Malware Analysis Report

2025-01-02 15:04

Sample ID 201026-erl97lvmjn
Target 6e352cd0e6130ec8e16c0a212f0ddfa2
SHA256 b2f2ac6419392e3202cf057ef928104f795afb3e96747d85a62937cc6c7d8c9b
Tags
ransomware cerber
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V6

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

b2f2ac6419392e3202cf057ef928104f795afb3e96747d85a62937cc6c7d8c9b

Threat Level: Known bad

The file 6e352cd0e6130ec8e16c0a212f0ddfa2 was found to be: Known bad.

Malicious Activity Summary

ransomware cerber

Cerber

Blacklisted process makes network request

Drops startup file

Deletes itself

Drops file in System32 directory

Suspicious use of SetThreadContext

Sets desktop wallpaper using registry

Drops file in Program Files directory

Drops file in Windows directory

Suspicious use of WriteProcessMemory

Modifies system certificate store

Suspicious behavior: EnumeratesProcesses

Suspicious use of FindShellTrayWindow

Modifies registry class

Kills process with taskkill

Modifies Internet Explorer settings

Runs ping.exe

Suspicious use of AdjustPrivilegeToken

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2020-10-26 06:17

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2020-10-26 06:17

Reported

2020-10-26 06:21

Platform

win7

Max time kernel

108s

Max time network

130s

Command Line

"C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe"

Signatures

Cerber

ransomware cerber

Blacklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

Deletes itself

Description Indicator Process Target
N/A N/A C:\Windows\system32\cmd.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\documents C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\desktop C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-4210623931-3856158591-1213714290-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\tmpE62.bmp" C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A

Suspicious use of SetThreadContext

Description Indicator Process Target
PID 1060 set thread context of 1604 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\desktop C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\documents C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\documents C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\desktop C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\taskkill.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-4210623931-3856158591-1213714290-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SysWOW64\mshta.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Windows\SysWOW64\mshta.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C C:\Windows\SysWOW64\mshta.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Windows\SysWOW64\mshta.exe N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\system32\PING.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\DllHost.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1060 wrote to memory of 1684 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 1060 wrote to memory of 1684 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 1060 wrote to memory of 1684 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 1060 wrote to memory of 1684 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 1060 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 1060 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 1060 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 1060 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 1060 wrote to memory of 1604 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 1060 wrote to memory of 1604 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 1060 wrote to memory of 1604 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 1060 wrote to memory of 1604 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 1060 wrote to memory of 1604 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 1060 wrote to memory of 1604 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 1060 wrote to memory of 1604 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 1060 wrote to memory of 1604 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 1060 wrote to memory of 1604 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 1060 wrote to memory of 1604 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 1604 wrote to memory of 1532 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Windows\SysWOW64\mshta.exe
PID 1604 wrote to memory of 1532 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Windows\SysWOW64\mshta.exe
PID 1604 wrote to memory of 1532 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Windows\SysWOW64\mshta.exe
PID 1604 wrote to memory of 1532 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Windows\SysWOW64\mshta.exe
PID 1604 wrote to memory of 2036 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Windows\system32\cmd.exe
PID 1604 wrote to memory of 2036 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Windows\system32\cmd.exe
PID 1604 wrote to memory of 2036 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Windows\system32\cmd.exe
PID 1604 wrote to memory of 2036 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Windows\system32\cmd.exe
PID 2036 wrote to memory of 1632 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 2036 wrote to memory of 1632 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 2036 wrote to memory of 1632 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 2036 wrote to memory of 1672 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE
PID 2036 wrote to memory of 1672 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE
PID 2036 wrote to memory of 1672 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe

"C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe"

C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe

"C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe"

C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe

"C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe"

C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe

"C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe"

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_HELP_HELP_HELP_MH9I5AH_.hta"

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\SysWOW64\DllHost.exe /Processid:{76D0CB12-7604-4048-B83C-1005C7DDC503}

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\SysWOW64\DllHost.exe /Processid:{3F6B5E16-092A-41ED-930B-0B4125D91D4E}

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x568

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im "6e352cd0e6130ec8e16c0a212f0ddfa2.exe"

C:\Windows\system32\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
N/A 91.117.40.0:6892 udp
N/A 91.117.40.1:6892 udp
N/A 91.117.40.2:6892 udp
N/A 91.117.40.3:6892 udp
N/A 91.117.40.4:6892 udp
N/A 91.117.40.5:6892 udp
N/A 91.117.40.6:6892 udp
N/A 91.117.40.7:6892 udp
N/A 91.117.40.8:6892 udp
N/A 91.117.40.9:6892 udp
N/A 91.117.40.10:6892 udp
N/A 91.117.40.11:6892 udp
N/A 91.117.40.12:6892 udp
N/A 91.117.40.13:6892 udp
N/A 91.117.40.14:6892 udp
N/A 91.117.40.15:6892 udp
N/A 91.117.40.16:6892 udp
N/A 91.117.40.17:6892 udp
N/A 91.117.40.18:6892 udp
N/A 91.117.40.19:6892 udp
N/A 91.117.40.20:6892 udp
N/A 91.117.40.21:6892 udp
N/A 91.117.40.22:6892 udp
N/A 91.117.40.23:6892 udp
N/A 91.117.40.24:6892 udp
N/A 91.117.40.25:6892 udp
N/A 91.117.40.26:6892 udp
N/A 91.117.40.27:6892 udp
N/A 91.117.40.28:6892 udp
N/A 91.117.40.29:6892 udp
N/A 91.117.40.30:6892 udp
N/A 91.117.40.31:6892 udp
N/A 91.119.40.0:6892 udp
N/A 91.119.40.1:6892 udp
N/A 91.119.40.2:6892 udp
N/A 91.119.40.3:6892 udp
N/A 91.119.40.4:6892 udp
N/A 91.119.40.5:6892 udp
N/A 91.119.40.6:6892 udp
N/A 91.119.40.7:6892 udp
N/A 91.119.40.8:6892 udp
N/A 91.119.40.9:6892 udp
N/A 91.119.40.10:6892 udp
N/A 91.119.40.11:6892 udp
N/A 91.119.40.12:6892 udp
N/A 91.119.40.13:6892 udp
N/A 91.119.40.14:6892 udp
N/A 91.119.40.15:6892 udp
N/A 91.119.40.16:6892 udp
N/A 91.119.40.17:6892 udp
N/A 91.119.40.18:6892 udp
N/A 91.119.40.19:6892 udp
N/A 91.119.40.20:6892 udp
N/A 91.119.40.21:6892 udp
N/A 91.119.40.22:6892 udp
N/A 91.119.40.23:6892 udp
N/A 91.119.40.24:6892 udp
N/A 91.119.40.25:6892 udp
N/A 91.119.40.26:6892 udp
N/A 91.119.40.27:6892 udp
N/A 91.119.40.28:6892 udp
N/A 91.119.40.29:6892 udp
N/A 91.119.40.30:6892 udp
N/A 91.119.40.31:6892 udp
N/A 91.121.40.0:6892 udp
N/A 91.121.40.1:6892 udp
N/A 91.121.40.2:6892 udp
N/A 91.121.40.3:6892 udp
N/A 91.121.40.4:6892 udp
N/A 91.121.40.5:6892 udp
N/A 91.121.40.6:6892 udp
N/A 91.121.40.7:6892 udp
N/A 91.121.40.8:6892 udp
N/A 91.121.40.9:6892 udp
N/A 91.121.40.10:6892 udp
N/A 91.121.40.11:6892 udp
N/A 91.121.40.12:6892 udp
N/A 91.121.40.13:6892 udp
N/A 91.121.40.14:6892 udp
N/A 91.121.40.15:6892 udp
N/A 91.121.40.16:6892 udp
N/A 91.121.40.17:6892 udp
N/A 91.121.40.18:6892 udp
N/A 91.121.40.19:6892 udp
N/A 91.121.40.20:6892 udp
N/A 91.121.40.21:6892 udp
N/A 91.121.40.22:6892 udp
N/A 91.121.40.23:6892 udp
N/A 91.121.40.24:6892 udp
N/A 91.121.40.25:6892 udp
N/A 91.121.40.26:6892 udp
N/A 91.121.40.27:6892 udp
N/A 91.121.40.28:6892 udp
N/A 91.121.40.29:6892 udp
N/A 91.121.40.30:6892 udp
N/A 91.121.40.31:6892 udp
N/A 91.121.40.32:6892 udp
N/A 91.121.40.33:6892 udp
N/A 91.121.40.34:6892 udp
N/A 91.121.40.35:6892 udp
N/A 91.121.40.36:6892 udp
N/A 91.121.40.37:6892 udp
N/A 91.121.40.38:6892 udp
N/A 91.121.40.39:6892 udp
N/A 91.121.40.40:6892 udp
N/A 91.121.40.41:6892 udp
N/A 91.121.40.42:6892 udp
N/A 91.121.40.43:6892 udp
N/A 91.121.40.44:6892 udp
N/A 91.121.40.45:6892 udp
N/A 91.121.40.46:6892 udp
N/A 91.121.40.47:6892 udp
N/A 91.121.40.48:6892 udp
N/A 91.121.40.49:6892 udp
N/A 91.121.40.50:6892 udp
N/A 91.121.40.51:6892 udp
N/A 91.121.40.52:6892 udp
N/A 91.121.40.53:6892 udp
N/A 91.121.40.54:6892 udp
N/A 91.121.40.55:6892 udp
N/A 91.121.40.56:6892 udp
N/A 91.121.40.57:6892 udp
N/A 91.121.40.58:6892 udp
N/A 91.121.40.59:6892 udp
N/A 91.121.40.60:6892 udp
N/A 91.121.40.61:6892 udp
N/A 91.121.40.62:6892 udp
N/A 91.121.40.63:6892 udp
N/A 91.121.40.64:6892 udp
N/A 91.121.40.65:6892 udp
N/A 91.121.40.66:6892 udp
N/A 91.121.40.67:6892 udp
N/A 91.121.40.68:6892 udp
N/A 91.121.40.69:6892 udp
N/A 91.121.40.70:6892 udp
N/A 91.121.40.71:6892 udp
N/A 91.121.40.72:6892 udp
N/A 91.121.40.73:6892 udp
N/A 91.121.40.74:6892 udp
N/A 91.121.40.75:6892 udp
N/A 91.121.40.76:6892 udp
N/A 91.121.40.77:6892 udp
N/A 91.121.40.78:6892 udp
N/A 91.121.40.79:6892 udp
N/A 91.121.40.80:6892 udp
N/A 91.121.40.81:6892 udp
N/A 91.121.40.82:6892 udp
N/A 91.121.40.83:6892 udp
N/A 91.121.40.84:6892 udp
N/A 91.121.40.85:6892 udp
N/A 91.121.40.86:6892 udp
N/A 91.121.40.87:6892 udp
N/A 91.121.40.88:6892 udp
N/A 91.121.40.89:6892 udp
N/A 91.121.40.90:6892 udp
N/A 91.121.40.91:6892 udp
N/A 91.121.40.92:6892 udp
N/A 91.121.40.93:6892 udp
N/A 91.121.40.94:6892 udp
N/A 91.121.40.95:6892 udp
N/A 91.121.40.96:6892 udp
N/A 91.121.40.97:6892 udp
N/A 91.121.40.98:6892 udp
N/A 91.121.40.99:6892 udp
N/A 91.121.40.100:6892 udp
N/A 91.121.40.101:6892 udp
N/A 91.121.40.102:6892 udp
N/A 91.121.40.103:6892 udp
N/A 91.121.40.104:6892 udp
N/A 91.121.40.105:6892 udp
N/A 91.121.40.106:6892 udp
N/A 91.121.40.107:6892 udp
N/A 91.121.40.108:6892 udp
N/A 91.121.40.109:6892 udp
N/A 91.121.40.110:6892 udp
N/A 91.121.40.111:6892 udp
N/A 91.121.40.112:6892 udp
N/A 91.121.40.113:6892 udp
N/A 91.121.40.114:6892 udp
N/A 91.121.40.115:6892 udp
N/A 91.121.40.116:6892 udp
N/A 91.121.40.117:6892 udp
N/A 91.121.40.118:6892 udp
N/A 91.121.40.119:6892 udp
N/A 91.121.40.120:6892 udp
N/A 91.121.40.121:6892 udp
N/A 91.121.40.122:6892 udp
N/A 91.121.40.123:6892 udp
N/A 91.121.40.124:6892 udp
N/A 91.121.40.125:6892 udp
N/A 91.121.40.126:6892 udp
N/A 91.121.40.127:6892 udp
N/A 91.121.40.128:6892 udp
N/A 91.121.40.129:6892 udp
N/A 91.121.40.130:6892 udp
N/A 91.121.40.131:6892 udp
N/A 91.121.40.132:6892 udp
N/A 91.121.40.133:6892 udp
N/A 91.121.40.134:6892 udp
N/A 91.121.40.135:6892 udp
N/A 91.121.40.136:6892 udp
N/A 91.121.40.137:6892 udp
N/A 91.121.40.138:6892 udp
N/A 91.121.40.139:6892 udp
N/A 91.121.40.140:6892 udp
N/A 91.121.40.141:6892 udp
N/A 91.121.40.142:6892 udp
N/A 91.121.40.143:6892 udp
N/A 91.121.40.144:6892 udp
N/A 91.121.40.145:6892 udp
N/A 91.121.40.146:6892 udp
N/A 91.121.40.147:6892 udp
N/A 91.121.40.148:6892 udp
N/A 91.121.40.149:6892 udp
N/A 91.121.40.150:6892 udp
N/A 91.121.40.151:6892 udp
N/A 91.121.40.152:6892 udp
N/A 91.121.40.153:6892 udp
N/A 91.121.40.154:6892 udp
N/A 91.121.40.155:6892 udp
N/A 91.121.40.156:6892 udp
N/A 91.121.40.157:6892 udp
N/A 91.121.40.158:6892 udp
N/A 91.121.40.159:6892 udp
N/A 91.121.40.160:6892 udp
N/A 91.121.40.161:6892 udp
N/A 91.121.40.162:6892 udp
N/A 91.121.40.163:6892 udp
N/A 91.121.40.164:6892 udp
N/A 91.121.40.165:6892 udp
N/A 91.121.40.166:6892 udp
N/A 91.121.40.167:6892 udp
N/A 91.121.40.168:6892 udp
N/A 91.121.40.169:6892 udp
N/A 91.121.40.170:6892 udp
N/A 91.121.40.171:6892 udp
N/A 91.121.40.172:6892 udp
N/A 91.121.40.173:6892 udp
N/A 91.121.40.174:6892 udp
N/A 91.121.40.175:6892 udp
N/A 91.121.40.176:6892 udp
N/A 91.121.40.177:6892 udp
N/A 91.121.40.178:6892 udp
N/A 91.121.40.179:6892 udp
N/A 91.121.40.180:6892 udp
N/A 91.121.40.181:6892 udp
N/A 91.121.40.182:6892 udp
N/A 91.121.40.183:6892 udp
N/A 91.121.40.184:6892 udp
N/A 91.121.40.185:6892 udp
N/A 91.121.40.186:6892 udp
N/A 91.121.40.187:6892 udp
N/A 91.121.40.188:6892 udp
N/A 91.121.40.189:6892 udp
N/A 91.121.40.190:6892 udp
N/A 91.121.40.191:6892 udp
N/A 91.121.40.192:6892 udp
N/A 91.121.40.193:6892 udp
N/A 91.121.40.194:6892 udp
N/A 91.121.40.195:6892 udp
N/A 91.121.40.196:6892 udp
N/A 91.121.40.197:6892 udp
N/A 91.121.40.198:6892 udp
N/A 91.121.40.199:6892 udp
N/A 91.121.40.200:6892 udp
N/A 91.121.40.201:6892 udp
N/A 91.121.40.202:6892 udp
N/A 91.121.40.203:6892 udp
N/A 91.121.40.204:6892 udp
N/A 91.121.40.205:6892 udp
N/A 91.121.40.206:6892 udp
N/A 91.121.40.207:6892 udp
N/A 91.121.40.208:6892 udp
N/A 91.121.40.209:6892 udp
N/A 91.121.40.210:6892 udp
N/A 91.121.40.211:6892 udp
N/A 91.121.40.212:6892 udp
N/A 91.121.40.213:6892 udp
N/A 91.121.40.214:6892 udp
N/A 91.121.40.215:6892 udp
N/A 91.121.40.216:6892 udp
N/A 91.121.40.217:6892 udp
N/A 91.121.40.218:6892 udp
N/A 91.121.40.219:6892 udp
N/A 91.121.40.220:6892 udp
N/A 91.121.40.221:6892 udp
N/A 91.121.40.222:6892 udp
N/A 91.121.40.223:6892 udp
N/A 91.121.40.224:6892 udp
N/A 91.121.40.225:6892 udp
N/A 91.121.40.226:6892 udp
N/A 91.121.40.227:6892 udp
N/A 91.121.40.228:6892 udp
N/A 91.121.40.229:6892 udp
N/A 91.121.40.230:6892 udp
N/A 91.121.40.231:6892 udp
N/A 91.121.40.232:6892 udp
N/A 91.121.40.233:6892 udp
N/A 91.121.40.234:6892 udp
N/A 91.121.40.235:6892 udp
N/A 91.121.40.236:6892 udp
N/A 91.121.40.237:6892 udp
N/A 91.121.40.238:6892 udp
N/A 91.121.40.239:6892 udp
N/A 91.121.40.240:6892 udp
N/A 91.121.40.241:6892 udp
N/A 91.121.40.242:6892 udp
N/A 91.121.40.243:6892 udp
N/A 91.121.40.244:6892 udp
N/A 91.121.40.245:6892 udp
N/A 91.121.40.246:6892 udp
N/A 91.121.40.247:6892 udp
N/A 91.121.40.248:6892 udp
N/A 91.121.40.249:6892 udp
N/A 91.121.40.250:6892 udp
N/A 91.121.40.251:6892 udp
N/A 91.121.40.252:6892 udp
N/A 91.121.40.253:6892 udp
N/A 91.121.40.254:6892 udp
N/A 91.121.40.255:6892 udp
N/A 91.121.41.0:6892 udp
N/A 91.121.41.1:6892 udp
N/A 91.121.41.2:6892 udp
N/A 91.121.41.3:6892 udp
N/A 91.121.41.4:6892 udp
N/A 91.121.41.5:6892 udp
N/A 91.121.41.6:6892 udp
N/A 91.121.41.7:6892 udp
N/A 91.121.41.8:6892 udp
N/A 91.121.41.9:6892 udp
N/A 91.121.41.10:6892 udp
N/A 91.121.41.11:6892 udp
N/A 91.121.41.12:6892 udp
N/A 91.121.41.13:6892 udp
N/A 91.121.41.14:6892 udp
N/A 91.121.41.15:6892 udp
N/A 91.121.41.16:6892 udp
N/A 91.121.41.17:6892 udp
N/A 91.121.41.18:6892 udp
N/A 91.121.41.19:6892 udp
N/A 91.121.41.20:6892 udp
N/A 91.121.41.21:6892 udp
N/A 91.121.41.22:6892 udp
N/A 91.121.41.23:6892 udp
N/A 91.121.41.24:6892 udp
N/A 91.121.41.25:6892 udp
N/A 91.121.41.26:6892 udp
N/A 91.121.41.27:6892 udp
N/A 91.121.41.28:6892 udp
N/A 91.121.41.29:6892 udp
N/A 91.121.41.30:6892 udp
N/A 91.121.41.31:6892 udp
N/A 91.121.41.32:6892 udp
N/A 91.121.41.33:6892 udp
N/A 91.121.41.34:6892 udp
N/A 91.121.41.35:6892 udp
N/A 91.121.41.36:6892 udp
N/A 91.121.41.37:6892 udp
N/A 91.121.41.38:6892 udp
N/A 91.121.41.39:6892 udp
N/A 91.121.41.40:6892 udp
N/A 91.121.41.41:6892 udp
N/A 91.121.41.42:6892 udp
N/A 91.121.41.43:6892 udp
N/A 91.121.41.44:6892 udp
N/A 91.121.41.45:6892 udp
N/A 91.121.41.46:6892 udp
N/A 91.121.41.47:6892 udp
N/A 91.121.41.48:6892 udp
N/A 91.121.41.49:6892 udp
N/A 91.121.41.50:6892 udp
N/A 91.121.41.51:6892 udp
N/A 91.121.41.52:6892 udp
N/A 91.121.41.53:6892 udp
N/A 91.121.41.54:6892 udp
N/A 91.121.41.55:6892 udp
N/A 91.121.41.56:6892 udp
N/A 91.121.41.57:6892 udp
N/A 91.121.41.58:6892 udp
N/A 91.121.41.59:6892 udp
N/A 91.121.41.60:6892 udp
N/A 91.121.41.61:6892 udp
N/A 91.121.41.62:6892 udp
N/A 91.121.41.63:6892 udp
N/A 91.121.41.64:6892 udp
N/A 91.121.41.65:6892 udp
N/A 91.121.41.66:6892 udp
N/A 91.121.41.67:6892 udp
N/A 91.121.41.68:6892 udp
N/A 91.121.41.69:6892 udp
N/A 91.121.41.70:6892 udp
N/A 91.121.41.71:6892 udp
N/A 91.121.41.72:6892 udp
N/A 91.121.41.73:6892 udp
N/A 91.121.41.74:6892 udp
N/A 91.121.41.75:6892 udp
N/A 91.121.41.76:6892 udp
N/A 91.121.41.77:6892 udp
N/A 91.121.41.78:6892 udp
N/A 91.121.41.79:6892 udp
N/A 91.121.41.80:6892 udp
N/A 91.121.41.81:6892 udp
N/A 91.121.41.82:6892 udp
N/A 91.121.41.83:6892 udp
N/A 91.121.41.84:6892 udp
N/A 91.121.41.85:6892 udp
N/A 91.121.41.86:6892 udp
N/A 91.121.41.87:6892 udp
N/A 91.121.41.88:6892 udp
N/A 91.121.41.89:6892 udp
N/A 91.121.41.90:6892 udp
N/A 91.121.41.91:6892 udp
N/A 91.121.41.92:6892 udp
N/A 91.121.41.93:6892 udp
N/A 91.121.41.94:6892 udp
N/A 91.121.41.95:6892 udp
N/A 91.121.41.96:6892 udp
N/A 91.121.41.97:6892 udp
N/A 91.121.41.98:6892 udp
N/A 91.121.41.99:6892 udp
N/A 91.121.41.100:6892 udp
N/A 91.121.41.101:6892 udp
N/A 91.121.41.102:6892 udp
N/A 91.121.41.103:6892 udp
N/A 91.121.41.104:6892 udp
N/A 91.121.41.105:6892 udp
N/A 91.121.41.106:6892 udp
N/A 91.121.41.107:6892 udp
N/A 91.121.41.108:6892 udp
N/A 91.121.41.109:6892 udp
N/A 91.121.41.110:6892 udp
N/A 91.121.41.111:6892 udp
N/A 91.121.41.112:6892 udp
N/A 91.121.41.113:6892 udp
N/A 91.121.41.114:6892 udp
N/A 91.121.41.115:6892 udp
N/A 91.121.41.116:6892 udp
N/A 91.121.41.117:6892 udp
N/A 91.121.41.118:6892 udp
N/A 91.121.41.119:6892 udp
N/A 91.121.41.120:6892 udp
N/A 91.121.41.121:6892 udp
N/A 91.121.41.122:6892 udp
N/A 91.121.41.123:6892 udp
N/A 91.121.41.124:6892 udp
N/A 91.121.41.125:6892 udp
N/A 91.121.41.126:6892 udp
N/A 91.121.41.127:6892 udp
N/A 91.121.41.128:6892 udp
N/A 91.121.41.129:6892 udp
N/A 91.121.41.130:6892 udp
N/A 91.121.41.131:6892 udp
N/A 91.121.41.132:6892 udp
N/A 91.121.41.133:6892 udp
N/A 91.121.41.134:6892 udp
N/A 91.121.41.135:6892 udp
N/A 91.121.41.136:6892 udp
N/A 91.121.41.137:6892 udp
N/A 91.121.41.138:6892 udp
N/A 91.121.41.139:6892 udp
N/A 91.121.41.140:6892 udp
N/A 91.121.41.141:6892 udp
N/A 91.121.41.142:6892 udp
N/A 91.121.41.143:6892 udp
N/A 91.121.41.144:6892 udp
N/A 91.121.41.145:6892 udp
N/A 91.121.41.146:6892 udp
N/A 91.121.41.147:6892 udp
N/A 91.121.41.148:6892 udp
N/A 91.121.41.149:6892 udp
N/A 91.121.41.150:6892 udp
N/A 91.121.41.151:6892 udp
N/A 91.121.41.152:6892 udp
N/A 91.121.41.153:6892 udp
N/A 91.121.41.154:6892 udp
N/A 91.121.41.155:6892 udp
N/A 91.121.41.156:6892 udp
N/A 91.121.41.157:6892 udp
N/A 91.121.41.158:6892 udp
N/A 91.121.41.159:6892 udp
N/A 91.121.41.160:6892 udp
N/A 91.121.41.161:6892 udp
N/A 91.121.41.162:6892 udp
N/A 91.121.41.163:6892 udp
N/A 91.121.41.164:6892 udp
N/A 91.121.41.165:6892 udp
N/A 91.121.41.166:6892 udp
N/A 91.121.41.167:6892 udp
N/A 91.121.41.168:6892 udp
N/A 91.121.41.169:6892 udp
N/A 91.121.41.170:6892 udp
N/A 91.121.41.171:6892 udp
N/A 91.121.41.172:6892 udp
N/A 91.121.41.173:6892 udp
N/A 91.121.41.174:6892 udp
N/A 91.121.41.175:6892 udp
N/A 91.121.41.176:6892 udp
N/A 91.121.41.177:6892 udp
N/A 91.121.41.178:6892 udp
N/A 91.121.41.179:6892 udp
N/A 91.121.41.180:6892 udp
N/A 91.121.41.181:6892 udp
N/A 91.121.41.182:6892 udp
N/A 91.121.41.183:6892 udp
N/A 91.121.41.184:6892 udp
N/A 91.121.41.185:6892 udp
N/A 91.121.41.186:6892 udp
N/A 91.121.41.187:6892 udp
N/A 91.121.41.188:6892 udp
N/A 91.121.41.189:6892 udp
N/A 91.121.41.190:6892 udp
N/A 91.121.41.191:6892 udp
N/A 91.121.41.192:6892 udp
N/A 91.121.41.193:6892 udp
N/A 91.121.41.194:6892 udp
N/A 91.121.41.195:6892 udp
N/A 91.121.41.196:6892 udp
N/A 91.121.41.197:6892 udp
N/A 91.121.41.198:6892 udp
N/A 91.121.41.199:6892 udp
N/A 91.121.41.200:6892 udp
N/A 91.121.41.201:6892 udp
N/A 91.121.41.202:6892 udp
N/A 91.121.41.203:6892 udp
N/A 91.121.41.204:6892 udp
N/A 91.121.41.205:6892 udp
N/A 91.121.41.206:6892 udp
N/A 91.121.41.207:6892 udp
N/A 91.121.41.208:6892 udp
N/A 91.121.41.209:6892 udp
N/A 91.121.41.210:6892 udp
N/A 91.121.41.211:6892 udp
N/A 91.121.41.212:6892 udp
N/A 91.121.41.213:6892 udp
N/A 91.121.41.214:6892 udp
N/A 91.121.41.215:6892 udp
N/A 91.121.41.216:6892 udp
N/A 91.121.41.217:6892 udp
N/A 91.121.41.218:6892 udp
N/A 91.121.41.219:6892 udp
N/A 91.121.41.220:6892 udp
N/A 91.121.41.221:6892 udp
N/A 91.121.41.222:6892 udp
N/A 91.121.41.223:6892 udp
N/A 91.121.41.224:6892 udp
N/A 91.121.41.225:6892 udp
N/A 91.121.41.226:6892 udp
N/A 91.121.41.227:6892 udp
N/A 91.121.41.228:6892 udp
N/A 91.121.41.229:6892 udp
N/A 91.121.41.230:6892 udp
N/A 91.121.41.231:6892 udp
N/A 91.121.41.232:6892 udp
N/A 91.121.41.233:6892 udp
N/A 91.121.41.234:6892 udp
N/A 91.121.41.235:6892 udp
N/A 91.121.41.236:6892 udp
N/A 91.121.41.237:6892 udp
N/A 91.121.41.238:6892 udp
N/A 91.121.41.239:6892 udp
N/A 91.121.41.240:6892 udp
N/A 91.121.41.241:6892 udp
N/A 91.121.41.242:6892 udp
N/A 91.121.41.243:6892 udp
N/A 91.121.41.244:6892 udp
N/A 91.121.41.245:6892 udp
N/A 91.121.41.246:6892 udp
N/A 91.121.41.247:6892 udp
N/A 91.121.41.248:6892 udp
N/A 91.121.41.249:6892 udp
N/A 91.121.41.250:6892 udp
N/A 91.121.41.251:6892 udp
N/A 91.121.41.252:6892 udp
N/A 91.121.41.253:6892 udp
N/A 91.121.41.254:6892 udp
N/A 91.121.41.255:6892 udp
N/A 91.121.42.0:6892 udp
N/A 91.121.42.1:6892 udp
N/A 91.121.42.2:6892 udp
N/A 91.121.42.3:6892 udp
N/A 91.121.42.4:6892 udp
N/A 91.121.42.5:6892 udp
N/A 91.121.42.6:6892 udp
N/A 91.121.42.7:6892 udp
N/A 91.121.42.8:6892 udp
N/A 91.121.42.9:6892 udp
N/A 91.121.42.10:6892 udp
N/A 91.121.42.11:6892 udp
N/A 91.121.42.12:6892 udp
N/A 91.121.42.13:6892 udp
N/A 91.121.42.14:6892 udp
N/A 91.121.42.15:6892 udp
N/A 91.121.42.16:6892 udp
N/A 91.121.42.17:6892 udp
N/A 91.121.42.18:6892 udp
N/A 91.121.42.19:6892 udp
N/A 91.121.42.20:6892 udp
N/A 91.121.42.21:6892 udp
N/A 91.121.42.22:6892 udp
N/A 91.121.42.23:6892 udp
N/A 91.121.42.24:6892 udp
N/A 91.121.42.25:6892 udp
N/A 91.121.42.26:6892 udp
N/A 91.121.42.27:6892 udp
N/A 91.121.42.28:6892 udp
N/A 91.121.42.29:6892 udp
N/A 91.121.42.30:6892 udp
N/A 91.121.42.31:6892 udp
N/A 91.121.42.32:6892 udp
N/A 91.121.42.33:6892 udp
N/A 91.121.42.34:6892 udp
N/A 91.121.42.35:6892 udp
N/A 91.121.42.36:6892 udp
N/A 91.121.42.37:6892 udp
N/A 91.121.42.38:6892 udp
N/A 91.121.42.39:6892 udp
N/A 91.121.42.40:6892 udp
N/A 91.121.42.41:6892 udp
N/A 91.121.42.42:6892 udp
N/A 91.121.42.43:6892 udp
N/A 91.121.42.44:6892 udp
N/A 91.121.42.45:6892 udp
N/A 91.121.42.46:6892 udp
N/A 91.121.42.47:6892 udp
N/A 91.121.42.48:6892 udp
N/A 91.121.42.49:6892 udp
N/A 91.121.42.50:6892 udp
N/A 91.121.42.51:6892 udp
N/A 91.121.42.52:6892 udp
N/A 91.121.42.53:6892 udp
N/A 91.121.42.54:6892 udp
N/A 91.121.42.55:6892 udp
N/A 91.121.42.56:6892 udp
N/A 91.121.42.57:6892 udp
N/A 91.121.42.58:6892 udp
N/A 91.121.42.59:6892 udp
N/A 91.121.42.60:6892 udp
N/A 91.121.42.61:6892 udp
N/A 91.121.42.62:6892 udp
N/A 91.121.42.63:6892 udp
N/A 91.121.42.64:6892 udp
N/A 91.121.42.65:6892 udp
N/A 91.121.42.66:6892 udp
N/A 91.121.42.67:6892 udp
N/A 91.121.42.68:6892 udp
N/A 91.121.42.69:6892 udp
N/A 91.121.42.70:6892 udp
N/A 91.121.42.71:6892 udp
N/A 91.121.42.72:6892 udp
N/A 91.121.42.73:6892 udp
N/A 91.121.42.74:6892 udp
N/A 91.121.42.75:6892 udp
N/A 91.121.42.76:6892 udp
N/A 91.121.42.77:6892 udp
N/A 91.121.42.78:6892 udp
N/A 91.121.42.79:6892 udp
N/A 91.121.42.80:6892 udp
N/A 91.121.42.81:6892 udp
N/A 91.121.42.82:6892 udp
N/A 91.121.42.83:6892 udp
N/A 91.121.42.84:6892 udp
N/A 91.121.42.85:6892 udp
N/A 91.121.42.86:6892 udp
N/A 91.121.42.87:6892 udp
N/A 91.121.42.88:6892 udp
N/A 91.121.42.89:6892 udp
N/A 91.121.42.90:6892 udp
N/A 91.121.42.91:6892 udp
N/A 91.121.42.92:6892 udp
N/A 91.121.42.93:6892 udp
N/A 91.121.42.94:6892 udp
N/A 91.121.42.95:6892 udp
N/A 91.121.42.96:6892 udp
N/A 91.121.42.97:6892 udp
N/A 91.121.42.98:6892 udp
N/A 91.121.42.99:6892 udp
N/A 91.121.42.100:6892 udp
N/A 91.121.42.101:6892 udp
N/A 91.121.42.102:6892 udp
N/A 91.121.42.103:6892 udp
N/A 91.121.42.104:6892 udp
N/A 91.121.42.105:6892 udp
N/A 91.121.42.106:6892 udp
N/A 91.121.42.107:6892 udp
N/A 91.121.42.108:6892 udp
N/A 91.121.42.109:6892 udp
N/A 91.121.42.110:6892 udp
N/A 91.121.42.111:6892 udp
N/A 91.121.42.112:6892 udp
N/A 91.121.42.113:6892 udp
N/A 91.121.42.114:6892 udp
N/A 91.121.42.115:6892 udp
N/A 91.121.42.116:6892 udp
N/A 91.121.42.117:6892 udp
N/A 91.121.42.118:6892 udp
N/A 91.121.42.119:6892 udp
N/A 91.121.42.120:6892 udp
N/A 91.121.42.121:6892 udp
N/A 91.121.42.122:6892 udp
N/A 91.121.42.123:6892 udp
N/A 91.121.42.124:6892 udp
N/A 91.121.42.125:6892 udp
N/A 91.121.42.126:6892 udp
N/A 91.121.42.127:6892 udp
N/A 91.121.42.128:6892 udp
N/A 91.121.42.129:6892 udp
N/A 91.121.42.130:6892 udp
N/A 91.121.42.131:6892 udp
N/A 91.121.42.132:6892 udp
N/A 91.121.42.133:6892 udp
N/A 91.121.42.134:6892 udp
N/A 91.121.42.135:6892 udp
N/A 91.121.42.136:6892 udp
N/A 91.121.42.137:6892 udp
N/A 91.121.42.138:6892 udp
N/A 91.121.42.139:6892 udp
N/A 91.121.42.140:6892 udp
N/A 91.121.42.141:6892 udp
N/A 91.121.42.142:6892 udp
N/A 91.121.42.143:6892 udp
N/A 91.121.42.144:6892 udp
N/A 91.121.42.145:6892 udp
N/A 91.121.42.146:6892 udp
N/A 91.121.42.147:6892 udp
N/A 91.121.42.148:6892 udp
N/A 91.121.42.149:6892 udp
N/A 91.121.42.150:6892 udp
N/A 91.121.42.151:6892 udp
N/A 91.121.42.152:6892 udp
N/A 91.121.42.153:6892 udp
N/A 91.121.42.154:6892 udp
N/A 91.121.42.155:6892 udp
N/A 91.121.42.156:6892 udp
N/A 91.121.42.157:6892 udp
N/A 91.121.42.158:6892 udp
N/A 91.121.42.159:6892 udp
N/A 91.121.42.160:6892 udp
N/A 91.121.42.161:6892 udp
N/A 91.121.42.162:6892 udp
N/A 91.121.42.163:6892 udp
N/A 91.121.42.164:6892 udp
N/A 91.121.42.165:6892 udp
N/A 91.121.42.166:6892 udp
N/A 91.121.42.167:6892 udp
N/A 91.121.42.168:6892 udp
N/A 91.121.42.169:6892 udp
N/A 91.121.42.170:6892 udp
N/A 91.121.42.171:6892 udp
N/A 91.121.42.172:6892 udp
N/A 91.121.42.173:6892 udp
N/A 91.121.42.174:6892 udp
N/A 91.121.42.175:6892 udp
N/A 91.121.42.176:6892 udp
N/A 91.121.42.177:6892 udp
N/A 91.121.42.178:6892 udp
N/A 91.121.42.179:6892 udp
N/A 91.121.42.180:6892 udp
N/A 91.121.42.181:6892 udp
N/A 91.121.42.182:6892 udp
N/A 91.121.42.183:6892 udp
N/A 91.121.42.184:6892 udp
N/A 91.121.42.185:6892 udp
N/A 91.121.42.186:6892 udp
N/A 91.121.42.187:6892 udp
N/A 91.121.42.188:6892 udp
N/A 91.121.42.189:6892 udp
N/A 91.121.42.190:6892 udp
N/A 91.121.42.191:6892 udp
N/A 91.121.42.192:6892 udp
N/A 91.121.42.193:6892 udp
N/A 91.121.42.194:6892 udp
N/A 91.121.42.195:6892 udp
N/A 91.121.42.196:6892 udp
N/A 91.121.42.197:6892 udp
N/A 91.121.42.198:6892 udp
N/A 91.121.42.199:6892 udp
N/A 91.121.42.200:6892 udp
N/A 91.121.42.201:6892 udp
N/A 91.121.42.202:6892 udp
N/A 91.121.42.203:6892 udp
N/A 91.121.42.204:6892 udp
N/A 91.121.42.205:6892 udp
N/A 91.121.42.206:6892 udp
N/A 91.121.42.207:6892 udp
N/A 91.121.42.208:6892 udp
N/A 91.121.42.209:6892 udp
N/A 91.121.42.210:6892 udp
N/A 91.121.42.211:6892 udp
N/A 91.121.42.212:6892 udp
N/A 91.121.42.213:6892 udp
N/A 91.121.42.214:6892 udp
N/A 91.121.42.215:6892 udp
N/A 91.121.42.216:6892 udp
N/A 91.121.42.217:6892 udp
N/A 91.121.42.218:6892 udp
N/A 91.121.42.219:6892 udp
N/A 91.121.42.220:6892 udp
N/A 91.121.42.221:6892 udp
N/A 91.121.42.222:6892 udp
N/A 91.121.42.223:6892 udp
N/A 91.121.42.224:6892 udp
N/A 91.121.42.225:6892 udp
N/A 91.121.42.226:6892 udp
N/A 91.121.42.227:6892 udp
N/A 91.121.42.228:6892 udp
N/A 91.121.42.229:6892 udp
N/A 91.121.42.230:6892 udp
N/A 91.121.42.231:6892 udp
N/A 91.121.42.232:6892 udp
N/A 91.121.42.233:6892 udp
N/A 91.121.42.234:6892 udp
N/A 91.121.42.235:6892 udp
N/A 91.121.42.236:6892 udp
N/A 91.121.42.237:6892 udp
N/A 91.121.42.238:6892 udp
N/A 91.121.42.239:6892 udp
N/A 91.121.42.240:6892 udp
N/A 91.121.42.241:6892 udp
N/A 91.121.42.242:6892 udp
N/A 91.121.42.243:6892 udp
N/A 91.121.42.244:6892 udp
N/A 91.121.42.245:6892 udp
N/A 91.121.42.246:6892 udp
N/A 91.121.42.247:6892 udp
N/A 91.121.42.248:6892 udp
N/A 91.121.42.249:6892 udp
N/A 91.121.42.250:6892 udp
N/A 91.121.42.251:6892 udp
N/A 91.121.42.252:6892 udp
N/A 91.121.42.253:6892 udp
N/A 91.121.42.254:6892 udp
N/A 91.121.42.255:6892 udp
N/A 91.121.43.0:6892 udp
N/A 91.121.43.1:6892 udp
N/A 91.121.43.2:6892 udp
N/A 91.121.43.3:6892 udp
N/A 91.121.43.4:6892 udp
N/A 91.121.43.5:6892 udp
N/A 91.121.43.6:6892 udp
N/A 91.121.43.7:6892 udp
N/A 91.121.43.8:6892 udp
N/A 91.121.43.9:6892 udp
N/A 91.121.43.10:6892 udp
N/A 91.121.43.11:6892 udp
N/A 91.121.43.12:6892 udp
N/A 91.121.43.13:6892 udp
N/A 91.121.43.14:6892 udp
N/A 91.121.43.15:6892 udp
N/A 91.121.43.16:6892 udp
N/A 91.121.43.17:6892 udp
N/A 91.121.43.18:6892 udp
N/A 91.121.43.19:6892 udp
N/A 91.121.43.20:6892 udp
N/A 91.121.43.21:6892 udp
N/A 91.121.43.22:6892 udp
N/A 91.121.43.23:6892 udp
N/A 91.121.43.24:6892 udp
N/A 91.121.43.25:6892 udp
N/A 91.121.43.26:6892 udp
N/A 91.121.43.27:6892 udp
N/A 91.121.43.28:6892 udp
N/A 91.121.43.29:6892 udp
N/A 91.121.43.30:6892 udp
N/A 91.121.43.31:6892 udp
N/A 91.121.43.32:6892 udp
N/A 91.121.43.33:6892 udp
N/A 91.121.43.34:6892 udp
N/A 91.121.43.35:6892 udp
N/A 91.121.43.36:6892 udp
N/A 91.121.43.37:6892 udp
N/A 91.121.43.38:6892 udp
N/A 91.121.43.39:6892 udp
N/A 91.121.43.40:6892 udp
N/A 91.121.43.41:6892 udp
N/A 91.121.43.42:6892 udp
N/A 91.121.43.43:6892 udp
N/A 91.121.43.44:6892 udp
N/A 91.121.43.45:6892 udp
N/A 91.121.43.46:6892 udp
N/A 91.121.43.47:6892 udp
N/A 91.121.43.48:6892 udp
N/A 91.121.43.49:6892 udp
N/A 91.121.43.50:6892 udp
N/A 91.121.43.51:6892 udp
N/A 91.121.43.52:6892 udp
N/A 91.121.43.53:6892 udp
N/A 91.121.43.54:6892 udp
N/A 91.121.43.55:6892 udp
N/A 91.121.43.56:6892 udp
N/A 91.121.43.57:6892 udp
N/A 91.121.43.58:6892 udp
N/A 91.121.43.59:6892 udp
N/A 91.121.43.60:6892 udp
N/A 91.121.43.61:6892 udp
N/A 91.121.43.62:6892 udp
N/A 91.121.43.63:6892 udp
N/A 91.121.43.64:6892 udp
N/A 91.121.43.65:6892 udp
N/A 91.121.43.66:6892 udp
N/A 91.121.43.67:6892 udp
N/A 91.121.43.68:6892 udp
N/A 91.121.43.69:6892 udp
N/A 91.121.43.70:6892 udp
N/A 91.121.43.71:6892 udp
N/A 91.121.43.72:6892 udp
N/A 91.121.43.73:6892 udp
N/A 91.121.43.74:6892 udp
N/A 91.121.43.75:6892 udp
N/A 91.121.43.76:6892 udp
N/A 91.121.43.77:6892 udp
N/A 91.121.43.78:6892 udp
N/A 91.121.43.79:6892 udp
N/A 91.121.43.80:6892 udp
N/A 91.121.43.81:6892 udp
N/A 91.121.43.82:6892 udp
N/A 91.121.43.83:6892 udp
N/A 91.121.43.84:6892 udp
N/A 91.121.43.85:6892 udp
N/A 91.121.43.86:6892 udp
N/A 91.121.43.87:6892 udp
N/A 91.121.43.88:6892 udp
N/A 91.121.43.89:6892 udp
N/A 91.121.43.90:6892 udp
N/A 91.121.43.91:6892 udp
N/A 91.121.43.92:6892 udp
N/A 91.121.43.93:6892 udp
N/A 91.121.43.94:6892 udp
N/A 91.121.43.95:6892 udp
N/A 91.121.43.96:6892 udp
N/A 91.121.43.97:6892 udp
N/A 91.121.43.98:6892 udp
N/A 91.121.43.99:6892 udp
N/A 91.121.43.100:6892 udp
N/A 91.121.43.101:6892 udp
N/A 91.121.43.102:6892 udp
N/A 91.121.43.103:6892 udp
N/A 91.121.43.104:6892 udp
N/A 91.121.43.105:6892 udp
N/A 91.121.43.106:6892 udp
N/A 91.121.43.107:6892 udp
N/A 91.121.43.108:6892 udp
N/A 91.121.43.109:6892 udp
N/A 91.121.43.110:6892 udp
N/A 91.121.43.111:6892 udp
N/A 91.121.43.112:6892 udp
N/A 91.121.43.113:6892 udp
N/A 91.121.43.114:6892 udp
N/A 91.121.43.115:6892 udp
N/A 91.121.43.116:6892 udp
N/A 91.121.43.117:6892 udp
N/A 91.121.43.118:6892 udp
N/A 91.121.43.119:6892 udp
N/A 91.121.43.120:6892 udp
N/A 91.121.43.121:6892 udp
N/A 91.121.43.122:6892 udp
N/A 91.121.43.123:6892 udp
N/A 91.121.43.124:6892 udp
N/A 91.121.43.125:6892 udp
N/A 91.121.43.126:6892 udp
N/A 91.121.43.127:6892 udp
N/A 91.121.43.128:6892 udp
N/A 91.121.43.129:6892 udp
N/A 91.121.43.130:6892 udp
N/A 91.121.43.131:6892 udp
N/A 91.121.43.132:6892 udp
N/A 91.121.43.133:6892 udp
N/A 91.121.43.134:6892 udp
N/A 91.121.43.135:6892 udp
N/A 91.121.43.136:6892 udp
N/A 91.121.43.137:6892 udp
N/A 91.121.43.138:6892 udp
N/A 91.121.43.139:6892 udp
N/A 91.121.43.140:6892 udp
N/A 91.121.43.141:6892 udp
N/A 91.121.43.142:6892 udp
N/A 91.121.43.143:6892 udp
N/A 91.121.43.144:6892 udp
N/A 91.121.43.145:6892 udp
N/A 91.121.43.146:6892 udp
N/A 91.121.43.147:6892 udp
N/A 91.121.43.148:6892 udp
N/A 91.121.43.149:6892 udp
N/A 91.121.43.150:6892 udp
N/A 91.121.43.151:6892 udp
N/A 91.121.43.152:6892 udp
N/A 91.121.43.153:6892 udp
N/A 91.121.43.154:6892 udp
N/A 91.121.43.155:6892 udp
N/A 91.121.43.156:6892 udp
N/A 91.121.43.157:6892 udp
N/A 91.121.43.158:6892 udp
N/A 91.121.43.159:6892 udp
N/A 91.121.43.160:6892 udp
N/A 91.121.43.161:6892 udp
N/A 91.121.43.162:6892 udp
N/A 91.121.43.163:6892 udp
N/A 91.121.43.164:6892 udp
N/A 91.121.43.165:6892 udp
N/A 91.121.43.166:6892 udp
N/A 91.121.43.167:6892 udp
N/A 91.121.43.168:6892 udp
N/A 91.121.43.169:6892 udp
N/A 91.121.43.170:6892 udp
N/A 91.121.43.171:6892 udp
N/A 91.121.43.172:6892 udp
N/A 91.121.43.173:6892 udp
N/A 91.121.43.174:6892 udp
N/A 91.121.43.175:6892 udp
N/A 91.121.43.176:6892 udp
N/A 91.121.43.177:6892 udp
N/A 91.121.43.178:6892 udp
N/A 91.121.43.179:6892 udp
N/A 91.121.43.180:6892 udp
N/A 91.121.43.181:6892 udp
N/A 91.121.43.182:6892 udp
N/A 91.121.43.183:6892 udp
N/A 91.121.43.184:6892 udp
N/A 91.121.43.185:6892 udp
N/A 91.121.43.186:6892 udp
N/A 91.121.43.187:6892 udp
N/A 91.121.43.188:6892 udp
N/A 91.121.43.189:6892 udp
N/A 91.121.43.190:6892 udp
N/A 91.121.43.191:6892 udp
N/A 91.121.43.192:6892 udp
N/A 91.121.43.193:6892 udp
N/A 91.121.43.194:6892 udp
N/A 91.121.43.195:6892 udp
N/A 91.121.43.196:6892 udp
N/A 91.121.43.197:6892 udp
N/A 91.121.43.198:6892 udp
N/A 91.121.43.199:6892 udp
N/A 91.121.43.200:6892 udp
N/A 91.121.43.201:6892 udp
N/A 91.121.43.202:6892 udp
N/A 91.121.43.203:6892 udp
N/A 91.121.43.204:6892 udp
N/A 91.121.43.205:6892 udp
N/A 91.121.43.206:6892 udp
N/A 91.121.43.207:6892 udp
N/A 91.121.43.208:6892 udp
N/A 91.121.43.209:6892 udp
N/A 91.121.43.210:6892 udp
N/A 91.121.43.211:6892 udp
N/A 91.121.43.212:6892 udp
N/A 91.121.43.213:6892 udp
N/A 91.121.43.214:6892 udp
N/A 91.121.43.215:6892 udp
N/A 91.121.43.216:6892 udp
N/A 91.121.43.217:6892 udp
N/A 91.121.43.218:6892 udp
N/A 91.121.43.219:6892 udp
N/A 91.121.43.220:6892 udp
N/A 91.121.43.221:6892 udp
N/A 91.121.43.222:6892 udp
N/A 91.121.43.223:6892 udp
N/A 91.121.43.224:6892 udp
N/A 91.121.43.225:6892 udp
N/A 91.121.43.226:6892 udp
N/A 91.121.43.227:6892 udp
N/A 91.121.43.228:6892 udp
N/A 91.121.43.229:6892 udp
N/A 91.121.43.230:6892 udp
N/A 91.121.43.231:6892 udp
N/A 91.121.43.232:6892 udp
N/A 91.121.43.233:6892 udp
N/A 91.121.43.234:6892 udp
N/A 91.121.43.235:6892 udp
N/A 91.121.43.236:6892 udp
N/A 91.121.43.237:6892 udp
N/A 91.121.43.238:6892 udp
N/A 91.121.43.239:6892 udp
N/A 91.121.43.240:6892 udp
N/A 91.121.43.241:6892 udp
N/A 91.121.43.242:6892 udp
N/A 91.121.43.243:6892 udp
N/A 91.121.43.244:6892 udp
N/A 91.121.43.245:6892 udp
N/A 91.121.43.246:6892 udp
N/A 91.121.43.247:6892 udp
N/A 91.121.43.248:6892 udp
N/A 91.121.43.249:6892 udp
N/A 91.121.43.250:6892 udp
N/A 91.121.43.251:6892 udp
N/A 91.121.43.252:6892 udp
N/A 91.121.43.253:6892 udp
N/A 91.121.43.254:6892 udp
N/A 91.121.43.255:6892 udp
N/A 91.117.40.0:6892 udp
N/A 91.117.40.1:6892 udp
N/A 91.117.40.2:6892 udp
N/A 91.117.40.3:6892 udp
N/A 91.117.40.4:6892 udp
N/A 91.117.40.5:6892 udp
N/A 91.117.40.6:6892 udp
N/A 91.117.40.7:6892 udp
N/A 91.117.40.8:6892 udp
N/A 91.117.40.9:6892 udp
N/A 91.117.40.10:6892 udp
N/A 91.117.40.11:6892 udp
N/A 91.117.40.12:6892 udp
N/A 91.117.40.13:6892 udp
N/A 91.117.40.14:6892 udp
N/A 91.117.40.15:6892 udp
N/A 91.117.40.16:6892 udp
N/A 91.117.40.17:6892 udp
N/A 91.117.40.18:6892 udp
N/A 91.117.40.19:6892 udp
N/A 91.117.40.20:6892 udp
N/A 91.117.40.21:6892 udp
N/A 91.117.40.22:6892 udp
N/A 91.117.40.23:6892 udp
N/A 91.117.40.24:6892 udp
N/A 91.117.40.25:6892 udp
N/A 91.117.40.26:6892 udp
N/A 91.117.40.27:6892 udp
N/A 91.117.40.28:6892 udp
N/A 91.117.40.29:6892 udp
N/A 91.117.40.30:6892 udp
N/A 91.117.40.31:6892 udp
N/A 91.119.40.0:6892 udp
N/A 91.119.40.1:6892 udp
N/A 91.119.40.2:6892 udp
N/A 91.119.40.3:6892 udp
N/A 91.119.40.4:6892 udp
N/A 91.119.40.5:6892 udp
N/A 91.119.40.6:6892 udp
N/A 91.119.40.7:6892 udp
N/A 91.119.40.8:6892 udp
N/A 91.119.40.9:6892 udp
N/A 91.119.40.10:6892 udp
N/A 91.119.40.11:6892 udp
N/A 91.119.40.12:6892 udp
N/A 91.119.40.13:6892 udp
N/A 91.119.40.14:6892 udp
N/A 91.119.40.15:6892 udp
N/A 91.119.40.16:6892 udp
N/A 91.119.40.17:6892 udp
N/A 91.119.40.18:6892 udp
N/A 91.119.40.19:6892 udp
N/A 91.119.40.20:6892 udp
N/A 91.119.40.21:6892 udp
N/A 91.119.40.22:6892 udp
N/A 91.119.40.23:6892 udp
N/A 91.119.40.24:6892 udp
N/A 91.119.40.25:6892 udp
N/A 91.119.40.26:6892 udp
N/A 91.119.40.27:6892 udp
N/A 91.119.40.28:6892 udp
N/A 91.119.40.29:6892 udp
N/A 91.119.40.30:6892 udp
N/A 91.119.40.31:6892 udp
N/A 91.121.40.0:6892 udp
N/A 91.121.40.1:6892 udp
N/A 91.121.40.2:6892 udp
N/A 91.121.40.3:6892 udp
N/A 91.121.40.4:6892 udp
N/A 91.121.40.5:6892 udp
N/A 91.121.40.6:6892 udp
N/A 91.121.40.7:6892 udp
N/A 91.121.40.8:6892 udp
N/A 91.121.40.9:6892 udp
N/A 91.121.40.10:6892 udp
N/A 91.121.40.11:6892 udp
N/A 91.121.40.12:6892 udp
N/A 91.121.40.13:6892 udp
N/A 91.121.40.14:6892 udp
N/A 91.121.40.15:6892 udp
N/A 91.121.40.16:6892 udp
N/A 91.121.40.17:6892 udp
N/A 91.121.40.18:6892 udp
N/A 91.121.40.19:6892 udp
N/A 91.121.40.20:6892 udp
N/A 91.121.40.21:6892 udp
N/A 91.121.40.22:6892 udp
N/A 91.121.40.23:6892 udp
N/A 91.121.40.24:6892 udp
N/A 91.121.40.25:6892 udp
N/A 91.121.40.26:6892 udp
N/A 91.121.40.27:6892 udp
N/A 91.121.40.28:6892 udp
N/A 91.121.40.29:6892 udp
N/A 91.121.40.30:6892 udp
N/A 91.121.40.31:6892 udp
N/A 91.121.40.32:6892 udp
N/A 91.121.40.33:6892 udp
N/A 91.121.40.34:6892 udp
N/A 91.121.40.35:6892 udp
N/A 91.121.40.36:6892 udp
N/A 91.121.40.37:6892 udp
N/A 91.121.40.38:6892 udp
N/A 91.121.40.39:6892 udp
N/A 91.121.40.40:6892 udp
N/A 91.121.40.41:6892 udp
N/A 91.121.40.42:6892 udp
N/A 91.121.40.43:6892 udp
N/A 91.121.40.44:6892 udp
N/A 91.121.40.45:6892 udp
N/A 91.121.40.46:6892 udp
N/A 91.121.40.47:6892 udp
N/A 91.121.40.48:6892 udp
N/A 91.121.40.49:6892 udp
N/A 91.121.40.50:6892 udp
N/A 91.121.40.51:6892 udp
N/A 91.121.40.52:6892 udp
N/A 91.121.40.53:6892 udp
N/A 91.121.40.54:6892 udp
N/A 91.121.40.55:6892 udp
N/A 91.121.40.56:6892 udp
N/A 91.121.40.57:6892 udp
N/A 91.121.40.58:6892 udp
N/A 91.121.40.59:6892 udp
N/A 91.121.40.60:6892 udp
N/A 91.121.40.61:6892 udp
N/A 91.121.40.62:6892 udp
N/A 91.121.40.63:6892 udp
N/A 91.121.40.64:6892 udp
N/A 91.121.40.65:6892 udp
N/A 91.121.40.66:6892 udp
N/A 91.121.40.67:6892 udp
N/A 91.121.40.68:6892 udp
N/A 91.121.40.69:6892 udp
N/A 91.121.40.70:6892 udp
N/A 91.121.40.71:6892 udp
N/A 91.121.40.72:6892 udp
N/A 91.121.40.73:6892 udp
N/A 91.121.40.74:6892 udp
N/A 91.121.40.75:6892 udp
N/A 91.121.40.76:6892 udp
N/A 91.121.40.77:6892 udp
N/A 91.121.40.78:6892 udp
N/A 91.121.40.79:6892 udp
N/A 91.121.40.80:6892 udp
N/A 91.121.40.81:6892 udp
N/A 91.121.40.82:6892 udp
N/A 91.121.40.83:6892 udp
N/A 91.121.40.84:6892 udp
N/A 91.121.40.85:6892 udp
N/A 91.121.40.86:6892 udp
N/A 91.121.40.87:6892 udp
N/A 91.121.40.88:6892 udp
N/A 91.121.40.89:6892 udp
N/A 91.121.40.90:6892 udp
N/A 91.121.40.91:6892 udp
N/A 91.121.40.92:6892 udp
N/A 91.121.40.93:6892 udp
N/A 91.121.40.94:6892 udp
N/A 91.121.40.95:6892 udp
N/A 91.121.40.96:6892 udp
N/A 91.121.40.97:6892 udp
N/A 91.121.40.98:6892 udp
N/A 91.121.40.99:6892 udp
N/A 91.121.40.100:6892 udp
N/A 91.121.40.101:6892 udp
N/A 91.121.40.102:6892 udp
N/A 91.121.40.103:6892 udp
N/A 91.121.40.104:6892 udp
N/A 91.121.40.105:6892 udp
N/A 91.121.40.106:6892 udp
N/A 91.121.40.107:6892 udp
N/A 91.121.40.108:6892 udp
N/A 91.121.40.109:6892 udp
N/A 91.121.40.110:6892 udp
N/A 91.121.40.111:6892 udp
N/A 91.121.40.112:6892 udp
N/A 91.121.40.113:6892 udp
N/A 91.121.40.114:6892 udp
N/A 91.121.40.115:6892 udp
N/A 91.121.40.116:6892 udp
N/A 91.121.40.117:6892 udp
N/A 91.121.40.118:6892 udp
N/A 91.121.40.119:6892 udp
N/A 91.121.40.120:6892 udp
N/A 91.121.40.121:6892 udp
N/A 91.121.40.122:6892 udp
N/A 91.121.40.123:6892 udp
N/A 91.121.40.124:6892 udp
N/A 91.121.40.125:6892 udp
N/A 91.121.40.126:6892 udp
N/A 91.121.40.127:6892 udp
N/A 91.121.40.128:6892 udp
N/A 91.121.40.129:6892 udp
N/A 91.121.40.130:6892 udp
N/A 91.121.40.131:6892 udp
N/A 91.121.40.132:6892 udp
N/A 91.121.40.133:6892 udp
N/A 91.121.40.134:6892 udp
N/A 91.121.40.135:6892 udp
N/A 91.121.40.136:6892 udp
N/A 91.121.40.137:6892 udp
N/A 91.121.40.138:6892 udp
N/A 91.121.40.139:6892 udp
N/A 91.121.40.140:6892 udp
N/A 91.121.40.141:6892 udp
N/A 91.121.40.142:6892 udp
N/A 91.121.40.143:6892 udp
N/A 91.121.40.144:6892 udp
N/A 91.121.40.145:6892 udp
N/A 91.121.40.146:6892 udp
N/A 91.121.40.147:6892 udp
N/A 91.121.40.148:6892 udp
N/A 91.121.40.149:6892 udp
N/A 91.121.40.150:6892 udp
N/A 91.121.40.151:6892 udp
N/A 91.121.40.152:6892 udp
N/A 91.121.40.153:6892 udp
N/A 91.121.40.154:6892 udp
N/A 91.121.40.155:6892 udp
N/A 91.121.40.156:6892 udp
N/A 91.121.40.157:6892 udp
N/A 91.121.40.158:6892 udp
N/A 91.121.40.159:6892 udp
N/A 91.121.40.160:6892 udp
N/A 91.121.40.161:6892 udp
N/A 91.121.40.162:6892 udp
N/A 91.121.40.163:6892 udp
N/A 91.121.40.164:6892 udp
N/A 91.121.40.165:6892 udp
N/A 91.121.40.166:6892 udp
N/A 91.121.40.167:6892 udp
N/A 91.121.40.168:6892 udp
N/A 91.121.40.169:6892 udp
N/A 91.121.40.170:6892 udp
N/A 91.121.40.171:6892 udp
N/A 91.121.40.172:6892 udp
N/A 91.121.40.173:6892 udp
N/A 91.121.40.174:6892 udp
N/A 91.121.40.175:6892 udp
N/A 91.121.40.176:6892 udp
N/A 91.121.40.177:6892 udp
N/A 91.121.40.178:6892 udp
N/A 91.121.40.179:6892 udp
N/A 91.121.40.180:6892 udp
N/A 91.121.40.181:6892 udp
N/A 91.121.40.182:6892 udp
N/A 91.121.40.183:6892 udp
N/A 91.121.40.184:6892 udp
N/A 91.121.40.185:6892 udp
N/A 91.121.40.186:6892 udp
N/A 91.121.40.187:6892 udp
N/A 91.121.40.188:6892 udp
N/A 91.121.40.189:6892 udp
N/A 91.121.40.190:6892 udp
N/A 91.121.40.191:6892 udp
N/A 91.121.40.192:6892 udp
N/A 91.121.40.193:6892 udp
N/A 91.121.40.194:6892 udp
N/A 91.121.40.195:6892 udp
N/A 91.121.40.196:6892 udp
N/A 91.121.40.197:6892 udp
N/A 91.121.40.198:6892 udp
N/A 91.121.40.199:6892 udp
N/A 91.121.40.200:6892 udp
N/A 91.121.40.201:6892 udp
N/A 91.121.40.202:6892 udp
N/A 91.121.40.203:6892 udp
N/A 91.121.40.204:6892 udp
N/A 91.121.40.205:6892 udp
N/A 91.121.40.206:6892 udp
N/A 91.121.40.207:6892 udp
N/A 91.121.40.208:6892 udp
N/A 91.121.40.209:6892 udp
N/A 91.121.40.210:6892 udp
N/A 91.121.40.211:6892 udp
N/A 91.121.40.212:6892 udp
N/A 91.121.40.213:6892 udp
N/A 91.121.40.214:6892 udp
N/A 91.121.40.215:6892 udp
N/A 91.121.40.216:6892 udp
N/A 91.121.40.217:6892 udp
N/A 91.121.40.218:6892 udp
N/A 91.121.40.219:6892 udp
N/A 91.121.40.220:6892 udp
N/A 91.121.40.221:6892 udp
N/A 91.121.40.222:6892 udp
N/A 91.121.40.223:6892 udp
N/A 91.121.40.224:6892 udp
N/A 91.121.40.225:6892 udp
N/A 91.121.40.226:6892 udp
N/A 91.121.40.227:6892 udp
N/A 91.121.40.228:6892 udp
N/A 91.121.40.229:6892 udp
N/A 91.121.40.230:6892 udp
N/A 91.121.40.231:6892 udp
N/A 91.121.40.232:6892 udp
N/A 91.121.40.233:6892 udp
N/A 91.121.40.234:6892 udp
N/A 91.121.40.235:6892 udp
N/A 91.121.40.236:6892 udp
N/A 91.121.40.237:6892 udp
N/A 91.121.40.238:6892 udp
N/A 91.121.40.239:6892 udp
N/A 91.121.40.240:6892 udp
N/A 91.121.40.241:6892 udp
N/A 91.121.40.242:6892 udp
N/A 91.121.40.243:6892 udp
N/A 91.121.40.244:6892 udp
N/A 91.121.40.245:6892 udp
N/A 91.121.40.246:6892 udp
N/A 91.121.40.247:6892 udp
N/A 91.121.40.248:6892 udp
N/A 91.121.40.249:6892 udp
N/A 91.121.40.250:6892 udp
N/A 91.121.40.251:6892 udp
N/A 91.121.40.252:6892 udp
N/A 91.121.40.253:6892 udp
N/A 91.121.40.254:6892 udp
N/A 91.121.40.255:6892 udp
N/A 91.121.41.0:6892 udp
N/A 91.121.41.1:6892 udp
N/A 91.121.41.2:6892 udp
N/A 91.121.41.3:6892 udp
N/A 91.121.41.4:6892 udp
N/A 91.121.41.5:6892 udp
N/A 91.121.41.6:6892 udp
N/A 91.121.41.7:6892 udp
N/A 91.121.41.8:6892 udp
N/A 91.121.41.9:6892 udp
N/A 91.121.41.10:6892 udp
N/A 91.121.41.11:6892 udp
N/A 91.121.41.12:6892 udp
N/A 91.121.41.13:6892 udp
N/A 91.121.41.14:6892 udp
N/A 91.121.41.15:6892 udp
N/A 91.121.41.16:6892 udp
N/A 91.121.41.17:6892 udp
N/A 91.121.41.18:6892 udp
N/A 91.121.41.19:6892 udp
N/A 91.121.41.20:6892 udp
N/A 91.121.41.21:6892 udp
N/A 91.121.41.22:6892 udp
N/A 91.121.41.23:6892 udp
N/A 91.121.41.24:6892 udp
N/A 91.121.41.25:6892 udp
N/A 91.121.41.26:6892 udp
N/A 91.121.41.27:6892 udp
N/A 91.121.41.28:6892 udp
N/A 91.121.41.29:6892 udp
N/A 91.121.41.30:6892 udp
N/A 91.121.41.31:6892 udp
N/A 91.121.41.32:6892 udp
N/A 91.121.41.33:6892 udp
N/A 91.121.41.34:6892 udp
N/A 91.121.41.35:6892 udp
N/A 91.121.41.36:6892 udp
N/A 91.121.41.37:6892 udp
N/A 91.121.41.38:6892 udp
N/A 91.121.41.39:6892 udp
N/A 91.121.41.40:6892 udp
N/A 91.121.41.41:6892 udp
N/A 91.121.41.42:6892 udp
N/A 91.121.41.43:6892 udp
N/A 91.121.41.44:6892 udp
N/A 91.121.41.45:6892 udp
N/A 91.121.41.46:6892 udp
N/A 91.121.41.47:6892 udp
N/A 91.121.41.48:6892 udp
N/A 91.121.41.49:6892 udp
N/A 91.121.41.50:6892 udp
N/A 91.121.41.51:6892 udp
N/A 91.121.41.52:6892 udp
N/A 91.121.41.53:6892 udp
N/A 91.121.41.54:6892 udp
N/A 91.121.41.55:6892 udp
N/A 91.121.41.56:6892 udp
N/A 91.121.41.57:6892 udp
N/A 91.121.41.58:6892 udp
N/A 91.121.41.59:6892 udp
N/A 91.121.41.60:6892 udp
N/A 91.121.41.61:6892 udp
N/A 91.121.41.62:6892 udp
N/A 91.121.41.63:6892 udp
N/A 91.121.41.64:6892 udp
N/A 91.121.41.65:6892 udp
N/A 91.121.41.66:6892 udp
N/A 91.121.41.67:6892 udp
N/A 91.121.41.68:6892 udp
N/A 91.121.41.69:6892 udp
N/A 91.121.41.70:6892 udp
N/A 91.121.41.71:6892 udp
N/A 91.121.41.72:6892 udp
N/A 91.121.41.73:6892 udp
N/A 91.121.41.74:6892 udp
N/A 91.121.41.75:6892 udp
N/A 91.121.41.76:6892 udp
N/A 91.121.41.77:6892 udp
N/A 91.121.41.78:6892 udp
N/A 91.121.41.79:6892 udp
N/A 91.121.41.80:6892 udp
N/A 91.121.41.81:6892 udp
N/A 91.121.41.82:6892 udp
N/A 91.121.41.83:6892 udp
N/A 91.121.41.84:6892 udp
N/A 91.121.41.85:6892 udp
N/A 91.121.41.86:6892 udp
N/A 91.121.41.87:6892 udp
N/A 91.121.41.88:6892 udp
N/A 91.121.41.89:6892 udp
N/A 91.121.41.90:6892 udp
N/A 91.121.41.91:6892 udp
N/A 91.121.41.92:6892 udp
N/A 91.121.41.93:6892 udp
N/A 91.121.41.94:6892 udp
N/A 91.121.41.95:6892 udp
N/A 91.121.41.96:6892 udp
N/A 91.121.41.97:6892 udp
N/A 91.121.41.98:6892 udp
N/A 91.121.41.99:6892 udp
N/A 91.121.41.100:6892 udp
N/A 91.121.41.101:6892 udp
N/A 91.121.41.102:6892 udp
N/A 91.121.41.103:6892 udp
N/A 91.121.41.104:6892 udp
N/A 91.121.41.105:6892 udp
N/A 91.121.41.106:6892 udp
N/A 91.121.41.107:6892 udp
N/A 91.121.41.108:6892 udp
N/A 91.121.41.109:6892 udp
N/A 91.121.41.110:6892 udp
N/A 91.121.41.111:6892 udp
N/A 91.121.41.112:6892 udp
N/A 91.121.41.113:6892 udp
N/A 91.121.41.114:6892 udp
N/A 91.121.41.115:6892 udp
N/A 91.121.41.116:6892 udp
N/A 91.121.41.117:6892 udp
N/A 91.121.41.118:6892 udp
N/A 91.121.41.119:6892 udp
N/A 91.121.41.120:6892 udp
N/A 91.121.41.121:6892 udp
N/A 91.121.41.122:6892 udp
N/A 91.121.41.123:6892 udp
N/A 91.121.41.124:6892 udp
N/A 91.121.41.125:6892 udp
N/A 91.121.41.126:6892 udp
N/A 91.121.41.127:6892 udp
N/A 91.121.41.128:6892 udp
N/A 91.121.41.129:6892 udp
N/A 91.121.41.130:6892 udp
N/A 91.121.41.131:6892 udp
N/A 91.121.41.132:6892 udp
N/A 91.121.41.133:6892 udp
N/A 91.121.41.134:6892 udp
N/A 91.121.41.135:6892 udp
N/A 91.121.41.136:6892 udp
N/A 91.121.41.137:6892 udp
N/A 91.121.41.138:6892 udp
N/A 91.121.41.139:6892 udp
N/A 91.121.41.140:6892 udp
N/A 91.121.41.141:6892 udp
N/A 91.121.41.142:6892 udp
N/A 91.121.41.143:6892 udp
N/A 91.121.41.144:6892 udp
N/A 91.121.41.145:6892 udp
N/A 91.121.41.146:6892 udp
N/A 91.121.41.147:6892 udp
N/A 91.121.41.148:6892 udp
N/A 91.121.41.149:6892 udp
N/A 91.121.41.150:6892 udp
N/A 91.121.41.151:6892 udp
N/A 91.121.41.152:6892 udp
N/A 91.121.41.153:6892 udp
N/A 91.121.41.154:6892 udp
N/A 91.121.41.155:6892 udp
N/A 91.121.41.156:6892 udp
N/A 91.121.41.157:6892 udp
N/A 91.121.41.158:6892 udp
N/A 91.121.41.159:6892 udp
N/A 91.121.41.160:6892 udp
N/A 91.121.41.161:6892 udp
N/A 91.121.41.162:6892 udp
N/A 91.121.41.163:6892 udp
N/A 91.121.41.164:6892 udp
N/A 91.121.41.165:6892 udp
N/A 91.121.41.166:6892 udp
N/A 91.121.41.167:6892 udp
N/A 91.121.41.168:6892 udp
N/A 91.121.41.169:6892 udp
N/A 91.121.41.170:6892 udp
N/A 91.121.41.171:6892 udp
N/A 91.121.41.172:6892 udp
N/A 91.121.41.173:6892 udp
N/A 91.121.41.174:6892 udp
N/A 91.121.41.175:6892 udp
N/A 91.121.41.176:6892 udp
N/A 91.121.41.177:6892 udp
N/A 91.121.41.178:6892 udp
N/A 91.121.41.179:6892 udp
N/A 91.121.41.180:6892 udp
N/A 91.121.41.181:6892 udp
N/A 91.121.41.182:6892 udp
N/A 91.121.41.183:6892 udp
N/A 91.121.41.184:6892 udp
N/A 91.121.41.185:6892 udp
N/A 91.121.41.186:6892 udp
N/A 91.121.41.187:6892 udp
N/A 91.121.41.188:6892 udp
N/A 91.121.41.189:6892 udp
N/A 91.121.41.190:6892 udp
N/A 91.121.41.191:6892 udp
N/A 91.121.41.192:6892 udp
N/A 91.121.41.193:6892 udp
N/A 91.121.41.194:6892 udp
N/A 91.121.41.195:6892 udp
N/A 91.121.41.196:6892 udp
N/A 91.121.41.197:6892 udp
N/A 91.121.41.198:6892 udp
N/A 91.121.41.199:6892 udp
N/A 91.121.41.200:6892 udp
N/A 91.121.41.201:6892 udp
N/A 91.121.41.202:6892 udp
N/A 91.121.41.203:6892 udp
N/A 91.121.41.204:6892 udp
N/A 91.121.41.205:6892 udp
N/A 91.121.41.206:6892 udp
N/A 91.121.41.207:6892 udp
N/A 91.121.41.208:6892 udp
N/A 91.121.41.209:6892 udp
N/A 91.121.41.210:6892 udp
N/A 91.121.41.211:6892 udp
N/A 91.121.41.212:6892 udp
N/A 91.121.41.213:6892 udp
N/A 91.121.41.214:6892 udp
N/A 91.121.41.215:6892 udp
N/A 91.121.41.216:6892 udp
N/A 91.121.41.217:6892 udp
N/A 91.121.41.218:6892 udp
N/A 91.121.41.219:6892 udp
N/A 91.121.41.220:6892 udp
N/A 91.121.41.221:6892 udp
N/A 91.121.41.222:6892 udp
N/A 91.121.41.223:6892 udp
N/A 91.121.41.224:6892 udp
N/A 91.121.41.225:6892 udp
N/A 91.121.41.226:6892 udp
N/A 91.121.41.227:6892 udp
N/A 91.121.41.228:6892 udp
N/A 91.121.41.229:6892 udp
N/A 91.121.41.230:6892 udp
N/A 91.121.41.231:6892 udp
N/A 91.121.41.232:6892 udp
N/A 91.121.41.233:6892 udp
N/A 91.121.41.234:6892 udp
N/A 91.121.41.235:6892 udp
N/A 91.121.41.236:6892 udp
N/A 91.121.41.237:6892 udp
N/A 91.121.41.238:6892 udp
N/A 91.121.41.239:6892 udp
N/A 91.121.41.240:6892 udp
N/A 91.121.41.241:6892 udp
N/A 91.121.41.242:6892 udp
N/A 91.121.41.243:6892 udp
N/A 91.121.41.244:6892 udp
N/A 91.121.41.245:6892 udp
N/A 91.121.41.246:6892 udp
N/A 91.121.41.247:6892 udp
N/A 91.121.41.248:6892 udp
N/A 91.121.41.249:6892 udp
N/A 91.121.41.250:6892 udp
N/A 91.121.41.251:6892 udp
N/A 91.121.41.252:6892 udp
N/A 91.121.41.253:6892 udp
N/A 91.121.41.254:6892 udp
N/A 91.121.41.255:6892 udp
N/A 91.121.42.0:6892 udp
N/A 91.121.42.1:6892 udp
N/A 91.121.42.2:6892 udp
N/A 91.121.42.3:6892 udp
N/A 91.121.42.4:6892 udp
N/A 91.121.42.5:6892 udp
N/A 91.121.42.6:6892 udp
N/A 91.121.42.7:6892 udp
N/A 91.121.42.8:6892 udp
N/A 91.121.42.9:6892 udp
N/A 91.121.42.10:6892 udp
N/A 91.121.42.11:6892 udp
N/A 91.121.42.12:6892 udp
N/A 91.121.42.13:6892 udp
N/A 91.121.42.14:6892 udp
N/A 91.121.42.15:6892 udp
N/A 91.121.42.16:6892 udp
N/A 91.121.42.17:6892 udp
N/A 91.121.42.18:6892 udp
N/A 91.121.42.19:6892 udp
N/A 91.121.42.20:6892 udp
N/A 91.121.42.21:6892 udp
N/A 91.121.42.22:6892 udp
N/A 91.121.42.23:6892 udp
N/A 91.121.42.24:6892 udp
N/A 91.121.42.25:6892 udp
N/A 91.121.42.26:6892 udp
N/A 91.121.42.27:6892 udp
N/A 91.121.42.28:6892 udp
N/A 91.121.42.29:6892 udp
N/A 91.121.42.30:6892 udp
N/A 91.121.42.31:6892 udp
N/A 91.121.42.32:6892 udp
N/A 91.121.42.33:6892 udp
N/A 91.121.42.34:6892 udp
N/A 91.121.42.35:6892 udp
N/A 91.121.42.36:6892 udp
N/A 91.121.42.37:6892 udp
N/A 91.121.42.38:6892 udp
N/A 91.121.42.39:6892 udp
N/A 91.121.42.40:6892 udp
N/A 91.121.42.41:6892 udp
N/A 91.121.42.42:6892 udp
N/A 91.121.42.43:6892 udp
N/A 91.121.42.44:6892 udp
N/A 91.121.42.45:6892 udp
N/A 91.121.42.46:6892 udp
N/A 91.121.42.47:6892 udp
N/A 91.121.42.48:6892 udp
N/A 91.121.42.49:6892 udp
N/A 91.121.42.50:6892 udp
N/A 91.121.42.51:6892 udp
N/A 91.121.42.52:6892 udp
N/A 91.121.42.53:6892 udp
N/A 91.121.42.54:6892 udp
N/A 91.121.42.55:6892 udp
N/A 91.121.42.56:6892 udp
N/A 91.121.42.57:6892 udp
N/A 91.121.42.58:6892 udp
N/A 91.121.42.59:6892 udp
N/A 91.121.42.60:6892 udp
N/A 91.121.42.61:6892 udp
N/A 91.121.42.62:6892 udp
N/A 91.121.42.63:6892 udp
N/A 91.121.42.64:6892 udp
N/A 91.121.42.65:6892 udp
N/A 91.121.42.66:6892 udp
N/A 91.121.42.67:6892 udp
N/A 91.121.42.68:6892 udp
N/A 91.121.42.69:6892 udp
N/A 91.121.42.70:6892 udp
N/A 91.121.42.71:6892 udp
N/A 91.121.42.72:6892 udp
N/A 91.121.42.73:6892 udp
N/A 91.121.42.74:6892 udp
N/A 91.121.42.75:6892 udp
N/A 91.121.42.76:6892 udp
N/A 91.121.42.77:6892 udp
N/A 91.121.42.78:6892 udp
N/A 91.121.42.79:6892 udp
N/A 91.121.42.80:6892 udp
N/A 91.121.42.81:6892 udp
N/A 91.121.42.82:6892 udp
N/A 91.121.42.83:6892 udp
N/A 91.121.42.84:6892 udp
N/A 91.121.42.85:6892 udp
N/A 91.121.42.86:6892 udp
N/A 91.121.42.87:6892 udp
N/A 91.121.42.88:6892 udp
N/A 91.121.42.89:6892 udp
N/A 91.121.42.90:6892 udp
N/A 91.121.42.91:6892 udp
N/A 91.121.42.92:6892 udp
N/A 91.121.42.93:6892 udp
N/A 91.121.42.94:6892 udp
N/A 91.121.42.95:6892 udp
N/A 91.121.42.96:6892 udp
N/A 91.121.42.97:6892 udp
N/A 91.121.42.98:6892 udp
N/A 91.121.42.99:6892 udp
N/A 91.121.42.100:6892 udp
N/A 91.121.42.101:6892 udp
N/A 91.121.42.102:6892 udp
N/A 91.121.42.103:6892 udp
N/A 91.121.42.104:6892 udp
N/A 91.121.42.105:6892 udp
N/A 91.121.42.106:6892 udp
N/A 91.121.42.107:6892 udp
N/A 91.121.42.108:6892 udp
N/A 91.121.42.109:6892 udp
N/A 91.121.42.110:6892 udp
N/A 91.121.42.111:6892 udp
N/A 91.121.42.112:6892 udp
N/A 91.121.42.113:6892 udp
N/A 91.121.42.114:6892 udp
N/A 91.121.42.115:6892 udp
N/A 91.121.42.116:6892 udp
N/A 91.121.42.117:6892 udp
N/A 91.121.42.118:6892 udp
N/A 91.121.42.119:6892 udp
N/A 91.121.42.120:6892 udp
N/A 91.121.42.121:6892 udp
N/A 91.121.42.122:6892 udp
N/A 91.121.42.123:6892 udp
N/A 91.121.42.124:6892 udp
N/A 91.121.42.125:6892 udp
N/A 91.121.42.126:6892 udp
N/A 91.121.42.127:6892 udp
N/A 91.121.42.128:6892 udp
N/A 91.121.42.129:6892 udp
N/A 91.121.42.130:6892 udp
N/A 91.121.42.131:6892 udp
N/A 91.121.42.132:6892 udp
N/A 91.121.42.133:6892 udp
N/A 91.121.42.134:6892 udp
N/A 91.121.42.135:6892 udp
N/A 91.121.42.136:6892 udp
N/A 91.121.42.137:6892 udp
N/A 91.121.42.138:6892 udp
N/A 91.121.42.139:6892 udp
N/A 91.121.42.140:6892 udp
N/A 91.121.42.141:6892 udp
N/A 91.121.42.142:6892 udp
N/A 91.121.42.143:6892 udp
N/A 91.121.42.144:6892 udp
N/A 91.121.42.145:6892 udp
N/A 91.121.42.146:6892 udp
N/A 91.121.42.147:6892 udp
N/A 91.121.42.148:6892 udp
N/A 91.121.42.149:6892 udp
N/A 91.121.42.150:6892 udp
N/A 91.121.42.151:6892 udp
N/A 91.121.42.152:6892 udp
N/A 91.121.42.153:6892 udp
N/A 91.121.42.154:6892 udp
N/A 91.121.42.155:6892 udp
N/A 91.121.42.156:6892 udp
N/A 91.121.42.157:6892 udp
N/A 91.121.42.158:6892 udp
N/A 91.121.42.159:6892 udp
N/A 91.121.42.160:6892 udp
N/A 91.121.42.161:6892 udp
N/A 91.121.42.162:6892 udp
N/A 91.121.42.163:6892 udp
N/A 91.121.42.164:6892 udp
N/A 91.121.42.165:6892 udp
N/A 91.121.42.166:6892 udp
N/A 91.121.42.167:6892 udp
N/A 91.121.42.168:6892 udp
N/A 91.121.42.169:6892 udp
N/A 91.121.42.170:6892 udp
N/A 91.121.42.171:6892 udp
N/A 91.121.42.172:6892 udp
N/A 91.121.42.173:6892 udp
N/A 91.121.42.174:6892 udp
N/A 91.121.42.175:6892 udp
N/A 91.121.42.176:6892 udp
N/A 91.121.42.177:6892 udp
N/A 91.121.42.178:6892 udp
N/A 91.121.42.179:6892 udp
N/A 91.121.42.180:6892 udp
N/A 91.121.42.181:6892 udp
N/A 91.121.42.182:6892 udp
N/A 91.121.42.183:6892 udp
N/A 91.121.42.184:6892 udp
N/A 91.121.42.185:6892 udp
N/A 91.121.42.186:6892 udp
N/A 91.121.42.187:6892 udp
N/A 91.121.42.188:6892 udp
N/A 91.121.42.189:6892 udp
N/A 91.121.42.190:6892 udp
N/A 91.121.42.191:6892 udp
N/A 91.121.42.192:6892 udp
N/A 91.121.42.193:6892 udp
N/A 91.121.42.194:6892 udp
N/A 91.121.42.195:6892 udp
N/A 91.121.42.196:6892 udp
N/A 91.121.42.197:6892 udp
N/A 91.121.42.198:6892 udp
N/A 91.121.42.199:6892 udp
N/A 91.121.42.200:6892 udp
N/A 91.121.42.201:6892 udp
N/A 91.121.42.202:6892 udp
N/A 91.121.42.203:6892 udp
N/A 91.121.42.204:6892 udp
N/A 91.121.42.205:6892 udp
N/A 91.121.42.206:6892 udp
N/A 91.121.42.207:6892 udp
N/A 91.121.42.208:6892 udp
N/A 91.121.42.209:6892 udp
N/A 91.121.42.210:6892 udp
N/A 91.121.42.211:6892 udp
N/A 91.121.42.212:6892 udp
N/A 91.121.42.213:6892 udp
N/A 91.121.42.214:6892 udp
N/A 91.121.42.215:6892 udp
N/A 91.121.42.216:6892 udp
N/A 91.121.42.217:6892 udp
N/A 91.121.42.218:6892 udp
N/A 91.121.42.219:6892 udp
N/A 91.121.42.220:6892 udp
N/A 91.121.42.221:6892 udp
N/A 91.121.42.222:6892 udp
N/A 91.121.42.223:6892 udp
N/A 91.121.42.224:6892 udp
N/A 91.121.42.225:6892 udp
N/A 91.121.42.226:6892 udp
N/A 91.121.42.227:6892 udp
N/A 91.121.42.228:6892 udp
N/A 91.121.42.229:6892 udp
N/A 91.121.42.230:6892 udp
N/A 91.121.42.231:6892 udp
N/A 91.121.42.232:6892 udp
N/A 91.121.42.233:6892 udp
N/A 91.121.42.234:6892 udp
N/A 91.121.42.235:6892 udp
N/A 91.121.42.236:6892 udp
N/A 91.121.42.237:6892 udp
N/A 91.121.42.238:6892 udp
N/A 91.121.42.239:6892 udp
N/A 91.121.42.240:6892 udp
N/A 91.121.42.241:6892 udp
N/A 91.121.42.242:6892 udp
N/A 91.121.42.243:6892 udp
N/A 91.121.42.244:6892 udp
N/A 91.121.42.245:6892 udp
N/A 91.121.42.246:6892 udp
N/A 91.121.42.247:6892 udp
N/A 91.121.42.248:6892 udp
N/A 91.121.42.249:6892 udp
N/A 91.121.42.250:6892 udp
N/A 91.121.42.251:6892 udp
N/A 91.121.42.252:6892 udp
N/A 91.121.42.253:6892 udp
N/A 91.121.42.254:6892 udp
N/A 91.121.42.255:6892 udp
N/A 91.121.43.0:6892 udp
N/A 91.121.43.1:6892 udp
N/A 91.121.43.2:6892 udp
N/A 91.121.43.3:6892 udp
N/A 91.121.43.4:6892 udp
N/A 91.121.43.5:6892 udp
N/A 91.121.43.6:6892 udp
N/A 91.121.43.7:6892 udp
N/A 91.121.43.8:6892 udp
N/A 91.121.43.9:6892 udp
N/A 91.121.43.10:6892 udp
N/A 91.121.43.11:6892 udp
N/A 91.121.43.12:6892 udp
N/A 91.121.43.13:6892 udp
N/A 91.121.43.14:6892 udp
N/A 91.121.43.15:6892 udp
N/A 91.121.43.16:6892 udp
N/A 91.121.43.17:6892 udp
N/A 91.121.43.18:6892 udp
N/A 91.121.43.19:6892 udp
N/A 91.121.43.20:6892 udp
N/A 91.121.43.21:6892 udp
N/A 91.121.43.22:6892 udp
N/A 91.121.43.23:6892 udp
N/A 91.121.43.24:6892 udp
N/A 91.121.43.25:6892 udp
N/A 91.121.43.26:6892 udp
N/A 91.121.43.27:6892 udp
N/A 91.121.43.28:6892 udp
N/A 91.121.43.29:6892 udp
N/A 91.121.43.30:6892 udp
N/A 91.121.43.31:6892 udp
N/A 91.121.43.32:6892 udp
N/A 91.121.43.33:6892 udp
N/A 91.121.43.34:6892 udp
N/A 91.121.43.35:6892 udp
N/A 91.121.43.36:6892 udp
N/A 91.121.43.37:6892 udp
N/A 91.121.43.38:6892 udp
N/A 91.121.43.39:6892 udp
N/A 91.121.43.40:6892 udp
N/A 91.121.43.41:6892 udp
N/A 91.121.43.42:6892 udp
N/A 91.121.43.43:6892 udp
N/A 91.121.43.44:6892 udp
N/A 91.121.43.45:6892 udp
N/A 91.121.43.46:6892 udp
N/A 91.121.43.47:6892 udp
N/A 91.121.43.48:6892 udp
N/A 91.121.43.49:6892 udp
N/A 91.121.43.50:6892 udp
N/A 91.121.43.51:6892 udp
N/A 91.121.43.52:6892 udp
N/A 91.121.43.53:6892 udp
N/A 91.121.43.54:6892 udp
N/A 91.121.43.55:6892 udp
N/A 91.121.43.56:6892 udp
N/A 91.121.43.57:6892 udp
N/A 91.121.43.58:6892 udp
N/A 91.121.43.59:6892 udp
N/A 91.121.43.60:6892 udp
N/A 91.121.43.61:6892 udp
N/A 91.121.43.62:6892 udp
N/A 91.121.43.63:6892 udp
N/A 91.121.43.64:6892 udp
N/A 91.121.43.65:6892 udp
N/A 91.121.43.66:6892 udp
N/A 91.121.43.67:6892 udp
N/A 91.121.43.68:6892 udp
N/A 91.121.43.69:6892 udp
N/A 91.121.43.70:6892 udp
N/A 91.121.43.71:6892 udp
N/A 91.121.43.72:6892 udp
N/A 91.121.43.73:6892 udp
N/A 91.121.43.74:6892 udp
N/A 91.121.43.75:6892 udp
N/A 91.121.43.76:6892 udp
N/A 91.121.43.77:6892 udp
N/A 91.121.43.78:6892 udp
N/A 91.121.43.79:6892 udp
N/A 91.121.43.80:6892 udp
N/A 91.121.43.81:6892 udp
N/A 91.121.43.82:6892 udp
N/A 91.121.43.83:6892 udp
N/A 91.121.43.84:6892 udp
N/A 91.121.43.85:6892 udp
N/A 91.121.43.86:6892 udp
N/A 91.121.43.87:6892 udp
N/A 91.121.43.88:6892 udp
N/A 91.121.43.89:6892 udp
N/A 91.121.43.90:6892 udp
N/A 91.121.43.91:6892 udp
N/A 91.121.43.92:6892 udp
N/A 91.121.43.93:6892 udp
N/A 91.121.43.94:6892 udp
N/A 91.121.43.95:6892 udp
N/A 91.121.43.96:6892 udp
N/A 91.121.43.97:6892 udp
N/A 91.121.43.98:6892 udp
N/A 91.121.43.99:6892 udp
N/A 91.121.43.100:6892 udp
N/A 91.121.43.101:6892 udp
N/A 91.121.43.102:6892 udp
N/A 91.121.43.103:6892 udp
N/A 91.121.43.104:6892 udp
N/A 91.121.43.105:6892 udp
N/A 91.121.43.106:6892 udp
N/A 91.121.43.107:6892 udp
N/A 91.121.43.108:6892 udp
N/A 91.121.43.109:6892 udp
N/A 91.121.43.110:6892 udp
N/A 91.121.43.111:6892 udp
N/A 91.121.43.112:6892 udp
N/A 91.121.43.113:6892 udp
N/A 91.121.43.114:6892 udp
N/A 91.121.43.115:6892 udp
N/A 91.121.43.116:6892 udp
N/A 91.121.43.117:6892 udp
N/A 91.121.43.118:6892 udp
N/A 91.121.43.119:6892 udp
N/A 91.121.43.120:6892 udp
N/A 91.121.43.121:6892 udp
N/A 91.121.43.122:6892 udp
N/A 91.121.43.123:6892 udp
N/A 91.121.43.124:6892 udp
N/A 91.121.43.125:6892 udp
N/A 91.121.43.126:6892 udp
N/A 91.121.43.127:6892 udp
N/A 91.121.43.128:6892 udp
N/A 91.121.43.129:6892 udp
N/A 91.121.43.130:6892 udp
N/A 91.121.43.131:6892 udp
N/A 91.121.43.132:6892 udp
N/A 91.121.43.133:6892 udp
N/A 91.121.43.134:6892 udp
N/A 91.121.43.135:6892 udp
N/A 91.121.43.136:6892 udp
N/A 91.121.43.137:6892 udp
N/A 91.121.43.138:6892 udp
N/A 91.121.43.139:6892 udp
N/A 91.121.43.140:6892 udp
N/A 91.121.43.141:6892 udp
N/A 91.121.43.142:6892 udp
N/A 91.121.43.143:6892 udp
N/A 91.121.43.144:6892 udp
N/A 91.121.43.145:6892 udp
N/A 91.121.43.146:6892 udp
N/A 91.121.43.147:6892 udp
N/A 91.121.43.148:6892 udp
N/A 91.121.43.149:6892 udp
N/A 91.121.43.150:6892 udp
N/A 91.121.43.151:6892 udp
N/A 91.121.43.152:6892 udp
N/A 91.121.43.153:6892 udp
N/A 91.121.43.154:6892 udp
N/A 91.121.43.155:6892 udp
N/A 91.121.43.156:6892 udp
N/A 91.121.43.157:6892 udp
N/A 91.121.43.158:6892 udp
N/A 91.121.43.159:6892 udp
N/A 91.121.43.160:6892 udp
N/A 91.121.43.161:6892 udp
N/A 91.121.43.162:6892 udp
N/A 91.121.43.163:6892 udp
N/A 91.121.43.164:6892 udp
N/A 91.121.43.165:6892 udp
N/A 91.121.43.166:6892 udp
N/A 91.121.43.167:6892 udp
N/A 91.121.43.168:6892 udp
N/A 91.121.43.169:6892 udp
N/A 91.121.43.170:6892 udp
N/A 91.121.43.171:6892 udp
N/A 91.121.43.172:6892 udp
N/A 91.121.43.173:6892 udp
N/A 91.121.43.174:6892 udp
N/A 91.121.43.175:6892 udp
N/A 91.121.43.176:6892 udp
N/A 91.121.43.177:6892 udp
N/A 91.121.43.178:6892 udp
N/A 91.121.43.179:6892 udp
N/A 91.121.43.180:6892 udp
N/A 91.121.43.181:6892 udp
N/A 91.121.43.182:6892 udp
N/A 91.121.43.183:6892 udp
N/A 91.121.43.184:6892 udp
N/A 91.121.43.185:6892 udp
N/A 91.121.43.186:6892 udp
N/A 91.121.43.187:6892 udp
N/A 91.121.43.188:6892 udp
N/A 91.121.43.189:6892 udp
N/A 91.121.43.190:6892 udp
N/A 91.121.43.191:6892 udp
N/A 91.121.43.192:6892 udp
N/A 91.121.43.193:6892 udp
N/A 91.121.43.194:6892 udp
N/A 91.121.43.195:6892 udp
N/A 91.121.43.196:6892 udp
N/A 91.121.43.197:6892 udp
N/A 91.121.43.198:6892 udp
N/A 91.121.43.199:6892 udp
N/A 91.121.43.200:6892 udp
N/A 91.121.43.201:6892 udp
N/A 91.121.43.202:6892 udp
N/A 91.121.43.203:6892 udp
N/A 91.121.43.204:6892 udp
N/A 91.121.43.205:6892 udp
N/A 91.121.43.206:6892 udp
N/A 91.121.43.207:6892 udp
N/A 91.121.43.208:6892 udp
N/A 91.121.43.209:6892 udp
N/A 91.121.43.210:6892 udp
N/A 91.121.43.211:6892 udp
N/A 91.121.43.212:6892 udp
N/A 91.121.43.213:6892 udp
N/A 91.121.43.214:6892 udp
N/A 91.121.43.215:6892 udp
N/A 91.121.43.216:6892 udp
N/A 91.121.43.217:6892 udp
N/A 91.121.43.218:6892 udp
N/A 91.121.43.219:6892 udp
N/A 91.121.43.220:6892 udp
N/A 91.121.43.221:6892 udp
N/A 91.121.43.222:6892 udp
N/A 91.121.43.223:6892 udp
N/A 91.121.43.224:6892 udp
N/A 91.121.43.225:6892 udp
N/A 91.121.43.226:6892 udp
N/A 91.121.43.227:6892 udp
N/A 91.121.43.228:6892 udp
N/A 91.121.43.229:6892 udp
N/A 91.121.43.230:6892 udp
N/A 91.121.43.231:6892 udp
N/A 91.121.43.232:6892 udp
N/A 91.121.43.233:6892 udp
N/A 91.121.43.234:6892 udp
N/A 91.121.43.235:6892 udp
N/A 91.121.43.236:6892 udp
N/A 91.121.43.237:6892 udp
N/A 91.121.43.238:6892 udp
N/A 91.121.43.239:6892 udp
N/A 91.121.43.240:6892 udp
N/A 91.121.43.241:6892 udp
N/A 91.121.43.242:6892 udp
N/A 91.121.43.243:6892 udp
N/A 91.121.43.244:6892 udp
N/A 91.121.43.245:6892 udp
N/A 91.121.43.246:6892 udp
N/A 91.121.43.247:6892 udp
N/A 91.121.43.248:6892 udp
N/A 91.121.43.249:6892 udp
N/A 91.121.43.250:6892 udp
N/A 91.121.43.251:6892 udp
N/A 91.121.43.252:6892 udp
N/A 91.121.43.253:6892 udp
N/A 91.121.43.254:6892 udp
N/A 91.121.43.255:6892 udp
N/A 8.8.8.8:53 api.blockcypher.com udp
N/A 172.67.2.88:80 api.blockcypher.com tcp
N/A 8.8.8.8:53 btc.blockr.io udp
N/A 8.8.8.8:53 bitaps.com udp
N/A 178.128.255.179:443 bitaps.com tcp
N/A 8.8.8.8:53 www.download.windowsupdate.com udp
N/A 205.185.216.10:80 www.download.windowsupdate.com tcp
N/A 104.18.20.226:80 ocsp.globalsign.com tcp
N/A 104.18.20.226:80 ocsp2.globalsign.com tcp
N/A 8.8.8.8:53 chain.so udp
N/A 104.24.104.254:443 chain.so tcp
N/A 93.184.220.29:80 ocsp.digicert.com tcp
N/A 8.8.8.8:53 crl.verisign.com udp
N/A 72.21.91.29:80 crl.verisign.com tcp

Files

memory/1604-0-0x0000000000400000-0x0000000000438000-memory.dmp

memory/1604-1-0x0000000000403AC2-mapping.dmp

memory/1604-2-0x0000000000400000-0x0000000000438000-memory.dmp

memory/1532-3-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_HELP_HELP_HELP_MH9I5AH_.hta

MD5 4aec6ff4c703dedcda5f524abc665981
SHA1 1efc1c49d9f626df35704b67a08c87289e88f2cf
SHA256 249dc09b89aacbf71570cf314ddde7420b4b404de3b3c63899c2f592c1bfc614
SHA512 d3313a2c746a9c0a6470b3aa4d5b0f90502b8154c6264dcf82039421d0112130c33b72dfd82335fcfc76883b616477877d47a1d04a1a2fc728eac45ac875178a

memory/760-5-0x000007FEF8320000-0x000007FEF859A000-memory.dmp

C:\Users\Admin\Desktop\_HELP_HELP_HELP_TINMAU_.png

MD5 5624303adec6022652f06dbc1835b75b
SHA1 f711a73c99d44d78dc2e1145f3d2346561a88163
SHA256 931684838124459381717a2a90fa92fcda801cd226ba3047d25f77a05fd90618
SHA512 e4d2220371716d9a88d679a869c7a9f09eaf2f54ea752ca35fc08b26704042db868e1a64318392a7c9fea83da374aa926e6776088e7ff7cc536e44905552c2b9

memory/2036-15-0x0000000000000000-mapping.dmp

memory/1632-16-0x0000000000000000-mapping.dmp

memory/1672-17-0x0000000000000000-mapping.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2020-10-26 06:17

Reported

2020-10-26 06:21

Platform

win10

Max time kernel

129s

Max time network

136s

Command Line

"C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe"

Signatures

Cerber

ransomware cerber

Blacklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

Drops startup file

Description Indicator Process Target
File opened for modification \??\c:\users\admin\appdata\roaming\microsoft\word\startup\ C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\documents C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office\16.0\officeclicktorun.exe_rules.xml C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\microsoft\office\otele\ C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\microsoft\office\16.0\ C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\desktop C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office\16.0\integrator.exe_rules.xml C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office\otele\integrator.exe.db C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\system32\config\systemprofile\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office\otele\officeclicktorun.exe.db C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2627584638-3284755310-3019450177-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\tmp1B39.bmp" C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A

Suspicious use of SetThreadContext

Description Indicator Process Target
PID 3496 set thread context of 3800 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\documents C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\desktop C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\documents C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\desktop C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\taskkill.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2627584638-3284755310-3019450177-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\system32\PING.EXE N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3496 wrote to memory of 3800 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 3496 wrote to memory of 3800 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 3496 wrote to memory of 3800 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 3496 wrote to memory of 3800 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 3496 wrote to memory of 3800 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 3496 wrote to memory of 3800 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 3496 wrote to memory of 3800 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 3496 wrote to memory of 3800 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 3496 wrote to memory of 3800 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe
PID 3800 wrote to memory of 1488 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Windows\SysWOW64\mshta.exe
PID 3800 wrote to memory of 1488 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Windows\SysWOW64\mshta.exe
PID 3800 wrote to memory of 1488 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Windows\SysWOW64\mshta.exe
PID 3800 wrote to memory of 1956 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Windows\system32\cmd.exe
PID 3800 wrote to memory of 1956 N/A C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe C:\Windows\system32\cmd.exe
PID 1956 wrote to memory of 1208 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 1956 wrote to memory of 1208 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 1956 wrote to memory of 192 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE
PID 1956 wrote to memory of 192 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe

"C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe"

C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe

"C:\Users\Admin\AppData\Local\Temp\6e352cd0e6130ec8e16c0a212f0ddfa2.exe"

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_HELP_HELP_HELP_000NF_.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x320

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im "6e352cd0e6130ec8e16c0a212f0ddfa2.exe"

C:\Windows\system32\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
N/A 91.117.40.0:6892 udp
N/A 91.117.40.1:6892 udp
N/A 91.117.40.2:6892 udp
N/A 91.117.40.3:6892 udp
N/A 91.117.40.4:6892 udp
N/A 91.117.40.5:6892 udp
N/A 91.117.40.6:6892 udp
N/A 91.117.40.7:6892 udp
N/A 91.117.40.8:6892 udp
N/A 91.117.40.9:6892 udp
N/A 91.117.40.10:6892 udp
N/A 91.117.40.11:6892 udp
N/A 91.117.40.12:6892 udp
N/A 91.117.40.13:6892 udp
N/A 91.117.40.14:6892 udp
N/A 91.117.40.15:6892 udp
N/A 91.117.40.16:6892 udp
N/A 91.117.40.17:6892 udp
N/A 91.117.40.18:6892 udp
N/A 91.117.40.19:6892 udp
N/A 91.117.40.20:6892 udp
N/A 91.117.40.21:6892 udp
N/A 91.117.40.22:6892 udp
N/A 91.117.40.23:6892 udp
N/A 91.117.40.24:6892 udp
N/A 91.117.40.25:6892 udp
N/A 91.117.40.26:6892 udp
N/A 91.117.40.27:6892 udp
N/A 91.117.40.28:6892 udp
N/A 91.117.40.29:6892 udp
N/A 91.117.40.30:6892 udp
N/A 91.117.40.31:6892 udp
N/A 91.119.40.0:6892 udp
N/A 91.119.40.1:6892 udp
N/A 91.119.40.2:6892 udp
N/A 91.119.40.3:6892 udp
N/A 91.119.40.4:6892 udp
N/A 91.119.40.5:6892 udp
N/A 91.119.40.6:6892 udp
N/A 91.119.40.7:6892 udp
N/A 91.119.40.8:6892 udp
N/A 91.119.40.9:6892 udp
N/A 91.119.40.10:6892 udp
N/A 91.119.40.11:6892 udp
N/A 91.119.40.12:6892 udp
N/A 91.119.40.13:6892 udp
N/A 91.119.40.14:6892 udp
N/A 91.119.40.15:6892 udp
N/A 91.119.40.16:6892 udp
N/A 91.119.40.17:6892 udp
N/A 91.119.40.18:6892 udp
N/A 91.119.40.19:6892 udp
N/A 91.119.40.20:6892 udp
N/A 91.119.40.21:6892 udp
N/A 91.119.40.22:6892 udp
N/A 91.119.40.23:6892 udp
N/A 91.119.40.24:6892 udp
N/A 91.119.40.25:6892 udp
N/A 91.119.40.26:6892 udp
N/A 91.119.40.27:6892 udp
N/A 91.119.40.28:6892 udp
N/A 91.119.40.29:6892 udp
N/A 91.119.40.30:6892 udp
N/A 91.119.40.31:6892 udp
N/A 91.121.40.0:6892 udp
N/A 91.121.40.1:6892 udp
N/A 91.121.40.2:6892 udp
N/A 91.121.40.3:6892 udp
N/A 91.121.40.4:6892 udp
N/A 91.121.40.5:6892 udp
N/A 91.121.40.6:6892 udp
N/A 91.121.40.7:6892 udp
N/A 91.121.40.8:6892 udp
N/A 91.121.40.9:6892 udp
N/A 91.121.40.10:6892 udp
N/A 91.121.40.11:6892 udp
N/A 91.121.40.12:6892 udp
N/A 91.121.40.13:6892 udp
N/A 91.121.40.14:6892 udp
N/A 91.121.40.15:6892 udp
N/A 91.121.40.16:6892 udp
N/A 91.121.40.17:6892 udp
N/A 91.121.40.18:6892 udp
N/A 91.121.40.19:6892 udp
N/A 91.121.40.20:6892 udp
N/A 91.121.40.21:6892 udp
N/A 91.121.40.22:6892 udp
N/A 91.121.40.23:6892 udp
N/A 91.121.40.24:6892 udp
N/A 91.121.40.25:6892 udp
N/A 91.121.40.26:6892 udp
N/A 91.121.40.27:6892 udp
N/A 91.121.40.28:6892 udp
N/A 91.121.40.29:6892 udp
N/A 91.121.40.30:6892 udp
N/A 91.121.40.31:6892 udp
N/A 91.121.40.32:6892 udp
N/A 91.121.40.33:6892 udp
N/A 91.121.40.34:6892 udp
N/A 91.121.40.35:6892 udp
N/A 91.121.40.36:6892 udp
N/A 91.121.40.37:6892 udp
N/A 91.121.40.38:6892 udp
N/A 91.121.40.39:6892 udp
N/A 91.121.40.40:6892 udp
N/A 91.121.40.41:6892 udp
N/A 91.121.40.42:6892 udp
N/A 91.121.40.43:6892 udp
N/A 91.121.40.44:6892 udp
N/A 91.121.40.45:6892 udp
N/A 91.121.40.46:6892 udp
N/A 91.121.40.47:6892 udp
N/A 91.121.40.48:6892 udp
N/A 91.121.40.49:6892 udp
N/A 91.121.40.50:6892 udp
N/A 91.121.40.51:6892 udp
N/A 91.121.40.52:6892 udp
N/A 91.121.40.53:6892 udp
N/A 91.121.40.54:6892 udp
N/A 91.121.40.55:6892 udp
N/A 91.121.40.56:6892 udp
N/A 91.121.40.57:6892 udp
N/A 91.121.40.58:6892 udp
N/A 91.121.40.59:6892 udp
N/A 91.121.40.60:6892 udp
N/A 91.121.40.61:6892 udp
N/A 91.121.40.62:6892 udp
N/A 91.121.40.63:6892 udp
N/A 91.121.40.64:6892 udp
N/A 91.121.40.65:6892 udp
N/A 91.121.40.66:6892 udp
N/A 91.121.40.67:6892 udp
N/A 91.121.40.68:6892 udp
N/A 91.121.40.69:6892 udp
N/A 91.121.40.70:6892 udp
N/A 91.121.40.71:6892 udp
N/A 91.121.40.72:6892 udp
N/A 91.121.40.73:6892 udp
N/A 91.121.40.74:6892 udp
N/A 91.121.40.75:6892 udp
N/A 91.121.40.76:6892 udp
N/A 91.121.40.77:6892 udp
N/A 91.121.40.78:6892 udp
N/A 91.121.40.79:6892 udp
N/A 91.121.40.80:6892 udp
N/A 91.121.40.81:6892 udp
N/A 91.121.40.82:6892 udp
N/A 91.121.40.83:6892 udp
N/A 91.121.40.84:6892 udp
N/A 91.121.40.85:6892 udp
N/A 91.121.40.86:6892 udp
N/A 91.121.40.87:6892 udp
N/A 91.121.40.88:6892 udp
N/A 91.121.40.89:6892 udp
N/A 91.121.40.90:6892 udp
N/A 91.121.40.91:6892 udp
N/A 91.121.40.92:6892 udp
N/A 91.121.40.93:6892 udp
N/A 91.121.40.94:6892 udp
N/A 91.121.40.95:6892 udp
N/A 91.121.40.96:6892 udp
N/A 91.121.40.97:6892 udp
N/A 91.121.40.98:6892 udp
N/A 91.121.40.99:6892 udp
N/A 91.121.40.100:6892 udp
N/A 91.121.40.101:6892 udp
N/A 91.121.40.102:6892 udp
N/A 91.121.40.103:6892 udp
N/A 91.121.40.104:6892 udp
N/A 91.121.40.105:6892 udp
N/A 91.121.40.106:6892 udp
N/A 91.121.40.107:6892 udp
N/A 91.121.40.108:6892 udp
N/A 91.121.40.109:6892 udp
N/A 91.121.40.110:6892 udp
N/A 91.121.40.111:6892 udp
N/A 91.121.40.112:6892 udp
N/A 91.121.40.113:6892 udp
N/A 91.121.40.114:6892 udp
N/A 91.121.40.115:6892 udp
N/A 91.121.40.116:6892 udp
N/A 91.121.40.117:6892 udp
N/A 91.121.40.118:6892 udp
N/A 91.121.40.119:6892 udp
N/A 91.121.40.120:6892 udp
N/A 91.121.40.121:6892 udp
N/A 91.121.40.122:6892 udp
N/A 91.121.40.123:6892 udp
N/A 91.121.40.124:6892 udp
N/A 91.121.40.125:6892 udp
N/A 91.121.40.126:6892 udp
N/A 91.121.40.127:6892 udp
N/A 91.121.40.128:6892 udp
N/A 91.121.40.129:6892 udp
N/A 91.121.40.130:6892 udp
N/A 91.121.40.131:6892 udp
N/A 91.121.40.132:6892 udp
N/A 91.121.40.133:6892 udp
N/A 91.121.40.134:6892 udp
N/A 91.121.40.135:6892 udp
N/A 91.121.40.136:6892 udp
N/A 91.121.40.137:6892 udp
N/A 91.121.40.138:6892 udp
N/A 91.121.40.139:6892 udp
N/A 91.121.40.140:6892 udp
N/A 91.121.40.141:6892 udp
N/A 91.121.40.142:6892 udp
N/A 91.121.40.143:6892 udp
N/A 91.121.40.144:6892 udp
N/A 91.121.40.145:6892 udp
N/A 91.121.40.146:6892 udp
N/A 91.121.40.147:6892 udp
N/A 91.121.40.148:6892 udp
N/A 91.121.40.149:6892 udp
N/A 91.121.40.150:6892 udp
N/A 91.121.40.151:6892 udp
N/A 91.121.40.152:6892 udp
N/A 91.121.40.153:6892 udp
N/A 91.121.40.154:6892 udp
N/A 91.121.40.155:6892 udp
N/A 91.121.40.156:6892 udp
N/A 91.121.40.157:6892 udp
N/A 91.121.40.158:6892 udp
N/A 91.121.40.159:6892 udp
N/A 91.121.40.160:6892 udp
N/A 91.121.40.161:6892 udp
N/A 91.121.40.162:6892 udp
N/A 91.121.40.163:6892 udp
N/A 91.121.40.164:6892 udp
N/A 91.121.40.165:6892 udp
N/A 91.121.40.166:6892 udp
N/A 91.121.40.167:6892 udp
N/A 91.121.40.168:6892 udp
N/A 91.121.40.169:6892 udp
N/A 91.121.40.170:6892 udp
N/A 91.121.40.171:6892 udp
N/A 91.121.40.172:6892 udp
N/A 91.121.40.173:6892 udp
N/A 91.121.40.174:6892 udp
N/A 91.121.40.175:6892 udp
N/A 91.121.40.176:6892 udp
N/A 91.121.40.177:6892 udp
N/A 91.121.40.178:6892 udp
N/A 91.121.40.179:6892 udp
N/A 91.121.40.180:6892 udp
N/A 91.121.40.181:6892 udp
N/A 91.121.40.182:6892 udp
N/A 91.121.40.183:6892 udp
N/A 91.121.40.184:6892 udp
N/A 91.121.40.185:6892 udp
N/A 91.121.40.186:6892 udp
N/A 91.121.40.187:6892 udp
N/A 91.121.40.188:6892 udp
N/A 91.121.40.189:6892 udp
N/A 91.121.40.190:6892 udp
N/A 91.121.40.191:6892 udp
N/A 91.121.40.192:6892 udp
N/A 91.121.40.193:6892 udp
N/A 91.121.40.194:6892 udp
N/A 91.121.40.195:6892 udp
N/A 91.121.40.196:6892 udp
N/A 91.121.40.197:6892 udp
N/A 91.121.40.198:6892 udp
N/A 91.121.40.199:6892 udp
N/A 91.121.40.200:6892 udp
N/A 91.121.40.201:6892 udp
N/A 91.121.40.202:6892 udp
N/A 91.121.40.203:6892 udp
N/A 91.121.40.204:6892 udp
N/A 91.121.40.205:6892 udp
N/A 91.121.40.206:6892 udp
N/A 91.121.40.207:6892 udp
N/A 91.121.40.208:6892 udp
N/A 91.121.40.209:6892 udp
N/A 91.121.40.210:6892 udp
N/A 91.121.40.211:6892 udp
N/A 91.121.40.212:6892 udp
N/A 91.121.40.213:6892 udp
N/A 91.121.40.214:6892 udp
N/A 91.121.40.215:6892 udp
N/A 91.121.40.216:6892 udp
N/A 91.121.40.217:6892 udp
N/A 91.121.40.218:6892 udp
N/A 91.121.40.219:6892 udp
N/A 91.121.40.220:6892 udp
N/A 91.121.40.221:6892 udp
N/A 91.121.40.222:6892 udp
N/A 91.121.40.223:6892 udp
N/A 91.121.40.224:6892 udp
N/A 91.121.40.225:6892 udp
N/A 91.121.40.226:6892 udp
N/A 91.121.40.227:6892 udp
N/A 91.121.40.228:6892 udp
N/A 91.121.40.229:6892 udp
N/A 91.121.40.230:6892 udp
N/A 91.121.40.231:6892 udp
N/A 91.121.40.232:6892 udp
N/A 91.121.40.233:6892 udp
N/A 91.121.40.234:6892 udp
N/A 91.121.40.235:6892 udp
N/A 91.121.40.236:6892 udp
N/A 91.121.40.237:6892 udp
N/A 91.121.40.238:6892 udp
N/A 91.121.40.239:6892 udp
N/A 91.121.40.240:6892 udp
N/A 91.121.40.241:6892 udp
N/A 91.121.40.242:6892 udp
N/A 91.121.40.243:6892 udp
N/A 91.121.40.244:6892 udp
N/A 91.121.40.245:6892 udp
N/A 91.121.40.246:6892 udp
N/A 91.121.40.247:6892 udp
N/A 91.121.40.248:6892 udp
N/A 91.121.40.249:6892 udp
N/A 91.121.40.250:6892 udp
N/A 91.121.40.251:6892 udp
N/A 91.121.40.252:6892 udp
N/A 91.121.40.253:6892 udp
N/A 91.121.40.254:6892 udp
N/A 91.121.40.255:6892 udp
N/A 91.121.41.0:6892 udp
N/A 91.121.41.1:6892 udp
N/A 91.121.41.2:6892 udp
N/A 91.121.41.3:6892 udp
N/A 91.121.41.4:6892 udp
N/A 91.121.41.5:6892 udp
N/A 91.121.41.6:6892 udp
N/A 91.121.41.7:6892 udp
N/A 91.121.41.8:6892 udp
N/A 91.121.41.9:6892 udp
N/A 91.121.41.10:6892 udp
N/A 91.121.41.11:6892 udp
N/A 91.121.41.12:6892 udp
N/A 91.121.41.13:6892 udp
N/A 91.121.41.14:6892 udp
N/A 91.121.41.15:6892 udp
N/A 91.121.41.16:6892 udp
N/A 91.121.41.17:6892 udp
N/A 91.121.41.18:6892 udp
N/A 91.121.41.19:6892 udp
N/A 91.121.41.20:6892 udp
N/A 91.121.41.21:6892 udp
N/A 91.121.41.22:6892 udp
N/A 91.121.41.23:6892 udp
N/A 91.121.41.24:6892 udp
N/A 91.121.41.25:6892 udp
N/A 91.121.41.26:6892 udp
N/A 91.121.41.27:6892 udp
N/A 91.121.41.28:6892 udp
N/A 91.121.41.29:6892 udp
N/A 91.121.41.30:6892 udp
N/A 91.121.41.31:6892 udp
N/A 91.121.41.32:6892 udp
N/A 91.121.41.33:6892 udp
N/A 91.121.41.34:6892 udp
N/A 91.121.41.35:6892 udp
N/A 91.121.41.36:6892 udp
N/A 91.121.41.37:6892 udp
N/A 91.121.41.38:6892 udp
N/A 91.121.41.39:6892 udp
N/A 91.121.41.40:6892 udp
N/A 91.121.41.41:6892 udp
N/A 91.121.41.42:6892 udp
N/A 91.121.41.43:6892 udp
N/A 91.121.41.44:6892 udp
N/A 91.121.41.45:6892 udp
N/A 91.121.41.46:6892 udp
N/A 91.121.41.47:6892 udp
N/A 91.121.41.48:6892 udp
N/A 91.121.41.49:6892 udp
N/A 91.121.41.50:6892 udp
N/A 91.121.41.51:6892 udp
N/A 91.121.41.52:6892 udp
N/A 91.121.41.53:6892 udp
N/A 91.121.41.54:6892 udp
N/A 91.121.41.55:6892 udp
N/A 91.121.41.56:6892 udp
N/A 91.121.41.57:6892 udp
N/A 91.121.41.58:6892 udp
N/A 91.121.41.59:6892 udp
N/A 91.121.41.60:6892 udp
N/A 91.121.41.61:6892 udp
N/A 91.121.41.62:6892 udp
N/A 91.121.41.63:6892 udp
N/A 91.121.41.64:6892 udp
N/A 91.121.41.65:6892 udp
N/A 91.121.41.66:6892 udp
N/A 91.121.41.67:6892 udp
N/A 91.121.41.68:6892 udp
N/A 91.121.41.69:6892 udp
N/A 91.121.41.70:6892 udp
N/A 91.121.41.71:6892 udp
N/A 91.121.41.72:6892 udp
N/A 91.121.41.73:6892 udp
N/A 91.121.41.74:6892 udp
N/A 91.121.41.75:6892 udp
N/A 91.121.41.76:6892 udp
N/A 91.121.41.77:6892 udp
N/A 91.121.41.78:6892 udp
N/A 91.121.41.79:6892 udp
N/A 91.121.41.80:6892 udp
N/A 91.121.41.81:6892 udp
N/A 91.121.41.82:6892 udp
N/A 91.121.41.83:6892 udp
N/A 91.121.41.84:6892 udp
N/A 91.121.41.85:6892 udp
N/A 91.121.41.86:6892 udp
N/A 91.121.41.87:6892 udp
N/A 91.121.41.88:6892 udp
N/A 91.121.41.89:6892 udp
N/A 91.121.41.90:6892 udp
N/A 91.121.41.91:6892 udp
N/A 91.121.41.92:6892 udp
N/A 91.121.41.93:6892 udp
N/A 91.121.41.94:6892 udp
N/A 91.121.41.95:6892 udp
N/A 91.121.41.96:6892 udp
N/A 91.121.41.97:6892 udp
N/A 91.121.41.98:6892 udp
N/A 91.121.41.99:6892 udp
N/A 91.121.41.100:6892 udp
N/A 91.121.41.101:6892 udp
N/A 91.121.41.102:6892 udp
N/A 91.121.41.103:6892 udp
N/A 91.121.41.104:6892 udp
N/A 91.121.41.105:6892 udp
N/A 91.121.41.106:6892 udp
N/A 91.121.41.107:6892 udp
N/A 91.121.41.108:6892 udp
N/A 91.121.41.109:6892 udp
N/A 91.121.41.110:6892 udp
N/A 91.121.41.111:6892 udp
N/A 91.121.41.112:6892 udp
N/A 91.121.41.113:6892 udp
N/A 91.121.41.114:6892 udp
N/A 91.121.41.115:6892 udp
N/A 91.121.41.116:6892 udp
N/A 91.121.41.117:6892 udp
N/A 91.121.41.118:6892 udp
N/A 91.121.41.119:6892 udp
N/A 91.121.41.120:6892 udp
N/A 91.121.41.121:6892 udp
N/A 91.121.41.122:6892 udp
N/A 91.121.41.123:6892 udp
N/A 91.121.41.124:6892 udp
N/A 91.121.41.125:6892 udp
N/A 91.121.41.126:6892 udp
N/A 91.121.41.127:6892 udp
N/A 91.121.41.128:6892 udp
N/A 91.121.41.129:6892 udp
N/A 91.121.41.130:6892 udp
N/A 91.121.41.131:6892 udp
N/A 91.121.41.132:6892 udp
N/A 91.121.41.133:6892 udp
N/A 91.121.41.134:6892 udp
N/A 91.121.41.135:6892 udp
N/A 91.121.41.136:6892 udp
N/A 91.121.41.137:6892 udp
N/A 91.121.41.138:6892 udp
N/A 91.121.41.139:6892 udp
N/A 91.121.41.140:6892 udp
N/A 91.121.41.141:6892 udp
N/A 91.121.41.142:6892 udp
N/A 91.121.41.143:6892 udp
N/A 91.121.41.144:6892 udp
N/A 91.121.41.145:6892 udp
N/A 91.121.41.146:6892 udp
N/A 91.121.41.147:6892 udp
N/A 91.121.41.148:6892 udp
N/A 91.121.41.149:6892 udp
N/A 91.121.41.150:6892 udp
N/A 91.121.41.151:6892 udp
N/A 91.121.41.152:6892 udp
N/A 91.121.41.153:6892 udp
N/A 91.121.41.154:6892 udp
N/A 91.121.41.155:6892 udp
N/A 91.121.41.156:6892 udp
N/A 91.121.41.157:6892 udp
N/A 91.121.41.158:6892 udp
N/A 91.121.41.159:6892 udp
N/A 91.121.41.160:6892 udp
N/A 91.121.41.161:6892 udp
N/A 91.121.41.162:6892 udp
N/A 91.121.41.163:6892 udp
N/A 91.121.41.164:6892 udp
N/A 91.121.41.165:6892 udp
N/A 91.121.41.166:6892 udp
N/A 91.121.41.167:6892 udp
N/A 91.121.41.168:6892 udp
N/A 91.121.41.169:6892 udp
N/A 91.121.41.170:6892 udp
N/A 91.121.41.171:6892 udp
N/A 91.121.41.172:6892 udp
N/A 91.121.41.173:6892 udp
N/A 91.121.41.174:6892 udp
N/A 91.121.41.175:6892 udp
N/A 91.121.41.176:6892 udp
N/A 91.121.41.177:6892 udp
N/A 91.121.41.178:6892 udp
N/A 91.121.41.179:6892 udp
N/A 91.121.41.180:6892 udp
N/A 91.121.41.181:6892 udp
N/A 91.121.41.182:6892 udp
N/A 91.121.41.183:6892 udp
N/A 91.121.41.184:6892 udp
N/A 91.121.41.185:6892 udp
N/A 91.121.41.186:6892 udp
N/A 91.121.41.187:6892 udp
N/A 91.121.41.188:6892 udp
N/A 91.121.41.189:6892 udp
N/A 91.121.41.190:6892 udp
N/A 91.121.41.191:6892 udp
N/A 91.121.41.192:6892 udp
N/A 91.121.41.193:6892 udp
N/A 91.121.41.194:6892 udp
N/A 91.121.41.195:6892 udp
N/A 91.121.41.196:6892 udp
N/A 91.121.41.197:6892 udp
N/A 91.121.41.198:6892 udp
N/A 91.121.41.199:6892 udp
N/A 91.121.41.200:6892 udp
N/A 91.121.41.201:6892 udp
N/A 91.121.41.202:6892 udp
N/A 91.121.41.203:6892 udp
N/A 91.121.41.204:6892 udp
N/A 91.121.41.205:6892 udp
N/A 91.121.41.206:6892 udp
N/A 91.121.41.207:6892 udp
N/A 91.121.41.208:6892 udp
N/A 91.121.41.209:6892 udp
N/A 91.121.41.210:6892 udp
N/A 91.121.41.211:6892 udp
N/A 91.121.41.212:6892 udp
N/A 91.121.41.213:6892 udp
N/A 91.121.41.214:6892 udp
N/A 91.121.41.215:6892 udp
N/A 91.121.41.216:6892 udp
N/A 91.121.41.217:6892 udp
N/A 91.121.41.218:6892 udp
N/A 91.121.41.219:6892 udp
N/A 91.121.41.220:6892 udp
N/A 91.121.41.221:6892 udp
N/A 91.121.41.222:6892 udp
N/A 91.121.41.223:6892 udp
N/A 91.121.41.224:6892 udp
N/A 91.121.41.225:6892 udp
N/A 91.121.41.226:6892 udp
N/A 91.121.41.227:6892 udp
N/A 91.121.41.228:6892 udp
N/A 91.121.41.229:6892 udp
N/A 91.121.41.230:6892 udp
N/A 91.121.41.231:6892 udp
N/A 91.121.41.232:6892 udp
N/A 91.121.41.233:6892 udp
N/A 91.121.41.234:6892 udp
N/A 91.121.41.235:6892 udp
N/A 91.121.41.236:6892 udp
N/A 91.121.41.237:6892 udp
N/A 91.121.41.238:6892 udp
N/A 91.121.41.239:6892 udp
N/A 91.121.41.240:6892 udp
N/A 91.121.41.241:6892 udp
N/A 91.121.41.242:6892 udp
N/A 91.121.41.243:6892 udp
N/A 91.121.41.244:6892 udp
N/A 91.121.41.245:6892 udp
N/A 91.121.41.246:6892 udp
N/A 91.121.41.247:6892 udp
N/A 91.121.41.248:6892 udp
N/A 91.121.41.249:6892 udp
N/A 91.121.41.250:6892 udp
N/A 91.121.41.251:6892 udp
N/A 91.121.41.252:6892 udp
N/A 91.121.41.253:6892 udp
N/A 91.121.41.254:6892 udp
N/A 91.121.41.255:6892 udp
N/A 91.121.42.0:6892 udp
N/A 91.121.42.1:6892 udp
N/A 91.121.42.2:6892 udp
N/A 91.121.42.3:6892 udp
N/A 91.121.42.4:6892 udp
N/A 91.121.42.5:6892 udp
N/A 91.121.42.6:6892 udp
N/A 91.121.42.7:6892 udp
N/A 91.121.42.8:6892 udp
N/A 91.121.42.9:6892 udp
N/A 91.121.42.10:6892 udp
N/A 91.121.42.11:6892 udp
N/A 91.121.42.12:6892 udp
N/A 91.121.42.13:6892 udp
N/A 91.121.42.14:6892 udp
N/A 91.121.42.15:6892 udp
N/A 91.121.42.16:6892 udp
N/A 91.121.42.17:6892 udp
N/A 91.121.42.18:6892 udp
N/A 91.121.42.19:6892 udp
N/A 91.121.42.20:6892 udp
N/A 91.121.42.21:6892 udp
N/A 91.121.42.22:6892 udp
N/A 91.121.42.23:6892 udp
N/A 91.121.42.24:6892 udp
N/A 91.121.42.25:6892 udp
N/A 91.121.42.26:6892 udp
N/A 91.121.42.27:6892 udp
N/A 91.121.42.28:6892 udp
N/A 91.121.42.29:6892 udp
N/A 91.121.42.30:6892 udp
N/A 91.121.42.31:6892 udp
N/A 91.121.42.32:6892 udp
N/A 91.121.42.33:6892 udp
N/A 91.121.42.34:6892 udp
N/A 91.121.42.35:6892 udp
N/A 91.121.42.36:6892 udp
N/A 91.121.42.37:6892 udp
N/A 91.121.42.38:6892 udp
N/A 91.121.42.39:6892 udp
N/A 91.121.42.40:6892 udp
N/A 91.121.42.41:6892 udp
N/A 91.121.42.42:6892 udp
N/A 91.121.42.43:6892 udp
N/A 91.121.42.44:6892 udp
N/A 91.121.42.45:6892 udp
N/A 91.121.42.46:6892 udp
N/A 91.121.42.47:6892 udp
N/A 91.121.42.48:6892 udp
N/A 91.121.42.49:6892 udp
N/A 91.121.42.50:6892 udp
N/A 91.121.42.51:6892 udp
N/A 91.121.42.52:6892 udp
N/A 91.121.42.53:6892 udp
N/A 91.121.42.54:6892 udp
N/A 91.121.42.55:6892 udp
N/A 91.121.42.56:6892 udp
N/A 91.121.42.57:6892 udp
N/A 91.121.42.58:6892 udp
N/A 91.121.42.59:6892 udp
N/A 91.121.42.60:6892 udp
N/A 91.121.42.61:6892 udp
N/A 91.121.42.62:6892 udp
N/A 91.121.42.63:6892 udp
N/A 91.121.42.64:6892 udp
N/A 91.121.42.65:6892 udp
N/A 91.121.42.66:6892 udp
N/A 91.121.42.67:6892 udp
N/A 91.121.42.68:6892 udp
N/A 91.121.42.69:6892 udp
N/A 91.121.42.70:6892 udp
N/A 91.121.42.71:6892 udp
N/A 91.121.42.72:6892 udp
N/A 91.121.42.73:6892 udp
N/A 91.121.42.74:6892 udp
N/A 91.121.42.75:6892 udp
N/A 91.121.42.76:6892 udp
N/A 91.121.42.77:6892 udp
N/A 91.121.42.78:6892 udp
N/A 91.121.42.79:6892 udp
N/A 91.121.42.80:6892 udp
N/A 91.121.42.81:6892 udp
N/A 91.121.42.82:6892 udp
N/A 91.121.42.83:6892 udp
N/A 91.121.42.84:6892 udp
N/A 91.121.42.85:6892 udp
N/A 91.121.42.86:6892 udp
N/A 91.121.42.87:6892 udp
N/A 91.121.42.88:6892 udp
N/A 91.121.42.89:6892 udp
N/A 91.121.42.90:6892 udp
N/A 91.121.42.91:6892 udp
N/A 91.121.42.92:6892 udp
N/A 91.121.42.93:6892 udp
N/A 91.121.42.94:6892 udp
N/A 91.121.42.95:6892 udp
N/A 91.121.42.96:6892 udp
N/A 91.121.42.97:6892 udp
N/A 91.121.42.98:6892 udp
N/A 91.121.42.99:6892 udp
N/A 91.121.42.100:6892 udp
N/A 91.121.42.101:6892 udp
N/A 91.121.42.102:6892 udp
N/A 91.121.42.103:6892 udp
N/A 91.121.42.104:6892 udp
N/A 91.121.42.105:6892 udp
N/A 91.121.42.106:6892 udp
N/A 91.121.42.107:6892 udp
N/A 91.121.42.108:6892 udp
N/A 91.121.42.109:6892 udp
N/A 91.121.42.110:6892 udp
N/A 91.121.42.111:6892 udp
N/A 91.121.42.112:6892 udp
N/A 91.121.42.113:6892 udp
N/A 91.121.42.114:6892 udp
N/A 91.121.42.115:6892 udp
N/A 91.121.42.116:6892 udp
N/A 91.121.42.117:6892 udp
N/A 91.121.42.118:6892 udp
N/A 91.121.42.119:6892 udp
N/A 91.121.42.120:6892 udp
N/A 91.121.42.121:6892 udp
N/A 91.121.42.122:6892 udp
N/A 91.121.42.123:6892 udp
N/A 91.121.42.124:6892 udp
N/A 91.121.42.125:6892 udp
N/A 91.121.42.126:6892 udp
N/A 91.121.42.127:6892 udp
N/A 91.121.42.128:6892 udp
N/A 91.121.42.129:6892 udp
N/A 91.121.42.130:6892 udp
N/A 91.121.42.131:6892 udp
N/A 91.121.42.132:6892 udp
N/A 91.121.42.133:6892 udp
N/A 91.121.42.134:6892 udp
N/A 91.121.42.135:6892 udp
N/A 91.121.42.136:6892 udp
N/A 91.121.42.137:6892 udp
N/A 91.121.42.138:6892 udp
N/A 91.121.42.139:6892 udp
N/A 91.121.42.140:6892 udp
N/A 91.121.42.141:6892 udp
N/A 91.121.42.142:6892 udp
N/A 91.121.42.143:6892 udp
N/A 91.121.42.144:6892 udp
N/A 91.121.42.145:6892 udp
N/A 91.121.42.146:6892 udp
N/A 91.121.42.147:6892 udp
N/A 91.121.42.148:6892 udp
N/A 91.121.42.149:6892 udp
N/A 91.121.42.150:6892 udp
N/A 91.121.42.151:6892 udp
N/A 91.121.42.152:6892 udp
N/A 91.121.42.153:6892 udp
N/A 91.121.42.154:6892 udp
N/A 91.121.42.155:6892 udp
N/A 91.121.42.156:6892 udp
N/A 91.121.42.157:6892 udp
N/A 91.121.42.158:6892 udp
N/A 91.121.42.159:6892 udp
N/A 91.121.42.160:6892 udp
N/A 91.121.42.161:6892 udp
N/A 91.121.42.162:6892 udp
N/A 91.121.42.163:6892 udp
N/A 91.121.42.164:6892 udp
N/A 91.121.42.165:6892 udp
N/A 91.121.42.166:6892 udp
N/A 91.121.42.167:6892 udp
N/A 91.121.42.168:6892 udp
N/A 91.121.42.169:6892 udp
N/A 91.121.42.170:6892 udp
N/A 91.121.42.171:6892 udp
N/A 91.121.42.172:6892 udp
N/A 91.121.42.173:6892 udp
N/A 91.121.42.174:6892 udp
N/A 91.121.42.175:6892 udp
N/A 91.121.42.176:6892 udp
N/A 91.121.42.177:6892 udp
N/A 91.121.42.178:6892 udp
N/A 91.121.42.179:6892 udp
N/A 91.121.42.180:6892 udp
N/A 91.121.42.181:6892 udp
N/A 91.121.42.182:6892 udp
N/A 91.121.42.183:6892 udp
N/A 91.121.42.184:6892 udp
N/A 91.121.42.185:6892 udp
N/A 91.121.42.186:6892 udp
N/A 91.121.42.187:6892 udp
N/A 91.121.42.188:6892 udp
N/A 91.121.42.189:6892 udp
N/A 91.121.42.190:6892 udp
N/A 91.121.42.191:6892 udp
N/A 91.121.42.192:6892 udp
N/A 91.121.42.193:6892 udp
N/A 91.121.42.194:6892 udp
N/A 91.121.42.195:6892 udp
N/A 91.121.42.196:6892 udp
N/A 91.121.42.197:6892 udp
N/A 91.121.42.198:6892 udp
N/A 91.121.42.199:6892 udp
N/A 91.121.42.200:6892 udp
N/A 91.121.42.201:6892 udp
N/A 91.121.42.202:6892 udp
N/A 91.121.42.203:6892 udp
N/A 91.121.42.204:6892 udp
N/A 91.121.42.205:6892 udp
N/A 91.121.42.206:6892 udp
N/A 91.121.42.207:6892 udp
N/A 91.121.42.208:6892 udp
N/A 91.121.42.209:6892 udp
N/A 91.121.42.210:6892 udp
N/A 91.121.42.211:6892 udp
N/A 91.121.42.212:6892 udp
N/A 91.121.42.213:6892 udp
N/A 91.121.42.214:6892 udp
N/A 91.121.42.215:6892 udp
N/A 91.121.42.216:6892 udp
N/A 91.121.42.217:6892 udp
N/A 91.121.42.218:6892 udp
N/A 91.121.42.219:6892 udp
N/A 91.121.42.220:6892 udp
N/A 91.121.42.221:6892 udp
N/A 91.121.42.222:6892 udp
N/A 91.121.42.223:6892 udp
N/A 91.121.42.224:6892 udp
N/A 91.121.42.225:6892 udp
N/A 91.121.42.226:6892 udp
N/A 91.121.42.227:6892 udp
N/A 91.121.42.228:6892 udp
N/A 91.121.42.229:6892 udp
N/A 91.121.42.230:6892 udp
N/A 91.121.42.231:6892 udp
N/A 91.121.42.232:6892 udp
N/A 91.121.42.233:6892 udp
N/A 91.121.42.234:6892 udp
N/A 91.121.42.235:6892 udp
N/A 91.121.42.236:6892 udp
N/A 91.121.42.237:6892 udp
N/A 91.121.42.238:6892 udp
N/A 91.121.42.239:6892 udp
N/A 91.121.42.240:6892 udp
N/A 91.121.42.241:6892 udp
N/A 91.121.42.242:6892 udp
N/A 91.121.42.243:6892 udp
N/A 91.121.42.244:6892 udp
N/A 91.121.42.245:6892 udp
N/A 91.121.42.246:6892 udp
N/A 91.121.42.247:6892 udp
N/A 91.121.42.248:6892 udp
N/A 91.121.42.249:6892 udp
N/A 91.121.42.250:6892 udp
N/A 91.121.42.251:6892 udp
N/A 91.121.42.252:6892 udp
N/A 91.121.42.253:6892 udp
N/A 91.121.42.254:6892 udp
N/A 91.121.42.255:6892 udp
N/A 91.121.43.0:6892 udp
N/A 91.121.43.1:6892 udp
N/A 91.121.43.2:6892 udp
N/A 91.121.43.3:6892 udp
N/A 91.121.43.4:6892 udp
N/A 91.121.43.5:6892 udp
N/A 91.121.43.6:6892 udp
N/A 91.121.43.7:6892 udp
N/A 91.121.43.8:6892 udp
N/A 91.121.43.9:6892 udp
N/A 91.121.43.10:6892 udp
N/A 91.121.43.11:6892 udp
N/A 91.121.43.12:6892 udp
N/A 91.121.43.13:6892 udp
N/A 91.121.43.14:6892 udp
N/A 91.121.43.15:6892 udp
N/A 91.121.43.16:6892 udp
N/A 91.121.43.17:6892 udp
N/A 91.121.43.18:6892 udp
N/A 91.121.43.19:6892 udp
N/A 91.121.43.20:6892 udp
N/A 91.121.43.21:6892 udp
N/A 91.121.43.22:6892 udp
N/A 91.121.43.23:6892 udp
N/A 91.121.43.24:6892 udp
N/A 91.121.43.25:6892 udp
N/A 91.121.43.26:6892 udp
N/A 91.121.43.27:6892 udp
N/A 91.121.43.28:6892 udp
N/A 91.121.43.29:6892 udp
N/A 91.121.43.30:6892 udp
N/A 91.121.43.31:6892 udp
N/A 91.121.43.32:6892 udp
N/A 91.121.43.33:6892 udp
N/A 91.121.43.34:6892 udp
N/A 91.121.43.35:6892 udp
N/A 91.121.43.36:6892 udp
N/A 91.121.43.37:6892 udp
N/A 91.121.43.38:6892 udp
N/A 91.121.43.39:6892 udp
N/A 91.121.43.40:6892 udp
N/A 91.121.43.41:6892 udp
N/A 91.121.43.42:6892 udp
N/A 91.121.43.43:6892 udp
N/A 91.121.43.44:6892 udp
N/A 91.121.43.45:6892 udp
N/A 91.121.43.46:6892 udp
N/A 91.121.43.47:6892 udp
N/A 91.121.43.48:6892 udp
N/A 91.121.43.49:6892 udp
N/A 91.121.43.50:6892 udp
N/A 91.121.43.51:6892 udp
N/A 91.121.43.52:6892 udp
N/A 91.121.43.53:6892 udp
N/A 91.121.43.54:6892 udp
N/A 91.121.43.55:6892 udp
N/A 91.121.43.56:6892 udp
N/A 91.121.43.57:6892 udp
N/A 91.121.43.58:6892 udp
N/A 91.121.43.59:6892 udp
N/A 91.121.43.60:6892 udp
N/A 91.121.43.61:6892 udp
N/A 91.121.43.62:6892 udp
N/A 91.121.43.63:6892 udp
N/A 91.121.43.64:6892 udp
N/A 91.121.43.65:6892 udp
N/A 91.121.43.66:6892 udp
N/A 91.121.43.67:6892 udp
N/A 91.121.43.68:6892 udp
N/A 91.121.43.69:6892 udp
N/A 91.121.43.70:6892 udp
N/A 91.121.43.71:6892 udp
N/A 91.121.43.72:6892 udp
N/A 91.121.43.73:6892 udp
N/A 91.121.43.74:6892 udp
N/A 91.121.43.75:6892 udp
N/A 91.121.43.76:6892 udp
N/A 91.121.43.77:6892 udp
N/A 91.121.43.78:6892 udp
N/A 91.121.43.79:6892 udp
N/A 91.121.43.80:6892 udp
N/A 91.121.43.81:6892 udp
N/A 91.121.43.82:6892 udp
N/A 91.121.43.83:6892 udp
N/A 91.121.43.84:6892 udp
N/A 91.121.43.85:6892 udp
N/A 91.121.43.86:6892 udp
N/A 91.121.43.87:6892 udp
N/A 91.121.43.88:6892 udp
N/A 91.121.43.89:6892 udp
N/A 91.121.43.90:6892 udp
N/A 91.121.43.91:6892 udp
N/A 91.121.43.92:6892 udp
N/A 91.121.43.93:6892 udp
N/A 91.121.43.94:6892 udp
N/A 91.121.43.95:6892 udp
N/A 91.121.43.96:6892 udp
N/A 91.121.43.97:6892 udp
N/A 91.121.43.98:6892 udp
N/A 91.121.43.99:6892 udp
N/A 91.121.43.100:6892 udp
N/A 91.121.43.101:6892 udp
N/A 91.121.43.102:6892 udp
N/A 91.121.43.103:6892 udp
N/A 91.121.43.104:6892 udp
N/A 91.121.43.105:6892 udp
N/A 91.121.43.106:6892 udp
N/A 91.121.43.107:6892 udp
N/A 91.121.43.108:6892 udp
N/A 91.121.43.109:6892 udp
N/A 91.121.43.110:6892 udp
N/A 91.121.43.111:6892 udp
N/A 91.121.43.112:6892 udp
N/A 91.121.43.113:6892 udp
N/A 91.121.43.114:6892 udp
N/A 91.121.43.115:6892 udp
N/A 91.121.43.116:6892 udp
N/A 91.121.43.117:6892 udp
N/A 91.121.43.118:6892 udp
N/A 91.121.43.119:6892 udp
N/A 91.121.43.120:6892 udp
N/A 91.121.43.121:6892 udp
N/A 91.121.43.122:6892 udp
N/A 91.121.43.123:6892 udp
N/A 91.121.43.124:6892 udp
N/A 91.121.43.125:6892 udp
N/A 91.121.43.126:6892 udp
N/A 91.121.43.127:6892 udp
N/A 91.121.43.128:6892 udp
N/A 91.121.43.129:6892 udp
N/A 91.121.43.130:6892 udp
N/A 91.121.43.131:6892 udp
N/A 91.121.43.132:6892 udp
N/A 91.121.43.133:6892 udp
N/A 91.121.43.134:6892 udp
N/A 91.121.43.135:6892 udp
N/A 91.121.43.136:6892 udp
N/A 91.121.43.137:6892 udp
N/A 91.121.43.138:6892 udp
N/A 91.121.43.139:6892 udp
N/A 91.121.43.140:6892 udp
N/A 91.121.43.141:6892 udp
N/A 91.121.43.142:6892 udp
N/A 91.121.43.143:6892 udp
N/A 91.121.43.144:6892 udp
N/A 91.121.43.145:6892 udp
N/A 91.121.43.146:6892 udp
N/A 91.121.43.147:6892 udp
N/A 91.121.43.148:6892 udp
N/A 91.121.43.149:6892 udp
N/A 91.121.43.150:6892 udp
N/A 91.121.43.151:6892 udp
N/A 91.121.43.152:6892 udp
N/A 91.121.43.153:6892 udp
N/A 91.121.43.154:6892 udp
N/A 91.121.43.155:6892 udp
N/A 91.121.43.156:6892 udp
N/A 91.121.43.157:6892 udp
N/A 91.121.43.158:6892 udp
N/A 91.121.43.159:6892 udp
N/A 91.121.43.160:6892 udp
N/A 91.121.43.161:6892 udp
N/A 91.121.43.162:6892 udp
N/A 91.121.43.163:6892 udp
N/A 91.121.43.164:6892 udp
N/A 91.121.43.165:6892 udp
N/A 91.121.43.166:6892 udp
N/A 91.121.43.167:6892 udp
N/A 91.121.43.168:6892 udp
N/A 91.121.43.169:6892 udp
N/A 91.121.43.170:6892 udp
N/A 91.121.43.171:6892 udp
N/A 91.121.43.172:6892 udp
N/A 91.121.43.173:6892 udp
N/A 91.121.43.174:6892 udp
N/A 91.121.43.175:6892 udp
N/A 91.121.43.176:6892 udp
N/A 91.121.43.177:6892 udp
N/A 91.121.43.178:6892 udp
N/A 91.121.43.179:6892 udp
N/A 91.121.43.180:6892 udp
N/A 91.121.43.181:6892 udp
N/A 91.121.43.182:6892 udp
N/A 91.121.43.183:6892 udp
N/A 91.121.43.184:6892 udp
N/A 91.121.43.185:6892 udp
N/A 91.121.43.186:6892 udp
N/A 91.121.43.187:6892 udp
N/A 91.121.43.188:6892 udp
N/A 91.121.43.189:6892 udp
N/A 91.121.43.190:6892 udp
N/A 91.121.43.191:6892 udp
N/A 91.121.43.192:6892 udp
N/A 91.121.43.193:6892 udp
N/A 91.121.43.194:6892 udp
N/A 91.121.43.195:6892 udp
N/A 91.121.43.196:6892 udp
N/A 91.121.43.197:6892 udp
N/A 91.121.43.198:6892 udp
N/A 91.121.43.199:6892 udp
N/A 91.121.43.200:6892 udp
N/A 91.121.43.201:6892 udp
N/A 91.121.43.202:6892 udp
N/A 91.121.43.203:6892 udp
N/A 91.121.43.204:6892 udp
N/A 91.121.43.205:6892 udp
N/A 91.121.43.206:6892 udp
N/A 91.121.43.207:6892 udp
N/A 91.121.43.208:6892 udp
N/A 91.121.43.209:6892 udp
N/A 91.121.43.210:6892 udp
N/A 91.121.43.211:6892 udp
N/A 91.121.43.212:6892 udp
N/A 91.121.43.213:6892 udp
N/A 91.121.43.214:6892 udp
N/A 91.121.43.215:6892 udp
N/A 91.121.43.216:6892 udp
N/A 91.121.43.217:6892 udp
N/A 91.121.43.218:6892 udp
N/A 91.121.43.219:6892 udp
N/A 91.121.43.220:6892 udp
N/A 91.121.43.221:6892 udp
N/A 91.121.43.222:6892 udp
N/A 91.121.43.223:6892 udp
N/A 91.121.43.224:6892 udp
N/A 91.121.43.225:6892 udp
N/A 91.121.43.226:6892 udp
N/A 91.121.43.227:6892 udp
N/A 91.121.43.228:6892 udp
N/A 91.121.43.229:6892 udp
N/A 91.121.43.230:6892 udp
N/A 91.121.43.231:6892 udp
N/A 91.121.43.232:6892 udp
N/A 91.121.43.233:6892 udp
N/A 91.121.43.234:6892 udp
N/A 91.121.43.235:6892 udp
N/A 91.121.43.236:6892 udp
N/A 91.121.43.237:6892 udp
N/A 91.121.43.238:6892 udp
N/A 91.121.43.239:6892 udp
N/A 91.121.43.240:6892 udp
N/A 91.121.43.241:6892 udp
N/A 91.121.43.242:6892 udp
N/A 91.121.43.243:6892 udp
N/A 91.121.43.244:6892 udp
N/A 91.121.43.245:6892 udp
N/A 91.121.43.246:6892 udp
N/A 91.121.43.247:6892 udp
N/A 91.121.43.248:6892 udp
N/A 91.121.43.249:6892 udp
N/A 91.121.43.250:6892 udp
N/A 91.121.43.251:6892 udp
N/A 91.121.43.252:6892 udp
N/A 91.121.43.253:6892 udp
N/A 91.121.43.254:6892 udp
N/A 91.121.43.255:6892 udp
N/A 91.117.40.0:6892 udp
N/A 91.117.40.1:6892 udp
N/A 91.117.40.2:6892 udp
N/A 91.117.40.3:6892 udp
N/A 91.117.40.4:6892 udp
N/A 91.117.40.5:6892 udp
N/A 91.117.40.6:6892 udp
N/A 91.117.40.7:6892 udp
N/A 91.117.40.8:6892 udp
N/A 91.117.40.9:6892 udp
N/A 91.117.40.10:6892 udp
N/A 91.117.40.11:6892 udp
N/A 91.117.40.12:6892 udp
N/A 91.117.40.13:6892 udp
N/A 91.117.40.14:6892 udp
N/A 91.117.40.15:6892 udp
N/A 91.117.40.16:6892 udp
N/A 91.117.40.17:6892 udp
N/A 91.117.40.18:6892 udp
N/A 91.117.40.19:6892 udp
N/A 91.117.40.20:6892 udp
N/A 91.117.40.21:6892 udp
N/A 91.117.40.22:6892 udp
N/A 91.117.40.23:6892 udp
N/A 91.117.40.24:6892 udp
N/A 91.117.40.25:6892 udp
N/A 91.117.40.26:6892 udp
N/A 91.117.40.27:6892 udp
N/A 91.117.40.28:6892 udp
N/A 91.117.40.29:6892 udp
N/A 91.117.40.30:6892 udp
N/A 91.117.40.31:6892 udp
N/A 91.119.40.0:6892 udp
N/A 91.119.40.1:6892 udp
N/A 91.119.40.2:6892 udp
N/A 91.119.40.3:6892 udp
N/A 91.119.40.4:6892 udp
N/A 91.119.40.5:6892 udp
N/A 91.119.40.6:6892 udp
N/A 91.119.40.7:6892 udp
N/A 91.119.40.8:6892 udp
N/A 91.119.40.9:6892 udp
N/A 91.119.40.10:6892 udp
N/A 91.119.40.11:6892 udp
N/A 91.119.40.12:6892 udp
N/A 91.119.40.13:6892 udp
N/A 91.119.40.14:6892 udp
N/A 91.119.40.15:6892 udp
N/A 91.119.40.16:6892 udp
N/A 91.119.40.17:6892 udp
N/A 91.119.40.18:6892 udp
N/A 91.119.40.19:6892 udp
N/A 91.119.40.20:6892 udp
N/A 91.119.40.21:6892 udp
N/A 91.119.40.22:6892 udp
N/A 91.119.40.23:6892 udp
N/A 91.119.40.24:6892 udp
N/A 91.119.40.25:6892 udp
N/A 91.119.40.26:6892 udp
N/A 91.119.40.27:6892 udp
N/A 91.119.40.28:6892 udp
N/A 91.119.40.29:6892 udp
N/A 91.119.40.30:6892 udp
N/A 91.119.40.31:6892 udp
N/A 91.121.40.0:6892 udp
N/A 91.121.40.1:6892 udp
N/A 91.121.40.2:6892 udp
N/A 91.121.40.3:6892 udp
N/A 91.121.40.4:6892 udp
N/A 91.121.40.5:6892 udp
N/A 91.121.40.6:6892 udp
N/A 91.121.40.7:6892 udp
N/A 91.121.40.8:6892 udp
N/A 91.121.40.9:6892 udp
N/A 91.121.40.10:6892 udp
N/A 91.121.40.11:6892 udp
N/A 91.121.40.12:6892 udp
N/A 91.121.40.13:6892 udp
N/A 91.121.40.14:6892 udp
N/A 91.121.40.15:6892 udp
N/A 91.121.40.16:6892 udp
N/A 91.121.40.17:6892 udp
N/A 91.121.40.18:6892 udp
N/A 91.121.40.19:6892 udp
N/A 91.121.40.20:6892 udp
N/A 91.121.40.21:6892 udp
N/A 91.121.40.22:6892 udp
N/A 91.121.40.23:6892 udp
N/A 91.121.40.24:6892 udp
N/A 91.121.40.25:6892 udp
N/A 91.121.40.26:6892 udp
N/A 91.121.40.27:6892 udp
N/A 91.121.40.28:6892 udp
N/A 91.121.40.29:6892 udp
N/A 91.121.40.30:6892 udp
N/A 91.121.40.31:6892 udp
N/A 91.121.40.32:6892 udp
N/A 91.121.40.33:6892 udp
N/A 91.121.40.34:6892 udp
N/A 91.121.40.35:6892 udp
N/A 91.121.40.36:6892 udp
N/A 91.121.40.37:6892 udp
N/A 91.121.40.38:6892 udp
N/A 91.121.40.39:6892 udp
N/A 91.121.40.40:6892 udp
N/A 91.121.40.41:6892 udp
N/A 91.121.40.42:6892 udp
N/A 91.121.40.43:6892 udp
N/A 91.121.40.44:6892 udp
N/A 91.121.40.45:6892 udp
N/A 91.121.40.46:6892 udp
N/A 91.121.40.47:6892 udp
N/A 91.121.40.48:6892 udp
N/A 91.121.40.49:6892 udp
N/A 91.121.40.50:6892 udp
N/A 91.121.40.51:6892 udp
N/A 91.121.40.52:6892 udp
N/A 91.121.40.53:6892 udp
N/A 91.121.40.54:6892 udp
N/A 91.121.40.55:6892 udp
N/A 91.121.40.56:6892 udp
N/A 91.121.40.57:6892 udp
N/A 91.121.40.58:6892 udp
N/A 91.121.40.59:6892 udp
N/A 91.121.40.60:6892 udp
N/A 91.121.40.61:6892 udp
N/A 91.121.40.62:6892 udp
N/A 91.121.40.63:6892 udp
N/A 91.121.40.64:6892 udp
N/A 91.121.40.65:6892 udp
N/A 91.121.40.66:6892 udp
N/A 91.121.40.67:6892 udp
N/A 91.121.40.68:6892 udp
N/A 91.121.40.69:6892 udp
N/A 91.121.40.70:6892 udp
N/A 91.121.40.71:6892 udp
N/A 91.121.40.72:6892 udp
N/A 91.121.40.73:6892 udp
N/A 91.121.40.74:6892 udp
N/A 91.121.40.75:6892 udp
N/A 91.121.40.76:6892 udp
N/A 91.121.40.77:6892 udp
N/A 91.121.40.78:6892 udp
N/A 91.121.40.79:6892 udp
N/A 91.121.40.80:6892 udp
N/A 91.121.40.81:6892 udp
N/A 91.121.40.82:6892 udp
N/A 91.121.40.83:6892 udp
N/A 91.121.40.84:6892 udp
N/A 91.121.40.85:6892 udp
N/A 91.121.40.86:6892 udp
N/A 91.121.40.87:6892 udp
N/A 91.121.40.88:6892 udp
N/A 91.121.40.89:6892 udp
N/A 91.121.40.90:6892 udp
N/A 91.121.40.91:6892 udp
N/A 91.121.40.92:6892 udp
N/A 91.121.40.93:6892 udp
N/A 91.121.40.94:6892 udp
N/A 91.121.40.95:6892 udp
N/A 91.121.40.96:6892 udp
N/A 91.121.40.97:6892 udp
N/A 91.121.40.98:6892 udp
N/A 91.121.40.99:6892 udp
N/A 91.121.40.100:6892 udp
N/A 91.121.40.101:6892 udp
N/A 91.121.40.102:6892 udp
N/A 91.121.40.103:6892 udp
N/A 91.121.40.104:6892 udp
N/A 91.121.40.105:6892 udp
N/A 91.121.40.106:6892 udp
N/A 91.121.40.107:6892 udp
N/A 91.121.40.108:6892 udp
N/A 91.121.40.109:6892 udp
N/A 91.121.40.110:6892 udp
N/A 91.121.40.111:6892 udp
N/A 91.121.40.112:6892 udp
N/A 91.121.40.113:6892 udp
N/A 91.121.40.114:6892 udp
N/A 91.121.40.115:6892 udp
N/A 91.121.40.116:6892 udp
N/A 91.121.40.117:6892 udp
N/A 91.121.40.118:6892 udp
N/A 91.121.40.119:6892 udp
N/A 91.121.40.120:6892 udp
N/A 91.121.40.121:6892 udp
N/A 91.121.40.122:6892 udp
N/A 91.121.40.123:6892 udp
N/A 91.121.40.124:6892 udp
N/A 91.121.40.125:6892 udp
N/A 91.121.40.126:6892 udp
N/A 91.121.40.127:6892 udp
N/A 91.121.40.128:6892 udp
N/A 91.121.40.129:6892 udp
N/A 91.121.40.130:6892 udp
N/A 91.121.40.131:6892 udp
N/A 91.121.40.132:6892 udp
N/A 91.121.40.133:6892 udp
N/A 91.121.40.134:6892 udp
N/A 91.121.40.135:6892 udp
N/A 91.121.40.136:6892 udp
N/A 91.121.40.137:6892 udp
N/A 91.121.40.138:6892 udp
N/A 91.121.40.139:6892 udp
N/A 91.121.40.140:6892 udp
N/A 91.121.40.141:6892 udp
N/A 91.121.40.142:6892 udp
N/A 91.121.40.143:6892 udp
N/A 91.121.40.144:6892 udp
N/A 91.121.40.145:6892 udp
N/A 91.121.40.146:6892 udp
N/A 91.121.40.147:6892 udp
N/A 91.121.40.148:6892 udp
N/A 91.121.40.149:6892 udp
N/A 91.121.40.150:6892 udp
N/A 91.121.40.151:6892 udp
N/A 91.121.40.152:6892 udp
N/A 91.121.40.153:6892 udp
N/A 91.121.40.154:6892 udp
N/A 91.121.40.155:6892 udp
N/A 91.121.40.156:6892 udp
N/A 91.121.40.157:6892 udp
N/A 91.121.40.158:6892 udp
N/A 91.121.40.159:6892 udp
N/A 91.121.40.160:6892 udp
N/A 91.121.40.161:6892 udp
N/A 91.121.40.162:6892 udp
N/A 91.121.40.163:6892 udp
N/A 91.121.40.164:6892 udp
N/A 91.121.40.165:6892 udp
N/A 91.121.40.166:6892 udp
N/A 91.121.40.167:6892 udp
N/A 91.121.40.168:6892 udp
N/A 91.121.40.169:6892 udp
N/A 91.121.40.170:6892 udp
N/A 91.121.40.171:6892 udp
N/A 91.121.40.172:6892 udp
N/A 91.121.40.173:6892 udp
N/A 91.121.40.174:6892 udp
N/A 91.121.40.175:6892 udp
N/A 91.121.40.176:6892 udp
N/A 91.121.40.177:6892 udp
N/A 91.121.40.178:6892 udp
N/A 91.121.40.179:6892 udp
N/A 91.121.40.180:6892 udp
N/A 91.121.40.181:6892 udp
N/A 91.121.40.182:6892 udp
N/A 91.121.40.183:6892 udp
N/A 91.121.40.184:6892 udp
N/A 91.121.40.185:6892 udp
N/A 91.121.40.186:6892 udp
N/A 91.121.40.187:6892 udp
N/A 91.121.40.188:6892 udp
N/A 91.121.40.189:6892 udp
N/A 91.121.40.190:6892 udp
N/A 91.121.40.191:6892 udp
N/A 91.121.40.192:6892 udp
N/A 91.121.40.193:6892 udp
N/A 91.121.40.194:6892 udp
N/A 91.121.40.195:6892 udp
N/A 91.121.40.196:6892 udp
N/A 91.121.40.197:6892 udp
N/A 91.121.40.198:6892 udp
N/A 91.121.40.199:6892 udp
N/A 91.121.40.200:6892 udp
N/A 91.121.40.201:6892 udp
N/A 91.121.40.202:6892 udp
N/A 91.121.40.203:6892 udp
N/A 91.121.40.204:6892 udp
N/A 91.121.40.205:6892 udp
N/A 91.121.40.206:6892 udp
N/A 91.121.40.207:6892 udp
N/A 91.121.40.208:6892 udp
N/A 91.121.40.209:6892 udp
N/A 91.121.40.210:6892 udp
N/A 91.121.40.211:6892 udp
N/A 91.121.40.212:6892 udp
N/A 91.121.40.213:6892 udp
N/A 91.121.40.214:6892 udp
N/A 91.121.40.215:6892 udp
N/A 91.121.40.216:6892 udp
N/A 91.121.40.217:6892 udp
N/A 91.121.40.218:6892 udp
N/A 91.121.40.219:6892 udp
N/A 91.121.40.220:6892 udp
N/A 91.121.40.221:6892 udp
N/A 91.121.40.222:6892 udp
N/A 91.121.40.223:6892 udp
N/A 91.121.40.224:6892 udp
N/A 91.121.40.225:6892 udp
N/A 91.121.40.226:6892 udp
N/A 91.121.40.227:6892 udp
N/A 91.121.40.228:6892 udp
N/A 91.121.40.229:6892 udp
N/A 91.121.40.230:6892 udp
N/A 91.121.40.231:6892 udp
N/A 91.121.40.232:6892 udp
N/A 91.121.40.233:6892 udp
N/A 91.121.40.234:6892 udp
N/A 91.121.40.235:6892 udp
N/A 91.121.40.236:6892 udp
N/A 91.121.40.237:6892 udp
N/A 91.121.40.238:6892 udp
N/A 91.121.40.239:6892 udp
N/A 91.121.40.240:6892 udp
N/A 91.121.40.241:6892 udp
N/A 91.121.40.242:6892 udp
N/A 91.121.40.243:6892 udp
N/A 91.121.40.244:6892 udp
N/A 91.121.40.245:6892 udp
N/A 91.121.40.246:6892 udp
N/A 91.121.40.247:6892 udp
N/A 91.121.40.248:6892 udp
N/A 91.121.40.249:6892 udp
N/A 91.121.40.250:6892 udp
N/A 91.121.40.251:6892 udp
N/A 91.121.40.252:6892 udp
N/A 91.121.40.253:6892 udp
N/A 91.121.40.254:6892 udp
N/A 91.121.40.255:6892 udp
N/A 91.121.41.0:6892 udp
N/A 91.121.41.1:6892 udp
N/A 91.121.41.2:6892 udp
N/A 91.121.41.3:6892 udp
N/A 91.121.41.4:6892 udp
N/A 91.121.41.5:6892 udp
N/A 91.121.41.6:6892 udp
N/A 91.121.41.7:6892 udp
N/A 91.121.41.8:6892 udp
N/A 91.121.41.9:6892 udp
N/A 91.121.41.10:6892 udp
N/A 91.121.41.11:6892 udp
N/A 91.121.41.12:6892 udp
N/A 91.121.41.13:6892 udp
N/A 91.121.41.14:6892 udp
N/A 91.121.41.15:6892 udp
N/A 91.121.41.16:6892 udp
N/A 91.121.41.17:6892 udp
N/A 91.121.41.18:6892 udp
N/A 91.121.41.19:6892 udp
N/A 91.121.41.20:6892 udp
N/A 91.121.41.21:6892 udp
N/A 91.121.41.22:6892 udp
N/A 91.121.41.23:6892 udp
N/A 91.121.41.24:6892 udp
N/A 91.121.41.25:6892 udp
N/A 91.121.41.26:6892 udp
N/A 91.121.41.27:6892 udp
N/A 91.121.41.28:6892 udp
N/A 91.121.41.29:6892 udp
N/A 91.121.41.30:6892 udp
N/A 91.121.41.31:6892 udp
N/A 91.121.41.32:6892 udp
N/A 91.121.41.33:6892 udp
N/A 91.121.41.34:6892 udp
N/A 91.121.41.35:6892 udp
N/A 91.121.41.36:6892 udp
N/A 91.121.41.37:6892 udp
N/A 91.121.41.38:6892 udp
N/A 91.121.41.39:6892 udp
N/A 91.121.41.40:6892 udp
N/A 91.121.41.41:6892 udp
N/A 91.121.41.42:6892 udp
N/A 91.121.41.43:6892 udp
N/A 91.121.41.44:6892 udp
N/A 91.121.41.45:6892 udp
N/A 91.121.41.46:6892 udp
N/A 91.121.41.47:6892 udp
N/A 91.121.41.48:6892 udp
N/A 91.121.41.49:6892 udp
N/A 91.121.41.50:6892 udp
N/A 91.121.41.51:6892 udp
N/A 91.121.41.52:6892 udp
N/A 91.121.41.53:6892 udp
N/A 91.121.41.54:6892 udp
N/A 91.121.41.55:6892 udp
N/A 91.121.41.56:6892 udp
N/A 91.121.41.57:6892 udp
N/A 91.121.41.58:6892 udp
N/A 91.121.41.59:6892 udp
N/A 91.121.41.60:6892 udp
N/A 91.121.41.61:6892 udp
N/A 91.121.41.62:6892 udp
N/A 91.121.41.63:6892 udp
N/A 91.121.41.64:6892 udp
N/A 91.121.41.65:6892 udp
N/A 91.121.41.66:6892 udp
N/A 91.121.41.67:6892 udp
N/A 91.121.41.68:6892 udp
N/A 91.121.41.69:6892 udp
N/A 91.121.41.70:6892 udp
N/A 91.121.41.71:6892 udp
N/A 91.121.41.72:6892 udp
N/A 91.121.41.73:6892 udp
N/A 91.121.41.74:6892 udp
N/A 91.121.41.75:6892 udp
N/A 91.121.41.76:6892 udp
N/A 91.121.41.77:6892 udp
N/A 91.121.41.78:6892 udp
N/A 91.121.41.79:6892 udp
N/A 91.121.41.80:6892 udp
N/A 91.121.41.81:6892 udp
N/A 91.121.41.82:6892 udp
N/A 91.121.41.83:6892 udp
N/A 91.121.41.84:6892 udp
N/A 91.121.41.85:6892 udp
N/A 91.121.41.86:6892 udp
N/A 91.121.41.87:6892 udp
N/A 91.121.41.88:6892 udp
N/A 91.121.41.89:6892 udp
N/A 91.121.41.90:6892 udp
N/A 91.121.41.91:6892 udp
N/A 91.121.41.92:6892 udp
N/A 91.121.41.93:6892 udp
N/A 91.121.41.94:6892 udp
N/A 91.121.41.95:6892 udp
N/A 91.121.41.96:6892 udp
N/A 91.121.41.97:6892 udp
N/A 91.121.41.98:6892 udp
N/A 91.121.41.99:6892 udp
N/A 91.121.41.100:6892 udp
N/A 91.121.41.101:6892 udp
N/A 91.121.41.102:6892 udp
N/A 91.121.41.103:6892 udp
N/A 91.121.41.104:6892 udp
N/A 91.121.41.105:6892 udp
N/A 91.121.41.106:6892 udp
N/A 91.121.41.107:6892 udp
N/A 91.121.41.108:6892 udp
N/A 91.121.41.109:6892 udp
N/A 91.121.41.110:6892 udp
N/A 91.121.41.111:6892 udp
N/A 91.121.41.112:6892 udp
N/A 91.121.41.113:6892 udp
N/A 91.121.41.114:6892 udp
N/A 91.121.41.115:6892 udp
N/A 91.121.41.116:6892 udp
N/A 91.121.41.117:6892 udp
N/A 91.121.41.118:6892 udp
N/A 91.121.41.119:6892 udp
N/A 91.121.41.120:6892 udp
N/A 91.121.41.121:6892 udp
N/A 91.121.41.122:6892 udp
N/A 91.121.41.123:6892 udp
N/A 91.121.41.124:6892 udp
N/A 91.121.41.125:6892 udp
N/A 91.121.41.126:6892 udp
N/A 91.121.41.127:6892 udp
N/A 91.121.41.128:6892 udp
N/A 91.121.41.129:6892 udp
N/A 91.121.41.130:6892 udp
N/A 91.121.41.131:6892 udp
N/A 91.121.41.132:6892 udp
N/A 91.121.41.133:6892 udp
N/A 91.121.41.134:6892 udp
N/A 91.121.41.135:6892 udp
N/A 91.121.41.136:6892 udp
N/A 91.121.41.137:6892 udp
N/A 91.121.41.138:6892 udp
N/A 91.121.41.139:6892 udp
N/A 91.121.41.140:6892 udp
N/A 91.121.41.141:6892 udp
N/A 91.121.41.142:6892 udp
N/A 91.121.41.143:6892 udp
N/A 91.121.41.144:6892 udp
N/A 91.121.41.145:6892 udp
N/A 91.121.41.146:6892 udp
N/A 91.121.41.147:6892 udp
N/A 91.121.41.148:6892 udp
N/A 91.121.41.149:6892 udp
N/A 91.121.41.150:6892 udp
N/A 91.121.41.151:6892 udp
N/A 91.121.41.152:6892 udp
N/A 91.121.41.153:6892 udp
N/A 91.121.41.154:6892 udp
N/A 91.121.41.155:6892 udp
N/A 91.121.41.156:6892 udp
N/A 91.121.41.157:6892 udp
N/A 91.121.41.158:6892 udp
N/A 91.121.41.159:6892 udp
N/A 91.121.41.160:6892 udp
N/A 91.121.41.161:6892 udp
N/A 91.121.41.162:6892 udp
N/A 91.121.41.163:6892 udp
N/A 91.121.41.164:6892 udp
N/A 91.121.41.165:6892 udp
N/A 91.121.41.166:6892 udp
N/A 91.121.41.167:6892 udp
N/A 91.121.41.168:6892 udp
N/A 91.121.41.169:6892 udp
N/A 91.121.41.170:6892 udp
N/A 91.121.41.171:6892 udp
N/A 91.121.41.172:6892 udp
N/A 91.121.41.173:6892 udp
N/A 91.121.41.174:6892 udp
N/A 91.121.41.175:6892 udp
N/A 91.121.41.176:6892 udp
N/A 91.121.41.177:6892 udp
N/A 91.121.41.178:6892 udp
N/A 91.121.41.179:6892 udp
N/A 91.121.41.180:6892 udp
N/A 91.121.41.181:6892 udp
N/A 91.121.41.182:6892 udp
N/A 91.121.41.183:6892 udp
N/A 91.121.41.184:6892 udp
N/A 91.121.41.185:6892 udp
N/A 91.121.41.186:6892 udp
N/A 91.121.41.187:6892 udp
N/A 91.121.41.188:6892 udp
N/A 91.121.41.189:6892 udp
N/A 91.121.41.190:6892 udp
N/A 91.121.41.191:6892 udp
N/A 91.121.41.192:6892 udp
N/A 91.121.41.193:6892 udp
N/A 91.121.41.194:6892 udp
N/A 91.121.41.195:6892 udp
N/A 91.121.41.196:6892 udp
N/A 91.121.41.197:6892 udp
N/A 91.121.41.198:6892 udp
N/A 91.121.41.199:6892 udp
N/A 91.121.41.200:6892 udp
N/A 91.121.41.201:6892 udp
N/A 91.121.41.202:6892 udp
N/A 91.121.41.203:6892 udp
N/A 91.121.41.204:6892 udp
N/A 91.121.41.205:6892 udp
N/A 91.121.41.206:6892 udp
N/A 91.121.41.207:6892 udp
N/A 91.121.41.208:6892 udp
N/A 91.121.41.209:6892 udp
N/A 91.121.41.210:6892 udp
N/A 91.121.41.211:6892 udp
N/A 91.121.41.212:6892 udp
N/A 91.121.41.213:6892 udp
N/A 91.121.41.214:6892 udp
N/A 91.121.41.215:6892 udp
N/A 91.121.41.216:6892 udp
N/A 91.121.41.217:6892 udp
N/A 91.121.41.218:6892 udp
N/A 91.121.41.219:6892 udp
N/A 91.121.41.220:6892 udp
N/A 91.121.41.221:6892 udp
N/A 91.121.41.222:6892 udp
N/A 91.121.41.223:6892 udp
N/A 91.121.41.224:6892 udp
N/A 91.121.41.225:6892 udp
N/A 91.121.41.226:6892 udp
N/A 91.121.41.227:6892 udp
N/A 91.121.41.228:6892 udp
N/A 91.121.41.229:6892 udp
N/A 91.121.41.230:6892 udp
N/A 91.121.41.231:6892 udp
N/A 91.121.41.232:6892 udp
N/A 91.121.41.233:6892 udp
N/A 91.121.41.234:6892 udp
N/A 91.121.41.235:6892 udp
N/A 91.121.41.236:6892 udp
N/A 91.121.41.237:6892 udp
N/A 91.121.41.238:6892 udp
N/A 91.121.41.239:6892 udp
N/A 91.121.41.240:6892 udp
N/A 91.121.41.241:6892 udp
N/A 91.121.41.242:6892 udp
N/A 91.121.41.243:6892 udp
N/A 91.121.41.244:6892 udp
N/A 91.121.41.245:6892 udp
N/A 91.121.41.246:6892 udp
N/A 91.121.41.247:6892 udp
N/A 91.121.41.248:6892 udp
N/A 91.121.41.249:6892 udp
N/A 91.121.41.250:6892 udp
N/A 91.121.41.251:6892 udp
N/A 91.121.41.252:6892 udp
N/A 91.121.41.253:6892 udp
N/A 91.121.41.254:6892 udp
N/A 91.121.41.255:6892 udp
N/A 91.121.42.0:6892 udp
N/A 91.121.42.1:6892 udp
N/A 91.121.42.2:6892 udp
N/A 91.121.42.3:6892 udp
N/A 91.121.42.4:6892 udp
N/A 91.121.42.5:6892 udp
N/A 91.121.42.6:6892 udp
N/A 91.121.42.7:6892 udp
N/A 91.121.42.8:6892 udp
N/A 91.121.42.9:6892 udp
N/A 91.121.42.10:6892 udp
N/A 91.121.42.11:6892 udp
N/A 91.121.42.12:6892 udp
N/A 91.121.42.13:6892 udp
N/A 91.121.42.14:6892 udp
N/A 91.121.42.15:6892 udp
N/A 91.121.42.16:6892 udp
N/A 91.121.42.17:6892 udp
N/A 91.121.42.18:6892 udp
N/A 91.121.42.19:6892 udp
N/A 91.121.42.20:6892 udp
N/A 91.121.42.21:6892 udp
N/A 91.121.42.22:6892 udp
N/A 91.121.42.23:6892 udp
N/A 91.121.42.24:6892 udp
N/A 91.121.42.25:6892 udp
N/A 91.121.42.26:6892 udp
N/A 91.121.42.27:6892 udp
N/A 91.121.42.28:6892 udp
N/A 91.121.42.29:6892 udp
N/A 91.121.42.30:6892 udp
N/A 91.121.42.31:6892 udp
N/A 91.121.42.32:6892 udp
N/A 91.121.42.33:6892 udp
N/A 91.121.42.34:6892 udp
N/A 91.121.42.35:6892 udp
N/A 91.121.42.36:6892 udp
N/A 91.121.42.37:6892 udp
N/A 91.121.42.38:6892 udp
N/A 91.121.42.39:6892 udp
N/A 91.121.42.40:6892 udp
N/A 91.121.42.41:6892 udp
N/A 91.121.42.42:6892 udp
N/A 91.121.42.43:6892 udp
N/A 91.121.42.44:6892 udp
N/A 91.121.42.45:6892 udp
N/A 91.121.42.46:6892 udp
N/A 91.121.42.47:6892 udp
N/A 91.121.42.48:6892 udp
N/A 91.121.42.49:6892 udp
N/A 91.121.42.50:6892 udp
N/A 91.121.42.51:6892 udp
N/A 91.121.42.52:6892 udp
N/A 91.121.42.53:6892 udp
N/A 91.121.42.54:6892 udp
N/A 91.121.42.55:6892 udp
N/A 91.121.42.56:6892 udp
N/A 91.121.42.57:6892 udp
N/A 91.121.42.58:6892 udp
N/A 91.121.42.59:6892 udp
N/A 91.121.42.60:6892 udp
N/A 91.121.42.61:6892 udp
N/A 91.121.42.62:6892 udp
N/A 91.121.42.63:6892 udp
N/A 91.121.42.64:6892 udp
N/A 91.121.42.65:6892 udp
N/A 91.121.42.66:6892 udp
N/A 91.121.42.67:6892 udp
N/A 91.121.42.68:6892 udp
N/A 91.121.42.69:6892 udp
N/A 91.121.42.70:6892 udp
N/A 91.121.42.71:6892 udp
N/A 91.121.42.72:6892 udp
N/A 91.121.42.73:6892 udp
N/A 91.121.42.74:6892 udp
N/A 91.121.42.75:6892 udp
N/A 91.121.42.76:6892 udp
N/A 91.121.42.77:6892 udp
N/A 91.121.42.78:6892 udp
N/A 91.121.42.79:6892 udp
N/A 91.121.42.80:6892 udp
N/A 91.121.42.81:6892 udp
N/A 91.121.42.82:6892 udp
N/A 91.121.42.83:6892 udp
N/A 91.121.42.84:6892 udp
N/A 91.121.42.85:6892 udp
N/A 91.121.42.86:6892 udp
N/A 91.121.42.87:6892 udp
N/A 91.121.42.88:6892 udp
N/A 91.121.42.89:6892 udp
N/A 91.121.42.90:6892 udp
N/A 91.121.42.91:6892 udp
N/A 91.121.42.92:6892 udp
N/A 91.121.42.93:6892 udp
N/A 91.121.42.94:6892 udp
N/A 91.121.42.95:6892 udp
N/A 91.121.42.96:6892 udp
N/A 91.121.42.97:6892 udp
N/A 91.121.42.98:6892 udp
N/A 91.121.42.99:6892 udp
N/A 91.121.42.100:6892 udp
N/A 91.121.42.101:6892 udp
N/A 91.121.42.102:6892 udp
N/A 91.121.42.103:6892 udp
N/A 91.121.42.104:6892 udp
N/A 91.121.42.105:6892 udp
N/A 91.121.42.106:6892 udp
N/A 91.121.42.107:6892 udp
N/A 91.121.42.108:6892 udp
N/A 91.121.42.109:6892 udp
N/A 91.121.42.110:6892 udp
N/A 91.121.42.111:6892 udp
N/A 91.121.42.112:6892 udp
N/A 91.121.42.113:6892 udp
N/A 91.121.42.114:6892 udp
N/A 91.121.42.115:6892 udp
N/A 91.121.42.116:6892 udp
N/A 91.121.42.117:6892 udp
N/A 91.121.42.118:6892 udp
N/A 91.121.42.119:6892 udp
N/A 91.121.42.120:6892 udp
N/A 91.121.42.121:6892 udp
N/A 91.121.42.122:6892 udp
N/A 91.121.42.123:6892 udp
N/A 91.121.42.124:6892 udp
N/A 91.121.42.125:6892 udp
N/A 91.121.42.126:6892 udp
N/A 91.121.42.127:6892 udp
N/A 91.121.42.128:6892 udp
N/A 91.121.42.129:6892 udp
N/A 91.121.42.130:6892 udp
N/A 91.121.42.131:6892 udp
N/A 91.121.42.132:6892 udp
N/A 91.121.42.133:6892 udp
N/A 91.121.42.134:6892 udp
N/A 91.121.42.135:6892 udp
N/A 91.121.42.136:6892 udp
N/A 91.121.42.137:6892 udp
N/A 91.121.42.138:6892 udp
N/A 91.121.42.139:6892 udp
N/A 91.121.42.140:6892 udp
N/A 91.121.42.141:6892 udp
N/A 91.121.42.142:6892 udp
N/A 91.121.42.143:6892 udp
N/A 91.121.42.144:6892 udp
N/A 91.121.42.145:6892 udp
N/A 91.121.42.146:6892 udp
N/A 91.121.42.147:6892 udp
N/A 91.121.42.148:6892 udp
N/A 91.121.42.149:6892 udp
N/A 91.121.42.150:6892 udp
N/A 91.121.42.151:6892 udp
N/A 91.121.42.152:6892 udp
N/A 91.121.42.153:6892 udp
N/A 91.121.42.154:6892 udp
N/A 91.121.42.155:6892 udp
N/A 91.121.42.156:6892 udp
N/A 91.121.42.157:6892 udp
N/A 91.121.42.158:6892 udp
N/A 91.121.42.159:6892 udp
N/A 91.121.42.160:6892 udp
N/A 91.121.42.161:6892 udp
N/A 91.121.42.162:6892 udp
N/A 91.121.42.163:6892 udp
N/A 91.121.42.164:6892 udp
N/A 91.121.42.165:6892 udp
N/A 91.121.42.166:6892 udp
N/A 91.121.42.167:6892 udp
N/A 91.121.42.168:6892 udp
N/A 91.121.42.169:6892 udp
N/A 91.121.42.170:6892 udp
N/A 91.121.42.171:6892 udp
N/A 91.121.42.172:6892 udp
N/A 91.121.42.173:6892 udp
N/A 91.121.42.174:6892 udp
N/A 91.121.42.175:6892 udp
N/A 91.121.42.176:6892 udp
N/A 91.121.42.177:6892 udp
N/A 91.121.42.178:6892 udp
N/A 91.121.42.179:6892 udp
N/A 91.121.42.180:6892 udp
N/A 91.121.42.181:6892 udp
N/A 91.121.42.182:6892 udp
N/A 91.121.42.183:6892 udp
N/A 91.121.42.184:6892 udp
N/A 91.121.42.185:6892 udp
N/A 91.121.42.186:6892 udp
N/A 91.121.42.187:6892 udp
N/A 91.121.42.188:6892 udp
N/A 91.121.42.189:6892 udp
N/A 91.121.42.190:6892 udp
N/A 91.121.42.191:6892 udp
N/A 91.121.42.192:6892 udp
N/A 91.121.42.193:6892 udp
N/A 91.121.42.194:6892 udp
N/A 91.121.42.195:6892 udp
N/A 91.121.42.196:6892 udp
N/A 91.121.42.197:6892 udp
N/A 91.121.42.198:6892 udp
N/A 91.121.42.199:6892 udp
N/A 91.121.42.200:6892 udp
N/A 91.121.42.201:6892 udp
N/A 91.121.42.202:6892 udp
N/A 91.121.42.203:6892 udp
N/A 91.121.42.204:6892 udp
N/A 91.121.42.205:6892 udp
N/A 91.121.42.206:6892 udp
N/A 91.121.42.207:6892 udp
N/A 91.121.42.208:6892 udp
N/A 91.121.42.209:6892 udp
N/A 91.121.42.210:6892 udp
N/A 91.121.42.211:6892 udp
N/A 91.121.42.212:6892 udp
N/A 91.121.42.213:6892 udp
N/A 91.121.42.214:6892 udp
N/A 91.121.42.215:6892 udp
N/A 91.121.42.216:6892 udp
N/A 91.121.42.217:6892 udp
N/A 91.121.42.218:6892 udp
N/A 91.121.42.219:6892 udp
N/A 91.121.42.220:6892 udp
N/A 91.121.42.221:6892 udp
N/A 91.121.42.222:6892 udp
N/A 91.121.42.223:6892 udp
N/A 91.121.42.224:6892 udp
N/A 91.121.42.225:6892 udp
N/A 91.121.42.226:6892 udp
N/A 91.121.42.227:6892 udp
N/A 91.121.42.228:6892 udp
N/A 91.121.42.229:6892 udp
N/A 91.121.42.230:6892 udp
N/A 91.121.42.231:6892 udp
N/A 91.121.42.232:6892 udp
N/A 91.121.42.233:6892 udp
N/A 91.121.42.234:6892 udp
N/A 91.121.42.235:6892 udp
N/A 91.121.42.236:6892 udp
N/A 91.121.42.237:6892 udp
N/A 91.121.42.238:6892 udp
N/A 91.121.42.239:6892 udp
N/A 91.121.42.240:6892 udp
N/A 91.121.42.241:6892 udp
N/A 91.121.42.242:6892 udp
N/A 91.121.42.243:6892 udp
N/A 91.121.42.244:6892 udp
N/A 91.121.42.245:6892 udp
N/A 91.121.42.246:6892 udp
N/A 91.121.42.247:6892 udp
N/A 91.121.42.248:6892 udp
N/A 91.121.42.249:6892 udp
N/A 91.121.42.250:6892 udp
N/A 91.121.42.251:6892 udp
N/A 91.121.42.252:6892 udp
N/A 91.121.42.253:6892 udp
N/A 91.121.42.254:6892 udp
N/A 91.121.42.255:6892 udp
N/A 91.121.43.0:6892 udp
N/A 91.121.43.1:6892 udp
N/A 91.121.43.2:6892 udp
N/A 91.121.43.3:6892 udp
N/A 91.121.43.4:6892 udp
N/A 91.121.43.5:6892 udp
N/A 91.121.43.6:6892 udp
N/A 91.121.43.7:6892 udp
N/A 91.121.43.8:6892 udp
N/A 91.121.43.9:6892 udp
N/A 91.121.43.10:6892 udp
N/A 91.121.43.11:6892 udp
N/A 91.121.43.12:6892 udp
N/A 91.121.43.13:6892 udp
N/A 91.121.43.14:6892 udp
N/A 91.121.43.15:6892 udp
N/A 91.121.43.16:6892 udp
N/A 91.121.43.17:6892 udp
N/A 91.121.43.18:6892 udp
N/A 91.121.43.19:6892 udp
N/A 91.121.43.20:6892 udp
N/A 91.121.43.21:6892 udp
N/A 91.121.43.22:6892 udp
N/A 91.121.43.23:6892 udp
N/A 91.121.43.24:6892 udp
N/A 91.121.43.25:6892 udp
N/A 91.121.43.26:6892 udp
N/A 91.121.43.27:6892 udp
N/A 91.121.43.28:6892 udp
N/A 91.121.43.29:6892 udp
N/A 91.121.43.30:6892 udp
N/A 91.121.43.31:6892 udp
N/A 91.121.43.32:6892 udp
N/A 91.121.43.33:6892 udp
N/A 91.121.43.34:6892 udp
N/A 91.121.43.35:6892 udp
N/A 91.121.43.36:6892 udp
N/A 91.121.43.37:6892 udp
N/A 91.121.43.38:6892 udp
N/A 91.121.43.39:6892 udp
N/A 91.121.43.40:6892 udp
N/A 91.121.43.41:6892 udp
N/A 91.121.43.42:6892 udp
N/A 91.121.43.43:6892 udp
N/A 91.121.43.44:6892 udp
N/A 91.121.43.45:6892 udp
N/A 91.121.43.46:6892 udp
N/A 91.121.43.47:6892 udp
N/A 91.121.43.48:6892 udp
N/A 91.121.43.49:6892 udp
N/A 91.121.43.50:6892 udp
N/A 91.121.43.51:6892 udp
N/A 91.121.43.52:6892 udp
N/A 91.121.43.53:6892 udp
N/A 91.121.43.54:6892 udp
N/A 91.121.43.55:6892 udp
N/A 91.121.43.56:6892 udp
N/A 91.121.43.57:6892 udp
N/A 91.121.43.58:6892 udp
N/A 91.121.43.59:6892 udp
N/A 91.121.43.60:6892 udp
N/A 91.121.43.61:6892 udp
N/A 91.121.43.62:6892 udp
N/A 91.121.43.63:6892 udp
N/A 91.121.43.64:6892 udp
N/A 91.121.43.65:6892 udp
N/A 91.121.43.66:6892 udp
N/A 91.121.43.67:6892 udp
N/A 91.121.43.68:6892 udp
N/A 91.121.43.69:6892 udp
N/A 91.121.43.70:6892 udp
N/A 91.121.43.71:6892 udp
N/A 91.121.43.72:6892 udp
N/A 91.121.43.73:6892 udp
N/A 91.121.43.74:6892 udp
N/A 91.121.43.75:6892 udp
N/A 91.121.43.76:6892 udp
N/A 91.121.43.77:6892 udp
N/A 91.121.43.78:6892 udp
N/A 91.121.43.79:6892 udp
N/A 91.121.43.80:6892 udp
N/A 91.121.43.81:6892 udp
N/A 91.121.43.82:6892 udp
N/A 91.121.43.83:6892 udp
N/A 91.121.43.84:6892 udp
N/A 91.121.43.85:6892 udp
N/A 91.121.43.86:6892 udp
N/A 91.121.43.87:6892 udp
N/A 91.121.43.88:6892 udp
N/A 91.121.43.89:6892 udp
N/A 91.121.43.90:6892 udp
N/A 91.121.43.91:6892 udp
N/A 91.121.43.92:6892 udp
N/A 91.121.43.93:6892 udp
N/A 91.121.43.94:6892 udp
N/A 91.121.43.95:6892 udp
N/A 91.121.43.96:6892 udp
N/A 91.121.43.97:6892 udp
N/A 91.121.43.98:6892 udp
N/A 91.121.43.99:6892 udp
N/A 91.121.43.100:6892 udp
N/A 91.121.43.101:6892 udp
N/A 91.121.43.102:6892 udp
N/A 91.121.43.103:6892 udp
N/A 91.121.43.104:6892 udp
N/A 91.121.43.105:6892 udp
N/A 91.121.43.106:6892 udp
N/A 91.121.43.107:6892 udp
N/A 91.121.43.108:6892 udp
N/A 91.121.43.109:6892 udp
N/A 91.121.43.110:6892 udp
N/A 91.121.43.111:6892 udp
N/A 91.121.43.112:6892 udp
N/A 91.121.43.113:6892 udp
N/A 91.121.43.114:6892 udp
N/A 91.121.43.115:6892 udp
N/A 91.121.43.116:6892 udp
N/A 91.121.43.117:6892 udp
N/A 91.121.43.118:6892 udp
N/A 91.121.43.119:6892 udp
N/A 91.121.43.120:6892 udp
N/A 91.121.43.121:6892 udp
N/A 91.121.43.122:6892 udp
N/A 91.121.43.123:6892 udp
N/A 91.121.43.124:6892 udp
N/A 91.121.43.125:6892 udp
N/A 91.121.43.126:6892 udp
N/A 91.121.43.127:6892 udp
N/A 91.121.43.128:6892 udp
N/A 91.121.43.129:6892 udp
N/A 91.121.43.130:6892 udp
N/A 91.121.43.131:6892 udp
N/A 91.121.43.132:6892 udp
N/A 91.121.43.133:6892 udp
N/A 91.121.43.134:6892 udp
N/A 91.121.43.135:6892 udp
N/A 91.121.43.136:6892 udp
N/A 91.121.43.137:6892 udp
N/A 91.121.43.138:6892 udp
N/A 91.121.43.139:6892 udp
N/A 91.121.43.140:6892 udp
N/A 91.121.43.141:6892 udp
N/A 91.121.43.142:6892 udp
N/A 91.121.43.143:6892 udp
N/A 91.121.43.144:6892 udp
N/A 91.121.43.145:6892 udp
N/A 91.121.43.146:6892 udp
N/A 91.121.43.147:6892 udp
N/A 91.121.43.148:6892 udp
N/A 91.121.43.149:6892 udp
N/A 91.121.43.150:6892 udp
N/A 91.121.43.151:6892 udp
N/A 91.121.43.152:6892 udp
N/A 91.121.43.153:6892 udp
N/A 91.121.43.154:6892 udp
N/A 91.121.43.155:6892 udp
N/A 91.121.43.156:6892 udp
N/A 91.121.43.157:6892 udp
N/A 91.121.43.158:6892 udp
N/A 91.121.43.159:6892 udp
N/A 91.121.43.160:6892 udp
N/A 91.121.43.161:6892 udp
N/A 91.121.43.162:6892 udp
N/A 91.121.43.163:6892 udp
N/A 91.121.43.164:6892 udp
N/A 91.121.43.165:6892 udp
N/A 91.121.43.166:6892 udp
N/A 91.121.43.167:6892 udp
N/A 91.121.43.168:6892 udp
N/A 91.121.43.169:6892 udp
N/A 91.121.43.170:6892 udp
N/A 91.121.43.171:6892 udp
N/A 91.121.43.172:6892 udp
N/A 91.121.43.173:6892 udp
N/A 91.121.43.174:6892 udp
N/A 91.121.43.175:6892 udp
N/A 91.121.43.176:6892 udp
N/A 91.121.43.177:6892 udp
N/A 91.121.43.178:6892 udp
N/A 91.121.43.179:6892 udp
N/A 91.121.43.180:6892 udp
N/A 91.121.43.181:6892 udp
N/A 91.121.43.182:6892 udp
N/A 91.121.43.183:6892 udp
N/A 91.121.43.184:6892 udp
N/A 91.121.43.185:6892 udp
N/A 91.121.43.186:6892 udp
N/A 91.121.43.187:6892 udp
N/A 91.121.43.188:6892 udp
N/A 91.121.43.189:6892 udp
N/A 91.121.43.190:6892 udp
N/A 91.121.43.191:6892 udp
N/A 91.121.43.192:6892 udp
N/A 91.121.43.193:6892 udp
N/A 91.121.43.194:6892 udp
N/A 91.121.43.195:6892 udp
N/A 91.121.43.196:6892 udp
N/A 91.121.43.197:6892 udp
N/A 91.121.43.198:6892 udp
N/A 91.121.43.199:6892 udp
N/A 91.121.43.200:6892 udp
N/A 91.121.43.201:6892 udp
N/A 91.121.43.202:6892 udp
N/A 91.121.43.203:6892 udp
N/A 91.121.43.204:6892 udp
N/A 91.121.43.205:6892 udp
N/A 91.121.43.206:6892 udp
N/A 91.121.43.207:6892 udp
N/A 91.121.43.208:6892 udp
N/A 91.121.43.209:6892 udp
N/A 91.121.43.210:6892 udp
N/A 91.121.43.211:6892 udp
N/A 91.121.43.212:6892 udp
N/A 91.121.43.213:6892 udp
N/A 91.121.43.214:6892 udp
N/A 91.121.43.215:6892 udp
N/A 91.121.43.216:6892 udp
N/A 91.121.43.217:6892 udp
N/A 91.121.43.218:6892 udp
N/A 91.121.43.219:6892 udp
N/A 91.121.43.220:6892 udp
N/A 91.121.43.221:6892 udp
N/A 91.121.43.222:6892 udp
N/A 91.121.43.223:6892 udp
N/A 91.121.43.224:6892 udp
N/A 91.121.43.225:6892 udp
N/A 91.121.43.226:6892 udp
N/A 91.121.43.227:6892 udp
N/A 91.121.43.228:6892 udp
N/A 91.121.43.229:6892 udp
N/A 91.121.43.230:6892 udp
N/A 91.121.43.231:6892 udp
N/A 91.121.43.232:6892 udp
N/A 91.121.43.233:6892 udp
N/A 91.121.43.234:6892 udp
N/A 91.121.43.235:6892 udp
N/A 91.121.43.236:6892 udp
N/A 91.121.43.237:6892 udp
N/A 91.121.43.238:6892 udp
N/A 91.121.43.239:6892 udp
N/A 91.121.43.240:6892 udp
N/A 91.121.43.241:6892 udp
N/A 91.121.43.242:6892 udp
N/A 91.121.43.243:6892 udp
N/A 91.121.43.244:6892 udp
N/A 91.121.43.245:6892 udp
N/A 91.121.43.246:6892 udp
N/A 91.121.43.247:6892 udp
N/A 91.121.43.248:6892 udp
N/A 91.121.43.249:6892 udp
N/A 91.121.43.250:6892 udp
N/A 91.121.43.251:6892 udp
N/A 91.121.43.252:6892 udp
N/A 91.121.43.253:6892 udp
N/A 91.121.43.254:6892 udp
N/A 91.121.43.255:6892 udp
N/A 8.8.8.8:53 api.blockcypher.com udp
N/A 104.20.20.251:80 api.blockcypher.com tcp
N/A 8.8.8.8:53 btc.blockr.io udp
N/A 8.8.8.8:53 bitaps.com udp
N/A 178.128.255.179:443 bitaps.com tcp
N/A 93.184.221.240:80 ctldl.windowsupdate.com tcp
N/A 104.18.21.226:80 ocsp.globalsign.com tcp
N/A 104.18.20.226:80 ocsp2.globalsign.com tcp
N/A 8.8.8.8:53 chain.so udp
N/A 104.24.104.254:443 chain.so tcp
N/A 93.184.220.29:80 ocsp.digicert.com tcp
N/A 8.8.8.8:53 sochain.com udp
N/A 104.26.15.247:443 sochain.com tcp
N/A 8.8.8.8:53 p27dokhpz2n7nvgr.1lseoi.top udp

Files

memory/3800-0-0x0000000000400000-0x0000000000438000-memory.dmp

memory/3800-1-0x0000000000403AC2-mapping.dmp

memory/3800-2-0x0000000000400000-0x0000000000438000-memory.dmp

memory/1488-71-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_HELP_HELP_HELP_000NF_.hta

MD5 0870a187c86a053722ee6a6179dc9c68
SHA1 743a9a2b789ecb9241f9ad8a3636d78772a0f0db
SHA256 1593addc9929a1f99d1a9719d89beeaccec91b7c5da52cf37c6307885becadee
SHA512 2383f2934061e3f8f6ee8641c62fcdbf1a543adeb26c16534e183d88f3f78472a8c8e0d6831d9bf1d16018a2ec4f22650fdeb063e9ff601a12f7abb109c54ed3

memory/1956-73-0x0000000000000000-mapping.dmp

memory/1208-74-0x0000000000000000-mapping.dmp

memory/192-75-0x0000000000000000-mapping.dmp