Malware Analysis Report

2025-01-02 15:02

Sample ID 201112-4ctzjte8fx
Target 1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665
SHA256 1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665
Tags
cerber evasion persistence ransomware
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V6

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665

Threat Level: Known bad

The file 1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665 was found to be: Known bad.

Malicious Activity Summary

cerber evasion persistence ransomware

Cerber

Blacklisted process makes network request

Modifies Windows Firewall

Drops startup file

Deletes itself

Modifies service

Drops file in System32 directory

Sets desktop wallpaper using registry

Drops file in Program Files directory

Drops file in Windows directory

Modifies system certificate store

Opens file in notepad (likely ransom note)

Suspicious use of WriteProcessMemory

Kills process with taskkill

Modifies Internet Explorer settings

Modifies registry class

Enumerates system info in registry

Runs ping.exe

Suspicious use of AdjustPrivilegeToken

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2020-11-12 14:29

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2020-11-12 14:29

Reported

2020-11-12 15:53

Platform

win7v20201028

Max time kernel

65s

Max time network

148s

Command Line

"C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe"

Signatures

Cerber

ransomware cerber

Blacklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

Modifies Windows Firewall

evasion

Deletes itself

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\cmd.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\desktop C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\documents C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A

Modifies service

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\UI C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\UI C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Qecs C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\Enroll\HcsGroups C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Shas C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\LocalConfig C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\Enroll\HcsGroups C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Shas C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Qecs C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\LocalConfig C:\Windows\SysWOW64\netsh.exe N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\tmp5512.bmp" C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\documents C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\documents C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\desktop C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\desktop C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SysWOW64\mshta.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C C:\Windows\SysWOW64\mshta.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Windows\SysWOW64\mshta.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Windows\SysWOW64\mshta.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\NOTEPAD.EXE N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1924 wrote to memory of 1680 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\netsh.exe
PID 1924 wrote to memory of 1680 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\netsh.exe
PID 1924 wrote to memory of 1680 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\netsh.exe
PID 1924 wrote to memory of 1680 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\netsh.exe
PID 1924 wrote to memory of 1092 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\netsh.exe
PID 1924 wrote to memory of 1092 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\netsh.exe
PID 1924 wrote to memory of 1092 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\netsh.exe
PID 1924 wrote to memory of 1092 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\netsh.exe
PID 1924 wrote to memory of 616 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\mshta.exe
PID 1924 wrote to memory of 616 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\mshta.exe
PID 1924 wrote to memory of 616 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\mshta.exe
PID 1924 wrote to memory of 616 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\mshta.exe
PID 1924 wrote to memory of 828 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1924 wrote to memory of 828 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1924 wrote to memory of 828 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1924 wrote to memory of 828 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1924 wrote to memory of 1164 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\cmd.exe
PID 1924 wrote to memory of 1164 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\cmd.exe
PID 1924 wrote to memory of 1164 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\cmd.exe
PID 1924 wrote to memory of 1164 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\cmd.exe
PID 1164 wrote to memory of 1452 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1164 wrote to memory of 1452 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1164 wrote to memory of 1452 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1164 wrote to memory of 1452 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1164 wrote to memory of 1064 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1164 wrote to memory of 1064 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1164 wrote to memory of 1064 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1164 wrote to memory of 1064 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe

"C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe"

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall set allprofiles state on

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall reset

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___XYW0_.hta"

C:\Windows\SysWOW64\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___8LK9UHZ_.txt

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe"

C:\Windows\SysWOW64\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
N/A 178.33.158.0:6893 udp
N/A 178.33.158.1:6893 udp
N/A 178.33.158.2:6893 udp
N/A 178.33.158.3:6893 udp
N/A 178.33.158.4:6893 udp
N/A 178.33.158.5:6893 udp
N/A 178.33.158.6:6893 udp
N/A 178.33.158.7:6893 udp
N/A 178.33.158.8:6893 udp
N/A 178.33.158.9:6893 udp
N/A 178.33.158.10:6893 udp
N/A 178.33.158.11:6893 udp
N/A 178.33.158.12:6893 udp
N/A 178.33.158.13:6893 udp
N/A 178.33.158.14:6893 udp
N/A 178.33.158.15:6893 udp
N/A 178.33.158.16:6893 udp
N/A 178.33.158.17:6893 udp
N/A 178.33.158.18:6893 udp
N/A 178.33.158.19:6893 udp
N/A 178.33.158.20:6893 udp
N/A 178.33.158.21:6893 udp
N/A 178.33.158.22:6893 udp
N/A 178.33.158.23:6893 udp
N/A 178.33.158.24:6893 udp
N/A 178.33.158.25:6893 udp
N/A 178.33.158.26:6893 udp
N/A 178.33.158.27:6893 udp
N/A 178.33.158.28:6893 udp
N/A 178.33.158.29:6893 udp
N/A 178.33.158.30:6893 udp
N/A 178.33.158.31:6893 udp
N/A 178.33.159.0:6893 udp
N/A 178.33.159.1:6893 udp
N/A 178.33.159.2:6893 udp
N/A 178.33.159.3:6893 udp
N/A 178.33.159.4:6893 udp
N/A 178.33.159.5:6893 udp
N/A 178.33.159.6:6893 udp
N/A 178.33.159.7:6893 udp
N/A 178.33.159.8:6893 udp
N/A 178.33.159.9:6893 udp
N/A 178.33.159.10:6893 udp
N/A 178.33.159.11:6893 udp
N/A 178.33.159.12:6893 udp
N/A 178.33.159.13:6893 udp
N/A 178.33.159.14:6893 udp
N/A 178.33.159.15:6893 udp
N/A 178.33.159.16:6893 udp
N/A 178.33.159.17:6893 udp
N/A 178.33.159.18:6893 udp
N/A 178.33.159.19:6893 udp
N/A 178.33.159.20:6893 udp
N/A 178.33.159.21:6893 udp
N/A 178.33.159.22:6893 udp
N/A 178.33.159.23:6893 udp
N/A 178.33.159.24:6893 udp
N/A 178.33.159.25:6893 udp
N/A 178.33.159.26:6893 udp
N/A 178.33.159.27:6893 udp
N/A 178.33.159.28:6893 udp
N/A 178.33.159.29:6893 udp
N/A 178.33.159.30:6893 udp
N/A 178.33.159.31:6893 udp
N/A 178.33.160.0:6893 udp
N/A 178.33.160.1:6893 udp
N/A 178.33.160.2:6893 udp
N/A 178.33.160.3:6893 udp
N/A 178.33.160.4:6893 udp
N/A 178.33.160.5:6893 udp
N/A 178.33.160.6:6893 udp
N/A 178.33.160.7:6893 udp
N/A 178.33.160.8:6893 udp
N/A 178.33.160.9:6893 udp
N/A 178.33.160.10:6893 udp
N/A 178.33.160.11:6893 udp
N/A 178.33.160.12:6893 udp
N/A 178.33.160.13:6893 udp
N/A 178.33.160.14:6893 udp
N/A 178.33.160.15:6893 udp
N/A 178.33.160.16:6893 udp
N/A 178.33.160.17:6893 udp
N/A 178.33.160.18:6893 udp
N/A 178.33.160.19:6893 udp
N/A 178.33.160.20:6893 udp
N/A 178.33.160.21:6893 udp
N/A 178.33.160.22:6893 udp
N/A 178.33.160.23:6893 udp
N/A 178.33.160.24:6893 udp
N/A 178.33.160.25:6893 udp
N/A 178.33.160.26:6893 udp
N/A 178.33.160.27:6893 udp
N/A 178.33.160.28:6893 udp
N/A 178.33.160.29:6893 udp
N/A 178.33.160.30:6893 udp
N/A 178.33.160.31:6893 udp
N/A 178.33.160.32:6893 udp
N/A 178.33.160.33:6893 udp
N/A 178.33.160.34:6893 udp
N/A 178.33.160.35:6893 udp
N/A 178.33.160.36:6893 udp
N/A 178.33.160.37:6893 udp
N/A 178.33.160.38:6893 udp
N/A 178.33.160.39:6893 udp
N/A 178.33.160.40:6893 udp
N/A 178.33.160.41:6893 udp
N/A 178.33.160.42:6893 udp
N/A 178.33.160.43:6893 udp
N/A 178.33.160.44:6893 udp
N/A 178.33.160.45:6893 udp
N/A 178.33.160.46:6893 udp
N/A 178.33.160.47:6893 udp
N/A 178.33.160.48:6893 udp
N/A 178.33.160.49:6893 udp
N/A 178.33.160.50:6893 udp
N/A 178.33.160.51:6893 udp
N/A 178.33.160.52:6893 udp
N/A 178.33.160.53:6893 udp
N/A 178.33.160.54:6893 udp
N/A 178.33.160.55:6893 udp
N/A 178.33.160.56:6893 udp
N/A 178.33.160.57:6893 udp
N/A 178.33.160.58:6893 udp
N/A 178.33.160.59:6893 udp
N/A 178.33.160.60:6893 udp
N/A 178.33.160.61:6893 udp
N/A 178.33.160.62:6893 udp
N/A 178.33.160.63:6893 udp
N/A 178.33.160.64:6893 udp
N/A 178.33.160.65:6893 udp
N/A 178.33.160.66:6893 udp
N/A 178.33.160.67:6893 udp
N/A 178.33.160.68:6893 udp
N/A 178.33.160.69:6893 udp
N/A 178.33.160.70:6893 udp
N/A 178.33.160.71:6893 udp
N/A 178.33.160.72:6893 udp
N/A 178.33.160.73:6893 udp
N/A 178.33.160.74:6893 udp
N/A 178.33.160.75:6893 udp
N/A 178.33.160.76:6893 udp
N/A 178.33.160.77:6893 udp
N/A 178.33.160.78:6893 udp
N/A 178.33.160.79:6893 udp
N/A 178.33.160.80:6893 udp
N/A 178.33.160.81:6893 udp
N/A 178.33.160.82:6893 udp
N/A 178.33.160.83:6893 udp
N/A 178.33.160.84:6893 udp
N/A 178.33.160.85:6893 udp
N/A 178.33.160.86:6893 udp
N/A 178.33.160.87:6893 udp
N/A 178.33.160.88:6893 udp
N/A 178.33.160.89:6893 udp
N/A 178.33.160.90:6893 udp
N/A 178.33.160.91:6893 udp
N/A 178.33.160.92:6893 udp
N/A 178.33.160.93:6893 udp
N/A 178.33.160.94:6893 udp
N/A 178.33.160.95:6893 udp
N/A 178.33.160.96:6893 udp
N/A 178.33.160.97:6893 udp
N/A 178.33.160.98:6893 udp
N/A 178.33.160.99:6893 udp
N/A 178.33.160.100:6893 udp
N/A 178.33.160.101:6893 udp
N/A 178.33.160.102:6893 udp
N/A 178.33.160.103:6893 udp
N/A 178.33.160.104:6893 udp
N/A 178.33.160.105:6893 udp
N/A 178.33.160.106:6893 udp
N/A 178.33.160.107:6893 udp
N/A 178.33.160.108:6893 udp
N/A 178.33.160.109:6893 udp
N/A 178.33.160.110:6893 udp
N/A 178.33.160.111:6893 udp
N/A 178.33.160.112:6893 udp
N/A 178.33.160.113:6893 udp
N/A 178.33.160.114:6893 udp
N/A 178.33.160.115:6893 udp
N/A 178.33.160.116:6893 udp
N/A 178.33.160.117:6893 udp
N/A 178.33.160.118:6893 udp
N/A 178.33.160.119:6893 udp
N/A 178.33.160.120:6893 udp
N/A 178.33.160.121:6893 udp
N/A 178.33.160.122:6893 udp
N/A 178.33.160.123:6893 udp
N/A 178.33.160.124:6893 udp
N/A 178.33.160.125:6893 udp
N/A 178.33.160.126:6893 udp
N/A 178.33.160.127:6893 udp
N/A 178.33.160.128:6893 udp
N/A 178.33.160.129:6893 udp
N/A 178.33.160.130:6893 udp
N/A 178.33.160.131:6893 udp
N/A 178.33.160.132:6893 udp
N/A 178.33.160.133:6893 udp
N/A 178.33.160.134:6893 udp
N/A 178.33.160.135:6893 udp
N/A 178.33.160.136:6893 udp
N/A 178.33.160.137:6893 udp
N/A 178.33.160.138:6893 udp
N/A 178.33.160.139:6893 udp
N/A 178.33.160.140:6893 udp
N/A 178.33.160.141:6893 udp
N/A 178.33.160.142:6893 udp
N/A 178.33.160.143:6893 udp
N/A 178.33.160.144:6893 udp
N/A 178.33.160.145:6893 udp
N/A 178.33.160.146:6893 udp
N/A 178.33.160.147:6893 udp
N/A 178.33.160.148:6893 udp
N/A 178.33.160.149:6893 udp
N/A 178.33.160.150:6893 udp
N/A 178.33.160.151:6893 udp
N/A 178.33.160.152:6893 udp
N/A 178.33.160.153:6893 udp
N/A 178.33.160.154:6893 udp
N/A 178.33.160.155:6893 udp
N/A 178.33.160.156:6893 udp
N/A 178.33.160.157:6893 udp
N/A 178.33.160.158:6893 udp
N/A 178.33.160.159:6893 udp
N/A 178.33.160.160:6893 udp
N/A 178.33.160.161:6893 udp
N/A 178.33.160.162:6893 udp
N/A 178.33.160.163:6893 udp
N/A 178.33.160.164:6893 udp
N/A 178.33.160.165:6893 udp
N/A 178.33.160.166:6893 udp
N/A 178.33.160.167:6893 udp
N/A 178.33.160.168:6893 udp
N/A 178.33.160.169:6893 udp
N/A 178.33.160.170:6893 udp
N/A 178.33.160.171:6893 udp
N/A 178.33.160.172:6893 udp
N/A 178.33.160.173:6893 udp
N/A 178.33.160.174:6893 udp
N/A 178.33.160.175:6893 udp
N/A 178.33.160.176:6893 udp
N/A 178.33.160.177:6893 udp
N/A 178.33.160.178:6893 udp
N/A 178.33.160.179:6893 udp
N/A 178.33.160.180:6893 udp
N/A 178.33.160.181:6893 udp
N/A 178.33.160.182:6893 udp
N/A 178.33.160.183:6893 udp
N/A 178.33.160.184:6893 udp
N/A 178.33.160.185:6893 udp
N/A 178.33.160.186:6893 udp
N/A 178.33.160.187:6893 udp
N/A 178.33.160.188:6893 udp
N/A 178.33.160.189:6893 udp
N/A 178.33.160.190:6893 udp
N/A 178.33.160.191:6893 udp
N/A 178.33.160.192:6893 udp
N/A 178.33.160.193:6893 udp
N/A 178.33.160.194:6893 udp
N/A 178.33.160.195:6893 udp
N/A 178.33.160.196:6893 udp
N/A 178.33.160.197:6893 udp
N/A 178.33.160.198:6893 udp
N/A 178.33.160.199:6893 udp
N/A 178.33.160.200:6893 udp
N/A 178.33.160.201:6893 udp
N/A 178.33.160.202:6893 udp
N/A 178.33.160.203:6893 udp
N/A 178.33.160.204:6893 udp
N/A 178.33.160.205:6893 udp
N/A 178.33.160.206:6893 udp
N/A 178.33.160.207:6893 udp
N/A 178.33.160.208:6893 udp
N/A 178.33.160.209:6893 udp
N/A 178.33.160.210:6893 udp
N/A 178.33.160.211:6893 udp
N/A 178.33.160.212:6893 udp
N/A 178.33.160.213:6893 udp
N/A 178.33.160.214:6893 udp
N/A 178.33.160.215:6893 udp
N/A 178.33.160.216:6893 udp
N/A 178.33.160.217:6893 udp
N/A 178.33.160.218:6893 udp
N/A 178.33.160.219:6893 udp
N/A 178.33.160.220:6893 udp
N/A 178.33.160.221:6893 udp
N/A 178.33.160.222:6893 udp
N/A 178.33.160.223:6893 udp
N/A 178.33.160.224:6893 udp
N/A 178.33.160.225:6893 udp
N/A 178.33.160.226:6893 udp
N/A 178.33.160.227:6893 udp
N/A 178.33.160.228:6893 udp
N/A 178.33.160.229:6893 udp
N/A 178.33.160.230:6893 udp
N/A 178.33.160.231:6893 udp
N/A 178.33.160.232:6893 udp
N/A 178.33.160.233:6893 udp
N/A 178.33.160.234:6893 udp
N/A 178.33.160.235:6893 udp
N/A 178.33.160.236:6893 udp
N/A 178.33.160.237:6893 udp
N/A 178.33.160.238:6893 udp
N/A 178.33.160.239:6893 udp
N/A 178.33.160.240:6893 udp
N/A 178.33.160.241:6893 udp
N/A 178.33.160.242:6893 udp
N/A 178.33.160.243:6893 udp
N/A 178.33.160.244:6893 udp
N/A 178.33.160.245:6893 udp
N/A 178.33.160.246:6893 udp
N/A 178.33.160.247:6893 udp
N/A 178.33.160.248:6893 udp
N/A 178.33.160.249:6893 udp
N/A 178.33.160.250:6893 udp
N/A 178.33.160.251:6893 udp
N/A 178.33.160.252:6893 udp
N/A 178.33.160.253:6893 udp
N/A 178.33.160.254:6893 udp
N/A 178.33.160.255:6893 udp
N/A 178.33.161.0:6893 udp
N/A 178.33.161.1:6893 udp
N/A 178.33.161.2:6893 udp
N/A 178.33.161.3:6893 udp
N/A 178.33.161.4:6893 udp
N/A 178.33.161.5:6893 udp
N/A 178.33.161.6:6893 udp
N/A 178.33.161.7:6893 udp
N/A 178.33.161.8:6893 udp
N/A 178.33.161.9:6893 udp
N/A 178.33.161.10:6893 udp
N/A 178.33.161.11:6893 udp
N/A 178.33.161.12:6893 udp
N/A 178.33.161.13:6893 udp
N/A 178.33.161.14:6893 udp
N/A 178.33.161.15:6893 udp
N/A 178.33.161.16:6893 udp
N/A 178.33.161.17:6893 udp
N/A 178.33.161.18:6893 udp
N/A 178.33.161.19:6893 udp
N/A 178.33.161.20:6893 udp
N/A 178.33.161.21:6893 udp
N/A 178.33.161.22:6893 udp
N/A 178.33.161.23:6893 udp
N/A 178.33.161.24:6893 udp
N/A 178.33.161.25:6893 udp
N/A 178.33.161.26:6893 udp
N/A 178.33.161.27:6893 udp
N/A 178.33.161.28:6893 udp
N/A 178.33.161.29:6893 udp
N/A 178.33.161.30:6893 udp
N/A 178.33.161.31:6893 udp
N/A 178.33.161.32:6893 udp
N/A 178.33.161.33:6893 udp
N/A 178.33.161.34:6893 udp
N/A 178.33.161.35:6893 udp
N/A 178.33.161.36:6893 udp
N/A 178.33.161.37:6893 udp
N/A 178.33.161.38:6893 udp
N/A 178.33.161.39:6893 udp
N/A 178.33.161.40:6893 udp
N/A 178.33.161.41:6893 udp
N/A 178.33.161.42:6893 udp
N/A 178.33.161.43:6893 udp
N/A 178.33.161.44:6893 udp
N/A 178.33.161.45:6893 udp
N/A 178.33.161.46:6893 udp
N/A 178.33.161.47:6893 udp
N/A 178.33.161.48:6893 udp
N/A 178.33.161.49:6893 udp
N/A 178.33.161.50:6893 udp
N/A 178.33.161.51:6893 udp
N/A 178.33.161.52:6893 udp
N/A 178.33.161.53:6893 udp
N/A 178.33.161.54:6893 udp
N/A 178.33.161.55:6893 udp
N/A 178.33.161.56:6893 udp
N/A 178.33.161.57:6893 udp
N/A 178.33.161.58:6893 udp
N/A 178.33.161.59:6893 udp
N/A 178.33.161.60:6893 udp
N/A 178.33.161.61:6893 udp
N/A 178.33.161.62:6893 udp
N/A 178.33.161.63:6893 udp
N/A 178.33.161.64:6893 udp
N/A 178.33.161.65:6893 udp
N/A 178.33.161.66:6893 udp
N/A 178.33.161.67:6893 udp
N/A 178.33.161.68:6893 udp
N/A 178.33.161.69:6893 udp
N/A 178.33.161.70:6893 udp
N/A 178.33.161.71:6893 udp
N/A 178.33.161.72:6893 udp
N/A 178.33.161.73:6893 udp
N/A 178.33.161.74:6893 udp
N/A 178.33.161.75:6893 udp
N/A 178.33.161.76:6893 udp
N/A 178.33.161.77:6893 udp
N/A 178.33.161.78:6893 udp
N/A 178.33.161.79:6893 udp
N/A 178.33.161.80:6893 udp
N/A 178.33.161.81:6893 udp
N/A 178.33.161.82:6893 udp
N/A 178.33.161.83:6893 udp
N/A 178.33.161.84:6893 udp
N/A 178.33.161.85:6893 udp
N/A 178.33.161.86:6893 udp
N/A 178.33.161.87:6893 udp
N/A 178.33.161.88:6893 udp
N/A 178.33.161.89:6893 udp
N/A 178.33.161.90:6893 udp
N/A 178.33.161.91:6893 udp
N/A 178.33.161.92:6893 udp
N/A 178.33.161.93:6893 udp
N/A 178.33.161.94:6893 udp
N/A 178.33.161.95:6893 udp
N/A 178.33.161.96:6893 udp
N/A 178.33.161.97:6893 udp
N/A 178.33.161.98:6893 udp
N/A 178.33.161.99:6893 udp
N/A 178.33.161.100:6893 udp
N/A 178.33.161.101:6893 udp
N/A 178.33.161.102:6893 udp
N/A 178.33.161.103:6893 udp
N/A 178.33.161.104:6893 udp
N/A 178.33.161.105:6893 udp
N/A 178.33.161.106:6893 udp
N/A 178.33.161.107:6893 udp
N/A 178.33.161.108:6893 udp
N/A 178.33.161.109:6893 udp
N/A 178.33.161.110:6893 udp
N/A 178.33.161.111:6893 udp
N/A 178.33.161.112:6893 udp
N/A 178.33.161.113:6893 udp
N/A 178.33.161.114:6893 udp
N/A 178.33.161.115:6893 udp
N/A 178.33.161.116:6893 udp
N/A 178.33.161.117:6893 udp
N/A 178.33.161.118:6893 udp
N/A 178.33.161.119:6893 udp
N/A 178.33.161.120:6893 udp
N/A 178.33.161.121:6893 udp
N/A 178.33.161.122:6893 udp
N/A 178.33.161.123:6893 udp
N/A 178.33.161.124:6893 udp
N/A 178.33.161.125:6893 udp
N/A 178.33.161.126:6893 udp
N/A 178.33.161.127:6893 udp
N/A 178.33.161.128:6893 udp
N/A 178.33.161.129:6893 udp
N/A 178.33.161.130:6893 udp
N/A 178.33.161.131:6893 udp
N/A 178.33.161.132:6893 udp
N/A 178.33.161.133:6893 udp
N/A 178.33.161.134:6893 udp
N/A 178.33.161.135:6893 udp
N/A 178.33.161.136:6893 udp
N/A 178.33.161.137:6893 udp
N/A 178.33.161.138:6893 udp
N/A 178.33.161.139:6893 udp
N/A 178.33.161.140:6893 udp
N/A 178.33.161.141:6893 udp
N/A 178.33.161.142:6893 udp
N/A 178.33.161.143:6893 udp
N/A 178.33.161.144:6893 udp
N/A 178.33.161.145:6893 udp
N/A 178.33.161.146:6893 udp
N/A 178.33.161.147:6893 udp
N/A 178.33.161.148:6893 udp
N/A 178.33.161.149:6893 udp
N/A 178.33.161.150:6893 udp
N/A 178.33.161.151:6893 udp
N/A 178.33.161.152:6893 udp
N/A 178.33.161.153:6893 udp
N/A 178.33.161.154:6893 udp
N/A 178.33.161.155:6893 udp
N/A 178.33.161.156:6893 udp
N/A 178.33.161.157:6893 udp
N/A 178.33.161.158:6893 udp
N/A 178.33.161.159:6893 udp
N/A 178.33.161.160:6893 udp
N/A 178.33.161.161:6893 udp
N/A 178.33.161.162:6893 udp
N/A 178.33.161.163:6893 udp
N/A 178.33.161.164:6893 udp
N/A 178.33.161.165:6893 udp
N/A 178.33.161.166:6893 udp
N/A 178.33.161.167:6893 udp
N/A 178.33.161.168:6893 udp
N/A 178.33.161.169:6893 udp
N/A 178.33.161.170:6893 udp
N/A 178.33.161.171:6893 udp
N/A 178.33.161.172:6893 udp
N/A 178.33.161.173:6893 udp
N/A 178.33.161.174:6893 udp
N/A 178.33.161.175:6893 udp
N/A 178.33.161.176:6893 udp
N/A 178.33.161.177:6893 udp
N/A 178.33.161.178:6893 udp
N/A 178.33.161.179:6893 udp
N/A 178.33.161.180:6893 udp
N/A 178.33.161.181:6893 udp
N/A 178.33.161.182:6893 udp
N/A 178.33.161.183:6893 udp
N/A 178.33.161.184:6893 udp
N/A 178.33.161.185:6893 udp
N/A 178.33.161.186:6893 udp
N/A 178.33.161.187:6893 udp
N/A 178.33.161.188:6893 udp
N/A 178.33.161.189:6893 udp
N/A 178.33.161.190:6893 udp
N/A 178.33.161.191:6893 udp
N/A 178.33.161.192:6893 udp
N/A 178.33.161.193:6893 udp
N/A 178.33.161.194:6893 udp
N/A 178.33.161.195:6893 udp
N/A 178.33.161.196:6893 udp
N/A 178.33.161.197:6893 udp
N/A 178.33.161.198:6893 udp
N/A 178.33.161.199:6893 udp
N/A 178.33.161.200:6893 udp
N/A 178.33.161.201:6893 udp
N/A 178.33.161.202:6893 udp
N/A 178.33.161.203:6893 udp
N/A 178.33.161.204:6893 udp
N/A 178.33.161.205:6893 udp
N/A 178.33.161.206:6893 udp
N/A 178.33.161.207:6893 udp
N/A 178.33.161.208:6893 udp
N/A 178.33.161.209:6893 udp
N/A 178.33.161.210:6893 udp
N/A 178.33.161.211:6893 udp
N/A 178.33.161.212:6893 udp
N/A 178.33.161.213:6893 udp
N/A 178.33.161.214:6893 udp
N/A 178.33.161.215:6893 udp
N/A 178.33.161.216:6893 udp
N/A 178.33.161.217:6893 udp
N/A 178.33.161.218:6893 udp
N/A 178.33.161.219:6893 udp
N/A 178.33.161.220:6893 udp
N/A 178.33.161.221:6893 udp
N/A 178.33.161.222:6893 udp
N/A 178.33.161.223:6893 udp
N/A 178.33.161.224:6893 udp
N/A 178.33.161.225:6893 udp
N/A 178.33.161.226:6893 udp
N/A 178.33.161.227:6893 udp
N/A 178.33.161.228:6893 udp
N/A 178.33.161.229:6893 udp
N/A 178.33.161.230:6893 udp
N/A 178.33.161.231:6893 udp
N/A 178.33.161.232:6893 udp
N/A 178.33.161.233:6893 udp
N/A 178.33.161.234:6893 udp
N/A 178.33.161.235:6893 udp
N/A 178.33.161.236:6893 udp
N/A 178.33.161.237:6893 udp
N/A 178.33.161.238:6893 udp
N/A 178.33.161.239:6893 udp
N/A 178.33.161.240:6893 udp
N/A 178.33.161.241:6893 udp
N/A 178.33.161.242:6893 udp
N/A 178.33.161.243:6893 udp
N/A 178.33.161.244:6893 udp
N/A 178.33.161.245:6893 udp
N/A 178.33.161.246:6893 udp
N/A 178.33.161.247:6893 udp
N/A 178.33.161.248:6893 udp
N/A 178.33.161.249:6893 udp
N/A 178.33.161.250:6893 udp
N/A 178.33.161.251:6893 udp
N/A 178.33.161.252:6893 udp
N/A 178.33.161.253:6893 udp
N/A 178.33.161.254:6893 udp
N/A 178.33.161.255:6893 udp
N/A 178.33.162.0:6893 udp
N/A 178.33.162.1:6893 udp
N/A 178.33.162.2:6893 udp
N/A 178.33.162.3:6893 udp
N/A 178.33.162.4:6893 udp
N/A 178.33.162.5:6893 udp
N/A 178.33.162.6:6893 udp
N/A 178.33.162.7:6893 udp
N/A 178.33.162.8:6893 udp
N/A 178.33.162.9:6893 udp
N/A 178.33.162.10:6893 udp
N/A 178.33.162.11:6893 udp
N/A 178.33.162.12:6893 udp
N/A 178.33.162.13:6893 udp
N/A 178.33.162.14:6893 udp
N/A 178.33.162.15:6893 udp
N/A 178.33.162.16:6893 udp
N/A 178.33.162.17:6893 udp
N/A 178.33.162.18:6893 udp
N/A 178.33.162.19:6893 udp
N/A 178.33.162.20:6893 udp
N/A 178.33.162.21:6893 udp
N/A 178.33.162.22:6893 udp
N/A 178.33.162.23:6893 udp
N/A 178.33.162.24:6893 udp
N/A 178.33.162.25:6893 udp
N/A 178.33.162.26:6893 udp
N/A 178.33.162.27:6893 udp
N/A 178.33.162.28:6893 udp
N/A 178.33.162.29:6893 udp
N/A 178.33.162.30:6893 udp
N/A 178.33.162.31:6893 udp
N/A 178.33.162.32:6893 udp
N/A 178.33.162.33:6893 udp
N/A 178.33.162.34:6893 udp
N/A 178.33.162.35:6893 udp
N/A 178.33.162.36:6893 udp
N/A 178.33.162.37:6893 udp
N/A 178.33.162.38:6893 udp
N/A 178.33.162.39:6893 udp
N/A 178.33.162.40:6893 udp
N/A 178.33.162.41:6893 udp
N/A 178.33.162.42:6893 udp
N/A 178.33.162.43:6893 udp
N/A 178.33.162.44:6893 udp
N/A 178.33.162.45:6893 udp
N/A 178.33.162.46:6893 udp
N/A 178.33.162.47:6893 udp
N/A 178.33.162.48:6893 udp
N/A 178.33.162.49:6893 udp
N/A 178.33.162.50:6893 udp
N/A 178.33.162.51:6893 udp
N/A 178.33.162.52:6893 udp
N/A 178.33.162.53:6893 udp
N/A 178.33.162.54:6893 udp
N/A 178.33.162.55:6893 udp
N/A 178.33.162.56:6893 udp
N/A 178.33.162.57:6893 udp
N/A 178.33.162.58:6893 udp
N/A 178.33.162.59:6893 udp
N/A 178.33.162.60:6893 udp
N/A 178.33.162.61:6893 udp
N/A 178.33.162.62:6893 udp
N/A 178.33.162.63:6893 udp
N/A 178.33.162.64:6893 udp
N/A 178.33.162.65:6893 udp
N/A 178.33.162.66:6893 udp
N/A 178.33.162.67:6893 udp
N/A 178.33.162.68:6893 udp
N/A 178.33.162.69:6893 udp
N/A 178.33.162.70:6893 udp
N/A 178.33.162.71:6893 udp
N/A 178.33.162.72:6893 udp
N/A 178.33.162.73:6893 udp
N/A 178.33.162.74:6893 udp
N/A 178.33.162.75:6893 udp
N/A 178.33.162.76:6893 udp
N/A 178.33.162.77:6893 udp
N/A 178.33.162.78:6893 udp
N/A 178.33.162.79:6893 udp
N/A 178.33.162.80:6893 udp
N/A 178.33.162.81:6893 udp
N/A 178.33.162.82:6893 udp
N/A 178.33.162.83:6893 udp
N/A 178.33.162.84:6893 udp
N/A 178.33.162.85:6893 udp
N/A 178.33.162.86:6893 udp
N/A 178.33.162.87:6893 udp
N/A 178.33.162.88:6893 udp
N/A 178.33.162.89:6893 udp
N/A 178.33.162.90:6893 udp
N/A 178.33.162.91:6893 udp
N/A 178.33.162.92:6893 udp
N/A 178.33.162.93:6893 udp
N/A 178.33.162.94:6893 udp
N/A 178.33.162.95:6893 udp
N/A 178.33.162.96:6893 udp
N/A 178.33.162.97:6893 udp
N/A 178.33.162.98:6893 udp
N/A 178.33.162.99:6893 udp
N/A 178.33.162.100:6893 udp
N/A 178.33.162.101:6893 udp
N/A 178.33.162.102:6893 udp
N/A 178.33.162.103:6893 udp
N/A 178.33.162.104:6893 udp
N/A 178.33.162.105:6893 udp
N/A 178.33.162.106:6893 udp
N/A 178.33.162.107:6893 udp
N/A 178.33.162.108:6893 udp
N/A 178.33.162.109:6893 udp
N/A 178.33.162.110:6893 udp
N/A 178.33.162.111:6893 udp
N/A 178.33.162.112:6893 udp
N/A 178.33.162.113:6893 udp
N/A 178.33.162.114:6893 udp
N/A 178.33.162.115:6893 udp
N/A 178.33.162.116:6893 udp
N/A 178.33.162.117:6893 udp
N/A 178.33.162.118:6893 udp
N/A 178.33.162.119:6893 udp
N/A 178.33.162.120:6893 udp
N/A 178.33.162.121:6893 udp
N/A 178.33.162.122:6893 udp
N/A 178.33.162.123:6893 udp
N/A 178.33.162.124:6893 udp
N/A 178.33.162.125:6893 udp
N/A 178.33.162.126:6893 udp
N/A 178.33.162.127:6893 udp
N/A 178.33.162.128:6893 udp
N/A 178.33.162.129:6893 udp
N/A 178.33.162.130:6893 udp
N/A 178.33.162.131:6893 udp
N/A 178.33.162.132:6893 udp
N/A 178.33.162.133:6893 udp
N/A 178.33.162.134:6893 udp
N/A 178.33.162.135:6893 udp
N/A 178.33.162.136:6893 udp
N/A 178.33.162.137:6893 udp
N/A 178.33.162.138:6893 udp
N/A 178.33.162.139:6893 udp
N/A 178.33.162.140:6893 udp
N/A 178.33.162.141:6893 udp
N/A 178.33.162.142:6893 udp
N/A 178.33.162.143:6893 udp
N/A 178.33.162.144:6893 udp
N/A 178.33.162.145:6893 udp
N/A 178.33.162.146:6893 udp
N/A 178.33.162.147:6893 udp
N/A 178.33.162.148:6893 udp
N/A 178.33.162.149:6893 udp
N/A 178.33.162.150:6893 udp
N/A 178.33.162.151:6893 udp
N/A 178.33.162.152:6893 udp
N/A 178.33.162.153:6893 udp
N/A 178.33.162.154:6893 udp
N/A 178.33.162.155:6893 udp
N/A 178.33.162.156:6893 udp
N/A 178.33.162.157:6893 udp
N/A 178.33.162.158:6893 udp
N/A 178.33.162.159:6893 udp
N/A 178.33.162.160:6893 udp
N/A 178.33.162.161:6893 udp
N/A 178.33.162.162:6893 udp
N/A 178.33.162.163:6893 udp
N/A 178.33.162.164:6893 udp
N/A 178.33.162.165:6893 udp
N/A 178.33.162.166:6893 udp
N/A 178.33.162.167:6893 udp
N/A 178.33.162.168:6893 udp
N/A 178.33.162.169:6893 udp
N/A 178.33.162.170:6893 udp
N/A 178.33.162.171:6893 udp
N/A 178.33.162.172:6893 udp
N/A 178.33.162.173:6893 udp
N/A 178.33.162.174:6893 udp
N/A 178.33.162.175:6893 udp
N/A 178.33.162.176:6893 udp
N/A 178.33.162.177:6893 udp
N/A 178.33.162.178:6893 udp
N/A 178.33.162.179:6893 udp
N/A 178.33.162.180:6893 udp
N/A 178.33.162.181:6893 udp
N/A 178.33.162.182:6893 udp
N/A 178.33.162.183:6893 udp
N/A 178.33.162.184:6893 udp
N/A 178.33.162.185:6893 udp
N/A 178.33.162.186:6893 udp
N/A 178.33.162.187:6893 udp
N/A 178.33.162.188:6893 udp
N/A 178.33.162.189:6893 udp
N/A 178.33.162.190:6893 udp
N/A 178.33.162.191:6893 udp
N/A 178.33.162.192:6893 udp
N/A 178.33.162.193:6893 udp
N/A 178.33.162.194:6893 udp
N/A 178.33.162.195:6893 udp
N/A 178.33.162.196:6893 udp
N/A 178.33.162.197:6893 udp
N/A 178.33.162.198:6893 udp
N/A 178.33.162.199:6893 udp
N/A 178.33.162.200:6893 udp
N/A 178.33.162.201:6893 udp
N/A 178.33.162.202:6893 udp
N/A 178.33.162.203:6893 udp
N/A 178.33.162.204:6893 udp
N/A 178.33.162.205:6893 udp
N/A 178.33.162.206:6893 udp
N/A 178.33.162.207:6893 udp
N/A 178.33.162.208:6893 udp
N/A 178.33.162.209:6893 udp
N/A 178.33.162.210:6893 udp
N/A 178.33.162.211:6893 udp
N/A 178.33.162.212:6893 udp
N/A 178.33.162.213:6893 udp
N/A 178.33.162.214:6893 udp
N/A 178.33.162.215:6893 udp
N/A 178.33.162.216:6893 udp
N/A 178.33.162.217:6893 udp
N/A 178.33.162.218:6893 udp
N/A 178.33.162.219:6893 udp
N/A 178.33.162.220:6893 udp
N/A 178.33.162.221:6893 udp
N/A 178.33.162.222:6893 udp
N/A 178.33.162.223:6893 udp
N/A 178.33.162.224:6893 udp
N/A 178.33.162.225:6893 udp
N/A 178.33.162.226:6893 udp
N/A 178.33.162.227:6893 udp
N/A 178.33.162.228:6893 udp
N/A 178.33.162.229:6893 udp
N/A 178.33.162.230:6893 udp
N/A 178.33.162.231:6893 udp
N/A 178.33.162.232:6893 udp
N/A 178.33.162.233:6893 udp
N/A 178.33.162.234:6893 udp
N/A 178.33.162.235:6893 udp
N/A 178.33.162.236:6893 udp
N/A 178.33.162.237:6893 udp
N/A 178.33.162.238:6893 udp
N/A 178.33.162.239:6893 udp
N/A 178.33.162.240:6893 udp
N/A 178.33.162.241:6893 udp
N/A 178.33.162.242:6893 udp
N/A 178.33.162.243:6893 udp
N/A 178.33.162.244:6893 udp
N/A 178.33.162.245:6893 udp
N/A 178.33.162.246:6893 udp
N/A 178.33.162.247:6893 udp
N/A 178.33.162.248:6893 udp
N/A 178.33.162.249:6893 udp
N/A 178.33.162.250:6893 udp
N/A 178.33.162.251:6893 udp
N/A 178.33.162.252:6893 udp
N/A 178.33.162.253:6893 udp
N/A 178.33.162.254:6893 udp
N/A 178.33.162.255:6893 udp
N/A 178.33.163.0:6893 udp
N/A 178.33.163.1:6893 udp
N/A 178.33.163.2:6893 udp
N/A 178.33.163.3:6893 udp
N/A 178.33.163.4:6893 udp
N/A 178.33.163.5:6893 udp
N/A 178.33.163.6:6893 udp
N/A 178.33.163.7:6893 udp
N/A 178.33.163.8:6893 udp
N/A 178.33.163.9:6893 udp
N/A 178.33.163.10:6893 udp
N/A 178.33.163.11:6893 udp
N/A 178.33.163.12:6893 udp
N/A 178.33.163.13:6893 udp
N/A 178.33.163.14:6893 udp
N/A 178.33.163.15:6893 udp
N/A 178.33.163.16:6893 udp
N/A 178.33.163.17:6893 udp
N/A 178.33.163.18:6893 udp
N/A 178.33.163.19:6893 udp
N/A 178.33.163.20:6893 udp
N/A 178.33.163.21:6893 udp
N/A 178.33.163.22:6893 udp
N/A 178.33.163.23:6893 udp
N/A 178.33.163.24:6893 udp
N/A 178.33.163.25:6893 udp
N/A 178.33.163.26:6893 udp
N/A 178.33.163.27:6893 udp
N/A 178.33.163.28:6893 udp
N/A 178.33.163.29:6893 udp
N/A 178.33.163.30:6893 udp
N/A 178.33.163.31:6893 udp
N/A 178.33.163.32:6893 udp
N/A 178.33.163.33:6893 udp
N/A 178.33.163.34:6893 udp
N/A 178.33.163.35:6893 udp
N/A 178.33.163.36:6893 udp
N/A 178.33.163.37:6893 udp
N/A 178.33.163.38:6893 udp
N/A 178.33.163.39:6893 udp
N/A 178.33.163.40:6893 udp
N/A 178.33.163.41:6893 udp
N/A 178.33.163.42:6893 udp
N/A 178.33.163.43:6893 udp
N/A 178.33.163.44:6893 udp
N/A 178.33.163.45:6893 udp
N/A 178.33.163.46:6893 udp
N/A 178.33.163.47:6893 udp
N/A 178.33.163.48:6893 udp
N/A 178.33.163.49:6893 udp
N/A 178.33.163.50:6893 udp
N/A 178.33.163.51:6893 udp
N/A 178.33.163.52:6893 udp
N/A 178.33.163.53:6893 udp
N/A 178.33.163.54:6893 udp
N/A 178.33.163.55:6893 udp
N/A 178.33.163.56:6893 udp
N/A 178.33.163.57:6893 udp
N/A 178.33.163.58:6893 udp
N/A 178.33.163.59:6893 udp
N/A 178.33.163.60:6893 udp
N/A 178.33.163.61:6893 udp
N/A 178.33.163.62:6893 udp
N/A 178.33.163.63:6893 udp
N/A 178.33.163.64:6893 udp
N/A 178.33.163.65:6893 udp
N/A 178.33.163.66:6893 udp
N/A 178.33.163.67:6893 udp
N/A 178.33.163.68:6893 udp
N/A 178.33.163.69:6893 udp
N/A 178.33.163.70:6893 udp
N/A 178.33.163.71:6893 udp
N/A 178.33.163.72:6893 udp
N/A 178.33.163.73:6893 udp
N/A 178.33.163.74:6893 udp
N/A 178.33.163.75:6893 udp
N/A 178.33.163.76:6893 udp
N/A 178.33.163.77:6893 udp
N/A 178.33.163.78:6893 udp
N/A 178.33.163.79:6893 udp
N/A 178.33.163.80:6893 udp
N/A 178.33.163.81:6893 udp
N/A 178.33.163.82:6893 udp
N/A 178.33.163.83:6893 udp
N/A 178.33.163.84:6893 udp
N/A 178.33.163.85:6893 udp
N/A 178.33.163.86:6893 udp
N/A 178.33.163.87:6893 udp
N/A 178.33.163.88:6893 udp
N/A 178.33.163.89:6893 udp
N/A 178.33.163.90:6893 udp
N/A 178.33.163.91:6893 udp
N/A 178.33.163.92:6893 udp
N/A 178.33.163.93:6893 udp
N/A 178.33.163.94:6893 udp
N/A 178.33.163.95:6893 udp
N/A 178.33.163.96:6893 udp
N/A 178.33.163.97:6893 udp
N/A 178.33.163.98:6893 udp
N/A 178.33.163.99:6893 udp
N/A 178.33.163.100:6893 udp
N/A 178.33.163.101:6893 udp
N/A 178.33.163.102:6893 udp
N/A 178.33.163.103:6893 udp
N/A 178.33.163.104:6893 udp
N/A 178.33.163.105:6893 udp
N/A 178.33.163.106:6893 udp
N/A 178.33.163.107:6893 udp
N/A 178.33.163.108:6893 udp
N/A 178.33.163.109:6893 udp
N/A 178.33.163.110:6893 udp
N/A 178.33.163.111:6893 udp
N/A 178.33.163.112:6893 udp
N/A 178.33.163.113:6893 udp
N/A 178.33.163.114:6893 udp
N/A 178.33.163.115:6893 udp
N/A 178.33.163.116:6893 udp
N/A 178.33.163.117:6893 udp
N/A 178.33.163.118:6893 udp
N/A 178.33.163.119:6893 udp
N/A 178.33.163.120:6893 udp
N/A 178.33.163.121:6893 udp
N/A 178.33.163.122:6893 udp
N/A 178.33.163.123:6893 udp
N/A 178.33.163.124:6893 udp
N/A 178.33.163.125:6893 udp
N/A 178.33.163.126:6893 udp
N/A 178.33.163.127:6893 udp
N/A 178.33.163.128:6893 udp
N/A 178.33.163.129:6893 udp
N/A 178.33.163.130:6893 udp
N/A 178.33.163.131:6893 udp
N/A 178.33.163.132:6893 udp
N/A 178.33.163.133:6893 udp
N/A 178.33.163.134:6893 udp
N/A 178.33.163.135:6893 udp
N/A 178.33.163.136:6893 udp
N/A 178.33.163.137:6893 udp
N/A 178.33.163.138:6893 udp
N/A 178.33.163.139:6893 udp
N/A 178.33.163.140:6893 udp
N/A 178.33.163.141:6893 udp
N/A 178.33.163.142:6893 udp
N/A 178.33.163.143:6893 udp
N/A 178.33.163.144:6893 udp
N/A 178.33.163.145:6893 udp
N/A 178.33.163.146:6893 udp
N/A 178.33.163.147:6893 udp
N/A 178.33.163.148:6893 udp
N/A 178.33.163.149:6893 udp
N/A 178.33.163.150:6893 udp
N/A 178.33.163.151:6893 udp
N/A 178.33.163.152:6893 udp
N/A 178.33.163.153:6893 udp
N/A 178.33.163.154:6893 udp
N/A 178.33.163.155:6893 udp
N/A 178.33.163.156:6893 udp
N/A 178.33.163.157:6893 udp
N/A 178.33.163.158:6893 udp
N/A 178.33.163.159:6893 udp
N/A 178.33.163.160:6893 udp
N/A 178.33.163.161:6893 udp
N/A 178.33.163.162:6893 udp
N/A 178.33.163.163:6893 udp
N/A 178.33.163.164:6893 udp
N/A 178.33.163.165:6893 udp
N/A 178.33.163.166:6893 udp
N/A 178.33.163.167:6893 udp
N/A 178.33.163.168:6893 udp
N/A 178.33.163.169:6893 udp
N/A 178.33.163.170:6893 udp
N/A 178.33.163.171:6893 udp
N/A 178.33.163.172:6893 udp
N/A 178.33.163.173:6893 udp
N/A 178.33.163.174:6893 udp
N/A 178.33.163.175:6893 udp
N/A 178.33.163.176:6893 udp
N/A 178.33.163.177:6893 udp
N/A 178.33.163.178:6893 udp
N/A 178.33.163.179:6893 udp
N/A 178.33.163.180:6893 udp
N/A 178.33.163.181:6893 udp
N/A 178.33.163.182:6893 udp
N/A 178.33.163.183:6893 udp
N/A 178.33.163.184:6893 udp
N/A 178.33.163.185:6893 udp
N/A 178.33.163.186:6893 udp
N/A 178.33.163.187:6893 udp
N/A 178.33.163.188:6893 udp
N/A 178.33.163.189:6893 udp
N/A 178.33.163.190:6893 udp
N/A 178.33.163.191:6893 udp
N/A 178.33.163.192:6893 udp
N/A 178.33.163.193:6893 udp
N/A 178.33.163.194:6893 udp
N/A 178.33.163.195:6893 udp
N/A 178.33.163.196:6893 udp
N/A 178.33.163.197:6893 udp
N/A 178.33.163.198:6893 udp
N/A 178.33.163.199:6893 udp
N/A 178.33.163.200:6893 udp
N/A 178.33.163.201:6893 udp
N/A 178.33.163.202:6893 udp
N/A 178.33.163.203:6893 udp
N/A 178.33.163.204:6893 udp
N/A 178.33.163.205:6893 udp
N/A 178.33.163.206:6893 udp
N/A 178.33.163.207:6893 udp
N/A 178.33.163.208:6893 udp
N/A 178.33.163.209:6893 udp
N/A 178.33.163.210:6893 udp
N/A 178.33.163.211:6893 udp
N/A 178.33.163.212:6893 udp
N/A 178.33.163.213:6893 udp
N/A 178.33.163.214:6893 udp
N/A 178.33.163.215:6893 udp
N/A 178.33.163.216:6893 udp
N/A 178.33.163.217:6893 udp
N/A 178.33.163.218:6893 udp
N/A 178.33.163.219:6893 udp
N/A 178.33.163.220:6893 udp
N/A 178.33.163.221:6893 udp
N/A 178.33.163.222:6893 udp
N/A 178.33.163.223:6893 udp
N/A 178.33.163.224:6893 udp
N/A 178.33.163.225:6893 udp
N/A 178.33.163.226:6893 udp
N/A 178.33.163.227:6893 udp
N/A 178.33.163.228:6893 udp
N/A 178.33.163.229:6893 udp
N/A 178.33.163.230:6893 udp
N/A 178.33.163.231:6893 udp
N/A 178.33.163.232:6893 udp
N/A 178.33.163.233:6893 udp
N/A 178.33.163.234:6893 udp
N/A 178.33.163.235:6893 udp
N/A 178.33.163.236:6893 udp
N/A 178.33.163.237:6893 udp
N/A 178.33.163.238:6893 udp
N/A 178.33.163.239:6893 udp
N/A 178.33.163.240:6893 udp
N/A 178.33.163.241:6893 udp
N/A 178.33.163.242:6893 udp
N/A 178.33.163.243:6893 udp
N/A 178.33.163.244:6893 udp
N/A 178.33.163.245:6893 udp
N/A 178.33.163.246:6893 udp
N/A 178.33.163.247:6893 udp
N/A 178.33.163.248:6893 udp
N/A 178.33.163.249:6893 udp
N/A 178.33.163.250:6893 udp
N/A 178.33.163.251:6893 udp
N/A 178.33.163.252:6893 udp
N/A 178.33.163.253:6893 udp
N/A 178.33.163.254:6893 udp
N/A 178.33.163.255:6893 udp
N/A 178.33.158.0:6893 udp
N/A 178.33.158.1:6893 udp
N/A 178.33.158.2:6893 udp
N/A 178.33.158.3:6893 udp
N/A 178.33.158.4:6893 udp
N/A 178.33.158.5:6893 udp
N/A 178.33.158.6:6893 udp
N/A 178.33.158.7:6893 udp
N/A 178.33.158.8:6893 udp
N/A 178.33.158.9:6893 udp
N/A 178.33.158.10:6893 udp
N/A 178.33.158.11:6893 udp
N/A 178.33.158.12:6893 udp
N/A 178.33.158.13:6893 udp
N/A 178.33.158.14:6893 udp
N/A 178.33.158.15:6893 udp
N/A 178.33.158.16:6893 udp
N/A 178.33.158.17:6893 udp
N/A 178.33.158.18:6893 udp
N/A 178.33.158.19:6893 udp
N/A 178.33.158.20:6893 udp
N/A 178.33.158.21:6893 udp
N/A 178.33.158.22:6893 udp
N/A 178.33.158.23:6893 udp
N/A 178.33.158.24:6893 udp
N/A 178.33.158.25:6893 udp
N/A 178.33.158.26:6893 udp
N/A 178.33.158.27:6893 udp
N/A 178.33.158.28:6893 udp
N/A 178.33.158.29:6893 udp
N/A 178.33.158.30:6893 udp
N/A 178.33.158.31:6893 udp
N/A 178.33.159.0:6893 udp
N/A 178.33.159.1:6893 udp
N/A 178.33.159.2:6893 udp
N/A 178.33.159.3:6893 udp
N/A 178.33.159.4:6893 udp
N/A 178.33.159.5:6893 udp
N/A 178.33.159.6:6893 udp
N/A 178.33.159.7:6893 udp
N/A 178.33.159.8:6893 udp
N/A 178.33.159.9:6893 udp
N/A 178.33.159.10:6893 udp
N/A 178.33.159.11:6893 udp
N/A 178.33.159.12:6893 udp
N/A 178.33.159.13:6893 udp
N/A 178.33.159.14:6893 udp
N/A 178.33.159.15:6893 udp
N/A 178.33.159.16:6893 udp
N/A 178.33.159.17:6893 udp
N/A 178.33.159.18:6893 udp
N/A 178.33.159.19:6893 udp
N/A 178.33.159.20:6893 udp
N/A 178.33.159.21:6893 udp
N/A 178.33.159.22:6893 udp
N/A 178.33.159.23:6893 udp
N/A 178.33.159.24:6893 udp
N/A 178.33.159.25:6893 udp
N/A 178.33.159.26:6893 udp
N/A 178.33.159.27:6893 udp
N/A 178.33.159.28:6893 udp
N/A 178.33.159.29:6893 udp
N/A 178.33.159.30:6893 udp
N/A 178.33.159.31:6893 udp
N/A 178.33.160.0:6893 udp
N/A 178.33.160.1:6893 udp
N/A 178.33.160.2:6893 udp
N/A 178.33.160.3:6893 udp
N/A 178.33.160.4:6893 udp
N/A 178.33.160.5:6893 udp
N/A 178.33.160.6:6893 udp
N/A 178.33.160.7:6893 udp
N/A 178.33.160.8:6893 udp
N/A 178.33.160.9:6893 udp
N/A 178.33.160.10:6893 udp
N/A 178.33.160.11:6893 udp
N/A 178.33.160.12:6893 udp
N/A 178.33.160.13:6893 udp
N/A 178.33.160.14:6893 udp
N/A 178.33.160.15:6893 udp
N/A 178.33.160.16:6893 udp
N/A 178.33.160.17:6893 udp
N/A 178.33.160.18:6893 udp
N/A 178.33.160.19:6893 udp
N/A 178.33.160.20:6893 udp
N/A 178.33.160.21:6893 udp
N/A 178.33.160.22:6893 udp
N/A 178.33.160.23:6893 udp
N/A 178.33.160.24:6893 udp
N/A 178.33.160.25:6893 udp
N/A 178.33.160.26:6893 udp
N/A 178.33.160.27:6893 udp
N/A 178.33.160.28:6893 udp
N/A 178.33.160.29:6893 udp
N/A 178.33.160.30:6893 udp
N/A 178.33.160.31:6893 udp
N/A 178.33.160.32:6893 udp
N/A 178.33.160.33:6893 udp
N/A 178.33.160.34:6893 udp
N/A 178.33.160.35:6893 udp
N/A 178.33.160.36:6893 udp
N/A 178.33.160.37:6893 udp
N/A 178.33.160.38:6893 udp
N/A 178.33.160.39:6893 udp
N/A 178.33.160.40:6893 udp
N/A 178.33.160.41:6893 udp
N/A 178.33.160.42:6893 udp
N/A 178.33.160.43:6893 udp
N/A 178.33.160.44:6893 udp
N/A 178.33.160.45:6893 udp
N/A 178.33.160.46:6893 udp
N/A 178.33.160.47:6893 udp
N/A 178.33.160.48:6893 udp
N/A 178.33.160.49:6893 udp
N/A 178.33.160.50:6893 udp
N/A 178.33.160.51:6893 udp
N/A 178.33.160.52:6893 udp
N/A 178.33.160.53:6893 udp
N/A 178.33.160.54:6893 udp
N/A 178.33.160.55:6893 udp
N/A 178.33.160.56:6893 udp
N/A 178.33.160.57:6893 udp
N/A 178.33.160.58:6893 udp
N/A 178.33.160.59:6893 udp
N/A 178.33.160.60:6893 udp
N/A 178.33.160.61:6893 udp
N/A 178.33.160.62:6893 udp
N/A 178.33.160.63:6893 udp
N/A 178.33.160.64:6893 udp
N/A 178.33.160.65:6893 udp
N/A 178.33.160.66:6893 udp
N/A 178.33.160.67:6893 udp
N/A 178.33.160.68:6893 udp
N/A 178.33.160.69:6893 udp
N/A 178.33.160.70:6893 udp
N/A 178.33.160.71:6893 udp
N/A 178.33.160.72:6893 udp
N/A 178.33.160.73:6893 udp
N/A 178.33.160.74:6893 udp
N/A 178.33.160.75:6893 udp
N/A 178.33.160.76:6893 udp
N/A 178.33.160.77:6893 udp
N/A 178.33.160.78:6893 udp
N/A 178.33.160.79:6893 udp
N/A 178.33.160.80:6893 udp
N/A 178.33.160.81:6893 udp
N/A 178.33.160.82:6893 udp
N/A 178.33.160.83:6893 udp
N/A 178.33.160.84:6893 udp
N/A 178.33.160.85:6893 udp
N/A 178.33.160.86:6893 udp
N/A 178.33.160.87:6893 udp
N/A 178.33.160.88:6893 udp
N/A 178.33.160.89:6893 udp
N/A 178.33.160.90:6893 udp
N/A 178.33.160.91:6893 udp
N/A 178.33.160.92:6893 udp
N/A 178.33.160.93:6893 udp
N/A 178.33.160.94:6893 udp
N/A 178.33.160.95:6893 udp
N/A 178.33.160.96:6893 udp
N/A 178.33.160.97:6893 udp
N/A 178.33.160.98:6893 udp
N/A 178.33.160.99:6893 udp
N/A 178.33.160.100:6893 udp
N/A 178.33.160.101:6893 udp
N/A 178.33.160.102:6893 udp
N/A 178.33.160.103:6893 udp
N/A 178.33.160.104:6893 udp
N/A 178.33.160.105:6893 udp
N/A 178.33.160.106:6893 udp
N/A 178.33.160.107:6893 udp
N/A 178.33.160.108:6893 udp
N/A 178.33.160.109:6893 udp
N/A 178.33.160.110:6893 udp
N/A 178.33.160.111:6893 udp
N/A 178.33.160.112:6893 udp
N/A 178.33.160.113:6893 udp
N/A 178.33.160.114:6893 udp
N/A 178.33.160.115:6893 udp
N/A 178.33.160.116:6893 udp
N/A 178.33.160.117:6893 udp
N/A 178.33.160.118:6893 udp
N/A 178.33.160.119:6893 udp
N/A 178.33.160.120:6893 udp
N/A 178.33.160.121:6893 udp
N/A 178.33.160.122:6893 udp
N/A 178.33.160.123:6893 udp
N/A 178.33.160.124:6893 udp
N/A 178.33.160.125:6893 udp
N/A 178.33.160.126:6893 udp
N/A 178.33.160.127:6893 udp
N/A 178.33.160.128:6893 udp
N/A 178.33.160.129:6893 udp
N/A 178.33.160.130:6893 udp
N/A 178.33.160.131:6893 udp
N/A 178.33.160.132:6893 udp
N/A 178.33.160.133:6893 udp
N/A 178.33.160.134:6893 udp
N/A 178.33.160.135:6893 udp
N/A 178.33.160.136:6893 udp
N/A 178.33.160.137:6893 udp
N/A 178.33.160.138:6893 udp
N/A 178.33.160.139:6893 udp
N/A 178.33.160.140:6893 udp
N/A 178.33.160.141:6893 udp
N/A 178.33.160.142:6893 udp
N/A 178.33.160.143:6893 udp
N/A 178.33.160.144:6893 udp
N/A 178.33.160.145:6893 udp
N/A 178.33.160.146:6893 udp
N/A 178.33.160.147:6893 udp
N/A 178.33.160.148:6893 udp
N/A 178.33.160.149:6893 udp
N/A 178.33.160.150:6893 udp
N/A 178.33.160.151:6893 udp
N/A 178.33.160.152:6893 udp
N/A 178.33.160.153:6893 udp
N/A 178.33.160.154:6893 udp
N/A 178.33.160.155:6893 udp
N/A 178.33.160.156:6893 udp
N/A 178.33.160.157:6893 udp
N/A 178.33.160.158:6893 udp
N/A 178.33.160.159:6893 udp
N/A 178.33.160.160:6893 udp
N/A 178.33.160.161:6893 udp
N/A 178.33.160.162:6893 udp
N/A 178.33.160.163:6893 udp
N/A 178.33.160.164:6893 udp
N/A 178.33.160.165:6893 udp
N/A 178.33.160.166:6893 udp
N/A 178.33.160.167:6893 udp
N/A 178.33.160.168:6893 udp
N/A 178.33.160.169:6893 udp
N/A 178.33.160.170:6893 udp
N/A 178.33.160.171:6893 udp
N/A 178.33.160.172:6893 udp
N/A 178.33.160.173:6893 udp
N/A 178.33.160.174:6893 udp
N/A 178.33.160.175:6893 udp
N/A 178.33.160.176:6893 udp
N/A 178.33.160.177:6893 udp
N/A 178.33.160.178:6893 udp
N/A 178.33.160.179:6893 udp
N/A 178.33.160.180:6893 udp
N/A 178.33.160.181:6893 udp
N/A 178.33.160.182:6893 udp
N/A 178.33.160.183:6893 udp
N/A 178.33.160.184:6893 udp
N/A 178.33.160.185:6893 udp
N/A 178.33.160.186:6893 udp
N/A 178.33.160.187:6893 udp
N/A 178.33.160.188:6893 udp
N/A 178.33.160.189:6893 udp
N/A 178.33.160.190:6893 udp
N/A 178.33.160.191:6893 udp
N/A 178.33.160.192:6893 udp
N/A 178.33.160.193:6893 udp
N/A 178.33.160.194:6893 udp
N/A 178.33.160.195:6893 udp
N/A 178.33.160.196:6893 udp
N/A 178.33.160.197:6893 udp
N/A 178.33.160.198:6893 udp
N/A 178.33.160.199:6893 udp
N/A 178.33.160.200:6893 udp
N/A 178.33.160.201:6893 udp
N/A 178.33.160.202:6893 udp
N/A 178.33.160.203:6893 udp
N/A 178.33.160.204:6893 udp
N/A 178.33.160.205:6893 udp
N/A 178.33.160.206:6893 udp
N/A 178.33.160.207:6893 udp
N/A 178.33.160.208:6893 udp
N/A 178.33.160.209:6893 udp
N/A 178.33.160.210:6893 udp
N/A 178.33.160.211:6893 udp
N/A 178.33.160.212:6893 udp
N/A 178.33.160.213:6893 udp
N/A 178.33.160.214:6893 udp
N/A 178.33.160.215:6893 udp
N/A 178.33.160.216:6893 udp
N/A 178.33.160.217:6893 udp
N/A 178.33.160.218:6893 udp
N/A 178.33.160.219:6893 udp
N/A 178.33.160.220:6893 udp
N/A 178.33.160.221:6893 udp
N/A 178.33.160.222:6893 udp
N/A 178.33.160.223:6893 udp
N/A 178.33.160.224:6893 udp
N/A 178.33.160.225:6893 udp
N/A 178.33.160.226:6893 udp
N/A 178.33.160.227:6893 udp
N/A 178.33.160.228:6893 udp
N/A 178.33.160.229:6893 udp
N/A 178.33.160.230:6893 udp
N/A 178.33.160.231:6893 udp
N/A 178.33.160.232:6893 udp
N/A 178.33.160.233:6893 udp
N/A 178.33.160.234:6893 udp
N/A 178.33.160.235:6893 udp
N/A 178.33.160.236:6893 udp
N/A 178.33.160.237:6893 udp
N/A 178.33.160.238:6893 udp
N/A 178.33.160.239:6893 udp
N/A 178.33.160.240:6893 udp
N/A 178.33.160.241:6893 udp
N/A 178.33.160.242:6893 udp
N/A 178.33.160.243:6893 udp
N/A 178.33.160.244:6893 udp
N/A 178.33.160.245:6893 udp
N/A 178.33.160.246:6893 udp
N/A 178.33.160.247:6893 udp
N/A 178.33.160.248:6893 udp
N/A 178.33.160.249:6893 udp
N/A 178.33.160.250:6893 udp
N/A 178.33.160.251:6893 udp
N/A 178.33.160.252:6893 udp
N/A 178.33.160.253:6893 udp
N/A 178.33.160.254:6893 udp
N/A 178.33.160.255:6893 udp
N/A 178.33.161.0:6893 udp
N/A 178.33.161.1:6893 udp
N/A 178.33.161.2:6893 udp
N/A 178.33.161.3:6893 udp
N/A 178.33.161.4:6893 udp
N/A 178.33.161.5:6893 udp
N/A 178.33.161.6:6893 udp
N/A 178.33.161.7:6893 udp
N/A 178.33.161.8:6893 udp
N/A 178.33.161.9:6893 udp
N/A 178.33.161.10:6893 udp
N/A 178.33.161.11:6893 udp
N/A 178.33.161.12:6893 udp
N/A 178.33.161.13:6893 udp
N/A 178.33.161.14:6893 udp
N/A 178.33.161.15:6893 udp
N/A 178.33.161.16:6893 udp
N/A 178.33.161.17:6893 udp
N/A 178.33.161.18:6893 udp
N/A 178.33.161.19:6893 udp
N/A 178.33.161.20:6893 udp
N/A 178.33.161.21:6893 udp
N/A 178.33.161.22:6893 udp
N/A 178.33.161.23:6893 udp
N/A 178.33.161.24:6893 udp
N/A 178.33.161.25:6893 udp
N/A 178.33.161.26:6893 udp
N/A 178.33.161.27:6893 udp
N/A 178.33.161.28:6893 udp
N/A 178.33.161.29:6893 udp
N/A 178.33.161.30:6893 udp
N/A 178.33.161.31:6893 udp
N/A 178.33.161.32:6893 udp
N/A 178.33.161.33:6893 udp
N/A 178.33.161.34:6893 udp
N/A 178.33.161.35:6893 udp
N/A 178.33.161.36:6893 udp
N/A 178.33.161.37:6893 udp
N/A 178.33.161.38:6893 udp
N/A 178.33.161.39:6893 udp
N/A 178.33.161.40:6893 udp
N/A 178.33.161.41:6893 udp
N/A 178.33.161.42:6893 udp
N/A 178.33.161.43:6893 udp
N/A 178.33.161.44:6893 udp
N/A 178.33.161.45:6893 udp
N/A 178.33.161.46:6893 udp
N/A 178.33.161.47:6893 udp
N/A 178.33.161.48:6893 udp
N/A 178.33.161.49:6893 udp
N/A 178.33.161.50:6893 udp
N/A 178.33.161.51:6893 udp
N/A 178.33.161.52:6893 udp
N/A 178.33.161.53:6893 udp
N/A 178.33.161.54:6893 udp
N/A 178.33.161.55:6893 udp
N/A 178.33.161.56:6893 udp
N/A 178.33.161.57:6893 udp
N/A 178.33.161.58:6893 udp
N/A 178.33.161.59:6893 udp
N/A 178.33.161.60:6893 udp
N/A 178.33.161.61:6893 udp
N/A 178.33.161.62:6893 udp
N/A 178.33.161.63:6893 udp
N/A 178.33.161.64:6893 udp
N/A 178.33.161.65:6893 udp
N/A 178.33.161.66:6893 udp
N/A 178.33.161.67:6893 udp
N/A 178.33.161.68:6893 udp
N/A 178.33.161.69:6893 udp
N/A 178.33.161.70:6893 udp
N/A 178.33.161.71:6893 udp
N/A 178.33.161.72:6893 udp
N/A 178.33.161.73:6893 udp
N/A 178.33.161.74:6893 udp
N/A 178.33.161.75:6893 udp
N/A 178.33.161.76:6893 udp
N/A 178.33.161.77:6893 udp
N/A 178.33.161.78:6893 udp
N/A 178.33.161.79:6893 udp
N/A 178.33.161.80:6893 udp
N/A 178.33.161.81:6893 udp
N/A 178.33.161.82:6893 udp
N/A 178.33.161.83:6893 udp
N/A 178.33.161.84:6893 udp
N/A 178.33.161.85:6893 udp
N/A 178.33.161.86:6893 udp
N/A 178.33.161.87:6893 udp
N/A 178.33.161.88:6893 udp
N/A 178.33.161.89:6893 udp
N/A 178.33.161.90:6893 udp
N/A 178.33.161.91:6893 udp
N/A 178.33.161.92:6893 udp
N/A 178.33.161.93:6893 udp
N/A 178.33.161.94:6893 udp
N/A 178.33.161.95:6893 udp
N/A 178.33.161.96:6893 udp
N/A 178.33.161.97:6893 udp
N/A 178.33.161.98:6893 udp
N/A 178.33.161.99:6893 udp
N/A 178.33.161.100:6893 udp
N/A 178.33.161.101:6893 udp
N/A 178.33.161.102:6893 udp
N/A 178.33.161.103:6893 udp
N/A 178.33.161.104:6893 udp
N/A 178.33.161.105:6893 udp
N/A 178.33.161.106:6893 udp
N/A 178.33.161.107:6893 udp
N/A 178.33.161.108:6893 udp
N/A 178.33.161.109:6893 udp
N/A 178.33.161.110:6893 udp
N/A 178.33.161.111:6893 udp
N/A 178.33.161.112:6893 udp
N/A 178.33.161.113:6893 udp
N/A 178.33.161.114:6893 udp
N/A 178.33.161.115:6893 udp
N/A 178.33.161.116:6893 udp
N/A 178.33.161.117:6893 udp
N/A 178.33.161.118:6893 udp
N/A 178.33.161.119:6893 udp
N/A 178.33.161.120:6893 udp
N/A 178.33.161.121:6893 udp
N/A 178.33.161.122:6893 udp
N/A 178.33.161.123:6893 udp
N/A 178.33.161.124:6893 udp
N/A 178.33.161.125:6893 udp
N/A 178.33.161.126:6893 udp
N/A 178.33.161.127:6893 udp
N/A 178.33.161.128:6893 udp
N/A 178.33.161.129:6893 udp
N/A 178.33.161.130:6893 udp
N/A 178.33.161.131:6893 udp
N/A 178.33.161.132:6893 udp
N/A 178.33.161.133:6893 udp
N/A 178.33.161.134:6893 udp
N/A 178.33.161.135:6893 udp
N/A 178.33.161.136:6893 udp
N/A 178.33.161.137:6893 udp
N/A 178.33.161.138:6893 udp
N/A 178.33.161.139:6893 udp
N/A 178.33.161.140:6893 udp
N/A 178.33.161.141:6893 udp
N/A 178.33.161.142:6893 udp
N/A 178.33.161.143:6893 udp
N/A 178.33.161.144:6893 udp
N/A 178.33.161.145:6893 udp
N/A 178.33.161.146:6893 udp
N/A 178.33.161.147:6893 udp
N/A 178.33.161.148:6893 udp
N/A 178.33.161.149:6893 udp
N/A 178.33.161.150:6893 udp
N/A 178.33.161.151:6893 udp
N/A 178.33.161.152:6893 udp
N/A 178.33.161.153:6893 udp
N/A 178.33.161.154:6893 udp
N/A 178.33.161.155:6893 udp
N/A 178.33.161.156:6893 udp
N/A 178.33.161.157:6893 udp
N/A 178.33.161.158:6893 udp
N/A 178.33.161.159:6893 udp
N/A 178.33.161.160:6893 udp
N/A 178.33.161.161:6893 udp
N/A 178.33.161.162:6893 udp
N/A 178.33.161.163:6893 udp
N/A 178.33.161.164:6893 udp
N/A 178.33.161.165:6893 udp
N/A 178.33.161.166:6893 udp
N/A 178.33.161.167:6893 udp
N/A 178.33.161.168:6893 udp
N/A 178.33.161.169:6893 udp
N/A 178.33.161.170:6893 udp
N/A 178.33.161.171:6893 udp
N/A 178.33.161.172:6893 udp
N/A 178.33.161.173:6893 udp
N/A 178.33.161.174:6893 udp
N/A 178.33.161.175:6893 udp
N/A 178.33.161.176:6893 udp
N/A 178.33.161.177:6893 udp
N/A 178.33.161.178:6893 udp
N/A 178.33.161.179:6893 udp
N/A 178.33.161.180:6893 udp
N/A 178.33.161.181:6893 udp
N/A 178.33.161.182:6893 udp
N/A 178.33.161.183:6893 udp
N/A 178.33.161.184:6893 udp
N/A 178.33.161.185:6893 udp
N/A 178.33.161.186:6893 udp
N/A 178.33.161.187:6893 udp
N/A 178.33.161.188:6893 udp
N/A 178.33.161.189:6893 udp
N/A 178.33.161.190:6893 udp
N/A 178.33.161.191:6893 udp
N/A 178.33.161.192:6893 udp
N/A 178.33.161.193:6893 udp
N/A 178.33.161.194:6893 udp
N/A 178.33.161.195:6893 udp
N/A 178.33.161.196:6893 udp
N/A 178.33.161.197:6893 udp
N/A 178.33.161.198:6893 udp
N/A 178.33.161.199:6893 udp
N/A 178.33.161.200:6893 udp
N/A 178.33.161.201:6893 udp
N/A 178.33.161.202:6893 udp
N/A 178.33.161.203:6893 udp
N/A 178.33.161.204:6893 udp
N/A 178.33.161.205:6893 udp
N/A 178.33.161.206:6893 udp
N/A 178.33.161.207:6893 udp
N/A 178.33.161.208:6893 udp
N/A 178.33.161.209:6893 udp
N/A 178.33.161.210:6893 udp
N/A 178.33.161.211:6893 udp
N/A 178.33.161.212:6893 udp
N/A 178.33.161.213:6893 udp
N/A 178.33.161.214:6893 udp
N/A 178.33.161.215:6893 udp
N/A 178.33.161.216:6893 udp
N/A 178.33.161.217:6893 udp
N/A 178.33.161.218:6893 udp
N/A 178.33.161.219:6893 udp
N/A 178.33.161.220:6893 udp
N/A 178.33.161.221:6893 udp
N/A 178.33.161.222:6893 udp
N/A 178.33.161.223:6893 udp
N/A 178.33.161.224:6893 udp
N/A 178.33.161.225:6893 udp
N/A 178.33.161.226:6893 udp
N/A 178.33.161.227:6893 udp
N/A 178.33.161.228:6893 udp
N/A 178.33.161.229:6893 udp
N/A 178.33.161.230:6893 udp
N/A 178.33.161.231:6893 udp
N/A 178.33.161.232:6893 udp
N/A 178.33.161.233:6893 udp
N/A 178.33.161.234:6893 udp
N/A 178.33.161.235:6893 udp
N/A 178.33.161.236:6893 udp
N/A 178.33.161.237:6893 udp
N/A 178.33.161.238:6893 udp
N/A 178.33.161.239:6893 udp
N/A 178.33.161.240:6893 udp
N/A 178.33.161.241:6893 udp
N/A 178.33.161.242:6893 udp
N/A 178.33.161.243:6893 udp
N/A 178.33.161.244:6893 udp
N/A 178.33.161.245:6893 udp
N/A 178.33.161.246:6893 udp
N/A 178.33.161.247:6893 udp
N/A 178.33.161.248:6893 udp
N/A 178.33.161.249:6893 udp
N/A 178.33.161.250:6893 udp
N/A 178.33.161.251:6893 udp
N/A 178.33.161.252:6893 udp
N/A 178.33.161.253:6893 udp
N/A 178.33.161.254:6893 udp
N/A 178.33.161.255:6893 udp
N/A 178.33.162.0:6893 udp
N/A 178.33.162.1:6893 udp
N/A 178.33.162.2:6893 udp
N/A 178.33.162.3:6893 udp
N/A 178.33.162.4:6893 udp
N/A 178.33.162.5:6893 udp
N/A 178.33.162.6:6893 udp
N/A 178.33.162.7:6893 udp
N/A 178.33.162.8:6893 udp
N/A 178.33.162.9:6893 udp
N/A 178.33.162.10:6893 udp
N/A 178.33.162.11:6893 udp
N/A 178.33.162.12:6893 udp
N/A 178.33.162.13:6893 udp
N/A 178.33.162.14:6893 udp
N/A 178.33.162.15:6893 udp
N/A 178.33.162.16:6893 udp
N/A 178.33.162.17:6893 udp
N/A 178.33.162.18:6893 udp
N/A 178.33.162.19:6893 udp
N/A 178.33.162.20:6893 udp
N/A 178.33.162.21:6893 udp
N/A 178.33.162.22:6893 udp
N/A 178.33.162.23:6893 udp
N/A 178.33.162.24:6893 udp
N/A 178.33.162.25:6893 udp
N/A 178.33.162.26:6893 udp
N/A 178.33.162.27:6893 udp
N/A 178.33.162.28:6893 udp
N/A 178.33.162.29:6893 udp
N/A 178.33.162.30:6893 udp
N/A 178.33.162.31:6893 udp
N/A 178.33.162.32:6893 udp
N/A 178.33.162.33:6893 udp
N/A 178.33.162.34:6893 udp
N/A 178.33.162.35:6893 udp
N/A 178.33.162.36:6893 udp
N/A 178.33.162.37:6893 udp
N/A 178.33.162.38:6893 udp
N/A 178.33.162.39:6893 udp
N/A 178.33.162.40:6893 udp
N/A 178.33.162.41:6893 udp
N/A 178.33.162.42:6893 udp
N/A 178.33.162.43:6893 udp
N/A 178.33.162.44:6893 udp
N/A 178.33.162.45:6893 udp
N/A 178.33.162.46:6893 udp
N/A 178.33.162.47:6893 udp
N/A 178.33.162.48:6893 udp
N/A 178.33.162.49:6893 udp
N/A 178.33.162.50:6893 udp
N/A 178.33.162.51:6893 udp
N/A 178.33.162.52:6893 udp
N/A 178.33.162.53:6893 udp
N/A 178.33.162.54:6893 udp
N/A 178.33.162.55:6893 udp
N/A 178.33.162.56:6893 udp
N/A 178.33.162.57:6893 udp
N/A 178.33.162.58:6893 udp
N/A 178.33.162.59:6893 udp
N/A 178.33.162.60:6893 udp
N/A 178.33.162.61:6893 udp
N/A 178.33.162.62:6893 udp
N/A 178.33.162.63:6893 udp
N/A 178.33.162.64:6893 udp
N/A 178.33.162.65:6893 udp
N/A 178.33.162.66:6893 udp
N/A 178.33.162.67:6893 udp
N/A 178.33.162.68:6893 udp
N/A 178.33.162.69:6893 udp
N/A 178.33.162.70:6893 udp
N/A 178.33.162.71:6893 udp
N/A 178.33.162.72:6893 udp
N/A 178.33.162.73:6893 udp
N/A 178.33.162.74:6893 udp
N/A 178.33.162.75:6893 udp
N/A 178.33.162.76:6893 udp
N/A 178.33.162.77:6893 udp
N/A 178.33.162.78:6893 udp
N/A 178.33.162.79:6893 udp
N/A 178.33.162.80:6893 udp
N/A 178.33.162.81:6893 udp
N/A 178.33.162.82:6893 udp
N/A 178.33.162.83:6893 udp
N/A 178.33.162.84:6893 udp
N/A 178.33.162.85:6893 udp
N/A 178.33.162.86:6893 udp
N/A 178.33.162.87:6893 udp
N/A 178.33.162.88:6893 udp
N/A 178.33.162.89:6893 udp
N/A 178.33.162.90:6893 udp
N/A 178.33.162.91:6893 udp
N/A 178.33.162.92:6893 udp
N/A 178.33.162.93:6893 udp
N/A 178.33.162.94:6893 udp
N/A 178.33.162.95:6893 udp
N/A 178.33.162.96:6893 udp
N/A 178.33.162.97:6893 udp
N/A 178.33.162.98:6893 udp
N/A 178.33.162.99:6893 udp
N/A 178.33.162.100:6893 udp
N/A 178.33.162.101:6893 udp
N/A 178.33.162.102:6893 udp
N/A 178.33.162.103:6893 udp
N/A 178.33.162.104:6893 udp
N/A 178.33.162.105:6893 udp
N/A 178.33.162.106:6893 udp
N/A 178.33.162.107:6893 udp
N/A 178.33.162.108:6893 udp
N/A 178.33.162.109:6893 udp
N/A 178.33.162.110:6893 udp
N/A 178.33.162.111:6893 udp
N/A 178.33.162.112:6893 udp
N/A 178.33.162.113:6893 udp
N/A 178.33.162.114:6893 udp
N/A 178.33.162.115:6893 udp
N/A 178.33.162.116:6893 udp
N/A 178.33.162.117:6893 udp
N/A 178.33.162.118:6893 udp
N/A 178.33.162.119:6893 udp
N/A 178.33.162.120:6893 udp
N/A 178.33.162.121:6893 udp
N/A 178.33.162.122:6893 udp
N/A 178.33.162.123:6893 udp
N/A 178.33.162.124:6893 udp
N/A 178.33.162.125:6893 udp
N/A 178.33.162.126:6893 udp
N/A 178.33.162.127:6893 udp
N/A 178.33.162.128:6893 udp
N/A 178.33.162.129:6893 udp
N/A 178.33.162.130:6893 udp
N/A 178.33.162.131:6893 udp
N/A 178.33.162.132:6893 udp
N/A 178.33.162.133:6893 udp
N/A 178.33.162.134:6893 udp
N/A 178.33.162.135:6893 udp
N/A 178.33.162.136:6893 udp
N/A 178.33.162.137:6893 udp
N/A 178.33.162.138:6893 udp
N/A 178.33.162.139:6893 udp
N/A 178.33.162.140:6893 udp
N/A 178.33.162.141:6893 udp
N/A 178.33.162.142:6893 udp
N/A 178.33.162.143:6893 udp
N/A 178.33.162.144:6893 udp
N/A 178.33.162.145:6893 udp
N/A 178.33.162.146:6893 udp
N/A 178.33.162.147:6893 udp
N/A 178.33.162.148:6893 udp
N/A 178.33.162.149:6893 udp
N/A 178.33.162.150:6893 udp
N/A 178.33.162.151:6893 udp
N/A 178.33.162.152:6893 udp
N/A 178.33.162.153:6893 udp
N/A 178.33.162.154:6893 udp
N/A 178.33.162.155:6893 udp
N/A 178.33.162.156:6893 udp
N/A 178.33.162.157:6893 udp
N/A 178.33.162.158:6893 udp
N/A 178.33.162.159:6893 udp
N/A 178.33.162.160:6893 udp
N/A 178.33.162.161:6893 udp
N/A 178.33.162.162:6893 udp
N/A 178.33.162.163:6893 udp
N/A 178.33.162.164:6893 udp
N/A 178.33.162.165:6893 udp
N/A 178.33.162.166:6893 udp
N/A 178.33.162.167:6893 udp
N/A 178.33.162.168:6893 udp
N/A 178.33.162.169:6893 udp
N/A 178.33.162.170:6893 udp
N/A 178.33.162.171:6893 udp
N/A 178.33.162.172:6893 udp
N/A 178.33.162.173:6893 udp
N/A 178.33.162.174:6893 udp
N/A 178.33.162.175:6893 udp
N/A 178.33.162.176:6893 udp
N/A 178.33.162.177:6893 udp
N/A 178.33.162.178:6893 udp
N/A 178.33.162.179:6893 udp
N/A 178.33.162.180:6893 udp
N/A 178.33.162.181:6893 udp
N/A 178.33.162.182:6893 udp
N/A 178.33.162.183:6893 udp
N/A 178.33.162.184:6893 udp
N/A 178.33.162.185:6893 udp
N/A 178.33.162.186:6893 udp
N/A 178.33.162.187:6893 udp
N/A 178.33.162.188:6893 udp
N/A 178.33.162.189:6893 udp
N/A 178.33.162.190:6893 udp
N/A 178.33.162.191:6893 udp
N/A 178.33.162.192:6893 udp
N/A 178.33.162.193:6893 udp
N/A 178.33.162.194:6893 udp
N/A 178.33.162.195:6893 udp
N/A 178.33.162.196:6893 udp
N/A 178.33.162.197:6893 udp
N/A 178.33.162.198:6893 udp
N/A 178.33.162.199:6893 udp
N/A 178.33.162.200:6893 udp
N/A 178.33.162.201:6893 udp
N/A 178.33.162.202:6893 udp
N/A 178.33.162.203:6893 udp
N/A 178.33.162.204:6893 udp
N/A 178.33.162.205:6893 udp
N/A 178.33.162.206:6893 udp
N/A 178.33.162.207:6893 udp
N/A 178.33.162.208:6893 udp
N/A 178.33.162.209:6893 udp
N/A 178.33.162.210:6893 udp
N/A 178.33.162.211:6893 udp
N/A 178.33.162.212:6893 udp
N/A 178.33.162.213:6893 udp
N/A 178.33.162.214:6893 udp
N/A 178.33.162.215:6893 udp
N/A 178.33.162.216:6893 udp
N/A 178.33.162.217:6893 udp
N/A 178.33.162.218:6893 udp
N/A 178.33.162.219:6893 udp
N/A 178.33.162.220:6893 udp
N/A 178.33.162.221:6893 udp
N/A 178.33.162.222:6893 udp
N/A 178.33.162.223:6893 udp
N/A 178.33.162.224:6893 udp
N/A 178.33.162.225:6893 udp
N/A 178.33.162.226:6893 udp
N/A 178.33.162.227:6893 udp
N/A 178.33.162.228:6893 udp
N/A 178.33.162.229:6893 udp
N/A 178.33.162.230:6893 udp
N/A 178.33.162.231:6893 udp
N/A 178.33.162.232:6893 udp
N/A 178.33.162.233:6893 udp
N/A 178.33.162.234:6893 udp
N/A 178.33.162.235:6893 udp
N/A 178.33.162.236:6893 udp
N/A 178.33.162.237:6893 udp
N/A 178.33.162.238:6893 udp
N/A 178.33.162.239:6893 udp
N/A 178.33.162.240:6893 udp
N/A 178.33.162.241:6893 udp
N/A 178.33.162.242:6893 udp
N/A 178.33.162.243:6893 udp
N/A 178.33.162.244:6893 udp
N/A 178.33.162.245:6893 udp
N/A 178.33.162.246:6893 udp
N/A 178.33.162.247:6893 udp
N/A 178.33.162.248:6893 udp
N/A 178.33.162.249:6893 udp
N/A 178.33.162.250:6893 udp
N/A 178.33.162.251:6893 udp
N/A 178.33.162.252:6893 udp
N/A 178.33.162.253:6893 udp
N/A 178.33.162.254:6893 udp
N/A 178.33.162.255:6893 udp
N/A 178.33.163.0:6893 udp
N/A 178.33.163.1:6893 udp
N/A 178.33.163.2:6893 udp
N/A 178.33.163.3:6893 udp
N/A 178.33.163.4:6893 udp
N/A 178.33.163.5:6893 udp
N/A 178.33.163.6:6893 udp
N/A 178.33.163.7:6893 udp
N/A 178.33.163.8:6893 udp
N/A 178.33.163.9:6893 udp
N/A 178.33.163.10:6893 udp
N/A 178.33.163.11:6893 udp
N/A 178.33.163.12:6893 udp
N/A 178.33.163.13:6893 udp
N/A 178.33.163.14:6893 udp
N/A 178.33.163.15:6893 udp
N/A 178.33.163.16:6893 udp
N/A 178.33.163.17:6893 udp
N/A 178.33.163.18:6893 udp
N/A 178.33.163.19:6893 udp
N/A 178.33.163.20:6893 udp
N/A 178.33.163.21:6893 udp
N/A 178.33.163.22:6893 udp
N/A 178.33.163.23:6893 udp
N/A 178.33.163.24:6893 udp
N/A 178.33.163.25:6893 udp
N/A 178.33.163.26:6893 udp
N/A 178.33.163.27:6893 udp
N/A 178.33.163.28:6893 udp
N/A 178.33.163.29:6893 udp
N/A 178.33.163.30:6893 udp
N/A 178.33.163.31:6893 udp
N/A 178.33.163.32:6893 udp
N/A 178.33.163.33:6893 udp
N/A 178.33.163.34:6893 udp
N/A 178.33.163.35:6893 udp
N/A 178.33.163.36:6893 udp
N/A 178.33.163.37:6893 udp
N/A 178.33.163.38:6893 udp
N/A 178.33.163.39:6893 udp
N/A 178.33.163.40:6893 udp
N/A 178.33.163.41:6893 udp
N/A 178.33.163.42:6893 udp
N/A 178.33.163.43:6893 udp
N/A 178.33.163.44:6893 udp
N/A 178.33.163.45:6893 udp
N/A 178.33.163.46:6893 udp
N/A 178.33.163.47:6893 udp
N/A 178.33.163.48:6893 udp
N/A 178.33.163.49:6893 udp
N/A 178.33.163.50:6893 udp
N/A 178.33.163.51:6893 udp
N/A 178.33.163.52:6893 udp
N/A 178.33.163.53:6893 udp
N/A 178.33.163.54:6893 udp
N/A 178.33.163.55:6893 udp
N/A 178.33.163.56:6893 udp
N/A 178.33.163.57:6893 udp
N/A 178.33.163.58:6893 udp
N/A 178.33.163.59:6893 udp
N/A 178.33.163.60:6893 udp
N/A 178.33.163.61:6893 udp
N/A 178.33.163.62:6893 udp
N/A 178.33.163.63:6893 udp
N/A 178.33.163.64:6893 udp
N/A 178.33.163.65:6893 udp
N/A 178.33.163.66:6893 udp
N/A 178.33.163.67:6893 udp
N/A 178.33.163.68:6893 udp
N/A 178.33.163.69:6893 udp
N/A 178.33.163.70:6893 udp
N/A 178.33.163.71:6893 udp
N/A 178.33.163.72:6893 udp
N/A 178.33.163.73:6893 udp
N/A 178.33.163.74:6893 udp
N/A 178.33.163.75:6893 udp
N/A 178.33.163.76:6893 udp
N/A 178.33.163.77:6893 udp
N/A 178.33.163.78:6893 udp
N/A 178.33.163.79:6893 udp
N/A 178.33.163.80:6893 udp
N/A 178.33.163.81:6893 udp
N/A 178.33.163.82:6893 udp
N/A 178.33.163.83:6893 udp
N/A 178.33.163.84:6893 udp
N/A 178.33.163.85:6893 udp
N/A 178.33.163.86:6893 udp
N/A 178.33.163.87:6893 udp
N/A 178.33.163.88:6893 udp
N/A 178.33.163.89:6893 udp
N/A 178.33.163.90:6893 udp
N/A 178.33.163.91:6893 udp
N/A 178.33.163.92:6893 udp
N/A 178.33.163.93:6893 udp
N/A 178.33.163.94:6893 udp
N/A 178.33.163.95:6893 udp
N/A 178.33.163.96:6893 udp
N/A 178.33.163.97:6893 udp
N/A 178.33.163.98:6893 udp
N/A 178.33.163.99:6893 udp
N/A 178.33.163.100:6893 udp
N/A 178.33.163.101:6893 udp
N/A 178.33.163.102:6893 udp
N/A 178.33.163.103:6893 udp
N/A 178.33.163.104:6893 udp
N/A 178.33.163.105:6893 udp
N/A 178.33.163.106:6893 udp
N/A 178.33.163.107:6893 udp
N/A 178.33.163.108:6893 udp
N/A 178.33.163.109:6893 udp
N/A 178.33.163.110:6893 udp
N/A 178.33.163.111:6893 udp
N/A 178.33.163.112:6893 udp
N/A 178.33.163.113:6893 udp
N/A 178.33.163.114:6893 udp
N/A 178.33.163.115:6893 udp
N/A 178.33.163.116:6893 udp
N/A 178.33.163.117:6893 udp
N/A 178.33.163.118:6893 udp
N/A 178.33.163.119:6893 udp
N/A 178.33.163.120:6893 udp
N/A 178.33.163.121:6893 udp
N/A 178.33.163.122:6893 udp
N/A 178.33.163.123:6893 udp
N/A 178.33.163.124:6893 udp
N/A 178.33.163.125:6893 udp
N/A 178.33.163.126:6893 udp
N/A 178.33.163.127:6893 udp
N/A 178.33.163.128:6893 udp
N/A 178.33.163.129:6893 udp
N/A 178.33.163.130:6893 udp
N/A 178.33.163.131:6893 udp
N/A 178.33.163.132:6893 udp
N/A 178.33.163.133:6893 udp
N/A 178.33.163.134:6893 udp
N/A 178.33.163.135:6893 udp
N/A 178.33.163.136:6893 udp
N/A 178.33.163.137:6893 udp
N/A 178.33.163.138:6893 udp
N/A 178.33.163.139:6893 udp
N/A 178.33.163.140:6893 udp
N/A 178.33.163.141:6893 udp
N/A 178.33.163.142:6893 udp
N/A 178.33.163.143:6893 udp
N/A 178.33.163.144:6893 udp
N/A 178.33.163.145:6893 udp
N/A 178.33.163.146:6893 udp
N/A 178.33.163.147:6893 udp
N/A 178.33.163.148:6893 udp
N/A 178.33.163.149:6893 udp
N/A 178.33.163.150:6893 udp
N/A 178.33.163.151:6893 udp
N/A 178.33.163.152:6893 udp
N/A 178.33.163.153:6893 udp
N/A 178.33.163.154:6893 udp
N/A 178.33.163.155:6893 udp
N/A 178.33.163.156:6893 udp
N/A 178.33.163.157:6893 udp
N/A 178.33.163.158:6893 udp
N/A 178.33.163.159:6893 udp
N/A 178.33.163.160:6893 udp
N/A 178.33.163.161:6893 udp
N/A 178.33.163.162:6893 udp
N/A 178.33.163.163:6893 udp
N/A 178.33.163.164:6893 udp
N/A 178.33.163.165:6893 udp
N/A 178.33.163.166:6893 udp
N/A 178.33.163.167:6893 udp
N/A 178.33.163.168:6893 udp
N/A 178.33.163.169:6893 udp
N/A 178.33.163.170:6893 udp
N/A 178.33.163.171:6893 udp
N/A 178.33.163.172:6893 udp
N/A 178.33.163.173:6893 udp
N/A 178.33.163.174:6893 udp
N/A 178.33.163.175:6893 udp
N/A 178.33.163.176:6893 udp
N/A 178.33.163.177:6893 udp
N/A 178.33.163.178:6893 udp
N/A 178.33.163.179:6893 udp
N/A 178.33.163.180:6893 udp
N/A 178.33.163.181:6893 udp
N/A 178.33.163.182:6893 udp
N/A 178.33.163.183:6893 udp
N/A 178.33.163.184:6893 udp
N/A 178.33.163.185:6893 udp
N/A 178.33.163.186:6893 udp
N/A 178.33.163.187:6893 udp
N/A 178.33.163.188:6893 udp
N/A 178.33.163.189:6893 udp
N/A 178.33.163.190:6893 udp
N/A 178.33.163.191:6893 udp
N/A 178.33.163.192:6893 udp
N/A 178.33.163.193:6893 udp
N/A 178.33.163.194:6893 udp
N/A 178.33.163.195:6893 udp
N/A 178.33.163.196:6893 udp
N/A 178.33.163.197:6893 udp
N/A 178.33.163.198:6893 udp
N/A 178.33.163.199:6893 udp
N/A 178.33.163.200:6893 udp
N/A 178.33.163.201:6893 udp
N/A 178.33.163.202:6893 udp
N/A 178.33.163.203:6893 udp
N/A 178.33.163.204:6893 udp
N/A 178.33.163.205:6893 udp
N/A 178.33.163.206:6893 udp
N/A 178.33.163.207:6893 udp
N/A 178.33.163.208:6893 udp
N/A 178.33.163.209:6893 udp
N/A 178.33.163.210:6893 udp
N/A 178.33.163.211:6893 udp
N/A 178.33.163.212:6893 udp
N/A 178.33.163.213:6893 udp
N/A 178.33.163.214:6893 udp
N/A 178.33.163.215:6893 udp
N/A 178.33.163.216:6893 udp
N/A 178.33.163.217:6893 udp
N/A 178.33.163.218:6893 udp
N/A 178.33.163.219:6893 udp
N/A 178.33.163.220:6893 udp
N/A 178.33.163.221:6893 udp
N/A 178.33.163.222:6893 udp
N/A 178.33.163.223:6893 udp
N/A 178.33.163.224:6893 udp
N/A 178.33.163.225:6893 udp
N/A 178.33.163.226:6893 udp
N/A 178.33.163.227:6893 udp
N/A 178.33.163.228:6893 udp
N/A 178.33.163.229:6893 udp
N/A 178.33.163.230:6893 udp
N/A 178.33.163.231:6893 udp
N/A 178.33.163.232:6893 udp
N/A 178.33.163.233:6893 udp
N/A 178.33.163.234:6893 udp
N/A 178.33.163.235:6893 udp
N/A 178.33.163.236:6893 udp
N/A 178.33.163.237:6893 udp
N/A 178.33.163.238:6893 udp
N/A 178.33.163.239:6893 udp
N/A 178.33.163.240:6893 udp
N/A 178.33.163.241:6893 udp
N/A 178.33.163.242:6893 udp
N/A 178.33.163.243:6893 udp
N/A 178.33.163.244:6893 udp
N/A 178.33.163.245:6893 udp
N/A 178.33.163.246:6893 udp
N/A 178.33.163.247:6893 udp
N/A 178.33.163.248:6893 udp
N/A 178.33.163.249:6893 udp
N/A 178.33.163.250:6893 udp
N/A 178.33.163.251:6893 udp
N/A 178.33.163.252:6893 udp
N/A 178.33.163.253:6893 udp
N/A 178.33.163.254:6893 udp
N/A 178.33.163.255:6893 udp
N/A 8.8.8.8:53 api.blockcypher.com udp
N/A 172.67.2.88:80 api.blockcypher.com tcp
N/A 8.8.8.8:53 btc.blockr.io udp
N/A 8.8.8.8:53 bitaps.com udp
N/A 178.128.255.179:443 bitaps.com tcp
N/A 8.8.8.8:53 www.download.windowsupdate.com udp
N/A 8.8.8.8:53 chain.so udp
N/A 172.67.157.138:443 chain.so tcp
N/A 8.8.8.8:53 crl.verisign.com udp

Files

memory/1680-0-0x0000000000000000-mapping.dmp

memory/1092-1-0x0000000000000000-mapping.dmp

memory/616-2-0x0000000000000000-mapping.dmp

memory/828-3-0x0000000000000000-mapping.dmp

memory/1164-5-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___8LK9UHZ_.txt

MD5 6adb949414b457350c597a2cddd5f78d
SHA1 1121733a16103674ada9bbbd674cae4d1b82d65f
SHA256 51559339ed294f79ed68397263641e1993b0a62a5cc8f4bd3c6aaa07edf1d0bb
SHA512 5c335ea0ef560d94d4734693224b56458e757626b5219a023b599613d4c39d56622856e8ed71fd77bb5e0b96c976eb3ae565868374ca79268818dac41a34fea5

memory/1452-6-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___XYW0_.hta

MD5 1c5fc08cebe622c875c30f264c208ad4
SHA1 2a3eebdc21ad0fafbae18cab0986c7735bc8b273
SHA256 a4f6236f5ae9c1740a13def420157c2e10eefc97bbfbbf06d3e4a8fb8aa60afa
SHA512 c1f21145d00ebf788d27c142899078c879f6ba35578fb6d165c3fa1a2a299ebf6d9375996c0041af661a642714e49cd23d2dde343c89dba5dda1064e55c3524d

memory/1064-8-0x0000000000000000-mapping.dmp

memory/112-9-0x000007FEF6270000-0x000007FEF64EA000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2020-11-12 14:29

Reported

2020-11-12 15:53

Platform

win10v20201028

Max time kernel

110s

Max time network

149s

Command Line

"C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe"

Signatures

Cerber

ransomware cerber

Modifies Windows Firewall

evasion

Drops startup file

Description Indicator Process Target
File opened for modification \??\c:\users\admin\appdata\roaming\microsoft\word\startup\ C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\documents C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\desktop C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-1985363256-3005190890-1182679451-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\tmpD7D7.bmp" C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\desktop C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\desktop C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\documents C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\documents C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1985363256-3005190890-1182679451-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\NOTEPAD.EXE N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1628 wrote to memory of 692 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\netsh.exe
PID 1628 wrote to memory of 692 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\netsh.exe
PID 1628 wrote to memory of 692 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\netsh.exe
PID 1628 wrote to memory of 4040 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\netsh.exe
PID 1628 wrote to memory of 4040 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\netsh.exe
PID 1628 wrote to memory of 4040 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\netsh.exe
PID 1628 wrote to memory of 2052 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\mshta.exe
PID 1628 wrote to memory of 2052 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\mshta.exe
PID 1628 wrote to memory of 2052 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\mshta.exe
PID 1628 wrote to memory of 1816 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1628 wrote to memory of 1816 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1628 wrote to memory of 1816 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1628 wrote to memory of 3176 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\cmd.exe
PID 1628 wrote to memory of 3176 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\cmd.exe
PID 1628 wrote to memory of 3176 N/A C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe C:\Windows\SysWOW64\cmd.exe
PID 3176 wrote to memory of 3784 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3176 wrote to memory of 3784 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3176 wrote to memory of 3784 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3176 wrote to memory of 2208 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 3176 wrote to memory of 2208 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 3176 wrote to memory of 2208 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe

"C:\Users\Admin\AppData\Local\Temp\1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe"

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall set allprofiles state on

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall reset

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___WMRPU_.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}

C:\Windows\SysWOW64\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___SEPN2W_.txt

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "1255ae363438f2b5cd225c2f1863bb27d337fa247d4f49328ac1d0ad3592a665.exe"

C:\Windows\SysWOW64\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
N/A 178.33.158.0:6893 udp
N/A 178.33.158.1:6893 udp
N/A 178.33.158.2:6893 udp
N/A 178.33.158.3:6893 udp
N/A 178.33.158.4:6893 udp
N/A 178.33.158.5:6893 udp
N/A 178.33.158.6:6893 udp
N/A 178.33.158.7:6893 udp
N/A 178.33.158.8:6893 udp
N/A 178.33.158.9:6893 udp
N/A 178.33.158.10:6893 udp
N/A 178.33.158.11:6893 udp
N/A 178.33.158.12:6893 udp
N/A 178.33.158.13:6893 udp
N/A 178.33.158.14:6893 udp
N/A 178.33.158.15:6893 udp
N/A 178.33.158.16:6893 udp
N/A 178.33.158.17:6893 udp
N/A 178.33.158.18:6893 udp
N/A 178.33.158.19:6893 udp
N/A 178.33.158.20:6893 udp
N/A 178.33.158.21:6893 udp
N/A 178.33.158.22:6893 udp
N/A 178.33.158.23:6893 udp
N/A 178.33.158.24:6893 udp
N/A 178.33.158.25:6893 udp
N/A 178.33.158.26:6893 udp
N/A 178.33.158.27:6893 udp
N/A 178.33.158.28:6893 udp
N/A 178.33.158.29:6893 udp
N/A 178.33.158.30:6893 udp
N/A 178.33.158.31:6893 udp
N/A 178.33.159.0:6893 udp
N/A 178.33.159.1:6893 udp
N/A 178.33.159.2:6893 udp
N/A 178.33.159.3:6893 udp
N/A 178.33.159.4:6893 udp
N/A 178.33.159.5:6893 udp
N/A 178.33.159.6:6893 udp
N/A 178.33.159.7:6893 udp
N/A 178.33.159.8:6893 udp
N/A 178.33.159.9:6893 udp
N/A 178.33.159.10:6893 udp
N/A 178.33.159.11:6893 udp
N/A 178.33.159.12:6893 udp
N/A 178.33.159.13:6893 udp
N/A 178.33.159.14:6893 udp
N/A 178.33.159.15:6893 udp
N/A 178.33.159.16:6893 udp
N/A 178.33.159.17:6893 udp
N/A 178.33.159.18:6893 udp
N/A 178.33.159.19:6893 udp
N/A 178.33.159.20:6893 udp
N/A 178.33.159.21:6893 udp
N/A 178.33.159.22:6893 udp
N/A 178.33.159.23:6893 udp
N/A 178.33.159.24:6893 udp
N/A 178.33.159.25:6893 udp
N/A 178.33.159.26:6893 udp
N/A 178.33.159.27:6893 udp
N/A 178.33.159.28:6893 udp
N/A 178.33.159.29:6893 udp
N/A 178.33.159.30:6893 udp
N/A 178.33.159.31:6893 udp
N/A 178.33.160.0:6893 udp
N/A 178.33.160.1:6893 udp
N/A 178.33.160.2:6893 udp
N/A 178.33.160.3:6893 udp
N/A 178.33.160.4:6893 udp
N/A 178.33.160.5:6893 udp
N/A 178.33.160.6:6893 udp
N/A 178.33.160.7:6893 udp
N/A 178.33.160.8:6893 udp
N/A 178.33.160.9:6893 udp
N/A 178.33.160.10:6893 udp
N/A 178.33.160.11:6893 udp
N/A 178.33.160.12:6893 udp
N/A 178.33.160.13:6893 udp
N/A 178.33.160.14:6893 udp
N/A 178.33.160.15:6893 udp
N/A 178.33.160.16:6893 udp
N/A 178.33.160.17:6893 udp
N/A 178.33.160.18:6893 udp
N/A 178.33.160.19:6893 udp
N/A 178.33.160.20:6893 udp
N/A 178.33.160.21:6893 udp
N/A 178.33.160.22:6893 udp
N/A 178.33.160.23:6893 udp
N/A 178.33.160.24:6893 udp
N/A 178.33.160.25:6893 udp
N/A 178.33.160.26:6893 udp
N/A 178.33.160.27:6893 udp
N/A 178.33.160.28:6893 udp
N/A 178.33.160.29:6893 udp
N/A 178.33.160.30:6893 udp
N/A 178.33.160.31:6893 udp
N/A 178.33.160.32:6893 udp
N/A 178.33.160.33:6893 udp
N/A 178.33.160.34:6893 udp
N/A 178.33.160.35:6893 udp
N/A 178.33.160.36:6893 udp
N/A 178.33.160.37:6893 udp
N/A 178.33.160.38:6893 udp
N/A 178.33.160.39:6893 udp
N/A 178.33.160.40:6893 udp
N/A 178.33.160.41:6893 udp
N/A 178.33.160.42:6893 udp
N/A 178.33.160.43:6893 udp
N/A 178.33.160.44:6893 udp
N/A 178.33.160.45:6893 udp
N/A 178.33.160.46:6893 udp
N/A 178.33.160.47:6893 udp
N/A 178.33.160.48:6893 udp
N/A 178.33.160.49:6893 udp
N/A 178.33.160.50:6893 udp
N/A 178.33.160.51:6893 udp
N/A 178.33.160.52:6893 udp
N/A 178.33.160.53:6893 udp
N/A 178.33.160.54:6893 udp
N/A 178.33.160.55:6893 udp
N/A 178.33.160.56:6893 udp
N/A 178.33.160.57:6893 udp
N/A 178.33.160.58:6893 udp
N/A 178.33.160.59:6893 udp
N/A 178.33.160.60:6893 udp
N/A 178.33.160.61:6893 udp
N/A 178.33.160.62:6893 udp
N/A 178.33.160.63:6893 udp
N/A 178.33.160.64:6893 udp
N/A 178.33.160.65:6893 udp
N/A 178.33.160.66:6893 udp
N/A 178.33.160.67:6893 udp
N/A 178.33.160.68:6893 udp
N/A 178.33.160.69:6893 udp
N/A 178.33.160.70:6893 udp
N/A 178.33.160.71:6893 udp
N/A 178.33.160.72:6893 udp
N/A 178.33.160.73:6893 udp
N/A 178.33.160.74:6893 udp
N/A 178.33.160.75:6893 udp
N/A 178.33.160.76:6893 udp
N/A 178.33.160.77:6893 udp
N/A 178.33.160.78:6893 udp
N/A 178.33.160.79:6893 udp
N/A 178.33.160.80:6893 udp
N/A 178.33.160.81:6893 udp
N/A 178.33.160.82:6893 udp
N/A 178.33.160.83:6893 udp
N/A 178.33.160.84:6893 udp
N/A 178.33.160.85:6893 udp
N/A 178.33.160.86:6893 udp
N/A 178.33.160.87:6893 udp
N/A 178.33.160.88:6893 udp
N/A 178.33.160.89:6893 udp
N/A 178.33.160.90:6893 udp
N/A 178.33.160.91:6893 udp
N/A 178.33.160.92:6893 udp
N/A 178.33.160.93:6893 udp
N/A 178.33.160.94:6893 udp
N/A 178.33.160.95:6893 udp
N/A 178.33.160.96:6893 udp
N/A 178.33.160.97:6893 udp
N/A 178.33.160.98:6893 udp
N/A 178.33.160.99:6893 udp
N/A 178.33.160.100:6893 udp
N/A 178.33.160.101:6893 udp
N/A 178.33.160.102:6893 udp
N/A 178.33.160.103:6893 udp
N/A 178.33.160.104:6893 udp
N/A 178.33.160.105:6893 udp
N/A 178.33.160.106:6893 udp
N/A 178.33.160.107:6893 udp
N/A 178.33.160.108:6893 udp
N/A 178.33.160.109:6893 udp
N/A 178.33.160.110:6893 udp
N/A 178.33.160.111:6893 udp
N/A 178.33.160.112:6893 udp
N/A 178.33.160.113:6893 udp
N/A 178.33.160.114:6893 udp
N/A 178.33.160.115:6893 udp
N/A 178.33.160.116:6893 udp
N/A 178.33.160.117:6893 udp
N/A 178.33.160.118:6893 udp
N/A 178.33.160.119:6893 udp
N/A 178.33.160.120:6893 udp
N/A 178.33.160.121:6893 udp
N/A 178.33.160.122:6893 udp
N/A 178.33.160.123:6893 udp
N/A 178.33.160.124:6893 udp
N/A 178.33.160.125:6893 udp
N/A 178.33.160.126:6893 udp
N/A 178.33.160.127:6893 udp
N/A 178.33.160.128:6893 udp
N/A 178.33.160.129:6893 udp
N/A 178.33.160.130:6893 udp
N/A 178.33.160.131:6893 udp
N/A 178.33.160.132:6893 udp
N/A 178.33.160.133:6893 udp
N/A 178.33.160.134:6893 udp
N/A 178.33.160.135:6893 udp
N/A 178.33.160.136:6893 udp
N/A 178.33.160.137:6893 udp
N/A 178.33.160.138:6893 udp
N/A 178.33.160.139:6893 udp
N/A 178.33.160.140:6893 udp
N/A 178.33.160.141:6893 udp
N/A 178.33.160.142:6893 udp
N/A 178.33.160.143:6893 udp
N/A 178.33.160.144:6893 udp
N/A 178.33.160.145:6893 udp
N/A 178.33.160.146:6893 udp
N/A 178.33.160.147:6893 udp
N/A 178.33.160.148:6893 udp
N/A 178.33.160.149:6893 udp
N/A 178.33.160.150:6893 udp
N/A 178.33.160.151:6893 udp
N/A 178.33.160.152:6893 udp
N/A 178.33.160.153:6893 udp
N/A 178.33.160.154:6893 udp
N/A 178.33.160.155:6893 udp
N/A 178.33.160.156:6893 udp
N/A 178.33.160.157:6893 udp
N/A 178.33.160.158:6893 udp
N/A 178.33.160.159:6893 udp
N/A 178.33.160.160:6893 udp
N/A 178.33.160.161:6893 udp
N/A 178.33.160.162:6893 udp
N/A 178.33.160.163:6893 udp
N/A 178.33.160.164:6893 udp
N/A 178.33.160.165:6893 udp
N/A 178.33.160.166:6893 udp
N/A 178.33.160.167:6893 udp
N/A 178.33.160.168:6893 udp
N/A 178.33.160.169:6893 udp
N/A 178.33.160.170:6893 udp
N/A 178.33.160.171:6893 udp
N/A 178.33.160.172:6893 udp
N/A 178.33.160.173:6893 udp
N/A 178.33.160.174:6893 udp
N/A 178.33.160.175:6893 udp
N/A 178.33.160.176:6893 udp
N/A 178.33.160.177:6893 udp
N/A 178.33.160.178:6893 udp
N/A 178.33.160.179:6893 udp
N/A 178.33.160.180:6893 udp
N/A 178.33.160.181:6893 udp
N/A 178.33.160.182:6893 udp
N/A 178.33.160.183:6893 udp
N/A 178.33.160.184:6893 udp
N/A 178.33.160.185:6893 udp
N/A 178.33.160.186:6893 udp
N/A 178.33.160.187:6893 udp
N/A 178.33.160.188:6893 udp
N/A 178.33.160.189:6893 udp
N/A 178.33.160.190:6893 udp
N/A 178.33.160.191:6893 udp
N/A 178.33.160.192:6893 udp
N/A 178.33.160.193:6893 udp
N/A 178.33.160.194:6893 udp
N/A 178.33.160.195:6893 udp
N/A 178.33.160.196:6893 udp
N/A 178.33.160.197:6893 udp
N/A 178.33.160.198:6893 udp
N/A 178.33.160.199:6893 udp
N/A 178.33.160.200:6893 udp
N/A 178.33.160.201:6893 udp
N/A 178.33.160.202:6893 udp
N/A 178.33.160.203:6893 udp
N/A 178.33.160.204:6893 udp
N/A 178.33.160.205:6893 udp
N/A 178.33.160.206:6893 udp
N/A 178.33.160.207:6893 udp
N/A 178.33.160.208:6893 udp
N/A 178.33.160.209:6893 udp
N/A 178.33.160.210:6893 udp
N/A 178.33.160.211:6893 udp
N/A 178.33.160.212:6893 udp
N/A 178.33.160.213:6893 udp
N/A 178.33.160.214:6893 udp
N/A 178.33.160.215:6893 udp
N/A 178.33.160.216:6893 udp
N/A 178.33.160.217:6893 udp
N/A 178.33.160.218:6893 udp
N/A 178.33.160.219:6893 udp
N/A 178.33.160.220:6893 udp
N/A 178.33.160.221:6893 udp
N/A 178.33.160.222:6893 udp
N/A 178.33.160.223:6893 udp
N/A 178.33.160.224:6893 udp
N/A 178.33.160.225:6893 udp
N/A 178.33.160.226:6893 udp
N/A 178.33.160.227:6893 udp
N/A 178.33.160.228:6893 udp
N/A 178.33.160.229:6893 udp
N/A 178.33.160.230:6893 udp
N/A 178.33.160.231:6893 udp
N/A 178.33.160.232:6893 udp
N/A 178.33.160.233:6893 udp
N/A 178.33.160.234:6893 udp
N/A 178.33.160.235:6893 udp
N/A 178.33.160.236:6893 udp
N/A 178.33.160.237:6893 udp
N/A 178.33.160.238:6893 udp
N/A 178.33.160.239:6893 udp
N/A 178.33.160.240:6893 udp
N/A 178.33.160.241:6893 udp
N/A 178.33.160.242:6893 udp
N/A 178.33.160.243:6893 udp
N/A 178.33.160.244:6893 udp
N/A 178.33.160.245:6893 udp
N/A 178.33.160.246:6893 udp
N/A 178.33.160.247:6893 udp
N/A 178.33.160.248:6893 udp
N/A 178.33.160.249:6893 udp
N/A 178.33.160.250:6893 udp
N/A 178.33.160.251:6893 udp
N/A 178.33.160.252:6893 udp
N/A 178.33.160.253:6893 udp
N/A 178.33.160.254:6893 udp
N/A 178.33.160.255:6893 udp
N/A 178.33.161.0:6893 udp
N/A 178.33.161.1:6893 udp
N/A 178.33.161.2:6893 udp
N/A 178.33.161.3:6893 udp
N/A 178.33.161.4:6893 udp
N/A 178.33.161.5:6893 udp
N/A 178.33.161.6:6893 udp
N/A 178.33.161.7:6893 udp
N/A 178.33.161.8:6893 udp
N/A 178.33.161.9:6893 udp
N/A 178.33.161.10:6893 udp
N/A 178.33.161.11:6893 udp
N/A 178.33.161.12:6893 udp
N/A 178.33.161.13:6893 udp
N/A 178.33.161.14:6893 udp
N/A 178.33.161.15:6893 udp
N/A 178.33.161.16:6893 udp
N/A 178.33.161.17:6893 udp
N/A 178.33.161.18:6893 udp
N/A 178.33.161.19:6893 udp
N/A 178.33.161.20:6893 udp
N/A 178.33.161.21:6893 udp
N/A 178.33.161.22:6893 udp
N/A 178.33.161.23:6893 udp
N/A 178.33.161.24:6893 udp
N/A 178.33.161.25:6893 udp
N/A 178.33.161.26:6893 udp
N/A 178.33.161.27:6893 udp
N/A 178.33.161.28:6893 udp
N/A 178.33.161.29:6893 udp
N/A 178.33.161.30:6893 udp
N/A 178.33.161.31:6893 udp
N/A 178.33.161.32:6893 udp
N/A 178.33.161.33:6893 udp
N/A 178.33.161.34:6893 udp
N/A 178.33.161.35:6893 udp
N/A 178.33.161.36:6893 udp
N/A 178.33.161.37:6893 udp
N/A 178.33.161.38:6893 udp
N/A 178.33.161.39:6893 udp
N/A 178.33.161.40:6893 udp
N/A 178.33.161.41:6893 udp
N/A 178.33.161.42:6893 udp
N/A 178.33.161.43:6893 udp
N/A 178.33.161.44:6893 udp
N/A 178.33.161.45:6893 udp
N/A 178.33.161.46:6893 udp
N/A 178.33.161.47:6893 udp
N/A 178.33.161.48:6893 udp
N/A 178.33.161.49:6893 udp
N/A 178.33.161.50:6893 udp
N/A 178.33.161.51:6893 udp
N/A 178.33.161.52:6893 udp
N/A 178.33.161.53:6893 udp
N/A 178.33.161.54:6893 udp
N/A 178.33.161.55:6893 udp
N/A 178.33.161.56:6893 udp
N/A 178.33.161.57:6893 udp
N/A 178.33.161.58:6893 udp
N/A 178.33.161.59:6893 udp
N/A 178.33.161.60:6893 udp
N/A 178.33.161.61:6893 udp
N/A 178.33.161.62:6893 udp
N/A 178.33.161.63:6893 udp
N/A 178.33.161.64:6893 udp
N/A 178.33.161.65:6893 udp
N/A 178.33.161.66:6893 udp
N/A 178.33.161.67:6893 udp
N/A 178.33.161.68:6893 udp
N/A 178.33.161.69:6893 udp
N/A 178.33.161.70:6893 udp
N/A 178.33.161.71:6893 udp
N/A 178.33.161.72:6893 udp
N/A 178.33.161.73:6893 udp
N/A 178.33.161.74:6893 udp
N/A 178.33.161.75:6893 udp
N/A 178.33.161.76:6893 udp
N/A 178.33.161.77:6893 udp
N/A 178.33.161.78:6893 udp
N/A 178.33.161.79:6893 udp
N/A 178.33.161.80:6893 udp
N/A 178.33.161.81:6893 udp
N/A 178.33.161.82:6893 udp
N/A 178.33.161.83:6893 udp
N/A 178.33.161.84:6893 udp
N/A 178.33.161.85:6893 udp
N/A 178.33.161.86:6893 udp
N/A 178.33.161.87:6893 udp
N/A 178.33.161.88:6893 udp
N/A 178.33.161.89:6893 udp
N/A 178.33.161.90:6893 udp
N/A 178.33.161.91:6893 udp
N/A 178.33.161.92:6893 udp
N/A 178.33.161.93:6893 udp
N/A 178.33.161.94:6893 udp
N/A 178.33.161.95:6893 udp
N/A 178.33.161.96:6893 udp
N/A 178.33.161.97:6893 udp
N/A 178.33.161.98:6893 udp
N/A 178.33.161.99:6893 udp
N/A 178.33.161.100:6893 udp
N/A 178.33.161.101:6893 udp
N/A 178.33.161.102:6893 udp
N/A 178.33.161.103:6893 udp
N/A 178.33.161.104:6893 udp
N/A 178.33.161.105:6893 udp
N/A 178.33.161.106:6893 udp
N/A 178.33.161.107:6893 udp
N/A 178.33.161.108:6893 udp
N/A 178.33.161.109:6893 udp
N/A 178.33.161.110:6893 udp
N/A 178.33.161.111:6893 udp
N/A 178.33.161.112:6893 udp
N/A 178.33.161.113:6893 udp
N/A 178.33.161.114:6893 udp
N/A 178.33.161.115:6893 udp
N/A 178.33.161.116:6893 udp
N/A 178.33.161.117:6893 udp
N/A 178.33.161.118:6893 udp
N/A 178.33.161.119:6893 udp
N/A 178.33.161.120:6893 udp
N/A 178.33.161.121:6893 udp
N/A 178.33.161.122:6893 udp
N/A 178.33.161.123:6893 udp
N/A 178.33.161.124:6893 udp
N/A 178.33.161.125:6893 udp
N/A 178.33.161.126:6893 udp
N/A 178.33.161.127:6893 udp
N/A 178.33.161.128:6893 udp
N/A 178.33.161.129:6893 udp
N/A 178.33.161.130:6893 udp
N/A 178.33.161.131:6893 udp
N/A 178.33.161.132:6893 udp
N/A 178.33.161.133:6893 udp
N/A 178.33.161.134:6893 udp
N/A 178.33.161.135:6893 udp
N/A 178.33.161.136:6893 udp
N/A 178.33.161.137:6893 udp
N/A 178.33.161.138:6893 udp
N/A 178.33.161.139:6893 udp
N/A 178.33.161.140:6893 udp
N/A 178.33.161.141:6893 udp
N/A 178.33.161.142:6893 udp
N/A 178.33.161.143:6893 udp
N/A 178.33.161.144:6893 udp
N/A 178.33.161.145:6893 udp
N/A 178.33.161.146:6893 udp
N/A 178.33.161.147:6893 udp
N/A 178.33.161.148:6893 udp
N/A 178.33.161.149:6893 udp
N/A 178.33.161.150:6893 udp
N/A 178.33.161.151:6893 udp
N/A 178.33.161.152:6893 udp
N/A 178.33.161.153:6893 udp
N/A 178.33.161.154:6893 udp
N/A 178.33.161.155:6893 udp
N/A 178.33.161.156:6893 udp
N/A 178.33.161.157:6893 udp
N/A 178.33.161.158:6893 udp
N/A 178.33.161.159:6893 udp
N/A 178.33.161.160:6893 udp
N/A 178.33.161.161:6893 udp
N/A 178.33.161.162:6893 udp
N/A 178.33.161.163:6893 udp
N/A 178.33.161.164:6893 udp
N/A 178.33.161.165:6893 udp
N/A 178.33.161.166:6893 udp
N/A 178.33.161.167:6893 udp
N/A 178.33.161.168:6893 udp
N/A 178.33.161.169:6893 udp
N/A 178.33.161.170:6893 udp
N/A 178.33.161.171:6893 udp
N/A 178.33.161.172:6893 udp
N/A 178.33.161.173:6893 udp
N/A 178.33.161.174:6893 udp
N/A 178.33.161.175:6893 udp
N/A 178.33.161.176:6893 udp
N/A 178.33.161.177:6893 udp
N/A 178.33.161.178:6893 udp
N/A 178.33.161.179:6893 udp
N/A 178.33.161.180:6893 udp
N/A 178.33.161.181:6893 udp
N/A 178.33.161.182:6893 udp
N/A 178.33.161.183:6893 udp
N/A 178.33.161.184:6893 udp
N/A 178.33.161.185:6893 udp
N/A 178.33.161.186:6893 udp
N/A 178.33.161.187:6893 udp
N/A 178.33.161.188:6893 udp
N/A 178.33.161.189:6893 udp
N/A 178.33.161.190:6893 udp
N/A 178.33.161.191:6893 udp
N/A 178.33.161.192:6893 udp
N/A 178.33.161.193:6893 udp
N/A 178.33.161.194:6893 udp
N/A 178.33.161.195:6893 udp
N/A 178.33.161.196:6893 udp
N/A 178.33.161.197:6893 udp
N/A 178.33.161.198:6893 udp
N/A 178.33.161.199:6893 udp
N/A 178.33.161.200:6893 udp
N/A 178.33.161.201:6893 udp
N/A 178.33.161.202:6893 udp
N/A 178.33.161.203:6893 udp
N/A 178.33.161.204:6893 udp
N/A 178.33.161.205:6893 udp
N/A 178.33.161.206:6893 udp
N/A 178.33.161.207:6893 udp
N/A 178.33.161.208:6893 udp
N/A 178.33.161.209:6893 udp
N/A 178.33.161.210:6893 udp
N/A 178.33.161.211:6893 udp
N/A 178.33.161.212:6893 udp
N/A 178.33.161.213:6893 udp
N/A 178.33.161.214:6893 udp
N/A 178.33.161.215:6893 udp
N/A 178.33.161.216:6893 udp
N/A 178.33.161.217:6893 udp
N/A 178.33.161.218:6893 udp
N/A 178.33.161.219:6893 udp
N/A 178.33.161.220:6893 udp
N/A 178.33.161.221:6893 udp
N/A 178.33.161.222:6893 udp
N/A 178.33.161.223:6893 udp
N/A 178.33.161.224:6893 udp
N/A 178.33.161.225:6893 udp
N/A 178.33.161.226:6893 udp
N/A 178.33.161.227:6893 udp
N/A 178.33.161.228:6893 udp
N/A 178.33.161.229:6893 udp
N/A 178.33.161.230:6893 udp
N/A 178.33.161.231:6893 udp
N/A 178.33.161.232:6893 udp
N/A 178.33.161.233:6893 udp
N/A 178.33.161.234:6893 udp
N/A 178.33.161.235:6893 udp
N/A 178.33.161.236:6893 udp
N/A 178.33.161.237:6893 udp
N/A 178.33.161.238:6893 udp
N/A 178.33.161.239:6893 udp
N/A 178.33.161.240:6893 udp
N/A 178.33.161.241:6893 udp
N/A 178.33.161.242:6893 udp
N/A 178.33.161.243:6893 udp
N/A 178.33.161.244:6893 udp
N/A 178.33.161.245:6893 udp
N/A 178.33.161.246:6893 udp
N/A 178.33.161.247:6893 udp
N/A 178.33.161.248:6893 udp
N/A 178.33.161.249:6893 udp
N/A 178.33.161.250:6893 udp
N/A 178.33.161.251:6893 udp
N/A 178.33.161.252:6893 udp
N/A 178.33.161.253:6893 udp
N/A 178.33.161.254:6893 udp
N/A 178.33.161.255:6893 udp
N/A 178.33.162.0:6893 udp
N/A 178.33.162.1:6893 udp
N/A 178.33.162.2:6893 udp
N/A 178.33.162.3:6893 udp
N/A 178.33.162.4:6893 udp
N/A 178.33.162.5:6893 udp
N/A 178.33.162.6:6893 udp
N/A 178.33.162.7:6893 udp
N/A 178.33.162.8:6893 udp
N/A 178.33.162.9:6893 udp
N/A 178.33.162.10:6893 udp
N/A 178.33.162.11:6893 udp
N/A 178.33.162.12:6893 udp
N/A 178.33.162.13:6893 udp
N/A 178.33.162.14:6893 udp
N/A 178.33.162.15:6893 udp
N/A 178.33.162.16:6893 udp
N/A 178.33.162.17:6893 udp
N/A 178.33.162.18:6893 udp
N/A 178.33.162.19:6893 udp
N/A 178.33.162.20:6893 udp
N/A 178.33.162.21:6893 udp
N/A 178.33.162.22:6893 udp
N/A 178.33.162.23:6893 udp
N/A 178.33.162.24:6893 udp
N/A 178.33.162.25:6893 udp
N/A 178.33.162.26:6893 udp
N/A 178.33.162.27:6893 udp
N/A 178.33.162.28:6893 udp
N/A 178.33.162.29:6893 udp
N/A 178.33.162.30:6893 udp
N/A 178.33.162.31:6893 udp
N/A 178.33.162.32:6893 udp
N/A 178.33.162.33:6893 udp
N/A 178.33.162.34:6893 udp
N/A 178.33.162.35:6893 udp
N/A 178.33.162.36:6893 udp
N/A 178.33.162.37:6893 udp
N/A 178.33.162.38:6893 udp
N/A 178.33.162.39:6893 udp
N/A 178.33.162.40:6893 udp
N/A 178.33.162.41:6893 udp
N/A 178.33.162.42:6893 udp
N/A 178.33.162.43:6893 udp
N/A 178.33.162.44:6893 udp
N/A 178.33.162.45:6893 udp
N/A 178.33.162.46:6893 udp
N/A 178.33.162.47:6893 udp
N/A 178.33.162.48:6893 udp
N/A 178.33.162.49:6893 udp
N/A 178.33.162.50:6893 udp
N/A 178.33.162.51:6893 udp
N/A 178.33.162.52:6893 udp
N/A 178.33.162.53:6893 udp
N/A 178.33.162.54:6893 udp
N/A 178.33.162.55:6893 udp
N/A 178.33.162.56:6893 udp
N/A 178.33.162.57:6893 udp
N/A 178.33.162.58:6893 udp
N/A 178.33.162.59:6893 udp
N/A 178.33.162.60:6893 udp
N/A 178.33.162.61:6893 udp
N/A 178.33.162.62:6893 udp
N/A 178.33.162.63:6893 udp
N/A 178.33.162.64:6893 udp
N/A 178.33.162.65:6893 udp
N/A 178.33.162.66:6893 udp
N/A 178.33.162.67:6893 udp
N/A 178.33.162.68:6893 udp
N/A 178.33.162.69:6893 udp
N/A 178.33.162.70:6893 udp
N/A 178.33.162.71:6893 udp
N/A 178.33.162.72:6893 udp
N/A 178.33.162.73:6893 udp
N/A 178.33.162.74:6893 udp
N/A 178.33.162.75:6893 udp
N/A 178.33.162.76:6893 udp
N/A 178.33.162.77:6893 udp
N/A 178.33.162.78:6893 udp
N/A 178.33.162.79:6893 udp
N/A 178.33.162.80:6893 udp
N/A 178.33.162.81:6893 udp
N/A 178.33.162.82:6893 udp
N/A 178.33.162.83:6893 udp
N/A 178.33.162.84:6893 udp
N/A 178.33.162.85:6893 udp
N/A 178.33.162.86:6893 udp
N/A 178.33.162.87:6893 udp
N/A 178.33.162.88:6893 udp
N/A 178.33.162.89:6893 udp
N/A 178.33.162.90:6893 udp
N/A 178.33.162.91:6893 udp
N/A 178.33.162.92:6893 udp
N/A 178.33.162.93:6893 udp
N/A 178.33.162.94:6893 udp
N/A 178.33.162.95:6893 udp
N/A 178.33.162.96:6893 udp
N/A 178.33.162.97:6893 udp
N/A 178.33.162.98:6893 udp
N/A 178.33.162.99:6893 udp
N/A 178.33.162.100:6893 udp
N/A 178.33.162.101:6893 udp
N/A 178.33.162.102:6893 udp
N/A 178.33.162.103:6893 udp
N/A 178.33.162.104:6893 udp
N/A 178.33.162.105:6893 udp
N/A 178.33.162.106:6893 udp
N/A 178.33.162.107:6893 udp
N/A 178.33.162.108:6893 udp
N/A 178.33.162.109:6893 udp
N/A 178.33.162.110:6893 udp
N/A 178.33.162.111:6893 udp
N/A 178.33.162.112:6893 udp
N/A 178.33.162.113:6893 udp
N/A 178.33.162.114:6893 udp
N/A 178.33.162.115:6893 udp
N/A 178.33.162.116:6893 udp
N/A 178.33.162.117:6893 udp
N/A 178.33.162.118:6893 udp
N/A 178.33.162.119:6893 udp
N/A 178.33.162.120:6893 udp
N/A 178.33.162.121:6893 udp
N/A 178.33.162.122:6893 udp
N/A 178.33.162.123:6893 udp
N/A 178.33.162.124:6893 udp
N/A 178.33.162.125:6893 udp
N/A 178.33.162.126:6893 udp
N/A 178.33.162.127:6893 udp
N/A 178.33.162.128:6893 udp
N/A 178.33.162.129:6893 udp
N/A 178.33.162.130:6893 udp
N/A 178.33.162.131:6893 udp
N/A 178.33.162.132:6893 udp
N/A 178.33.162.133:6893 udp
N/A 178.33.162.134:6893 udp
N/A 178.33.162.135:6893 udp
N/A 178.33.162.136:6893 udp
N/A 178.33.162.137:6893 udp
N/A 178.33.162.138:6893 udp
N/A 178.33.162.139:6893 udp
N/A 178.33.162.140:6893 udp
N/A 178.33.162.141:6893 udp
N/A 178.33.162.142:6893 udp
N/A 178.33.162.143:6893 udp
N/A 178.33.162.144:6893 udp
N/A 178.33.162.145:6893 udp
N/A 178.33.162.146:6893 udp
N/A 178.33.162.147:6893 udp
N/A 178.33.162.148:6893 udp
N/A 178.33.162.149:6893 udp
N/A 178.33.162.150:6893 udp
N/A 178.33.162.151:6893 udp
N/A 178.33.162.152:6893 udp
N/A 178.33.162.153:6893 udp
N/A 178.33.162.154:6893 udp
N/A 178.33.162.155:6893 udp
N/A 178.33.162.156:6893 udp
N/A 178.33.162.157:6893 udp
N/A 178.33.162.158:6893 udp
N/A 178.33.162.159:6893 udp
N/A 178.33.162.160:6893 udp
N/A 178.33.162.161:6893 udp
N/A 178.33.162.162:6893 udp
N/A 178.33.162.163:6893 udp
N/A 178.33.162.164:6893 udp
N/A 178.33.162.165:6893 udp
N/A 178.33.162.166:6893 udp
N/A 178.33.162.167:6893 udp
N/A 178.33.162.168:6893 udp
N/A 178.33.162.169:6893 udp
N/A 178.33.162.170:6893 udp
N/A 178.33.162.171:6893 udp
N/A 178.33.162.172:6893 udp
N/A 178.33.162.173:6893 udp
N/A 178.33.162.174:6893 udp
N/A 178.33.162.175:6893 udp
N/A 178.33.162.176:6893 udp
N/A 178.33.162.177:6893 udp
N/A 178.33.162.178:6893 udp
N/A 178.33.162.179:6893 udp
N/A 178.33.162.180:6893 udp
N/A 178.33.162.181:6893 udp
N/A 178.33.162.182:6893 udp
N/A 178.33.162.183:6893 udp
N/A 178.33.162.184:6893 udp
N/A 178.33.162.185:6893 udp
N/A 178.33.162.186:6893 udp
N/A 178.33.162.187:6893 udp
N/A 178.33.162.188:6893 udp
N/A 178.33.162.189:6893 udp
N/A 178.33.162.190:6893 udp
N/A 178.33.162.191:6893 udp
N/A 178.33.162.192:6893 udp
N/A 178.33.162.193:6893 udp
N/A 178.33.162.194:6893 udp
N/A 178.33.162.195:6893 udp
N/A 178.33.162.196:6893 udp
N/A 178.33.162.197:6893 udp
N/A 178.33.162.198:6893 udp
N/A 178.33.162.199:6893 udp
N/A 178.33.162.200:6893 udp
N/A 178.33.162.201:6893 udp
N/A 178.33.162.202:6893 udp
N/A 178.33.162.203:6893 udp
N/A 178.33.162.204:6893 udp
N/A 178.33.162.205:6893 udp
N/A 178.33.162.206:6893 udp
N/A 178.33.162.207:6893 udp
N/A 178.33.162.208:6893 udp
N/A 178.33.162.209:6893 udp
N/A 178.33.162.210:6893 udp
N/A 178.33.162.211:6893 udp
N/A 178.33.162.212:6893 udp
N/A 178.33.162.213:6893 udp
N/A 178.33.162.214:6893 udp
N/A 178.33.162.215:6893 udp
N/A 178.33.162.216:6893 udp
N/A 178.33.162.217:6893 udp
N/A 178.33.162.218:6893 udp
N/A 178.33.162.219:6893 udp
N/A 178.33.162.220:6893 udp
N/A 178.33.162.221:6893 udp
N/A 178.33.162.222:6893 udp
N/A 178.33.162.223:6893 udp
N/A 178.33.162.224:6893 udp
N/A 178.33.162.225:6893 udp
N/A 178.33.162.226:6893 udp
N/A 178.33.162.227:6893 udp
N/A 178.33.162.228:6893 udp
N/A 178.33.162.229:6893 udp
N/A 178.33.162.230:6893 udp
N/A 178.33.162.231:6893 udp
N/A 178.33.162.232:6893 udp
N/A 178.33.162.233:6893 udp
N/A 178.33.162.234:6893 udp
N/A 178.33.162.235:6893 udp
N/A 178.33.162.236:6893 udp
N/A 178.33.162.237:6893 udp
N/A 178.33.162.238:6893 udp
N/A 178.33.162.239:6893 udp
N/A 178.33.162.240:6893 udp
N/A 178.33.162.241:6893 udp
N/A 178.33.162.242:6893 udp
N/A 178.33.162.243:6893 udp
N/A 178.33.162.244:6893 udp
N/A 178.33.162.245:6893 udp
N/A 178.33.162.246:6893 udp
N/A 178.33.162.247:6893 udp
N/A 178.33.162.248:6893 udp
N/A 178.33.162.249:6893 udp
N/A 178.33.162.250:6893 udp
N/A 178.33.162.251:6893 udp
N/A 178.33.162.252:6893 udp
N/A 178.33.162.253:6893 udp
N/A 178.33.162.254:6893 udp
N/A 178.33.162.255:6893 udp
N/A 178.33.163.0:6893 udp
N/A 178.33.163.1:6893 udp
N/A 178.33.163.2:6893 udp
N/A 178.33.163.3:6893 udp
N/A 178.33.163.4:6893 udp
N/A 178.33.163.5:6893 udp
N/A 178.33.163.6:6893 udp
N/A 178.33.163.7:6893 udp
N/A 178.33.163.8:6893 udp
N/A 178.33.163.9:6893 udp
N/A 178.33.163.10:6893 udp
N/A 178.33.163.11:6893 udp
N/A 178.33.163.12:6893 udp
N/A 178.33.163.13:6893 udp
N/A 178.33.163.14:6893 udp
N/A 178.33.163.15:6893 udp
N/A 178.33.163.16:6893 udp
N/A 178.33.163.17:6893 udp
N/A 178.33.163.18:6893 udp
N/A 178.33.163.19:6893 udp
N/A 178.33.163.20:6893 udp
N/A 178.33.163.21:6893 udp
N/A 178.33.163.22:6893 udp
N/A 178.33.163.23:6893 udp
N/A 178.33.163.24:6893 udp
N/A 178.33.163.25:6893 udp
N/A 178.33.163.26:6893 udp
N/A 178.33.163.27:6893 udp
N/A 178.33.163.28:6893 udp
N/A 178.33.163.29:6893 udp
N/A 178.33.163.30:6893 udp
N/A 178.33.163.31:6893 udp
N/A 178.33.163.32:6893 udp
N/A 178.33.163.33:6893 udp
N/A 178.33.163.34:6893 udp
N/A 178.33.163.35:6893 udp
N/A 178.33.163.36:6893 udp
N/A 178.33.163.37:6893 udp
N/A 178.33.163.38:6893 udp
N/A 178.33.163.39:6893 udp
N/A 178.33.163.40:6893 udp
N/A 178.33.163.41:6893 udp
N/A 178.33.163.42:6893 udp
N/A 178.33.163.43:6893 udp
N/A 178.33.163.44:6893 udp
N/A 178.33.163.45:6893 udp
N/A 178.33.163.46:6893 udp
N/A 178.33.163.47:6893 udp
N/A 178.33.163.48:6893 udp
N/A 178.33.163.49:6893 udp
N/A 178.33.163.50:6893 udp
N/A 178.33.163.51:6893 udp
N/A 178.33.163.52:6893 udp
N/A 178.33.163.53:6893 udp
N/A 178.33.163.54:6893 udp
N/A 178.33.163.55:6893 udp
N/A 178.33.163.56:6893 udp
N/A 178.33.163.57:6893 udp
N/A 178.33.163.58:6893 udp
N/A 178.33.163.59:6893 udp
N/A 178.33.163.60:6893 udp
N/A 178.33.163.61:6893 udp
N/A 178.33.163.62:6893 udp
N/A 178.33.163.63:6893 udp
N/A 178.33.163.64:6893 udp
N/A 178.33.163.65:6893 udp
N/A 178.33.163.66:6893 udp
N/A 178.33.163.67:6893 udp
N/A 178.33.163.68:6893 udp
N/A 178.33.163.69:6893 udp
N/A 178.33.163.70:6893 udp
N/A 178.33.163.71:6893 udp
N/A 178.33.163.72:6893 udp
N/A 178.33.163.73:6893 udp
N/A 178.33.163.74:6893 udp
N/A 178.33.163.75:6893 udp
N/A 178.33.163.76:6893 udp
N/A 178.33.163.77:6893 udp
N/A 178.33.163.78:6893 udp
N/A 178.33.163.79:6893 udp
N/A 178.33.163.80:6893 udp
N/A 178.33.163.81:6893 udp
N/A 178.33.163.82:6893 udp
N/A 178.33.163.83:6893 udp
N/A 178.33.163.84:6893 udp
N/A 178.33.163.85:6893 udp
N/A 178.33.163.86:6893 udp
N/A 178.33.163.87:6893 udp
N/A 178.33.163.88:6893 udp
N/A 178.33.163.89:6893 udp
N/A 178.33.163.90:6893 udp
N/A 178.33.163.91:6893 udp
N/A 178.33.163.92:6893 udp
N/A 178.33.163.93:6893 udp
N/A 178.33.163.94:6893 udp
N/A 178.33.163.95:6893 udp
N/A 178.33.163.96:6893 udp
N/A 178.33.163.97:6893 udp
N/A 178.33.163.98:6893 udp
N/A 178.33.163.99:6893 udp
N/A 178.33.163.100:6893 udp
N/A 178.33.163.101:6893 udp
N/A 178.33.163.102:6893 udp
N/A 178.33.163.103:6893 udp
N/A 178.33.163.104:6893 udp
N/A 178.33.163.105:6893 udp
N/A 178.33.163.106:6893 udp
N/A 178.33.163.107:6893 udp
N/A 178.33.163.108:6893 udp
N/A 178.33.163.109:6893 udp
N/A 178.33.163.110:6893 udp
N/A 178.33.163.111:6893 udp
N/A 178.33.163.112:6893 udp
N/A 178.33.163.113:6893 udp
N/A 178.33.163.114:6893 udp
N/A 178.33.163.115:6893 udp
N/A 178.33.163.116:6893 udp
N/A 178.33.163.117:6893 udp
N/A 178.33.163.118:6893 udp
N/A 178.33.163.119:6893 udp
N/A 178.33.163.120:6893 udp
N/A 178.33.163.121:6893 udp
N/A 178.33.163.122:6893 udp
N/A 178.33.163.123:6893 udp
N/A 178.33.163.124:6893 udp
N/A 178.33.163.125:6893 udp
N/A 178.33.163.126:6893 udp
N/A 178.33.163.127:6893 udp
N/A 178.33.163.128:6893 udp
N/A 178.33.163.129:6893 udp
N/A 178.33.163.130:6893 udp
N/A 178.33.163.131:6893 udp
N/A 178.33.163.132:6893 udp
N/A 178.33.163.133:6893 udp
N/A 178.33.163.134:6893 udp
N/A 178.33.163.135:6893 udp
N/A 178.33.163.136:6893 udp
N/A 178.33.163.137:6893 udp
N/A 178.33.163.138:6893 udp
N/A 178.33.163.139:6893 udp
N/A 178.33.163.140:6893 udp
N/A 178.33.163.141:6893 udp
N/A 178.33.163.142:6893 udp
N/A 178.33.163.143:6893 udp
N/A 178.33.163.144:6893 udp
N/A 178.33.163.145:6893 udp
N/A 178.33.163.146:6893 udp
N/A 178.33.163.147:6893 udp
N/A 178.33.163.148:6893 udp
N/A 178.33.163.149:6893 udp
N/A 178.33.163.150:6893 udp
N/A 178.33.163.151:6893 udp
N/A 178.33.163.152:6893 udp
N/A 178.33.163.153:6893 udp
N/A 178.33.163.154:6893 udp
N/A 178.33.163.155:6893 udp
N/A 178.33.163.156:6893 udp
N/A 178.33.163.157:6893 udp
N/A 178.33.163.158:6893 udp
N/A 178.33.163.159:6893 udp
N/A 178.33.163.160:6893 udp
N/A 178.33.163.161:6893 udp
N/A 178.33.163.162:6893 udp
N/A 178.33.163.163:6893 udp
N/A 178.33.163.164:6893 udp
N/A 178.33.163.165:6893 udp
N/A 178.33.163.166:6893 udp
N/A 178.33.163.167:6893 udp
N/A 178.33.163.168:6893 udp
N/A 178.33.163.169:6893 udp
N/A 178.33.163.170:6893 udp
N/A 178.33.163.171:6893 udp
N/A 178.33.163.172:6893 udp
N/A 178.33.163.173:6893 udp
N/A 178.33.163.174:6893 udp
N/A 178.33.163.175:6893 udp
N/A 178.33.163.176:6893 udp
N/A 178.33.163.177:6893 udp
N/A 178.33.163.178:6893 udp
N/A 178.33.163.179:6893 udp
N/A 178.33.163.180:6893 udp
N/A 178.33.163.181:6893 udp
N/A 178.33.163.182:6893 udp
N/A 178.33.163.183:6893 udp
N/A 178.33.163.184:6893 udp
N/A 178.33.163.185:6893 udp
N/A 178.33.163.186:6893 udp
N/A 178.33.163.187:6893 udp
N/A 178.33.163.188:6893 udp
N/A 178.33.163.189:6893 udp
N/A 178.33.163.190:6893 udp
N/A 178.33.163.191:6893 udp
N/A 178.33.163.192:6893 udp
N/A 178.33.163.193:6893 udp
N/A 178.33.163.194:6893 udp
N/A 178.33.163.195:6893 udp
N/A 178.33.163.196:6893 udp
N/A 178.33.163.197:6893 udp
N/A 178.33.163.198:6893 udp
N/A 178.33.163.199:6893 udp
N/A 178.33.163.200:6893 udp
N/A 178.33.163.201:6893 udp
N/A 178.33.163.202:6893 udp
N/A 178.33.163.203:6893 udp
N/A 178.33.163.204:6893 udp
N/A 178.33.163.205:6893 udp
N/A 178.33.163.206:6893 udp
N/A 178.33.163.207:6893 udp
N/A 178.33.163.208:6893 udp
N/A 178.33.163.209:6893 udp
N/A 178.33.163.210:6893 udp
N/A 178.33.163.211:6893 udp
N/A 178.33.163.212:6893 udp
N/A 178.33.163.213:6893 udp
N/A 178.33.163.214:6893 udp
N/A 178.33.163.215:6893 udp
N/A 178.33.163.216:6893 udp
N/A 178.33.163.217:6893 udp
N/A 178.33.163.218:6893 udp
N/A 178.33.163.219:6893 udp
N/A 178.33.163.220:6893 udp
N/A 178.33.163.221:6893 udp
N/A 178.33.163.222:6893 udp
N/A 178.33.163.223:6893 udp
N/A 178.33.163.224:6893 udp
N/A 178.33.163.225:6893 udp
N/A 178.33.163.226:6893 udp
N/A 178.33.163.227:6893 udp
N/A 178.33.163.228:6893 udp
N/A 178.33.163.229:6893 udp
N/A 178.33.163.230:6893 udp
N/A 178.33.163.231:6893 udp
N/A 178.33.163.232:6893 udp
N/A 178.33.163.233:6893 udp
N/A 178.33.163.234:6893 udp
N/A 178.33.163.235:6893 udp
N/A 178.33.163.236:6893 udp
N/A 178.33.163.237:6893 udp
N/A 178.33.163.238:6893 udp
N/A 178.33.163.239:6893 udp
N/A 178.33.163.240:6893 udp
N/A 178.33.163.241:6893 udp
N/A 178.33.163.242:6893 udp
N/A 178.33.163.243:6893 udp
N/A 178.33.163.244:6893 udp
N/A 178.33.163.245:6893 udp
N/A 178.33.163.246:6893 udp
N/A 178.33.163.247:6893 udp
N/A 178.33.163.248:6893 udp
N/A 178.33.163.249:6893 udp
N/A 178.33.163.250:6893 udp
N/A 178.33.163.251:6893 udp
N/A 178.33.163.252:6893 udp
N/A 178.33.163.253:6893 udp
N/A 178.33.163.254:6893 udp
N/A 178.33.163.255:6893 udp
N/A 178.33.158.0:6893 udp
N/A 178.33.158.1:6893 udp
N/A 178.33.158.2:6893 udp
N/A 178.33.158.3:6893 udp
N/A 178.33.158.4:6893 udp
N/A 178.33.158.5:6893 udp
N/A 178.33.158.6:6893 udp
N/A 178.33.158.7:6893 udp
N/A 178.33.158.8:6893 udp
N/A 178.33.158.9:6893 udp
N/A 178.33.158.10:6893 udp
N/A 178.33.158.11:6893 udp
N/A 178.33.158.12:6893 udp
N/A 178.33.158.13:6893 udp
N/A 178.33.158.14:6893 udp
N/A 178.33.158.15:6893 udp
N/A 178.33.158.16:6893 udp
N/A 178.33.158.17:6893 udp
N/A 178.33.158.18:6893 udp
N/A 178.33.158.19:6893 udp
N/A 178.33.158.20:6893 udp
N/A 178.33.158.21:6893 udp
N/A 178.33.158.22:6893 udp
N/A 178.33.158.23:6893 udp
N/A 178.33.158.24:6893 udp
N/A 178.33.158.25:6893 udp
N/A 178.33.158.26:6893 udp
N/A 178.33.158.27:6893 udp
N/A 178.33.158.28:6893 udp
N/A 178.33.158.29:6893 udp
N/A 178.33.158.30:6893 udp
N/A 178.33.158.31:6893 udp
N/A 178.33.159.0:6893 udp
N/A 178.33.159.1:6893 udp
N/A 178.33.159.2:6893 udp
N/A 178.33.159.3:6893 udp
N/A 178.33.159.4:6893 udp
N/A 178.33.159.5:6893 udp
N/A 178.33.159.6:6893 udp
N/A 178.33.159.7:6893 udp
N/A 178.33.159.8:6893 udp
N/A 178.33.159.9:6893 udp
N/A 178.33.159.10:6893 udp
N/A 178.33.159.11:6893 udp
N/A 178.33.159.12:6893 udp
N/A 178.33.159.13:6893 udp
N/A 178.33.159.14:6893 udp
N/A 178.33.159.15:6893 udp
N/A 178.33.159.16:6893 udp
N/A 178.33.159.17:6893 udp
N/A 178.33.159.18:6893 udp
N/A 178.33.159.19:6893 udp
N/A 178.33.159.20:6893 udp
N/A 178.33.159.21:6893 udp
N/A 178.33.159.22:6893 udp
N/A 178.33.159.23:6893 udp
N/A 178.33.159.24:6893 udp
N/A 178.33.159.25:6893 udp
N/A 178.33.159.26:6893 udp
N/A 178.33.159.27:6893 udp
N/A 178.33.159.28:6893 udp
N/A 178.33.159.29:6893 udp
N/A 178.33.159.30:6893 udp
N/A 178.33.159.31:6893 udp
N/A 178.33.160.0:6893 udp
N/A 178.33.160.1:6893 udp
N/A 178.33.160.2:6893 udp
N/A 178.33.160.3:6893 udp
N/A 178.33.160.4:6893 udp
N/A 178.33.160.5:6893 udp
N/A 178.33.160.6:6893 udp
N/A 178.33.160.7:6893 udp
N/A 178.33.160.8:6893 udp
N/A 178.33.160.9:6893 udp
N/A 178.33.160.10:6893 udp
N/A 178.33.160.11:6893 udp
N/A 178.33.160.12:6893 udp
N/A 178.33.160.13:6893 udp
N/A 178.33.160.14:6893 udp
N/A 178.33.160.15:6893 udp
N/A 178.33.160.16:6893 udp
N/A 178.33.160.17:6893 udp
N/A 178.33.160.18:6893 udp
N/A 178.33.160.19:6893 udp
N/A 178.33.160.20:6893 udp
N/A 178.33.160.21:6893 udp
N/A 178.33.160.22:6893 udp
N/A 178.33.160.23:6893 udp
N/A 178.33.160.24:6893 udp
N/A 178.33.160.25:6893 udp
N/A 178.33.160.26:6893 udp
N/A 178.33.160.27:6893 udp
N/A 178.33.160.28:6893 udp
N/A 178.33.160.29:6893 udp
N/A 178.33.160.30:6893 udp
N/A 178.33.160.31:6893 udp
N/A 178.33.160.32:6893 udp
N/A 178.33.160.33:6893 udp
N/A 178.33.160.34:6893 udp
N/A 178.33.160.35:6893 udp
N/A 178.33.160.36:6893 udp
N/A 178.33.160.37:6893 udp
N/A 178.33.160.38:6893 udp
N/A 178.33.160.39:6893 udp
N/A 178.33.160.40:6893 udp
N/A 178.33.160.41:6893 udp
N/A 178.33.160.42:6893 udp
N/A 178.33.160.43:6893 udp
N/A 178.33.160.44:6893 udp
N/A 178.33.160.45:6893 udp
N/A 178.33.160.46:6893 udp
N/A 178.33.160.47:6893 udp
N/A 178.33.160.48:6893 udp
N/A 178.33.160.49:6893 udp
N/A 178.33.160.50:6893 udp
N/A 178.33.160.51:6893 udp
N/A 178.33.160.52:6893 udp
N/A 178.33.160.53:6893 udp
N/A 178.33.160.54:6893 udp
N/A 178.33.160.55:6893 udp
N/A 178.33.160.56:6893 udp
N/A 178.33.160.57:6893 udp
N/A 178.33.160.58:6893 udp
N/A 178.33.160.59:6893 udp
N/A 178.33.160.60:6893 udp
N/A 178.33.160.61:6893 udp
N/A 178.33.160.62:6893 udp
N/A 178.33.160.63:6893 udp
N/A 178.33.160.64:6893 udp
N/A 178.33.160.65:6893 udp
N/A 178.33.160.66:6893 udp
N/A 178.33.160.67:6893 udp
N/A 178.33.160.68:6893 udp
N/A 178.33.160.69:6893 udp
N/A 178.33.160.70:6893 udp
N/A 178.33.160.71:6893 udp
N/A 178.33.160.72:6893 udp
N/A 178.33.160.73:6893 udp
N/A 178.33.160.74:6893 udp
N/A 178.33.160.75:6893 udp
N/A 178.33.160.76:6893 udp
N/A 178.33.160.77:6893 udp
N/A 178.33.160.78:6893 udp
N/A 178.33.160.79:6893 udp
N/A 178.33.160.80:6893 udp
N/A 178.33.160.81:6893 udp
N/A 178.33.160.82:6893 udp
N/A 178.33.160.83:6893 udp
N/A 178.33.160.84:6893 udp
N/A 178.33.160.85:6893 udp
N/A 178.33.160.86:6893 udp
N/A 178.33.160.87:6893 udp
N/A 178.33.160.88:6893 udp
N/A 178.33.160.89:6893 udp
N/A 178.33.160.90:6893 udp
N/A 178.33.160.91:6893 udp
N/A 178.33.160.92:6893 udp
N/A 178.33.160.93:6893 udp
N/A 178.33.160.94:6893 udp
N/A 178.33.160.95:6893 udp
N/A 178.33.160.96:6893 udp
N/A 178.33.160.97:6893 udp
N/A 178.33.160.98:6893 udp
N/A 178.33.160.99:6893 udp
N/A 178.33.160.100:6893 udp
N/A 178.33.160.101:6893 udp
N/A 178.33.160.102:6893 udp
N/A 178.33.160.103:6893 udp
N/A 178.33.160.104:6893 udp
N/A 178.33.160.105:6893 udp
N/A 178.33.160.106:6893 udp
N/A 178.33.160.107:6893 udp
N/A 178.33.160.108:6893 udp
N/A 178.33.160.109:6893 udp
N/A 178.33.160.110:6893 udp
N/A 178.33.160.111:6893 udp
N/A 178.33.160.112:6893 udp
N/A 178.33.160.113:6893 udp
N/A 178.33.160.114:6893 udp
N/A 178.33.160.115:6893 udp
N/A 178.33.160.116:6893 udp
N/A 178.33.160.117:6893 udp
N/A 178.33.160.118:6893 udp
N/A 178.33.160.119:6893 udp
N/A 178.33.160.120:6893 udp
N/A 178.33.160.121:6893 udp
N/A 178.33.160.122:6893 udp
N/A 178.33.160.123:6893 udp
N/A 178.33.160.124:6893 udp
N/A 178.33.160.125:6893 udp
N/A 178.33.160.126:6893 udp
N/A 178.33.160.127:6893 udp
N/A 178.33.160.128:6893 udp
N/A 178.33.160.129:6893 udp
N/A 178.33.160.130:6893 udp
N/A 178.33.160.131:6893 udp
N/A 178.33.160.132:6893 udp
N/A 178.33.160.133:6893 udp
N/A 178.33.160.134:6893 udp
N/A 178.33.160.135:6893 udp
N/A 178.33.160.136:6893 udp
N/A 178.33.160.137:6893 udp
N/A 178.33.160.138:6893 udp
N/A 178.33.160.139:6893 udp
N/A 178.33.160.140:6893 udp
N/A 178.33.160.141:6893 udp
N/A 178.33.160.142:6893 udp
N/A 178.33.160.143:6893 udp
N/A 178.33.160.144:6893 udp
N/A 178.33.160.145:6893 udp
N/A 178.33.160.146:6893 udp
N/A 178.33.160.147:6893 udp
N/A 178.33.160.148:6893 udp
N/A 178.33.160.149:6893 udp
N/A 178.33.160.150:6893 udp
N/A 178.33.160.151:6893 udp
N/A 178.33.160.152:6893 udp
N/A 178.33.160.153:6893 udp
N/A 178.33.160.154:6893 udp
N/A 178.33.160.155:6893 udp
N/A 178.33.160.156:6893 udp
N/A 178.33.160.157:6893 udp
N/A 178.33.160.158:6893 udp
N/A 178.33.160.159:6893 udp
N/A 178.33.160.160:6893 udp
N/A 178.33.160.161:6893 udp
N/A 178.33.160.162:6893 udp
N/A 178.33.160.163:6893 udp
N/A 178.33.160.164:6893 udp
N/A 178.33.160.165:6893 udp
N/A 178.33.160.166:6893 udp
N/A 178.33.160.167:6893 udp
N/A 178.33.160.168:6893 udp
N/A 178.33.160.169:6893 udp
N/A 178.33.160.170:6893 udp
N/A 178.33.160.171:6893 udp
N/A 178.33.160.172:6893 udp
N/A 178.33.160.173:6893 udp
N/A 178.33.160.174:6893 udp
N/A 178.33.160.175:6893 udp
N/A 178.33.160.176:6893 udp
N/A 178.33.160.177:6893 udp
N/A 178.33.160.178:6893 udp
N/A 178.33.160.179:6893 udp
N/A 178.33.160.180:6893 udp
N/A 178.33.160.181:6893 udp
N/A 178.33.160.182:6893 udp
N/A 178.33.160.183:6893 udp
N/A 178.33.160.184:6893 udp
N/A 178.33.160.185:6893 udp
N/A 178.33.160.186:6893 udp
N/A 178.33.160.187:6893 udp
N/A 178.33.160.188:6893 udp
N/A 178.33.160.189:6893 udp
N/A 178.33.160.190:6893 udp
N/A 178.33.160.191:6893 udp
N/A 178.33.160.192:6893 udp
N/A 178.33.160.193:6893 udp
N/A 178.33.160.194:6893 udp
N/A 178.33.160.195:6893 udp
N/A 178.33.160.196:6893 udp
N/A 178.33.160.197:6893 udp
N/A 178.33.160.198:6893 udp
N/A 178.33.160.199:6893 udp
N/A 178.33.160.200:6893 udp
N/A 178.33.160.201:6893 udp
N/A 178.33.160.202:6893 udp
N/A 178.33.160.203:6893 udp
N/A 178.33.160.204:6893 udp
N/A 178.33.160.205:6893 udp
N/A 178.33.160.206:6893 udp
N/A 178.33.160.207:6893 udp
N/A 178.33.160.208:6893 udp
N/A 178.33.160.209:6893 udp
N/A 178.33.160.210:6893 udp
N/A 178.33.160.211:6893 udp
N/A 178.33.160.212:6893 udp
N/A 178.33.160.213:6893 udp
N/A 178.33.160.214:6893 udp
N/A 178.33.160.215:6893 udp
N/A 178.33.160.216:6893 udp
N/A 178.33.160.217:6893 udp
N/A 178.33.160.218:6893 udp
N/A 178.33.160.219:6893 udp
N/A 178.33.160.220:6893 udp
N/A 178.33.160.221:6893 udp
N/A 178.33.160.222:6893 udp
N/A 178.33.160.223:6893 udp
N/A 178.33.160.224:6893 udp
N/A 178.33.160.225:6893 udp
N/A 178.33.160.226:6893 udp
N/A 178.33.160.227:6893 udp
N/A 178.33.160.228:6893 udp
N/A 178.33.160.229:6893 udp
N/A 178.33.160.230:6893 udp
N/A 178.33.160.231:6893 udp
N/A 178.33.160.232:6893 udp
N/A 178.33.160.233:6893 udp
N/A 178.33.160.234:6893 udp
N/A 178.33.160.235:6893 udp
N/A 178.33.160.236:6893 udp
N/A 178.33.160.237:6893 udp
N/A 178.33.160.238:6893 udp
N/A 178.33.160.239:6893 udp
N/A 178.33.160.240:6893 udp
N/A 178.33.160.241:6893 udp
N/A 178.33.160.242:6893 udp
N/A 178.33.160.243:6893 udp
N/A 178.33.160.244:6893 udp
N/A 178.33.160.245:6893 udp
N/A 178.33.160.246:6893 udp
N/A 178.33.160.247:6893 udp
N/A 178.33.160.248:6893 udp
N/A 178.33.160.249:6893 udp
N/A 178.33.160.250:6893 udp
N/A 178.33.160.251:6893 udp
N/A 178.33.160.252:6893 udp
N/A 178.33.160.253:6893 udp
N/A 178.33.160.254:6893 udp
N/A 178.33.160.255:6893 udp
N/A 178.33.161.0:6893 udp
N/A 178.33.161.1:6893 udp
N/A 178.33.161.2:6893 udp
N/A 178.33.161.3:6893 udp
N/A 178.33.161.4:6893 udp
N/A 178.33.161.5:6893 udp
N/A 178.33.161.6:6893 udp
N/A 178.33.161.7:6893 udp
N/A 178.33.161.8:6893 udp
N/A 178.33.161.9:6893 udp
N/A 178.33.161.10:6893 udp
N/A 178.33.161.11:6893 udp
N/A 178.33.161.12:6893 udp
N/A 178.33.161.13:6893 udp
N/A 178.33.161.14:6893 udp
N/A 178.33.161.15:6893 udp
N/A 178.33.161.16:6893 udp
N/A 178.33.161.17:6893 udp
N/A 178.33.161.18:6893 udp
N/A 178.33.161.19:6893 udp
N/A 178.33.161.20:6893 udp
N/A 178.33.161.21:6893 udp
N/A 178.33.161.22:6893 udp
N/A 178.33.161.23:6893 udp
N/A 178.33.161.24:6893 udp
N/A 178.33.161.25:6893 udp
N/A 178.33.161.26:6893 udp
N/A 178.33.161.27:6893 udp
N/A 178.33.161.28:6893 udp
N/A 178.33.161.29:6893 udp
N/A 178.33.161.30:6893 udp
N/A 178.33.161.31:6893 udp
N/A 178.33.161.32:6893 udp
N/A 178.33.161.33:6893 udp
N/A 178.33.161.34:6893 udp
N/A 178.33.161.35:6893 udp
N/A 178.33.161.36:6893 udp
N/A 178.33.161.37:6893 udp
N/A 178.33.161.38:6893 udp
N/A 178.33.161.39:6893 udp
N/A 178.33.161.40:6893 udp
N/A 178.33.161.41:6893 udp
N/A 178.33.161.42:6893 udp
N/A 178.33.161.43:6893 udp
N/A 178.33.161.44:6893 udp
N/A 178.33.161.45:6893 udp
N/A 178.33.161.46:6893 udp
N/A 178.33.161.47:6893 udp
N/A 178.33.161.48:6893 udp
N/A 178.33.161.49:6893 udp
N/A 178.33.161.50:6893 udp
N/A 178.33.161.51:6893 udp
N/A 178.33.161.52:6893 udp
N/A 178.33.161.53:6893 udp
N/A 178.33.161.54:6893 udp
N/A 178.33.161.55:6893 udp
N/A 178.33.161.56:6893 udp
N/A 178.33.161.57:6893 udp
N/A 178.33.161.58:6893 udp
N/A 178.33.161.59:6893 udp
N/A 178.33.161.60:6893 udp
N/A 178.33.161.61:6893 udp
N/A 178.33.161.62:6893 udp
N/A 178.33.161.63:6893 udp
N/A 178.33.161.64:6893 udp
N/A 178.33.161.65:6893 udp
N/A 178.33.161.66:6893 udp
N/A 178.33.161.67:6893 udp
N/A 178.33.161.68:6893 udp
N/A 178.33.161.69:6893 udp
N/A 178.33.161.70:6893 udp
N/A 178.33.161.71:6893 udp
N/A 178.33.161.72:6893 udp
N/A 178.33.161.73:6893 udp
N/A 178.33.161.74:6893 udp
N/A 178.33.161.75:6893 udp
N/A 178.33.161.76:6893 udp
N/A 178.33.161.77:6893 udp
N/A 178.33.161.78:6893 udp
N/A 178.33.161.79:6893 udp
N/A 178.33.161.80:6893 udp
N/A 178.33.161.81:6893 udp
N/A 178.33.161.82:6893 udp
N/A 178.33.161.83:6893 udp
N/A 178.33.161.84:6893 udp
N/A 178.33.161.85:6893 udp
N/A 178.33.161.86:6893 udp
N/A 178.33.161.87:6893 udp
N/A 178.33.161.88:6893 udp
N/A 178.33.161.89:6893 udp
N/A 178.33.161.90:6893 udp
N/A 178.33.161.91:6893 udp
N/A 178.33.161.92:6893 udp
N/A 178.33.161.93:6893 udp
N/A 178.33.161.94:6893 udp
N/A 178.33.161.95:6893 udp
N/A 178.33.161.96:6893 udp
N/A 178.33.161.97:6893 udp
N/A 178.33.161.98:6893 udp
N/A 178.33.161.99:6893 udp
N/A 178.33.161.100:6893 udp
N/A 178.33.161.101:6893 udp
N/A 178.33.161.102:6893 udp
N/A 178.33.161.103:6893 udp
N/A 178.33.161.104:6893 udp
N/A 178.33.161.105:6893 udp
N/A 178.33.161.106:6893 udp
N/A 178.33.161.107:6893 udp
N/A 178.33.161.108:6893 udp
N/A 178.33.161.109:6893 udp
N/A 178.33.161.110:6893 udp
N/A 178.33.161.111:6893 udp
N/A 178.33.161.112:6893 udp
N/A 178.33.161.113:6893 udp
N/A 178.33.161.114:6893 udp
N/A 178.33.161.115:6893 udp
N/A 178.33.161.116:6893 udp
N/A 178.33.161.117:6893 udp
N/A 178.33.161.118:6893 udp
N/A 178.33.161.119:6893 udp
N/A 178.33.161.120:6893 udp
N/A 178.33.161.121:6893 udp
N/A 178.33.161.122:6893 udp
N/A 178.33.161.123:6893 udp
N/A 178.33.161.124:6893 udp
N/A 178.33.161.125:6893 udp
N/A 178.33.161.126:6893 udp
N/A 178.33.161.127:6893 udp
N/A 178.33.161.128:6893 udp
N/A 178.33.161.129:6893 udp
N/A 178.33.161.130:6893 udp
N/A 178.33.161.131:6893 udp
N/A 178.33.161.132:6893 udp
N/A 178.33.161.133:6893 udp
N/A 178.33.161.134:6893 udp
N/A 178.33.161.135:6893 udp
N/A 178.33.161.136:6893 udp
N/A 178.33.161.137:6893 udp
N/A 178.33.161.138:6893 udp
N/A 178.33.161.139:6893 udp
N/A 178.33.161.140:6893 udp
N/A 178.33.161.141:6893 udp
N/A 178.33.161.142:6893 udp
N/A 178.33.161.143:6893 udp
N/A 178.33.161.144:6893 udp
N/A 178.33.161.145:6893 udp
N/A 178.33.161.146:6893 udp
N/A 178.33.161.147:6893 udp
N/A 178.33.161.148:6893 udp
N/A 178.33.161.149:6893 udp
N/A 178.33.161.150:6893 udp
N/A 178.33.161.151:6893 udp
N/A 178.33.161.152:6893 udp
N/A 178.33.161.153:6893 udp
N/A 178.33.161.154:6893 udp
N/A 178.33.161.155:6893 udp
N/A 178.33.161.156:6893 udp
N/A 178.33.161.157:6893 udp
N/A 178.33.161.158:6893 udp
N/A 178.33.161.159:6893 udp
N/A 178.33.161.160:6893 udp
N/A 178.33.161.161:6893 udp
N/A 178.33.161.162:6893 udp
N/A 178.33.161.163:6893 udp
N/A 178.33.161.164:6893 udp
N/A 178.33.161.165:6893 udp
N/A 178.33.161.166:6893 udp
N/A 178.33.161.167:6893 udp
N/A 178.33.161.168:6893 udp
N/A 178.33.161.169:6893 udp
N/A 178.33.161.170:6893 udp
N/A 178.33.161.171:6893 udp
N/A 178.33.161.172:6893 udp
N/A 178.33.161.173:6893 udp
N/A 178.33.161.174:6893 udp
N/A 178.33.161.175:6893 udp
N/A 178.33.161.176:6893 udp
N/A 178.33.161.177:6893 udp
N/A 178.33.161.178:6893 udp
N/A 178.33.161.179:6893 udp
N/A 178.33.161.180:6893 udp
N/A 178.33.161.181:6893 udp
N/A 178.33.161.182:6893 udp
N/A 178.33.161.183:6893 udp
N/A 178.33.161.184:6893 udp
N/A 178.33.161.185:6893 udp
N/A 178.33.161.186:6893 udp
N/A 178.33.161.187:6893 udp
N/A 178.33.161.188:6893 udp
N/A 178.33.161.189:6893 udp
N/A 178.33.161.190:6893 udp
N/A 178.33.161.191:6893 udp
N/A 178.33.161.192:6893 udp
N/A 178.33.161.193:6893 udp
N/A 178.33.161.194:6893 udp
N/A 178.33.161.195:6893 udp
N/A 178.33.161.196:6893 udp
N/A 178.33.161.197:6893 udp
N/A 178.33.161.198:6893 udp
N/A 178.33.161.199:6893 udp
N/A 178.33.161.200:6893 udp
N/A 178.33.161.201:6893 udp
N/A 178.33.161.202:6893 udp
N/A 178.33.161.203:6893 udp
N/A 178.33.161.204:6893 udp
N/A 178.33.161.205:6893 udp
N/A 178.33.161.206:6893 udp
N/A 178.33.161.207:6893 udp
N/A 178.33.161.208:6893 udp
N/A 178.33.161.209:6893 udp
N/A 178.33.161.210:6893 udp
N/A 178.33.161.211:6893 udp
N/A 178.33.161.212:6893 udp
N/A 178.33.161.213:6893 udp
N/A 178.33.161.214:6893 udp
N/A 178.33.161.215:6893 udp
N/A 178.33.161.216:6893 udp
N/A 178.33.161.217:6893 udp
N/A 178.33.161.218:6893 udp
N/A 178.33.161.219:6893 udp
N/A 178.33.161.220:6893 udp
N/A 178.33.161.221:6893 udp
N/A 178.33.161.222:6893 udp
N/A 178.33.161.223:6893 udp
N/A 178.33.161.224:6893 udp
N/A 178.33.161.225:6893 udp
N/A 178.33.161.226:6893 udp
N/A 178.33.161.227:6893 udp
N/A 178.33.161.228:6893 udp
N/A 178.33.161.229:6893 udp
N/A 178.33.161.230:6893 udp
N/A 178.33.161.231:6893 udp
N/A 178.33.161.232:6893 udp
N/A 178.33.161.233:6893 udp
N/A 178.33.161.234:6893 udp
N/A 178.33.161.235:6893 udp
N/A 178.33.161.236:6893 udp
N/A 178.33.161.237:6893 udp
N/A 178.33.161.238:6893 udp
N/A 178.33.161.239:6893 udp
N/A 178.33.161.240:6893 udp
N/A 178.33.161.241:6893 udp
N/A 178.33.161.242:6893 udp
N/A 178.33.161.243:6893 udp
N/A 178.33.161.244:6893 udp
N/A 178.33.161.245:6893 udp
N/A 178.33.161.246:6893 udp
N/A 178.33.161.247:6893 udp
N/A 178.33.161.248:6893 udp
N/A 178.33.161.249:6893 udp
N/A 178.33.161.250:6893 udp
N/A 178.33.161.251:6893 udp
N/A 178.33.161.252:6893 udp
N/A 178.33.161.253:6893 udp
N/A 178.33.161.254:6893 udp
N/A 178.33.161.255:6893 udp
N/A 178.33.162.0:6893 udp
N/A 178.33.162.1:6893 udp
N/A 178.33.162.2:6893 udp
N/A 178.33.162.3:6893 udp
N/A 178.33.162.4:6893 udp
N/A 178.33.162.5:6893 udp
N/A 178.33.162.6:6893 udp
N/A 178.33.162.7:6893 udp
N/A 178.33.162.8:6893 udp
N/A 178.33.162.9:6893 udp
N/A 178.33.162.10:6893 udp
N/A 178.33.162.11:6893 udp
N/A 178.33.162.12:6893 udp
N/A 178.33.162.13:6893 udp
N/A 178.33.162.14:6893 udp
N/A 178.33.162.15:6893 udp
N/A 178.33.162.16:6893 udp
N/A 178.33.162.17:6893 udp
N/A 178.33.162.18:6893 udp
N/A 178.33.162.19:6893 udp
N/A 178.33.162.20:6893 udp
N/A 178.33.162.21:6893 udp
N/A 178.33.162.22:6893 udp
N/A 178.33.162.23:6893 udp
N/A 178.33.162.24:6893 udp
N/A 178.33.162.25:6893 udp
N/A 178.33.162.26:6893 udp
N/A 178.33.162.27:6893 udp
N/A 178.33.162.28:6893 udp
N/A 178.33.162.29:6893 udp
N/A 178.33.162.30:6893 udp
N/A 178.33.162.31:6893 udp
N/A 178.33.162.32:6893 udp
N/A 178.33.162.33:6893 udp
N/A 178.33.162.34:6893 udp
N/A 178.33.162.35:6893 udp
N/A 178.33.162.36:6893 udp
N/A 178.33.162.37:6893 udp
N/A 178.33.162.38:6893 udp
N/A 178.33.162.39:6893 udp
N/A 178.33.162.40:6893 udp
N/A 178.33.162.41:6893 udp
N/A 178.33.162.42:6893 udp
N/A 178.33.162.43:6893 udp
N/A 178.33.162.44:6893 udp
N/A 178.33.162.45:6893 udp
N/A 178.33.162.46:6893 udp
N/A 178.33.162.47:6893 udp
N/A 178.33.162.48:6893 udp
N/A 178.33.162.49:6893 udp
N/A 178.33.162.50:6893 udp
N/A 178.33.162.51:6893 udp
N/A 178.33.162.52:6893 udp
N/A 178.33.162.53:6893 udp
N/A 178.33.162.54:6893 udp
N/A 178.33.162.55:6893 udp
N/A 178.33.162.56:6893 udp
N/A 178.33.162.57:6893 udp
N/A 178.33.162.58:6893 udp
N/A 178.33.162.59:6893 udp
N/A 178.33.162.60:6893 udp
N/A 178.33.162.61:6893 udp
N/A 178.33.162.62:6893 udp
N/A 178.33.162.63:6893 udp
N/A 178.33.162.64:6893 udp
N/A 178.33.162.65:6893 udp
N/A 178.33.162.66:6893 udp
N/A 178.33.162.67:6893 udp
N/A 178.33.162.68:6893 udp
N/A 178.33.162.69:6893 udp
N/A 178.33.162.70:6893 udp
N/A 178.33.162.71:6893 udp
N/A 178.33.162.72:6893 udp
N/A 178.33.162.73:6893 udp
N/A 178.33.162.74:6893 udp
N/A 178.33.162.75:6893 udp
N/A 178.33.162.76:6893 udp
N/A 178.33.162.77:6893 udp
N/A 178.33.162.78:6893 udp
N/A 178.33.162.79:6893 udp
N/A 178.33.162.80:6893 udp
N/A 178.33.162.81:6893 udp
N/A 178.33.162.82:6893 udp
N/A 178.33.162.83:6893 udp
N/A 178.33.162.84:6893 udp
N/A 178.33.162.85:6893 udp
N/A 178.33.162.86:6893 udp
N/A 178.33.162.87:6893 udp
N/A 178.33.162.88:6893 udp
N/A 178.33.162.89:6893 udp
N/A 178.33.162.90:6893 udp
N/A 178.33.162.91:6893 udp
N/A 178.33.162.92:6893 udp
N/A 178.33.162.93:6893 udp
N/A 178.33.162.94:6893 udp
N/A 178.33.162.95:6893 udp
N/A 178.33.162.96:6893 udp
N/A 178.33.162.97:6893 udp
N/A 178.33.162.98:6893 udp
N/A 178.33.162.99:6893 udp
N/A 178.33.162.100:6893 udp
N/A 178.33.162.101:6893 udp
N/A 178.33.162.102:6893 udp
N/A 178.33.162.103:6893 udp
N/A 178.33.162.104:6893 udp
N/A 178.33.162.105:6893 udp
N/A 178.33.162.106:6893 udp
N/A 178.33.162.107:6893 udp
N/A 178.33.162.108:6893 udp
N/A 178.33.162.109:6893 udp
N/A 178.33.162.110:6893 udp
N/A 178.33.162.111:6893 udp
N/A 178.33.162.112:6893 udp
N/A 178.33.162.113:6893 udp
N/A 178.33.162.114:6893 udp
N/A 178.33.162.115:6893 udp
N/A 178.33.162.116:6893 udp
N/A 178.33.162.117:6893 udp
N/A 178.33.162.118:6893 udp
N/A 178.33.162.119:6893 udp
N/A 178.33.162.120:6893 udp
N/A 178.33.162.121:6893 udp
N/A 178.33.162.122:6893 udp
N/A 178.33.162.123:6893 udp
N/A 178.33.162.124:6893 udp
N/A 178.33.162.125:6893 udp
N/A 178.33.162.126:6893 udp
N/A 178.33.162.127:6893 udp
N/A 178.33.162.128:6893 udp
N/A 178.33.162.129:6893 udp
N/A 178.33.162.130:6893 udp
N/A 178.33.162.131:6893 udp
N/A 178.33.162.132:6893 udp
N/A 178.33.162.133:6893 udp
N/A 178.33.162.134:6893 udp
N/A 178.33.162.135:6893 udp
N/A 178.33.162.136:6893 udp
N/A 178.33.162.137:6893 udp
N/A 178.33.162.138:6893 udp
N/A 178.33.162.139:6893 udp
N/A 178.33.162.140:6893 udp
N/A 178.33.162.141:6893 udp
N/A 178.33.162.142:6893 udp
N/A 178.33.162.143:6893 udp
N/A 178.33.162.144:6893 udp
N/A 178.33.162.145:6893 udp
N/A 178.33.162.146:6893 udp
N/A 178.33.162.147:6893 udp
N/A 178.33.162.148:6893 udp
N/A 178.33.162.149:6893 udp
N/A 178.33.162.150:6893 udp
N/A 178.33.162.151:6893 udp
N/A 178.33.162.152:6893 udp
N/A 178.33.162.153:6893 udp
N/A 178.33.162.154:6893 udp
N/A 178.33.162.155:6893 udp
N/A 178.33.162.156:6893 udp
N/A 178.33.162.157:6893 udp
N/A 178.33.162.158:6893 udp
N/A 178.33.162.159:6893 udp
N/A 178.33.162.160:6893 udp
N/A 178.33.162.161:6893 udp
N/A 178.33.162.162:6893 udp
N/A 178.33.162.163:6893 udp
N/A 178.33.162.164:6893 udp
N/A 178.33.162.165:6893 udp
N/A 178.33.162.166:6893 udp
N/A 178.33.162.167:6893 udp
N/A 178.33.162.168:6893 udp
N/A 178.33.162.169:6893 udp
N/A 178.33.162.170:6893 udp
N/A 178.33.162.171:6893 udp
N/A 178.33.162.172:6893 udp
N/A 178.33.162.173:6893 udp
N/A 178.33.162.174:6893 udp
N/A 178.33.162.175:6893 udp
N/A 178.33.162.176:6893 udp
N/A 178.33.162.177:6893 udp
N/A 178.33.162.178:6893 udp
N/A 178.33.162.179:6893 udp
N/A 178.33.162.180:6893 udp
N/A 178.33.162.181:6893 udp
N/A 178.33.162.182:6893 udp
N/A 178.33.162.183:6893 udp
N/A 178.33.162.184:6893 udp
N/A 178.33.162.185:6893 udp
N/A 178.33.162.186:6893 udp
N/A 178.33.162.187:6893 udp
N/A 178.33.162.188:6893 udp
N/A 178.33.162.189:6893 udp
N/A 178.33.162.190:6893 udp
N/A 178.33.162.191:6893 udp
N/A 178.33.162.192:6893 udp
N/A 178.33.162.193:6893 udp
N/A 178.33.162.194:6893 udp
N/A 178.33.162.195:6893 udp
N/A 178.33.162.196:6893 udp
N/A 178.33.162.197:6893 udp
N/A 178.33.162.198:6893 udp
N/A 178.33.162.199:6893 udp
N/A 178.33.162.200:6893 udp
N/A 178.33.162.201:6893 udp
N/A 178.33.162.202:6893 udp
N/A 178.33.162.203:6893 udp
N/A 178.33.162.204:6893 udp
N/A 178.33.162.205:6893 udp
N/A 178.33.162.206:6893 udp
N/A 178.33.162.207:6893 udp
N/A 178.33.162.208:6893 udp
N/A 178.33.162.209:6893 udp
N/A 178.33.162.210:6893 udp
N/A 178.33.162.211:6893 udp
N/A 178.33.162.212:6893 udp
N/A 178.33.162.213:6893 udp
N/A 178.33.162.214:6893 udp
N/A 178.33.162.215:6893 udp
N/A 178.33.162.216:6893 udp
N/A 178.33.162.217:6893 udp
N/A 178.33.162.218:6893 udp
N/A 178.33.162.219:6893 udp
N/A 178.33.162.220:6893 udp
N/A 178.33.162.221:6893 udp
N/A 178.33.162.222:6893 udp
N/A 178.33.162.223:6893 udp
N/A 178.33.162.224:6893 udp
N/A 178.33.162.225:6893 udp
N/A 178.33.162.226:6893 udp
N/A 178.33.162.227:6893 udp
N/A 178.33.162.228:6893 udp
N/A 178.33.162.229:6893 udp
N/A 178.33.162.230:6893 udp
N/A 178.33.162.231:6893 udp
N/A 178.33.162.232:6893 udp
N/A 178.33.162.233:6893 udp
N/A 178.33.162.234:6893 udp
N/A 178.33.162.235:6893 udp
N/A 178.33.162.236:6893 udp
N/A 178.33.162.237:6893 udp
N/A 178.33.162.238:6893 udp
N/A 178.33.162.239:6893 udp
N/A 178.33.162.240:6893 udp
N/A 178.33.162.241:6893 udp
N/A 178.33.162.242:6893 udp
N/A 178.33.162.243:6893 udp
N/A 178.33.162.244:6893 udp
N/A 178.33.162.245:6893 udp
N/A 178.33.162.246:6893 udp
N/A 178.33.162.247:6893 udp
N/A 178.33.162.248:6893 udp
N/A 178.33.162.249:6893 udp
N/A 178.33.162.250:6893 udp
N/A 178.33.162.251:6893 udp
N/A 178.33.162.252:6893 udp
N/A 178.33.162.253:6893 udp
N/A 178.33.162.254:6893 udp
N/A 178.33.162.255:6893 udp
N/A 178.33.163.0:6893 udp
N/A 178.33.163.1:6893 udp
N/A 178.33.163.2:6893 udp
N/A 178.33.163.3:6893 udp
N/A 178.33.163.4:6893 udp
N/A 178.33.163.5:6893 udp
N/A 178.33.163.6:6893 udp
N/A 178.33.163.7:6893 udp
N/A 178.33.163.8:6893 udp
N/A 178.33.163.9:6893 udp
N/A 178.33.163.10:6893 udp
N/A 178.33.163.11:6893 udp
N/A 178.33.163.12:6893 udp
N/A 178.33.163.13:6893 udp
N/A 178.33.163.14:6893 udp
N/A 178.33.163.15:6893 udp
N/A 178.33.163.16:6893 udp
N/A 178.33.163.17:6893 udp
N/A 178.33.163.18:6893 udp
N/A 178.33.163.19:6893 udp
N/A 178.33.163.20:6893 udp
N/A 178.33.163.21:6893 udp
N/A 178.33.163.22:6893 udp
N/A 178.33.163.23:6893 udp
N/A 178.33.163.24:6893 udp
N/A 178.33.163.25:6893 udp
N/A 178.33.163.26:6893 udp
N/A 178.33.163.27:6893 udp
N/A 178.33.163.28:6893 udp
N/A 178.33.163.29:6893 udp
N/A 178.33.163.30:6893 udp
N/A 178.33.163.31:6893 udp
N/A 178.33.163.32:6893 udp
N/A 178.33.163.33:6893 udp
N/A 178.33.163.34:6893 udp
N/A 178.33.163.35:6893 udp
N/A 178.33.163.36:6893 udp
N/A 178.33.163.37:6893 udp
N/A 178.33.163.38:6893 udp
N/A 178.33.163.39:6893 udp
N/A 178.33.163.40:6893 udp
N/A 178.33.163.41:6893 udp
N/A 178.33.163.42:6893 udp
N/A 178.33.163.43:6893 udp
N/A 178.33.163.44:6893 udp
N/A 178.33.163.45:6893 udp
N/A 178.33.163.46:6893 udp
N/A 178.33.163.47:6893 udp
N/A 178.33.163.48:6893 udp
N/A 178.33.163.49:6893 udp
N/A 178.33.163.50:6893 udp
N/A 178.33.163.51:6893 udp
N/A 178.33.163.52:6893 udp
N/A 178.33.163.53:6893 udp
N/A 178.33.163.54:6893 udp
N/A 178.33.163.55:6893 udp
N/A 178.33.163.56:6893 udp
N/A 178.33.163.57:6893 udp
N/A 178.33.163.58:6893 udp
N/A 178.33.163.59:6893 udp
N/A 178.33.163.60:6893 udp
N/A 178.33.163.61:6893 udp
N/A 178.33.163.62:6893 udp
N/A 178.33.163.63:6893 udp
N/A 178.33.163.64:6893 udp
N/A 178.33.163.65:6893 udp
N/A 178.33.163.66:6893 udp
N/A 178.33.163.67:6893 udp
N/A 178.33.163.68:6893 udp
N/A 178.33.163.69:6893 udp
N/A 178.33.163.70:6893 udp
N/A 178.33.163.71:6893 udp
N/A 178.33.163.72:6893 udp
N/A 178.33.163.73:6893 udp
N/A 178.33.163.74:6893 udp
N/A 178.33.163.75:6893 udp
N/A 178.33.163.76:6893 udp
N/A 178.33.163.77:6893 udp
N/A 178.33.163.78:6893 udp
N/A 178.33.163.79:6893 udp
N/A 178.33.163.80:6893 udp
N/A 178.33.163.81:6893 udp
N/A 178.33.163.82:6893 udp
N/A 178.33.163.83:6893 udp
N/A 178.33.163.84:6893 udp
N/A 178.33.163.85:6893 udp
N/A 178.33.163.86:6893 udp
N/A 178.33.163.87:6893 udp
N/A 178.33.163.88:6893 udp
N/A 178.33.163.89:6893 udp
N/A 178.33.163.90:6893 udp
N/A 178.33.163.91:6893 udp
N/A 178.33.163.92:6893 udp
N/A 178.33.163.93:6893 udp
N/A 178.33.163.94:6893 udp
N/A 178.33.163.95:6893 udp
N/A 178.33.163.96:6893 udp
N/A 178.33.163.97:6893 udp
N/A 178.33.163.98:6893 udp
N/A 178.33.163.99:6893 udp
N/A 178.33.163.100:6893 udp
N/A 178.33.163.101:6893 udp
N/A 178.33.163.102:6893 udp
N/A 178.33.163.103:6893 udp
N/A 178.33.163.104:6893 udp
N/A 178.33.163.105:6893 udp
N/A 178.33.163.106:6893 udp
N/A 178.33.163.107:6893 udp
N/A 178.33.163.108:6893 udp
N/A 178.33.163.109:6893 udp
N/A 178.33.163.110:6893 udp
N/A 178.33.163.111:6893 udp
N/A 178.33.163.112:6893 udp
N/A 178.33.163.113:6893 udp
N/A 178.33.163.114:6893 udp
N/A 178.33.163.115:6893 udp
N/A 178.33.163.116:6893 udp
N/A 178.33.163.117:6893 udp
N/A 178.33.163.118:6893 udp
N/A 178.33.163.119:6893 udp
N/A 178.33.163.120:6893 udp
N/A 178.33.163.121:6893 udp
N/A 178.33.163.122:6893 udp
N/A 178.33.163.123:6893 udp
N/A 178.33.163.124:6893 udp
N/A 178.33.163.125:6893 udp
N/A 178.33.163.126:6893 udp
N/A 178.33.163.127:6893 udp
N/A 178.33.163.128:6893 udp
N/A 178.33.163.129:6893 udp
N/A 178.33.163.130:6893 udp
N/A 178.33.163.131:6893 udp
N/A 178.33.163.132:6893 udp
N/A 178.33.163.133:6893 udp
N/A 178.33.163.134:6893 udp
N/A 178.33.163.135:6893 udp
N/A 178.33.163.136:6893 udp
N/A 178.33.163.137:6893 udp
N/A 178.33.163.138:6893 udp
N/A 178.33.163.139:6893 udp
N/A 178.33.163.140:6893 udp
N/A 178.33.163.141:6893 udp
N/A 178.33.163.142:6893 udp
N/A 178.33.163.143:6893 udp
N/A 178.33.163.144:6893 udp
N/A 178.33.163.145:6893 udp
N/A 178.33.163.146:6893 udp
N/A 178.33.163.147:6893 udp
N/A 178.33.163.148:6893 udp
N/A 178.33.163.149:6893 udp
N/A 178.33.163.150:6893 udp
N/A 178.33.163.151:6893 udp
N/A 178.33.163.152:6893 udp
N/A 178.33.163.153:6893 udp
N/A 178.33.163.154:6893 udp
N/A 178.33.163.155:6893 udp
N/A 178.33.163.156:6893 udp
N/A 178.33.163.157:6893 udp
N/A 178.33.163.158:6893 udp
N/A 178.33.163.159:6893 udp
N/A 178.33.163.160:6893 udp
N/A 178.33.163.161:6893 udp
N/A 178.33.163.162:6893 udp
N/A 178.33.163.163:6893 udp
N/A 178.33.163.164:6893 udp
N/A 178.33.163.165:6893 udp
N/A 178.33.163.166:6893 udp
N/A 178.33.163.167:6893 udp
N/A 178.33.163.168:6893 udp
N/A 178.33.163.169:6893 udp
N/A 178.33.163.170:6893 udp
N/A 178.33.163.171:6893 udp
N/A 178.33.163.172:6893 udp
N/A 178.33.163.173:6893 udp
N/A 178.33.163.174:6893 udp
N/A 178.33.163.175:6893 udp
N/A 178.33.163.176:6893 udp
N/A 178.33.163.177:6893 udp
N/A 178.33.163.178:6893 udp
N/A 178.33.163.179:6893 udp
N/A 178.33.163.180:6893 udp
N/A 178.33.163.181:6893 udp
N/A 178.33.163.182:6893 udp
N/A 178.33.163.183:6893 udp
N/A 178.33.163.184:6893 udp
N/A 178.33.163.185:6893 udp
N/A 178.33.163.186:6893 udp
N/A 178.33.163.187:6893 udp
N/A 178.33.163.188:6893 udp
N/A 178.33.163.189:6893 udp
N/A 178.33.163.190:6893 udp
N/A 178.33.163.191:6893 udp
N/A 178.33.163.192:6893 udp
N/A 178.33.163.193:6893 udp
N/A 178.33.163.194:6893 udp
N/A 178.33.163.195:6893 udp
N/A 178.33.163.196:6893 udp
N/A 178.33.163.197:6893 udp
N/A 178.33.163.198:6893 udp
N/A 178.33.163.199:6893 udp
N/A 178.33.163.200:6893 udp
N/A 178.33.163.201:6893 udp
N/A 178.33.163.202:6893 udp
N/A 178.33.163.203:6893 udp
N/A 178.33.163.204:6893 udp
N/A 178.33.163.205:6893 udp
N/A 178.33.163.206:6893 udp
N/A 178.33.163.207:6893 udp
N/A 178.33.163.208:6893 udp
N/A 178.33.163.209:6893 udp
N/A 178.33.163.210:6893 udp
N/A 178.33.163.211:6893 udp
N/A 178.33.163.212:6893 udp
N/A 178.33.163.213:6893 udp
N/A 178.33.163.214:6893 udp
N/A 178.33.163.215:6893 udp
N/A 178.33.163.216:6893 udp
N/A 178.33.163.217:6893 udp
N/A 178.33.163.218:6893 udp
N/A 178.33.163.219:6893 udp
N/A 178.33.163.220:6893 udp
N/A 178.33.163.221:6893 udp
N/A 178.33.163.222:6893 udp
N/A 178.33.163.223:6893 udp
N/A 178.33.163.224:6893 udp
N/A 178.33.163.225:6893 udp
N/A 178.33.163.226:6893 udp
N/A 178.33.163.227:6893 udp
N/A 178.33.163.228:6893 udp
N/A 178.33.163.229:6893 udp
N/A 178.33.163.230:6893 udp
N/A 178.33.163.231:6893 udp
N/A 178.33.163.232:6893 udp
N/A 178.33.163.233:6893 udp
N/A 178.33.163.234:6893 udp
N/A 178.33.163.235:6893 udp
N/A 178.33.163.236:6893 udp
N/A 178.33.163.237:6893 udp
N/A 178.33.163.238:6893 udp
N/A 178.33.163.239:6893 udp
N/A 178.33.163.240:6893 udp
N/A 178.33.163.241:6893 udp
N/A 178.33.163.242:6893 udp
N/A 178.33.163.243:6893 udp
N/A 178.33.163.244:6893 udp
N/A 178.33.163.245:6893 udp
N/A 178.33.163.246:6893 udp
N/A 178.33.163.247:6893 udp
N/A 178.33.163.248:6893 udp
N/A 178.33.163.249:6893 udp
N/A 178.33.163.250:6893 udp
N/A 178.33.163.251:6893 udp
N/A 178.33.163.252:6893 udp
N/A 178.33.163.253:6893 udp
N/A 178.33.163.254:6893 udp
N/A 178.33.163.255:6893 udp
N/A 8.8.8.8:53 api.blockcypher.com udp
N/A 104.20.20.251:80 api.blockcypher.com tcp
N/A 8.8.8.8:53 btc.blockr.io udp
N/A 8.8.8.8:53 bitaps.com udp
N/A 178.128.255.179:443 bitaps.com tcp
N/A 8.8.8.8:53 chain.so udp
N/A 104.24.104.254:443 chain.so tcp
N/A 8.8.8.8:53 chain.so udp
N/A 8.8.8.8:53 crl3.digicert.com udp
N/A 72.21.91.29:80 crl3.digicert.com tcp
N/A 8.8.8.8:53 sochain.com udp
N/A 104.26.15.247:443 sochain.com tcp
N/A 8.8.8.8:53 p27dokhpz2n7nvgr.1j9r76.top udp

Files

memory/692-0-0x0000000000000000-mapping.dmp

memory/4040-1-0x0000000000000000-mapping.dmp

memory/2052-2-0x0000000000000000-mapping.dmp

memory/1816-3-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___SEPN2W_.txt

MD5 82059d68573cb659ab6207ff77f298a3
SHA1 e72f4aa6deb39b73cc5f695f26c4324e7f3b5788
SHA256 01ac29a229725abe3539f69fc7e831fa27394770d005effe2a76e4ea072c5be1
SHA512 b88d120c85dce4272db58be632f95a11386d517f20ad9c623f7237786ab09892ea48157d3108d458044ec92a00b54df5768c25328be993b7e80de3d4c9710a6e

C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___WMRPU_.hta

MD5 ffd652adc31bf5d94613e9174a208f68
SHA1 17adcfec678d3611a2d87975c99429868048c2ce
SHA256 96627eb68e82b962b88bfe9bf98c38b7dfa872943f8837b33ac887a1093b4fbc
SHA512 b25012b045282254e7f5d0041d568d753eb49cb094a05441e7ca984f0cfa2ae69193a1ac5bad646c5ca7256cf6102b68a5f0fb5c47bad731b9a163d23d8849a8

memory/3176-6-0x0000000000000000-mapping.dmp

memory/3784-7-0x0000000000000000-mapping.dmp

memory/2208-8-0x0000000000000000-mapping.dmp