Malware Analysis Report

2025-01-02 15:02

Sample ID 201109-3zfxm19mjn
Target e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee
SHA256 e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee
Tags
cerber evasion persistence ransomware
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V6

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee

Threat Level: Known bad

The file e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee was found to be: Known bad.

Malicious Activity Summary

cerber evasion persistence ransomware

Cerber

Blacklisted process makes network request

Modifies Windows Firewall

Drops startup file

Deletes itself

Drops file in System32 directory

Modifies service

Drops file in Program Files directory

Drops file in Windows directory

Modifies system certificate store

Opens file in notepad (likely ransom note)

Modifies registry class

Modifies Internet Explorer settings

Suspicious use of AdjustPrivilegeToken

Suspicious use of UnmapMainImage

Suspicious use of WriteProcessMemory

Kills process with taskkill

Runs ping.exe

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2020-11-09 21:46

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2020-11-09 21:46

Reported

2020-11-11 08:22

Platform

win7v20201028

Max time kernel

59s

Max time network

144s

Command Line

"C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe"

Signatures

Cerber

ransomware cerber

Blacklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

Modifies Windows Firewall

evasion

Deletes itself

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\cmd.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\documents C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\desktop C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A

Modifies service

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\LocalConfig C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\Enroll\HcsGroups C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Shas C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Qecs C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\LocalConfig C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Shas C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Qecs C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\Enroll\HcsGroups C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\UI C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\UI C:\Windows\SysWOW64\netsh.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\desktop C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\desktop C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\documents C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\documents C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SysWOW64\mshta.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C C:\Windows\SysWOW64\mshta.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Windows\SysWOW64\mshta.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Windows\SysWOW64\mshta.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\NOTEPAD.EXE N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A

Suspicious use of UnmapMainImage

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 344 wrote to memory of 1776 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\netsh.exe
PID 344 wrote to memory of 1776 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\netsh.exe
PID 344 wrote to memory of 1776 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\netsh.exe
PID 344 wrote to memory of 1776 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\netsh.exe
PID 344 wrote to memory of 1324 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\netsh.exe
PID 344 wrote to memory of 1324 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\netsh.exe
PID 344 wrote to memory of 1324 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\netsh.exe
PID 344 wrote to memory of 1324 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\netsh.exe
PID 344 wrote to memory of 576 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\mshta.exe
PID 344 wrote to memory of 576 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\mshta.exe
PID 344 wrote to memory of 576 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\mshta.exe
PID 344 wrote to memory of 576 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\mshta.exe
PID 344 wrote to memory of 1056 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 344 wrote to memory of 1056 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 344 wrote to memory of 1056 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 344 wrote to memory of 1056 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 344 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\cmd.exe
PID 344 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\cmd.exe
PID 344 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\cmd.exe
PID 344 wrote to memory of 1764 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\cmd.exe
PID 1764 wrote to memory of 1792 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1764 wrote to memory of 1792 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1764 wrote to memory of 1792 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1764 wrote to memory of 1792 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1764 wrote to memory of 1904 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1764 wrote to memory of 1904 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1764 wrote to memory of 1904 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1764 wrote to memory of 1904 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe

"C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe"

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall set allprofiles state on

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall reset

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_READ_THIS_FILE_1GZFG_.hta"

C:\Windows\SysWOW64\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\_READ_THIS_FILE_3LVC95_.txt

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe"

C:\Windows\SysWOW64\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 8.8.8.8:53 api.blockcypher.com udp
N/A 172.67.2.88:80 api.blockcypher.com tcp
N/A 8.8.8.8:53 btc.blockr.io udp
N/A 8.8.8.8:53 bitaps.com udp
N/A 178.128.255.179:443 bitaps.com tcp
N/A 8.8.8.8:53 www.download.windowsupdate.com udp
N/A 8.8.8.8:53 chain.so udp
N/A 104.24.104.254:443 chain.so tcp
N/A 8.8.8.8:53 crl.verisign.com udp

Files

memory/1776-0-0x0000000000000000-mapping.dmp

memory/1324-1-0x0000000000000000-mapping.dmp

memory/576-2-0x0000000000000000-mapping.dmp

memory/1056-3-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_READ_THIS_FILE_3LVC95_.txt

MD5 f4fd9a247e2a39b3852e490c7bd117cf
SHA1 a31dbbf0636d456c4f27d2ab2a43753e4f0434b6
SHA256 3894f24ebfbb96a8753bf046a4ba92031df5cd98a8153dd487f10aee8df93795
SHA512 ae1d8816bb668ea095557e776db2d6a7041cf3e93a503e76111c8b286080521cd90040bfb46db0624a7315ba5510b6f0be21fd64e98fe16f6513bf386b34d133

C:\Users\Admin\Desktop\_READ_THIS_FILE_1GZFG_.hta

MD5 b9bec16b93688256a66cafe7d7ff90a5
SHA1 9c6f35530ecc217a195c4541a389921aca5e4f3d
SHA256 f5c60ffa646ae30fe1da2cfa2968d2eff36d469c48fd69814e5894b38847ff70
SHA512 2ccb909731645d3eced2e3ef849a8a3885b6ec3f202ac649ba93716eea6ad885c4f3e192d5a0d62a8898acaa74c19aea321d3f26e27d4c092981262eb073b95c

memory/1928-6-0x000007FEF7590000-0x000007FEF780A000-memory.dmp

memory/1764-15-0x0000000000000000-mapping.dmp

memory/1792-16-0x0000000000000000-mapping.dmp

memory/1904-17-0x0000000000000000-mapping.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2020-11-09 21:46

Reported

2020-11-11 08:22

Platform

win10v20201028

Max time kernel

110s

Max time network

145s

Command Line

"C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe"

Signatures

Cerber

ransomware cerber

Blacklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

Modifies Windows Firewall

evasion

Drops startup file

Description Indicator Process Target
File opened for modification \??\c:\users\admin\appdata\roaming\microsoft\word\startup\ C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\desktop C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\documents C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\serviceprofiles\networkservice\desktop C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\documents C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\documents C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\desktop C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1985363256-3005190890-1182679451-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\NOTEPAD.EXE N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2724 wrote to memory of 3536 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\netsh.exe
PID 2724 wrote to memory of 3536 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\netsh.exe
PID 2724 wrote to memory of 3536 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\netsh.exe
PID 2724 wrote to memory of 4044 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\netsh.exe
PID 2724 wrote to memory of 4044 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\netsh.exe
PID 2724 wrote to memory of 4044 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\netsh.exe
PID 2724 wrote to memory of 2560 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\mshta.exe
PID 2724 wrote to memory of 2560 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\mshta.exe
PID 2724 wrote to memory of 2560 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\mshta.exe
PID 2724 wrote to memory of 3888 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 2724 wrote to memory of 3888 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 2724 wrote to memory of 3888 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 2724 wrote to memory of 2184 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\cmd.exe
PID 2724 wrote to memory of 2184 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\cmd.exe
PID 2724 wrote to memory of 2184 N/A C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe C:\Windows\SysWOW64\cmd.exe
PID 2184 wrote to memory of 3812 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 2184 wrote to memory of 3812 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 2184 wrote to memory of 3812 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 2184 wrote to memory of 3500 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 2184 wrote to memory of 3500 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 2184 wrote to memory of 3500 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe

"C:\Users\Admin\AppData\Local\Temp\e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe"

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall set allprofiles state on

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall reset

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_READ_THIS_FILE_WSRF_.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}

C:\Windows\SysWOW64\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\_READ_THIS_FILE_QWMXQPOT_.txt

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "e12a4ebbb7481c4e357853bd2613a51bfc5186cba74e2d45918c8e3d4a63d1ee.exe"

C:\Windows\SysWOW64\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 8.8.8.8:53 api.blockcypher.com udp
N/A 104.20.21.251:80 api.blockcypher.com tcp
N/A 8.8.8.8:53 btc.blockr.io udp
N/A 8.8.8.8:53 bitaps.com udp
N/A 178.128.255.179:443 bitaps.com tcp
N/A 8.8.8.8:53 chain.so udp
N/A 104.24.104.254:443 chain.so tcp
N/A 8.8.8.8:53 sochain.com udp
N/A 104.26.14.247:443 sochain.com tcp
N/A 8.8.8.8:53 p27dokhpz2n7nvgr.1j9r76.top udp

Files

memory/3536-0-0x0000000000000000-mapping.dmp

memory/4044-1-0x0000000000000000-mapping.dmp

memory/2560-2-0x0000000000000000-mapping.dmp

memory/3888-3-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_READ_THIS_FILE_WSRF_.hta

MD5 7784e7ebf4226c5a80aaf454e90d85d9
SHA1 0e8c672bd05835d2d03b05b9f3cdfec219bc28b2
SHA256 2446c53e1ce5be2488dde2816259f1530ee9b9074dbf6741d2f2e67899050e9e
SHA512 98309a792efb0fd9fb9020b791220eb7c3a61a0fe779ebc4fa29bc213a3e74a756300c731bf3ea2b2a7c6ccbda07e78229ffc3ed7a25732cf8faed78bcf00ca6

C:\Users\Admin\Desktop\_READ_THIS_FILE_QWMXQPOT_.txt

MD5 cafee3b5382131aa7f54fb9f33b525b2
SHA1 42c1334174cacfc86dcf3eaf4a4b889256c50514
SHA256 88d9390ae35dc05e6716dc1bf546f67358685acafd50a8f99a6992107943674f
SHA512 7daf191583151def4ab3c3d415c0d0aa1014c07a6851d7ae12ae8f232c6b7b9e2bba92c805c5ea3d11465f048589400ec8b3cc0cf7c6ad2748bcd389a9be4aec

memory/2184-6-0x0000000000000000-mapping.dmp

memory/3812-7-0x0000000000000000-mapping.dmp

memory/3500-8-0x0000000000000000-mapping.dmp