Malware Analysis Report

2025-01-02 15:07

Sample ID 201106-s2alxxf5l2
Target 8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a
SHA256 8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a
Tags
cerber evasion persistence ransomware
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V6

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a

Threat Level: Known bad

The file 8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a was found to be: Known bad.

Malicious Activity Summary

cerber evasion persistence ransomware

Cerber

Modifies Windows Firewall

Blacklisted process makes network request

Deletes itself

Drops startup file

Modifies service

Drops file in System32 directory

Drops file in Program Files directory

Drops file in Windows directory

Suspicious use of UnmapMainImage

Runs ping.exe

Modifies system certificate store

Modifies registry class

Suspicious use of WriteProcessMemory

Modifies Internet Explorer settings

Opens file in notepad (likely ransom note)

Kills process with taskkill

Suspicious use of AdjustPrivilegeToken

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2020-11-06 11:02

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2020-11-06 11:02

Reported

2020-11-06 12:19

Platform

win7v20201028

Max time kernel

65s

Max time network

147s

Command Line

"C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe"

Signatures

Cerber

ransomware cerber

Blacklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

Modifies Windows Firewall

evasion

Deletes itself

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\cmd.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\desktop C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\documents C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A

Modifies service

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\Enroll\HcsGroups C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\UI C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\LocalConfig C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\UI C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\LocalConfig C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Shas C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Qecs C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\Enroll\HcsGroups C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Shas C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Qecs C:\Windows\SysWOW64\netsh.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\desktop C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\documents C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\documents C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\desktop C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-293278959-2699126792-324916226-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SysWOW64\mshta.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C C:\Windows\SysWOW64\mshta.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Windows\SysWOW64\mshta.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 190000000100000010000000a823b4a20180beb460cab955c24d7e21030000000100000014000000b1bc968bd4f49d622aa89a81f2150152a41d829c1d00000001000000100000006ee7f3b060d10e90a31ba3471b999236140000000100000014000000607b661a450d97ca89502f7d04cd34a8fffcfd4b0b000000010000001600000047006c006f00620061006c005300690067006e0000005300000001000000230000003021301f06092b06010401a032010130123010060a2b0601040182373c0101030200c0090000000100000068000000306606082b0601050507030106082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030806082b06010505070309060a2b0601040182370a030406082b0601050507030606082b0601050507030706082b060105050802020f00000001000000140000005a6d07b6371d966a2fb6ba92828ce5512a49513d200000000100000079030000308203753082025da003020102020b040000000001154b5ac394300d06092a864886f70d01010505003057310b300906035504061302424531193017060355040a1310476c6f62616c5369676e206e762d73613110300e060355040b1307526f6f74204341311b301906035504031312476c6f62616c5369676e20526f6f74204341301e170d3938303930313132303030305a170d3238303132383132303030305a3057310b300906035504061302424531193017060355040a1310476c6f62616c5369676e206e762d73613110300e060355040b1307526f6f74204341311b301906035504031312476c6f62616c5369676e20526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100da0ee6998dcea3e34f8a7efbf18b83256bea481ff12ab0b9951104bdf063d1e26766cf1cddcf1b482bee8d898e9aaf298065abe9c72d12cbab1c4c7007a13d0a30cd158d4ff8ddd48c50151cef50eec42ef7fce952f2917de06dd535308e5e4373f241e9d56ae3b2893a5639386f063c88695b2a4dc5a754b86c89cc9bf93ccae5fd89f5123c927896d6dc746e934461d18dc746b2750e86e8198ad56d6cd5781695a2e9c80a38ebf224134f73549313853a1bbc1e34b58b058cb9778bb1db1f2091ab09536e90ce7b3774b97047912251631679aeb1ae412608c8192bd146aa48d6642ad78334ff2c2ac16c19434a0785e7d37cf62168efeaf2529f7f9390cf0203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e04160414607b661a450d97ca89502f7d04cd34a8fffcfd4b300d06092a864886f70d01010505000382010100d673e77c4f76d08dbfecbaa2be34c52832b57cfc6c9c2c2bbd099e53bf6b5eaa1148b6e508a3b3ca3d614dd34609b33ec3a0e363551bf2baefad39e143b938a3e62f8a263befa05056f9c60afd38cdc40b705194979804dfc35f94d515c914419cc45d7564150dff5530ec868fff0def2cb96346f6aafcdfbc69fd2e1248649ae095f0a6ef298f01b115b50c1da5fe692c6924781eb3a71c7162eecac897ac175d8ac2f847866e2ac4563195d06789852bf96ca65d469d0caa82e49951dd70b7db563d61e46ae15cd6f6fe3dde41cc07ae6352bf5353f42be9c7fdb6f7825f85d24118db81b3041cc51fa4806f1520c9de0c880a1dd66655e2fc48c9292669e0 C:\Windows\SysWOW64\mshta.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\NOTEPAD.EXE N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A

Suspicious use of UnmapMainImage

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1764 wrote to memory of 432 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\netsh.exe
PID 1764 wrote to memory of 432 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\netsh.exe
PID 1764 wrote to memory of 432 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\netsh.exe
PID 1764 wrote to memory of 432 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\netsh.exe
PID 1764 wrote to memory of 1304 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\netsh.exe
PID 1764 wrote to memory of 1304 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\netsh.exe
PID 1764 wrote to memory of 1304 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\netsh.exe
PID 1764 wrote to memory of 1304 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\netsh.exe
PID 1764 wrote to memory of 528 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\mshta.exe
PID 1764 wrote to memory of 528 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\mshta.exe
PID 1764 wrote to memory of 528 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\mshta.exe
PID 1764 wrote to memory of 528 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\mshta.exe
PID 1764 wrote to memory of 1856 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1764 wrote to memory of 1856 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1764 wrote to memory of 1856 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1764 wrote to memory of 1856 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1764 wrote to memory of 1476 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\cmd.exe
PID 1764 wrote to memory of 1476 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\cmd.exe
PID 1764 wrote to memory of 1476 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\cmd.exe
PID 1764 wrote to memory of 1476 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\cmd.exe
PID 1476 wrote to memory of 1492 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1476 wrote to memory of 1492 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1476 wrote to memory of 1492 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1476 wrote to memory of 1492 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1476 wrote to memory of 1592 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1476 wrote to memory of 1592 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1476 wrote to memory of 1592 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1476 wrote to memory of 1592 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe

"C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe"

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall set allprofiles state on

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall reset

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_READ_THIS_FILE_SMBRY_.hta"

C:\Windows\SysWOW64\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\_READ_THIS_FILE_GCKFYHN_.txt

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe"

C:\Windows\SysWOW64\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 8.8.8.8:53 api.blockcypher.com udp
N/A 172.67.2.88:80 api.blockcypher.com tcp
N/A 8.8.8.8:53 btc.blockr.io udp
N/A 8.8.8.8:53 bitaps.com udp
N/A 178.128.255.179:443 bitaps.com tcp
N/A 8.8.8.8:53 www.download.windowsupdate.com udp
N/A 205.185.216.42:80 www.download.windowsupdate.com tcp
N/A 104.18.20.226:80 ocsp.globalsign.com tcp
N/A 104.18.21.226:80 ocsp2.globalsign.com tcp
N/A 8.8.8.8:53 chain.so udp
N/A 104.24.105.254:443 chain.so tcp
N/A 93.184.220.29:80 ocsp.digicert.com tcp
N/A 8.8.8.8:53 crl.verisign.com udp
N/A 72.21.91.29:80 crl.verisign.com tcp

Files

memory/432-0-0x0000000000000000-mapping.dmp

memory/1304-1-0x0000000000000000-mapping.dmp

memory/528-2-0x0000000000000000-mapping.dmp

memory/1856-3-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_READ_THIS_FILE_GCKFYHN_.txt

MD5 3cd370850a55f9c2a25977edc3cdd58b
SHA1 3aefb9e53f605b9f31e6897dfb29bf3555b2be18
SHA256 8b6d795aed91a106cf40486951c0af64f0e223aa0c33c75756c720ef1789620a
SHA512 55680922f58473994747fd8fc234a661812a322a3a605d43e2c819365ee71144efb9671fbe73848dbf4b27641b53911c8005ec5e947d8c7aadcdde11761eb396

memory/1476-5-0x0000000000000000-mapping.dmp

memory/1492-6-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_READ_THIS_FILE_SMBRY_.hta

MD5 2f252dc2d7892491eba2229a6d58b420
SHA1 0de5413ce51a118fc2608c173a0b68c43f747cec
SHA256 6343b851a9e5be15f5e4f39380b58e966060d5b8a7275b14c0a06762a068a915
SHA512 a7a9252064fc2115f0f4147d911c7dd1e97712d07ad6c2aef396573408c363562b02d678ca7d451ccee90f7ac631111b4d392ea8dc49afc74094c7a7cbc1a259

memory/1592-8-0x0000000000000000-mapping.dmp

memory/1776-9-0x000007FEF7F80000-0x000007FEF81FA000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2020-11-06 11:02

Reported

2020-11-06 12:19

Platform

win10v20201028

Max time kernel

116s

Max time network

148s

Command Line

"C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe"

Signatures

Cerber

ransomware cerber

Blacklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

Modifies Windows Firewall

evasion

Drops startup file

Description Indicator Process Target
File opened for modification \??\c:\users\admin\appdata\roaming\microsoft\word\startup\ C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\desktop C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\documents C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\documents C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\desktop C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\desktop C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\documents C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3341490333-719741536-2920803124-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\NOTEPAD.EXE N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4764 wrote to memory of 4300 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\netsh.exe
PID 4764 wrote to memory of 4300 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\netsh.exe
PID 4764 wrote to memory of 4300 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\netsh.exe
PID 4764 wrote to memory of 3248 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\netsh.exe
PID 4764 wrote to memory of 3248 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\netsh.exe
PID 4764 wrote to memory of 3248 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\netsh.exe
PID 4764 wrote to memory of 4564 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\mshta.exe
PID 4764 wrote to memory of 4564 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\mshta.exe
PID 4764 wrote to memory of 4564 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\mshta.exe
PID 4764 wrote to memory of 4572 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 4764 wrote to memory of 4572 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 4764 wrote to memory of 4572 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 4764 wrote to memory of 532 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\cmd.exe
PID 4764 wrote to memory of 532 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\cmd.exe
PID 4764 wrote to memory of 532 N/A C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe C:\Windows\SysWOW64\cmd.exe
PID 532 wrote to memory of 496 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 532 wrote to memory of 496 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 532 wrote to memory of 496 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 532 wrote to memory of 1684 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 532 wrote to memory of 1684 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 532 wrote to memory of 1684 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe

"C:\Users\Admin\AppData\Local\Temp\8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe"

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall set allprofiles state on

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall reset

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_READ_THIS_FILE_KARS5KH_.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}

C:\Windows\SysWOW64\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\_READ_THIS_FILE_VFX61OV_.txt

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "8b3f0b07b8b423bf8b708d06ed59f028b7c5a62f2ef8c0a108409fcd58dd791a.exe"

C:\Windows\SysWOW64\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 8.8.8.8:53 api.blockcypher.com udp
N/A 172.67.2.88:80 api.blockcypher.com tcp
N/A 8.8.8.8:53 btc.blockr.io udp
N/A 8.8.8.8:53 bitaps.com udp
N/A 178.128.255.179:443 bitaps.com tcp
N/A 8.247.211.126:80 ctldl.windowsupdate.com tcp
N/A 104.18.20.226:80 ocsp.globalsign.com tcp
N/A 104.18.21.226:80 ocsp2.globalsign.com tcp
N/A 8.8.8.8:53 chain.so udp
N/A 172.67.157.138:443 chain.so tcp
N/A 93.184.220.29:80 ocsp.digicert.com tcp
N/A 8.8.8.8:53 sochain.com udp
N/A 172.67.69.167:443 sochain.com tcp
N/A 8.8.8.8:53 p27dokhpz2n7nvgr.1j9r76.top udp

Files

memory/4300-0-0x0000000000000000-mapping.dmp

memory/3248-1-0x0000000000000000-mapping.dmp

memory/4564-2-0x0000000000000000-mapping.dmp

memory/4572-3-0x0000000000000000-mapping.dmp

memory/532-4-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_READ_THIS_FILE_KARS5KH_.hta

MD5 50208eeac9ea6e0cd71d826c252fe7b4
SHA1 2d4b3898f9d27f849e7ba5746ddf0194b2e208f3
SHA256 0a2feaabe3e9293b85df6f28cfba41275af6bc63fdfe69ef57cc1e40cd79d323
SHA512 ebe8e32534c34639affd06f77f618fdd2358d7f97c63ffdba3a4e4b822388a586e38a67935dcbb29ed2950babad38fc1dc2ec921df42f4333c187f647ef10698

memory/496-6-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_READ_THIS_FILE_VFX61OV_.txt

MD5 6fb37051673591cf37f2803f1dea1932
SHA1 5ef93210637825eb4cd3788fc0f24f3f08925a2f
SHA256 a39def57fbcb7b842a224365f6dab154a8802f47e1387e3914c876b1dcb4117b
SHA512 f7540f4b49a4eb8b674cb1ebf904cacd9a90861a4f7c3efd15c87e67673c16f95b4269ee11d96c2f39ce09ccf80c7dd418b3479a812259551f01288f7efe9492

memory/1684-8-0x0000000000000000-mapping.dmp