178.80:6893 udp
N/A 87.98.178.81:6893 udp
N/A 87.98.178.82:6893 udp
N/A 87.98.178.83:6893 udp
N/A 87.98.178.84:6893 udp
N/A 87.98.178.85:6893 udp
N/A 87.98.178.86:6893 udp
N/A 87.98.178.87:6893 udp
N/A 87.98.178.88:6893 udp
N/A 87.98.178.89:6893 udp
N/A 87.98.178.90:6893 udp
N/A 87.98.178.91:6893 udp
N/A 87.98.178.92:6893 udp
N/A 87.98.178.93:6893 udp
N/A 87.98.178.94:6893 udp
N/A 87.98.178.95:6893 udp
N/A 87.98.178.96:6893 udp
N/A 87.98.178.97:6893 udp
N/A 87.98.178.98:6893 udp
N/A 87.98.178.99:6893 udp
N/A 87.98.178.100:6893 udp
N/A 87.98.178.101:6893 udp
N/A 87.98.178.102:6893 udp
N/A 87.98.178.103:6893 udp
N/A 87.98.178.104:6893 udp
N/A 87.98.178.105:6893 udp
N/A 87.98.178.106:6893 udp
N/A 87.98.178.107:6893 udp
N/A 87.98.178.108:6893 udp
N/A 87.98.178.109:6893 udp
N/A 87.98.178.110:6893 udp
N/A 87.98.178.111:6893 udp
N/A 87.98.178.112:6893 udp
N/A 87.98.178.113:6893 udp
N/A 87.98.178.114:6893 udp
N/A 87.98.178.115:6893 udp
N/A 87.98.178.116:6893 udp
N/A 87.98.178.117:6893 udp
N/A 87.98.178.118:6893 udp
N/A 87.98.178.119:6893 udp
N/A 87.98.178.120:6893 udp
N/A 87.98.178.121:6893 udp
N/A 87.98.178.122:6893 udp
N/A 87.98.178.123:6893 udp
N/A 87.98.178.124:6893 udp
N/A 87.98.178.125:6893 udp
N/A 87.98.178.126:6893 udp
N/A 87.98.178.127:6893 udp
N/A 87.98.178.128:6893 udp
N/A 87.98.178.129:6893 udp
N/A 87.98.178.130:6893 udp
N/A 87.98.178.131:6893 udp
N/A 87.98.178.132:6893 udp
N/A 87.98.178.133:6893 udp
N/A 87.98.178.134:6893 udp
N/A 87.98.178.135:6893 udp
N/A 87.98.178.136:6893 udp
N/A 87.98.178.137:6893 udp
N/A 87.98.178.138:6893 udp
N/A 87.98.178.139:6893 udp
N/A 87.98.178.140:6893 udp
N/A 87.98.178.141:6893 udp
N/A 87.98.178.142:6893 udp
N/A 87.98.178.143:6893 udp
N/A 87.98.178.144:6893 udp
N/A 87.98.178.145:6893 udp
N/A 87.98.178.146:6893 udp
N/A 87.98.178.147:6893 udp
N/A 87.98.178.148:6893 udp
N/A 87.98.178.149:6893 udp
N/A 87.98.178.150:6893 udp
N/A 87.98.178.151:6893 udp
N/A 87.98.178.152:6893 udp
N/A 87.98.178.153:6893 udp
N/A 87.98.178.154:6893 udp
N/A 87.98.178.155:6893 udp
N/A 87.98.178.156:6893 udp
N/A 87.98.178.157:6893 udp
N/A 87.98.178.158:6893 udp
N/A 87.98.178.159:6893 udp
N/A 87.98.178.160:6893 udp
N/A 87.98.178.161:6893 udp
N/A 87.98.178.162:6893 udp
N/A 87.98.178.163:6893 udp
N/A 87.98.178.164:6893 udp
N/A 87.98.178.165:6893 udp
N/A 87.98.178.166:6893 udp
N/A 87.98.178.167:6893 udp
N/A 87.98.178.168:6893 udp
N/A 87.98.178.169:6893 udp
N/A 87.98.178.170:6893 udp
N/A 87.98.178.171:6893 udp
N/A 87.98.178.172:6893 udp
N/A 87.98.178.173:6893 udp
N/A 87.98.178.174:6893 udp
N/A 87.98.178.175:6893 udp
N/A 87.98.178.176:6893 udp
N/A 87.98.178.177:6893 udp
N/A 87.98.178.178:6893 udp
N/A 87.98.178.179:6893 udp
N/A 87.98.178.180:6893 udp
N/A 87.98.178.181:6893 udp
N/A 87.98.178.182:6893 udp
N/A 87.98.178.183:6893 udp
N/A 87.98.178.184:6893 udp
N/A 87.98.178.185:6893 udp
N/A 87.98.178.186:6893 udp
N/A 87.98.178.187:6893 udp
N/A 87.98.178.188:6893 udp
N/A 87.98.178.189:6893 udp
N/A 87.98.178.190:6893 udp
N/A 87.98.178.191:6893 udp
N/A 87.98.178.192:6893 udp
N/A 87.98.178.193:6893 udp
N/A 87.98.178.194:6893 udp
N/A 87.98.178.195:6893 udp
N/A 87.98.178.196:6893 udp
N/A 87.98.178.197:6893 udp
N/A 87.98.178.198:6893 udp
N/A 87.98.178.199:6893 udp
N/A 87.98.178.200:6893 udp
N/A 87.98.178.201:6893 udp
N/A 87.98.178.202:6893 udp
N/A 87.98.178.203:6893 udp
N/A 87.98.178.204:6893 udp
N/A 87.98.178.205:6893 udp
N/A 87.98.178.206:6893 udp
N/A 87.98.178.207:6893 udp
N/A 87.98.178.208:6893 udp
N/A 87.98.178.209:6893 udp
N/A 87.98.178.210:6893 udp
N/A 87.98.178.211:6893 udp
N/A 87.98.178.212:6893 udp
N/A 87.98.178.213:6893 udp
N/A 87.98.178.214:6893 udp
N/A 87.98.178.215:6893 udp
N/A 87.98.178.216:6893 udp
N/A 87.98.178.217:6893 udp
N/A 87.98.178.218:6893 udp
N/A 87.98.178.219:6893 udp
N/A 87.98.178.220:6893 udp
N/A 87.98.178.221:6893 udp
N/A 87.98.178.222:6893 udp
N/A 87.98.178.223:6893 udp
N/A 87.98.178.224:6893 udp
N/A 87.98.178.225:6893 udp
N/A 87.98.178.226:6893 udp
N/A 87.98.178.227:6893 udp
N/A 87.98.178.228:6893 udp
N/A 87.98.178.229:6893 udp
N/A 87.98.178.230:6893 udp
N/A 87.98.178.231:6893 udp
N/A 87.98.178.232:6893 udp
N/A 87.98.178.233:6893 udp
N/A 87.98.178.234:6893 udp
N/A 87.98.178.235:6893 udp
N/A 87.98.178.236:6893 udp
N/A 87.98.178.237:6893 udp
N/A 87.98.178.238:6893 udp
N/A 87.98.178.239:6893 udp
N/A 87.98.178.240:6893 udp
N/A 87.98.178.241:6893 udp
N/A 87.98.178.242:6893 udp
N/A 87.98.178.243:6893 udp
N/A 87.98.178.244:6893 udp
N/A 87.98.178.245:6893 udp
N/A 87.98.178.246:6893 udp
N/A 87.98.178.247:6893 udp
N/A 87.98.178.248:6893 udp
N/A 87.98.178.249:6893 udp
N/A 87.98.178.250:6893 udp
N/A 87.98.178.251:6893 udp
N/A 87.98.178.252:6893 udp
N/A 87.98.178.253:6893 udp
N/A 87.98.178.254:6893 udp
N/A 87.98.178.255:6893 udp
N/A 87.98.179.0:6893 udp
N/A 87.98.179.1:6893 udp
N/A 87.98.179.2:6893 udp
N/A 87.98.179.3:6893 udp
N/A 87.98.179.4:6893 udp
N/A 87.98.179.5:6893 udp
N/A 87.98.179.6:6893 udp
N/A 87.98.179.7:6893 udp
N/A 87.98.179.8:6893 udp
N/A 87.98.179.9:6893 udp
N/A 87.98.179.10:6893 udp
N/A 87.98.179.11:6893 udp
N/A 87.98.179.12:6893 udp
N/A 87.98.179.13:6893 udp
N/A 87.98.179.14:6893 udp
N/A 87.98.179.15:6893 udp
N/A 87.98.179.16:6893 udp
N/A 87.98.179.17:6893 udp
N/A 87.98.179.18:6893 udp
N/A 87.98.179.19:6893 udp
N/A 87.98.179.20:6893 udp
N/A 87.98.179.21:6893 udp
N/A 87.98.179.22:6893 udp
N/A 87.98.179.23:6893 udp
N/A 87.98.179.24:6893 udp
N/A 87.98.179.25:6893 udp
N/A 87.98.179.26:6893 udp
N/A 87.98.179.27:6893 udp
N/A 87.98.179.28:6893 udp
N/A 87.98.179.29:6893 udp
N/A 87.98.179.30:6893 udp
N/A 87.98.179.31:6893 udp
N/A 87.98.179.32:6893 udp
N/A 87.98.179.33:6893 udp
N/A 87.98.179.34:6893 udp
N/A 87.98.179.35:6893 udp
N/A 87.98.179.36:6893 udp
N/A 87.98.179.37:6893 udp
N/A 87.98.179.38:6893 udp
N/A 87.98.179.39:6893 udp
N/A 87.98.179.40:6893 udp
N/A 87.98.179.41:6893 udp
N/A 87.98.179.42:6893 udp
N/A 87.98.179.43:6893 udp
N/A 87.98.179.44:6893 udp
N/A 87.98.179.45:6893 udp
N/A 87.98.179.46:6893 udp
N/A 87.98.179.47:6893 udp
N/A 87.98.179.48:6893 udp
N/A 87.98.179.49:6893 udp
N/A 87.98.179.50:6893 udp
N/A 87.98.179.51:6893 udp
N/A 87.98.179.52:6893 udp
N/A 87.98.179.53:6893 udp
N/A 87.98.179.54:6893 udp
N/A 87.98.179.55:6893 udp
N/A 87.98.179.56:6893 udp
N/A 87.98.179.57:6893 udp
N/A 87.98.179.58:6893 udp
N/A 87.98.179.59:6893 udp
N/A 87.98.179.60:6893 udp
N/A 87.98.179.61:6893 udp
N/A 87.98.179.62:6893 udp
N/A 87.98.179.63:6893 udp
N/A 87.98.179.64:6893 udp
N/A 87.98.179.65:6893 udp
N/A 87.98.179.66:6893 udp
N/A 87.98.179.67:6893 udp
N/A 87.98.179.68:6893 udp
N/A 87.98.179.69:6893 udp
N/A 87.98.179.70:6893 udp
N/A 87.98.179.71:6893 udp
N/A 87.98.179.72:6893 udp
N/A 87.98.179.73:6893 udp
N/A 87.98.179.74:6893 udp
N/A 87.98.179.75:6893 udp
N/A 87.98.179.76:6893 udp
N/A 87.98.179.77:6893 udp
N/A 87.98.179.78:6893 udp
N/A 87.98.179.79:6893 udp
N/A 87.98.179.80:6893 udp
N/A 87.98.179.81:6893 udp
N/A 87.98.179.82:6893 udp
N/A 87.98.179.83:6893 udp
N/A 87.98.179.84:6893 udp
N/A 87.98.179.85:6893 udp
N/A 87.98.179.86:6893 udp
N/A 87.98.179.87:6893 udp
N/A 87.98.179.88:6893 udp
N/A 87.98.179.89:6893 udp
N/A 87.98.179.90:6893 udp
N/A 87.98.179.91:6893 udp
N/A 87.98.179.92:6893 udp
N/A 87.98.179.93:6893 udp
N/A 87.98.179.94:6893 udp
N/A 87.98.179.95:6893 udp
N/A 87.98.179.96:6893 udp
N/A 87.98.179.97:6893 udp
N/A 87.98.179.98:6893 udp
N/A 87.98.179.99:6893 udp
N/A 87.98.179.100:6893 udp
N/A 87.98.179.101:6893 udp
N/A 87.98.179.102:6893 udp
N/A 87.98.179.103:6893 udp
N/A 87.98.179.104:6893 udp
N/A 87.98.179.105:6893 udp
N/A 87.98.179.106:6893 udp
N/A 87.98.179.107:6893 udp
N/A 87.98.179.108:6893 udp
N/A 87.98.179.109:6893 udp
N/A 87.98.179.110:6893 udp
N/A 87.98.179.111:6893 udp
N/A 87.98.179.112:6893 udp
N/A 87.98.179.113:6893 udp
N/A 87.98.179.114:6893 udp
N/A 87.98.179.115:6893 udp
N/A 87.98.179.116:6893 udp
N/A 87.98.179.117:6893 udp
N/A 87.98.179.118:6893 udp
N/A 87.98.179.119:6893 udp
N/A 87.98.179.120:6893 udp
N/A 87.98.179.121:6893 udp
N/A 87.98.179.122:6893 udp
N/A 87.98.179.123:6893 udp
N/A 87.98.179.124:6893 udp
N/A 87.98.179.125:6893 udp
N/A 87.98.179.126:6893 udp
N/A 87.98.179.127:6893 udp
N/A 87.98.179.128:6893 udp
N/A 87.98.179.129:6893 udp
N/A 87.98.179.130:6893 udp
N/A 87.98.179.131:6893 udp
N/A 87.98.179.132:6893 udp
N/A 87.98.179.133:6893 udp
N/A 87.98.179.134:6893 udp
N/A 87.98.179.135:6893 udp
N/A 87.98.179.136:6893 udp
N/A 87.98.179.137:6893 udp
N/A 87.98.179.138:6893 udp
N/A 87.98.179.139:6893 udp
N/A 87.98.179.140:6893 udp
N/A 87.98.179.141:6893 udp
N/A 87.98.179.142:6893 udp
N/A 87.98.179.143:6893 udp
N/A 87.98.179.144:6893 udp
N/A 87.98.179.145:6893 udp
N/A 87.98.179.146:6893 udp
N/A 87.98.179.147:6893 udp
N/A 87.98.179.148:6893 udp
N/A 87.98.179.149:6893 udp
N/A 87.98.179.150:6893 udp
N/A 87.98.179.151:6893 udp
N/A 87.98.179.152:6893 udp
N/A 87.98.179.153:6893 udp
N/A 87.98.179.154:6893 udp
N/A 87.98.179.155:6893 udp
N/A 87.98.179.156:6893 udp
N/A 87.98.179.157:6893 udp
N/A 87.98.179.158:6893 udp
N/A 87.98.179.159:6893 udp
N/A 87.98.179.160:6893 udp
N/A 87.98.179.161:6893 udp
N/A 87.98.179.162:6893 udp
N/A 87.98.179.163:6893 udp
N/A 87.98.179.164:6893 udp
N/A 87.98.179.165:6893 udp
N/A 87.98.179.166:6893 udp
N/A 87.98.179.167:6893 udp
N/A 87.98.179.168:6893 udp
N/A 87.98.179.169:6893 udp
N/A 87.98.179.170:6893 udp
N/A 87.98.179.171:6893 udp
N/A 87.98.179.172:6893 udp
N/A 87.98.179.173:6893 udp
N/A 87.98.179.174:6893 udp
N/A 87.98.179.175:6893 udp
N/A 87.98.179.176:6893 udp
N/A 87.98.179.177:6893 udp
N/A 87.98.179.178:6893 udp
N/A 87.98.179.179:6893 udp
N/A 87.98.179.180:6893 udp
N/A 87.98.179.181:6893 udp
N/A 87.98.179.182:6893 udp
N/A 87.98.179.183:6893 udp
N/A 87.98.179.184:6893 udp
N/A 87.98.179.185:6893 udp
N/A 87.98.179.186:6893 udp
N/A 87.98.179.187:6893 udp
N/A 87.98.179.188:6893 udp
N/A 87.98.179.189:6893 udp
N/A 87.98.179.190:6893 udp
N/A 87.98.179.191:6893 udp
N/A 87.98.179.192:6893 udp
N/A 87.98.179.193:6893 udp
N/A 87.98.179.194:6893 udp
N/A 87.98.179.195:6893 udp
N/A 87.98.179.196:6893 udp
N/A 87.98.179.197:6893 udp
N/A 87.98.179.198:6893 udp
N/A 87.98.179.199:6893 udp
N/A 87.98.179.200:6893 udp
N/A 87.98.179.201:6893 udp
N/A 87.98.179.202:6893 udp
N/A 87.98.179.203:6893 udp
N/A 87.98.179.204:6893 udp
N/A 87.98.179.205:6893 udp
N/A 87.98.179.206:6893 udp
N/A 87.98.179.207:6893 udp
N/A 87.98.179.208:6893 udp
N/A 87.98.179.209:6893 udp
N/A 87.98.179.210:6893 udp
N/A 87.98.179.211:6893 udp
N/A 87.98.179.212:6893 udp
N/A 87.98.179.213:6893 udp
N/A 87.98.179.214:6893 udp
N/A 87.98.179.215:6893 udp
N/A 87.98.179.216:6893 udp
N/A 87.98.179.217:6893 udp
N/A 87.98.179.218:6893 udp
N/A 87.98.179.219:6893 udp
N/A 87.98.179.220:6893 udp
N/A 87.98.179.221:6893 udp
N/A 87.98.179.222:6893 udp
N/A 87.98.179.223:6893 udp
N/A 87.98.179.224:6893 udp
N/A 87.98.179.225:6893 udp
N/A 87.98.179.226:6893 udp
N/A 87.98.179.227:6893 udp
N/A 87.98.179.228:6893 udp
N/A 87.98.179.229:6893 udp
N/A 87.98.179.230:6893 udp
N/A 87.98.179.231:6893 udp
N/A 87.98.179.232:6893 udp
N/A 87.98.179.233:6893 udp
N/A 87.98.179.234:6893 udp
N/A 87.98.179.235:6893 udp
N/A 87.98.179.236:6893 udp
N/A 87.98.179.237:6893 udp
N/A 87.98.179.238:6893 udp
N/A 87.98.179.239:6893 udp
N/A 87.98.179.240:6893 udp
N/A 87.98.179.241:6893 udp
N/A 87.98.179.242:6893 udp
N/A 87.98.179.243:6893 udp
N/A 87.98.179.244:6893 udp
N/A 87.98.179.245:6893 udp
N/A 87.98.179.246:6893 udp
N/A 87.98.179.247:6893 udp
N/A 87.98.179.248:6893 udp
N/A 87.98.179.249:6893 udp
N/A 87.98.179.250:6893 udp
N/A 87.98.179.251:6893 udp
N/A 87.98.179.252:6893 udp
N/A 87.98.179.253:6893 udp
N/A 87.98.179.254:6893 udp
N/A 87.98.179.255:6893 udp
N/A 8.8.8.8:53 api.blockcypher.com udp
N/A 104.20.20.251:80 api.blockcypher.com tcp
N/A 8.8.8.8:53 qfjhpgbefuhenjp7.1bxzyr.top udp

Files

memory/2444-0-0x0000000000000000-mapping.dmp

memory/3520-1-0x0000000000000000-mapping.dmp

memory/68-2-0x0000000000000000-mapping.dmp

memory/3932-3-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___XPYQQ_.hta

MD5 dfadbcdd3c55c45e126b5e2f6ae0abf3
SHA1 b7b245b075ef144a0cef4f16fe313df03fcdb4e9
SHA256 8f059628ee524cf9a46cf09522c5a2459833d7a5735974bfe3b0417c914bd066
SHA512 e3500de09e05c6aab5d91b70e97960f9d44bfa0d0b5e69d2a91059967de1a39464bc9197a0ba5c50e342b004d94c4d6171ac0eeee2d33339fe0f191b0dd14c0b

C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___VVRA5EL4_.txt

MD5 95148b968375461370d13ccdcee36b0b
SHA1 6367fe82b737a69551ff743d3d5f49fa692db409
SHA256 000305ac6d548d385e33af39ce6528732af5a3dc41ff761d52c0a8bfc0ff4c83
SHA512 49be08d31d9dc1eb696bc36281c58059c5f3069c31f09d852953e34fcd204bc2cde0cd8721382145b7b1a472716a903b091f6ad8cc4c9620151cd90e879c9a83

memory/1768-6-0x0000000000000000-mapping.dmp

memory/3252-7-0x0000000000000000-mapping.dmp

memory/2160-8-0x0000000000000000-mapping.dmp