Malware Analysis Report

2025-01-02 15:07

Sample ID 201108-6dh1ma5sy6
Target 9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7
SHA256 9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7
Tags
cerber evasion persistence ransomware
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V6

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7

Threat Level: Known bad

The file 9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7 was found to be: Known bad.

Malicious Activity Summary

cerber evasion persistence ransomware

Cerber

Modifies Windows Firewall

Blacklisted process makes network request

Drops startup file

Deletes itself

Modifies service

Drops file in System32 directory

Drops file in Windows directory

Drops file in Program Files directory

Kills process with taskkill

Modifies registry class

Suspicious use of WriteProcessMemory

Opens file in notepad (likely ransom note)

Modifies Internet Explorer settings

Modifies system certificate store

Runs ping.exe

Suspicious use of AdjustPrivilegeToken

Suspicious use of UnmapMainImage

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2020-11-08 17:47

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2020-11-08 17:47

Reported

2020-11-08 20:20

Platform

win7v20201028

Max time kernel

92s

Max time network

143s

Command Line

"C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe"

Signatures

Cerber

ransomware cerber

Blacklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

Modifies Windows Firewall

evasion

Deletes itself

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\cmd.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\desktop C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\documents C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A

Modifies service

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\LocalConfig C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Shas C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\UI C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\LocalConfig C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\Enroll\HcsGroups C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Shas C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Qecs C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\UI C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\Enroll\HcsGroups C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Qecs C:\Windows\SysWOW64\netsh.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\documents C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\documents C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\desktop C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\desktop C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SysWOW64\mshta.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C C:\Windows\SysWOW64\mshta.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Windows\SysWOW64\mshta.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Windows\SysWOW64\mshta.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\NOTEPAD.EXE N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A

Suspicious use of UnmapMainImage

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1960 wrote to memory of 1308 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\netsh.exe
PID 1960 wrote to memory of 1308 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\netsh.exe
PID 1960 wrote to memory of 1308 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\netsh.exe
PID 1960 wrote to memory of 1308 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\netsh.exe
PID 1960 wrote to memory of 1320 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\netsh.exe
PID 1960 wrote to memory of 1320 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\netsh.exe
PID 1960 wrote to memory of 1320 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\netsh.exe
PID 1960 wrote to memory of 1320 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\netsh.exe
PID 1960 wrote to memory of 776 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\mshta.exe
PID 1960 wrote to memory of 776 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\mshta.exe
PID 1960 wrote to memory of 776 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\mshta.exe
PID 1960 wrote to memory of 776 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\mshta.exe
PID 1960 wrote to memory of 1488 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1960 wrote to memory of 1488 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1960 wrote to memory of 1488 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1960 wrote to memory of 1488 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1960 wrote to memory of 1052 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\cmd.exe
PID 1960 wrote to memory of 1052 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\cmd.exe
PID 1960 wrote to memory of 1052 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\cmd.exe
PID 1960 wrote to memory of 1052 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\cmd.exe
PID 1052 wrote to memory of 332 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1052 wrote to memory of 332 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1052 wrote to memory of 332 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1052 wrote to memory of 332 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1052 wrote to memory of 816 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1052 wrote to memory of 816 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1052 wrote to memory of 816 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1052 wrote to memory of 816 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe

"C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe"

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall set allprofiles state on

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall reset

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_READ_THIS_FILE_HHY8K6_.hta"

C:\Windows\SysWOW64\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\_READ_THIS_FILE_6PFDO_.txt

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe"

C:\Windows\SysWOW64\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 8.8.8.8:53 api.blockcypher.com udp
N/A 172.67.2.88:80 api.blockcypher.com tcp
N/A 8.8.8.8:53 btc.blockr.io udp
N/A 8.8.8.8:53 bitaps.com udp
N/A 178.128.255.179:443 bitaps.com tcp
N/A 8.8.8.8:53 www.download.windowsupdate.com udp
N/A 8.8.8.8:53 chain.so udp
N/A 172.67.157.138:443 chain.so tcp
N/A 8.8.8.8:53 crl.verisign.com udp

Files

memory/1308-0-0x0000000000000000-mapping.dmp

memory/1320-1-0x0000000000000000-mapping.dmp

memory/776-2-0x0000000000000000-mapping.dmp

memory/1488-3-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_READ_THIS_FILE_6PFDO_.txt

MD5 61e2a2fa3359bf209cb68fada6a95fbd
SHA1 7be1505e55c0d090f5645d64758b187cf21c405e
SHA256 d0ed48bfe674cfd8693a14d57401ec720a887063899dec370d2de8053ef643f4
SHA512 c7ebacefcc1a650b1e3338b5f2ca0c016eeb966005b4145b9a5f08dcf206252ccaddfef798481bbae9dd8909e3fea5bd588a33ddbe2f3b19a9fe97500ce60d3d

C:\Users\Admin\Desktop\_READ_THIS_FILE_HHY8K6_.hta

MD5 6540e620419ed2a118d8a1a245cb4bc3
SHA1 dffb21d506b4872a21d27258ad9ccf4d31530147
SHA256 8465b1f4f8815d18f21928c6390c9c22f2fb35a00bb74a50e6a89ad7ad1023ba
SHA512 90578d5fa60244db83596614684180bebd4958f58133c835c8f078d372fd594ea126b4d5e8d791a11913be97976cc8ffee95ee1f40ab97b8d57165ab1938b452

memory/736-6-0x000007FEF7180000-0x000007FEF73FA000-memory.dmp

memory/1052-15-0x0000000000000000-mapping.dmp

memory/332-16-0x0000000000000000-mapping.dmp

memory/816-17-0x0000000000000000-mapping.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2020-11-08 17:47

Reported

2020-11-08 20:20

Platform

win10v20201028

Max time kernel

110s

Max time network

147s

Command Line

"C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe"

Signatures

Cerber

ransomware cerber

Blacklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

Modifies Windows Firewall

evasion

Drops startup file

Description Indicator Process Target
File opened for modification \??\c:\users\admin\appdata\roaming\microsoft\word\startup\ C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\desktop C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\documents C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\documents C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\desktop C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\desktop C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\documents C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3341490333-719741536-2920803124-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\NOTEPAD.EXE N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4676 wrote to memory of 3748 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\netsh.exe
PID 4676 wrote to memory of 3748 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\netsh.exe
PID 4676 wrote to memory of 3748 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\netsh.exe
PID 4676 wrote to memory of 716 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\netsh.exe
PID 4676 wrote to memory of 716 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\netsh.exe
PID 4676 wrote to memory of 716 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\netsh.exe
PID 4676 wrote to memory of 4292 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\mshta.exe
PID 4676 wrote to memory of 4292 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\mshta.exe
PID 4676 wrote to memory of 4292 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\mshta.exe
PID 4676 wrote to memory of 4428 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 4676 wrote to memory of 4428 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 4676 wrote to memory of 4428 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 4676 wrote to memory of 4412 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\cmd.exe
PID 4676 wrote to memory of 4412 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\cmd.exe
PID 4676 wrote to memory of 4412 N/A C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe C:\Windows\SysWOW64\cmd.exe
PID 4412 wrote to memory of 4496 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 4412 wrote to memory of 4496 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 4412 wrote to memory of 4496 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 4412 wrote to memory of 832 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 4412 wrote to memory of 832 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 4412 wrote to memory of 832 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe

"C:\Users\Admin\AppData\Local\Temp\9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe"

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall set allprofiles state on

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall reset

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_READ_THIS_FILE_SX6VXX4_.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}

C:\Windows\SysWOW64\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\_READ_THIS_FILE_PRO4AZ_.txt

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "9db8770e6d1f18eb98aecd9cb18e67c85baa53ba1b53e02cb12dd897f93e3ac7.exe"

C:\Windows\SysWOW64\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 8.8.8.8:53 api.blockcypher.com udp
N/A 104.20.20.251:80 api.blockcypher.com tcp
N/A 8.8.8.8:53 btc.blockr.io udp
N/A 8.8.8.8:53 bitaps.com udp
N/A 178.128.255.179:443 bitaps.com tcp
N/A 8.8.8.8:53 chain.so udp
N/A 104.24.105.254:443 chain.so tcp
N/A 8.8.8.8:53 sochain.com udp
N/A 172.67.69.167:443 sochain.com tcp
N/A 8.8.8.8:53 p27dokhpz2n7nvgr.1j9r76.top udp

Files

memory/3748-0-0x0000000000000000-mapping.dmp

memory/716-1-0x0000000000000000-mapping.dmp

memory/4292-2-0x0000000000000000-mapping.dmp

memory/4428-3-0x0000000000000000-mapping.dmp

memory/4412-4-0x0000000000000000-mapping.dmp

memory/4496-5-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_READ_THIS_FILE_SX6VXX4_.hta

MD5 6964cfabe9b7994e909459710a57a8bb
SHA1 02b1951db9fd293c32bdb88548836272ad0f09d3
SHA256 3f025230110bf4518bb366117140a7ac04b0f2c61966f58c11578b2af4800cc0
SHA512 cbfc56066ea8eb1a26235a9f1576709e8eb92788b3481e13879db2718d33bd84a9cf634cf11b73e5304ccf9b731d706846e1ff9e30ff1a276f6b68611aac7501

C:\Users\Admin\Desktop\_READ_THIS_FILE_PRO4AZ_.txt

MD5 cbc6bf93351916c927cb4f4d4c3674af
SHA1 8bdfc0544db273b4e9b8775a0c2d444b1a32c42a
SHA256 8e47e835df47e4118c48e3017f00e324ec65a6f172bb8f99ba435d41772fbeac
SHA512 239f00edda6602372a2002729d5abcc6ede6a4a0c30c5e498edb8be0f5807eb0b4d4a7e91b1b80211d22020976aa0d3dce071a9af4791df6ae2a6807dabd7bec

memory/832-8-0x0000000000000000-mapping.dmp