Malware Analysis Report

2025-01-02 15:08

Sample ID 201113-9m63ylarf2
Target 18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4
SHA256 18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4
Tags
cerber evasion persistence ransomware
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V6

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4

Threat Level: Known bad

The file 18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4 was found to be: Known bad.

Malicious Activity Summary

cerber evasion persistence ransomware

Cerber

Modifies Windows Firewall

Blacklisted process makes network request

Deletes itself

Drops startup file

Drops file in System32 directory

Modifies service

Drops file in Windows directory

Drops file in Program Files directory

Suspicious use of AdjustPrivilegeToken

Modifies registry class

Suspicious use of WriteProcessMemory

Suspicious use of UnmapMainImage

Modifies Internet Explorer settings

Runs ping.exe

Modifies system certificate store

Kills process with taskkill

Opens file in notepad (likely ransom note)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2020-11-13 15:53

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2020-11-13 15:53

Reported

2020-11-13 18:49

Platform

win7v20201028

Max time kernel

123s

Max time network

143s

Command Line

"C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe"

Signatures

Cerber

ransomware cerber

Blacklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

Modifies Windows Firewall

evasion

Deletes itself

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\cmd.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\documents C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\desktop C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A

Modifies service

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Shas C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Qecs C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\UI C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Shas C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\UI C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\LocalConfig C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\Enroll\HcsGroups C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\LocalConfig C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\napagent\LocalConfig\Enroll\HcsGroups C:\Windows\SysWOW64\netsh.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\NapAgent\Qecs C:\Windows\SysWOW64\netsh.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\desktop C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\desktop C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\documents C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\documents C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3825035466-2522850611-591511364-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SysWOW64\mshta.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Windows\SysWOW64\mshta.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 190000000100000010000000a823b4a20180beb460cab955c24d7e21030000000100000014000000b1bc968bd4f49d622aa89a81f2150152a41d829c1d00000001000000100000006ee7f3b060d10e90a31ba3471b999236140000000100000014000000607b661a450d97ca89502f7d04cd34a8fffcfd4b0b000000010000001600000047006c006f00620061006c005300690067006e0000005300000001000000230000003021301f06092b06010401a032010130123010060a2b0601040182373c0101030200c0090000000100000068000000306606082b0601050507030106082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030806082b06010505070309060a2b0601040182370a030406082b0601050507030606082b0601050507030706082b060105050802020f00000001000000140000005a6d07b6371d966a2fb6ba92828ce5512a49513d200000000100000079030000308203753082025da003020102020b040000000001154b5ac394300d06092a864886f70d01010505003057310b300906035504061302424531193017060355040a1310476c6f62616c5369676e206e762d73613110300e060355040b1307526f6f74204341311b301906035504031312476c6f62616c5369676e20526f6f74204341301e170d3938303930313132303030305a170d3238303132383132303030305a3057310b300906035504061302424531193017060355040a1310476c6f62616c5369676e206e762d73613110300e060355040b1307526f6f74204341311b301906035504031312476c6f62616c5369676e20526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100da0ee6998dcea3e34f8a7efbf18b83256bea481ff12ab0b9951104bdf063d1e26766cf1cddcf1b482bee8d898e9aaf298065abe9c72d12cbab1c4c7007a13d0a30cd158d4ff8ddd48c50151cef50eec42ef7fce952f2917de06dd535308e5e4373f241e9d56ae3b2893a5639386f063c88695b2a4dc5a754b86c89cc9bf93ccae5fd89f5123c927896d6dc746e934461d18dc746b2750e86e8198ad56d6cd5781695a2e9c80a38ebf224134f73549313853a1bbc1e34b58b058cb9778bb1db1f2091ab09536e90ce7b3774b97047912251631679aeb1ae412608c8192bd146aa48d6642ad78334ff2c2ac16c19434a0785e7d37cf62168efeaf2529f7f9390cf0203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e04160414607b661a450d97ca89502f7d04cd34a8fffcfd4b300d06092a864886f70d01010505000382010100d673e77c4f76d08dbfecbaa2be34c52832b57cfc6c9c2c2bbd099e53bf6b5eaa1148b6e508a3b3ca3d614dd34609b33ec3a0e363551bf2baefad39e143b938a3e62f8a263befa05056f9c60afd38cdc40b705194979804dfc35f94d515c914419cc45d7564150dff5530ec868fff0def2cb96346f6aafcdfbc69fd2e1248649ae095f0a6ef298f01b115b50c1da5fe692c6924781eb3a71c7162eecac897ac175d8ac2f847866e2ac4563195d06789852bf96ca65d469d0caa82e49951dd70b7db563d61e46ae15cd6f6fe3dde41cc07ae6352bf5353f42be9c7fdb6f7825f85d24118db81b3041cc51fa4806f1520c9de0c880a1dd66655e2fc48c9292669e0 C:\Windows\SysWOW64\mshta.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C C:\Windows\SysWOW64\mshta.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\NOTEPAD.EXE N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A

Suspicious use of UnmapMainImage

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 484 wrote to memory of 2000 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\netsh.exe
PID 484 wrote to memory of 2000 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\netsh.exe
PID 484 wrote to memory of 2000 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\netsh.exe
PID 484 wrote to memory of 2000 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\netsh.exe
PID 484 wrote to memory of 1804 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\netsh.exe
PID 484 wrote to memory of 1804 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\netsh.exe
PID 484 wrote to memory of 1804 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\netsh.exe
PID 484 wrote to memory of 1804 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\netsh.exe
PID 484 wrote to memory of 916 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\mshta.exe
PID 484 wrote to memory of 916 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\mshta.exe
PID 484 wrote to memory of 916 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\mshta.exe
PID 484 wrote to memory of 916 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\mshta.exe
PID 484 wrote to memory of 844 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 484 wrote to memory of 844 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 484 wrote to memory of 844 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 484 wrote to memory of 844 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 484 wrote to memory of 1104 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\cmd.exe
PID 484 wrote to memory of 1104 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\cmd.exe
PID 484 wrote to memory of 1104 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\cmd.exe
PID 484 wrote to memory of 1104 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\cmd.exe
PID 1104 wrote to memory of 1792 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1104 wrote to memory of 1792 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1104 wrote to memory of 1792 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1104 wrote to memory of 1792 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1104 wrote to memory of 2004 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1104 wrote to memory of 2004 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1104 wrote to memory of 2004 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 1104 wrote to memory of 2004 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe

"C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe"

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall set allprofiles state on

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall reset

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_READ_THIS_FILE_OZ0I0BNL_.hta"

C:\Windows\SysWOW64\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\_READ_THIS_FILE_A5GJ_.txt

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe"

C:\Windows\SysWOW64\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 8.8.8.8:53 api.blockcypher.com udp
N/A 104.20.20.251:80 api.blockcypher.com tcp
N/A 8.8.8.8:53 btc.blockr.io udp
N/A 8.8.8.8:53 bitaps.com udp
N/A 178.128.255.179:443 bitaps.com tcp
N/A 8.8.8.8:53 www.download.windowsupdate.com udp
N/A 8.8.8.8:53 chain.so udp
N/A 172.67.157.138:443 chain.so tcp
N/A 8.8.8.8:53 crl.verisign.com udp

Files

memory/2000-0-0x0000000000000000-mapping.dmp

memory/1804-1-0x0000000000000000-mapping.dmp

memory/916-2-0x0000000000000000-mapping.dmp

memory/844-3-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_READ_THIS_FILE_A5GJ_.txt

MD5 5a8cc86dc9e2e709df68608a9ab088e7
SHA1 60fc618f093059408b48a558d30e2444b94b7893
SHA256 fcd98da9bd590ee728462ab862d79e3a841af3f8bc8ed0f4d4ad11aba5b56457
SHA512 569342a94138cd42e462191126114a9f6504fce658ef9b735e8e5b8fd89f892b74145d08b5febf4fb66aa4c1c88b8c0b3b162edfcc99cb0df4de01325a2dc6b2

C:\Users\Admin\Desktop\_READ_THIS_FILE_OZ0I0BNL_.hta

MD5 eb894295e61ca464cfc34ef030ee6f5a
SHA1 25e0a5bd3614bf4c3ab492e688f93c1be3f9755d
SHA256 5cba90534da372cd333b1fb161eec485fc8cd8d7b28a367c74db800a931e64dc
SHA512 124070fecbd3e8355fec3142db8deff6ffccee8187599bfd0f3fdb9ac6b51f496fc7258b793c1e7b64541a364f7768216b0e9d1789d146aa3044a3adf1fdd4e6

memory/112-6-0x000007FEF63D0000-0x000007FEF664A000-memory.dmp

memory/1104-15-0x0000000000000000-mapping.dmp

memory/1792-16-0x0000000000000000-mapping.dmp

memory/2004-17-0x0000000000000000-mapping.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2020-11-13 15:53

Reported

2020-11-13 18:49

Platform

win10v20201028

Max time kernel

110s

Max time network

116s

Command Line

"C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe"

Signatures

Cerber

ransomware cerber

Blacklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

Modifies Windows Firewall

evasion

Drops startup file

Description Indicator Process Target
File opened for modification \??\c:\users\admin\appdata\roaming\microsoft\word\startup\ C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\desktop C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\documents C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\documents C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\desktop C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\desktop C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\documents C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1985363256-3005190890-1182679451-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\NOTEPAD.EXE N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\PING.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1056 wrote to memory of 616 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\netsh.exe
PID 1056 wrote to memory of 616 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\netsh.exe
PID 1056 wrote to memory of 616 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\netsh.exe
PID 1056 wrote to memory of 2596 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\netsh.exe
PID 1056 wrote to memory of 2596 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\netsh.exe
PID 1056 wrote to memory of 2596 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\netsh.exe
PID 1056 wrote to memory of 808 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\mshta.exe
PID 1056 wrote to memory of 808 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\mshta.exe
PID 1056 wrote to memory of 808 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\mshta.exe
PID 1056 wrote to memory of 3960 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1056 wrote to memory of 3960 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1056 wrote to memory of 3960 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\NOTEPAD.EXE
PID 1056 wrote to memory of 3776 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\cmd.exe
PID 1056 wrote to memory of 3776 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\cmd.exe
PID 1056 wrote to memory of 3776 N/A C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe C:\Windows\SysWOW64\cmd.exe
PID 3776 wrote to memory of 2708 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3776 wrote to memory of 2708 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3776 wrote to memory of 2708 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3776 wrote to memory of 2552 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 3776 wrote to memory of 2552 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE
PID 3776 wrote to memory of 2552 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe

"C:\Users\Admin\AppData\Local\Temp\18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe"

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall set allprofiles state on

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall reset

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_READ_THIS_FILE_2WUFA011_.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}

C:\Windows\SysWOW64\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\_READ_THIS_FILE_2LPHT7K_.txt

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im "18fa8f54d2df6708c2c66ed4e3b1e465e1d7464ede7e2d76bde18bf8f620c3e4.exe"

C:\Windows\SysWOW64\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 94.21.172.0:6893 udp
N/A 94.21.172.1:6893 udp
N/A 94.21.172.2:6893 udp
N/A 94.21.172.3:6893 udp
N/A 94.21.172.4:6893 udp
N/A 94.21.172.5:6893 udp
N/A 94.21.172.6:6893 udp
N/A 94.21.172.7:6893 udp
N/A 94.21.172.8:6893 udp
N/A 94.21.172.9:6893 udp
N/A 94.21.172.10:6893 udp
N/A 94.21.172.11:6893 udp
N/A 94.21.172.12:6893 udp
N/A 94.21.172.13:6893 udp
N/A 94.21.172.14:6893 udp
N/A 94.21.172.15:6893 udp
N/A 94.21.172.16:6893 udp
N/A 94.21.172.17:6893 udp
N/A 94.21.172.18:6893 udp
N/A 94.21.172.19:6893 udp
N/A 94.21.172.20:6893 udp
N/A 94.21.172.21:6893 udp
N/A 94.21.172.22:6893 udp
N/A 94.21.172.23:6893 udp
N/A 94.21.172.24:6893 udp
N/A 94.21.172.25:6893 udp
N/A 94.21.172.26:6893 udp
N/A 94.21.172.27:6893 udp
N/A 94.21.172.28:6893 udp
N/A 94.21.172.29:6893 udp
N/A 94.21.172.30:6893 udp
N/A 94.21.172.31:6893 udp
N/A 94.22.172.0:6893 udp
N/A 94.22.172.1:6893 udp
N/A 94.22.172.2:6893 udp
N/A 94.22.172.3:6893 udp
N/A 94.22.172.4:6893 udp
N/A 94.22.172.5:6893 udp
N/A 94.22.172.6:6893 udp
N/A 94.22.172.7:6893 udp
N/A 94.22.172.8:6893 udp
N/A 94.22.172.9:6893 udp
N/A 94.22.172.10:6893 udp
N/A 94.22.172.11:6893 udp
N/A 94.22.172.12:6893 udp
N/A 94.22.172.13:6893 udp
N/A 94.22.172.14:6893 udp
N/A 94.22.172.15:6893 udp
N/A 94.22.172.16:6893 udp
N/A 94.22.172.17:6893 udp
N/A 94.22.172.18:6893 udp
N/A 94.22.172.19:6893 udp
N/A 94.22.172.20:6893 udp
N/A 94.22.172.21:6893 udp
N/A 94.22.172.22:6893 udp
N/A 94.22.172.23:6893 udp
N/A 94.22.172.24:6893 udp
N/A 94.22.172.25:6893 udp
N/A 94.22.172.26:6893 udp
N/A 94.22.172.27:6893 udp
N/A 94.22.172.28:6893 udp
N/A 94.22.172.29:6893 udp
N/A 94.22.172.30:6893 udp
N/A 94.22.172.31:6893 udp
N/A 94.23.172.0:6893 udp
N/A 94.23.172.1:6893 udp
N/A 94.23.172.2:6893 udp
N/A 94.23.172.3:6893 udp
N/A 94.23.172.4:6893 udp
N/A 94.23.172.5:6893 udp
N/A 94.23.172.6:6893 udp
N/A 94.23.172.7:6893 udp
N/A 94.23.172.8:6893 udp
N/A 94.23.172.9:6893 udp
N/A 94.23.172.10:6893 udp
N/A 94.23.172.11:6893 udp
N/A 94.23.172.12:6893 udp
N/A 94.23.172.13:6893 udp
N/A 94.23.172.14:6893 udp
N/A 94.23.172.15:6893 udp
N/A 94.23.172.16:6893 udp
N/A 94.23.172.17:6893 udp
N/A 94.23.172.18:6893 udp
N/A 94.23.172.19:6893 udp
N/A 94.23.172.20:6893 udp
N/A 94.23.172.21:6893 udp
N/A 94.23.172.22:6893 udp
N/A 94.23.172.23:6893 udp
N/A 94.23.172.24:6893 udp
N/A 94.23.172.25:6893 udp
N/A 94.23.172.26:6893 udp
N/A 94.23.172.27:6893 udp
N/A 94.23.172.28:6893 udp
N/A 94.23.172.29:6893 udp
N/A 94.23.172.30:6893 udp
N/A 94.23.172.31:6893 udp
N/A 94.23.172.32:6893 udp
N/A 94.23.172.33:6893 udp
N/A 94.23.172.34:6893 udp
N/A 94.23.172.35:6893 udp
N/A 94.23.172.36:6893 udp
N/A 94.23.172.37:6893 udp
N/A 94.23.172.38:6893 udp
N/A 94.23.172.39:6893 udp
N/A 94.23.172.40:6893 udp
N/A 94.23.172.41:6893 udp
N/A 94.23.172.42:6893 udp
N/A 94.23.172.43:6893 udp
N/A 94.23.172.44:6893 udp
N/A 94.23.172.45:6893 udp
N/A 94.23.172.46:6893 udp
N/A 94.23.172.47:6893 udp
N/A 94.23.172.48:6893 udp
N/A 94.23.172.49:6893 udp
N/A 94.23.172.50:6893 udp
N/A 94.23.172.51:6893 udp
N/A 94.23.172.52:6893 udp
N/A 94.23.172.53:6893 udp
N/A 94.23.172.54:6893 udp
N/A 94.23.172.55:6893 udp
N/A 94.23.172.56:6893 udp
N/A 94.23.172.57:6893 udp
N/A 94.23.172.58:6893 udp
N/A 94.23.172.59:6893 udp
N/A 94.23.172.60:6893 udp
N/A 94.23.172.61:6893 udp
N/A 94.23.172.62:6893 udp
N/A 94.23.172.63:6893 udp
N/A 94.23.172.64:6893 udp
N/A 94.23.172.65:6893 udp
N/A 94.23.172.66:6893 udp
N/A 94.23.172.67:6893 udp
N/A 94.23.172.68:6893 udp
N/A 94.23.172.69:6893 udp
N/A 94.23.172.70:6893 udp
N/A 94.23.172.71:6893 udp
N/A 94.23.172.72:6893 udp
N/A 94.23.172.73:6893 udp
N/A 94.23.172.74:6893 udp
N/A 94.23.172.75:6893 udp
N/A 94.23.172.76:6893 udp
N/A 94.23.172.77:6893 udp
N/A 94.23.172.78:6893 udp
N/A 94.23.172.79:6893 udp
N/A 94.23.172.80:6893 udp
N/A 94.23.172.81:6893 udp
N/A 94.23.172.82:6893 udp
N/A 94.23.172.83:6893 udp
N/A 94.23.172.84:6893 udp
N/A 94.23.172.85:6893 udp
N/A 94.23.172.86:6893 udp
N/A 94.23.172.87:6893 udp
N/A 94.23.172.88:6893 udp
N/A 94.23.172.89:6893 udp
N/A 94.23.172.90:6893 udp
N/A 94.23.172.91:6893 udp
N/A 94.23.172.92:6893 udp
N/A 94.23.172.93:6893 udp
N/A 94.23.172.94:6893 udp
N/A 94.23.172.95:6893 udp
N/A 94.23.172.96:6893 udp
N/A 94.23.172.97:6893 udp
N/A 94.23.172.98:6893 udp
N/A 94.23.172.99:6893 udp
N/A 94.23.172.100:6893 udp
N/A 94.23.172.101:6893 udp
N/A 94.23.172.102:6893 udp
N/A 94.23.172.103:6893 udp
N/A 94.23.172.104:6893 udp
N/A 94.23.172.105:6893 udp
N/A 94.23.172.106:6893 udp
N/A 94.23.172.107:6893 udp
N/A 94.23.172.108:6893 udp
N/A 94.23.172.109:6893 udp
N/A 94.23.172.110:6893 udp
N/A 94.23.172.111:6893 udp
N/A 94.23.172.112:6893 udp
N/A 94.23.172.113:6893 udp
N/A 94.23.172.114:6893 udp
N/A 94.23.172.115:6893 udp
N/A 94.23.172.116:6893 udp
N/A 94.23.172.117:6893 udp
N/A 94.23.172.118:6893 udp
N/A 94.23.172.119:6893 udp
N/A 94.23.172.120:6893 udp
N/A 94.23.172.121:6893 udp
N/A 94.23.172.122:6893 udp
N/A 94.23.172.123:6893 udp
N/A 94.23.172.124:6893 udp
N/A 94.23.172.125:6893 udp
N/A 94.23.172.126:6893 udp
N/A 94.23.172.127:6893 udp
N/A 94.23.172.128:6893 udp
N/A 94.23.172.129:6893 udp
N/A 94.23.172.130:6893 udp
N/A 94.23.172.131:6893 udp
N/A 94.23.172.132:6893 udp
N/A 94.23.172.133:6893 udp
N/A 94.23.172.134:6893 udp
N/A 94.23.172.135:6893 udp
N/A 94.23.172.136:6893 udp
N/A 94.23.172.137:6893 udp
N/A 94.23.172.138:6893 udp
N/A 94.23.172.139:6893 udp
N/A 94.23.172.140:6893 udp
N/A 94.23.172.141:6893 udp
N/A 94.23.172.142:6893 udp
N/A 94.23.172.143:6893 udp
N/A 94.23.172.144:6893 udp
N/A 94.23.172.145:6893 udp
N/A 94.23.172.146:6893 udp
N/A 94.23.172.147:6893 udp
N/A 94.23.172.148:6893 udp
N/A 94.23.172.149:6893 udp
N/A 94.23.172.150:6893 udp
N/A 94.23.172.151:6893 udp
N/A 94.23.172.152:6893 udp
N/A 94.23.172.153:6893 udp
N/A 94.23.172.154:6893 udp
N/A 94.23.172.155:6893 udp
N/A 94.23.172.156:6893 udp
N/A 94.23.172.157:6893 udp
N/A 94.23.172.158:6893 udp
N/A 94.23.172.159:6893 udp
N/A 94.23.172.160:6893 udp
N/A 94.23.172.161:6893 udp
N/A 94.23.172.162:6893 udp
N/A 94.23.172.163:6893 udp
N/A 94.23.172.164:6893 udp
N/A 94.23.172.165:6893 udp
N/A 94.23.172.166:6893 udp
N/A 94.23.172.167:6893 udp
N/A 94.23.172.168:6893 udp
N/A 94.23.172.169:6893 udp
N/A 94.23.172.170:6893 udp
N/A 94.23.172.171:6893 udp
N/A 94.23.172.172:6893 udp
N/A 94.23.172.173:6893 udp
N/A 94.23.172.174:6893 udp
N/A 94.23.172.175:6893 udp
N/A 94.23.172.176:6893 udp
N/A 94.23.172.177:6893 udp
N/A 94.23.172.178:6893 udp
N/A 94.23.172.179:6893 udp
N/A 94.23.172.180:6893 udp
N/A 94.23.172.181:6893 udp
N/A 94.23.172.182:6893 udp
N/A 94.23.172.183:6893 udp
N/A 94.23.172.184:6893 udp
N/A 94.23.172.185:6893 udp
N/A 94.23.172.186:6893 udp
N/A 94.23.172.187:6893 udp
N/A 94.23.172.188:6893 udp
N/A 94.23.172.189:6893 udp
N/A 94.23.172.190:6893 udp
N/A 94.23.172.191:6893 udp
N/A 94.23.172.192:6893 udp
N/A 94.23.172.193:6893 udp
N/A 94.23.172.194:6893 udp
N/A 94.23.172.195:6893 udp
N/A 94.23.172.196:6893 udp
N/A 94.23.172.197:6893 udp
N/A 94.23.172.198:6893 udp
N/A 94.23.172.199:6893 udp
N/A 94.23.172.200:6893 udp
N/A 94.23.172.201:6893 udp
N/A 94.23.172.202:6893 udp
N/A 94.23.172.203:6893 udp
N/A 94.23.172.204:6893 udp
N/A 94.23.172.205:6893 udp
N/A 94.23.172.206:6893 udp
N/A 94.23.172.207:6893 udp
N/A 94.23.172.208:6893 udp
N/A 94.23.172.209:6893 udp
N/A 94.23.172.210:6893 udp
N/A 94.23.172.211:6893 udp
N/A 94.23.172.212:6893 udp
N/A 94.23.172.213:6893 udp
N/A 94.23.172.214:6893 udp
N/A 94.23.172.215:6893 udp
N/A 94.23.172.216:6893 udp
N/A 94.23.172.217:6893 udp
N/A 94.23.172.218:6893 udp
N/A 94.23.172.219:6893 udp
N/A 94.23.172.220:6893 udp
N/A 94.23.172.221:6893 udp
N/A 94.23.172.222:6893 udp
N/A 94.23.172.223:6893 udp
N/A 94.23.172.224:6893 udp
N/A 94.23.172.225:6893 udp
N/A 94.23.172.226:6893 udp
N/A 94.23.172.227:6893 udp
N/A 94.23.172.228:6893 udp
N/A 94.23.172.229:6893 udp
N/A 94.23.172.230:6893 udp
N/A 94.23.172.231:6893 udp
N/A 94.23.172.232:6893 udp
N/A 94.23.172.233:6893 udp
N/A 94.23.172.234:6893 udp
N/A 94.23.172.235:6893 udp
N/A 94.23.172.236:6893 udp
N/A 94.23.172.237:6893 udp
N/A 94.23.172.238:6893 udp
N/A 94.23.172.239:6893 udp
N/A 94.23.172.240:6893 udp
N/A 94.23.172.241:6893 udp
N/A 94.23.172.242:6893 udp
N/A 94.23.172.243:6893 udp
N/A 94.23.172.244:6893 udp
N/A 94.23.172.245:6893 udp
N/A 94.23.172.246:6893 udp
N/A 94.23.172.247:6893 udp
N/A 94.23.172.248:6893 udp
N/A 94.23.172.249:6893 udp
N/A 94.23.172.250:6893 udp
N/A 94.23.172.251:6893 udp
N/A 94.23.172.252:6893 udp
N/A 94.23.172.253:6893 udp
N/A 94.23.172.254:6893 udp
N/A 94.23.172.255:6893 udp
N/A 94.23.173.0:6893 udp
N/A 94.23.173.1:6893 udp
N/A 94.23.173.2:6893 udp
N/A 94.23.173.3:6893 udp
N/A 94.23.173.4:6893 udp
N/A 94.23.173.5:6893 udp
N/A 94.23.173.6:6893 udp
N/A 94.23.173.7:6893 udp
N/A 94.23.173.8:6893 udp
N/A 94.23.173.9:6893 udp
N/A 94.23.173.10:6893 udp
N/A 94.23.173.11:6893 udp
N/A 94.23.173.12:6893 udp
N/A 94.23.173.13:6893 udp
N/A 94.23.173.14:6893 udp
N/A 94.23.173.15:6893 udp
N/A 94.23.173.16:6893 udp
N/A 94.23.173.17:6893 udp
N/A 94.23.173.18:6893 udp
N/A 94.23.173.19:6893 udp
N/A 94.23.173.20:6893 udp
N/A 94.23.173.21:6893 udp
N/A 94.23.173.22:6893 udp
N/A 94.23.173.23:6893 udp
N/A 94.23.173.24:6893 udp
N/A 94.23.173.25:6893 udp
N/A 94.23.173.26:6893 udp
N/A 94.23.173.27:6893 udp
N/A 94.23.173.28:6893 udp
N/A 94.23.173.29:6893 udp
N/A 94.23.173.30:6893 udp
N/A 94.23.173.31:6893 udp
N/A 94.23.173.32:6893 udp
N/A 94.23.173.33:6893 udp
N/A 94.23.173.34:6893 udp
N/A 94.23.173.35:6893 udp
N/A 94.23.173.36:6893 udp
N/A 94.23.173.37:6893 udp
N/A 94.23.173.38:6893 udp
N/A 94.23.173.39:6893 udp
N/A 94.23.173.40:6893 udp
N/A 94.23.173.41:6893 udp
N/A 94.23.173.42:6893 udp
N/A 94.23.173.43:6893 udp
N/A 94.23.173.44:6893 udp
N/A 94.23.173.45:6893 udp
N/A 94.23.173.46:6893 udp
N/A 94.23.173.47:6893 udp
N/A 94.23.173.48:6893 udp
N/A 94.23.173.49:6893 udp
N/A 94.23.173.50:6893 udp
N/A 94.23.173.51:6893 udp
N/A 94.23.173.52:6893 udp
N/A 94.23.173.53:6893 udp
N/A 94.23.173.54:6893 udp
N/A 94.23.173.55:6893 udp
N/A 94.23.173.56:6893 udp
N/A 94.23.173.57:6893 udp
N/A 94.23.173.58:6893 udp
N/A 94.23.173.59:6893 udp
N/A 94.23.173.60:6893 udp
N/A 94.23.173.61:6893 udp
N/A 94.23.173.62:6893 udp
N/A 94.23.173.63:6893 udp
N/A 94.23.173.64:6893 udp
N/A 94.23.173.65:6893 udp
N/A 94.23.173.66:6893 udp
N/A 94.23.173.67:6893 udp
N/A 94.23.173.68:6893 udp
N/A 94.23.173.69:6893 udp
N/A 94.23.173.70:6893 udp
N/A 94.23.173.71:6893 udp
N/A 94.23.173.72:6893 udp
N/A 94.23.173.73:6893 udp
N/A 94.23.173.74:6893 udp
N/A 94.23.173.75:6893 udp
N/A 94.23.173.76:6893 udp
N/A 94.23.173.77:6893 udp
N/A 94.23.173.78:6893 udp
N/A 94.23.173.79:6893 udp
N/A 94.23.173.80:6893 udp
N/A 94.23.173.81:6893 udp
N/A 94.23.173.82:6893 udp
N/A 94.23.173.83:6893 udp
N/A 94.23.173.84:6893 udp
N/A 94.23.173.85:6893 udp
N/A 94.23.173.86:6893 udp
N/A 94.23.173.87:6893 udp
N/A 94.23.173.88:6893 udp
N/A 94.23.173.89:6893 udp
N/A 94.23.173.90:6893 udp
N/A 94.23.173.91:6893 udp
N/A 94.23.173.92:6893 udp
N/A 94.23.173.93:6893 udp
N/A 94.23.173.94:6893 udp
N/A 94.23.173.95:6893 udp
N/A 94.23.173.96:6893 udp
N/A 94.23.173.97:6893 udp
N/A 94.23.173.98:6893 udp
N/A 94.23.173.99:6893 udp
N/A 94.23.173.100:6893 udp
N/A 94.23.173.101:6893 udp
N/A 94.23.173.102:6893 udp
N/A 94.23.173.103:6893 udp
N/A 94.23.173.104:6893 udp
N/A 94.23.173.105:6893 udp
N/A 94.23.173.106:6893 udp
N/A 94.23.173.107:6893 udp
N/A 94.23.173.108:6893 udp
N/A 94.23.173.109:6893 udp
N/A 94.23.173.110:6893 udp
N/A 94.23.173.111:6893 udp
N/A 94.23.173.112:6893 udp
N/A 94.23.173.113:6893 udp
N/A 94.23.173.114:6893 udp
N/A 94.23.173.115:6893 udp
N/A 94.23.173.116:6893 udp
N/A 94.23.173.117:6893 udp
N/A 94.23.173.118:6893 udp
N/A 94.23.173.119:6893 udp
N/A 94.23.173.120:6893 udp
N/A 94.23.173.121:6893 udp
N/A 94.23.173.122:6893 udp
N/A 94.23.173.123:6893 udp
N/A 94.23.173.124:6893 udp
N/A 94.23.173.125:6893 udp
N/A 94.23.173.126:6893 udp
N/A 94.23.173.127:6893 udp
N/A 94.23.173.128:6893 udp
N/A 94.23.173.129:6893 udp
N/A 94.23.173.130:6893 udp
N/A 94.23.173.131:6893 udp
N/A 94.23.173.132:6893 udp
N/A 94.23.173.133:6893 udp
N/A 94.23.173.134:6893 udp
N/A 94.23.173.135:6893 udp
N/A 94.23.173.136:6893 udp
N/A 94.23.173.137:6893 udp
N/A 94.23.173.138:6893 udp
N/A 94.23.173.139:6893 udp
N/A 94.23.173.140:6893 udp
N/A 94.23.173.141:6893 udp
N/A 94.23.173.142:6893 udp
N/A 94.23.173.143:6893 udp
N/A 94.23.173.144:6893 udp
N/A 94.23.173.145:6893 udp
N/A 94.23.173.146:6893 udp
N/A 94.23.173.147:6893 udp
N/A 94.23.173.148:6893 udp
N/A 94.23.173.149:6893 udp
N/A 94.23.173.150:6893 udp
N/A 94.23.173.151:6893 udp
N/A 94.23.173.152:6893 udp
N/A 94.23.173.153:6893 udp
N/A 94.23.173.154:6893 udp
N/A 94.23.173.155:6893 udp
N/A 94.23.173.156:6893 udp
N/A 94.23.173.157:6893 udp
N/A 94.23.173.158:6893 udp
N/A 94.23.173.159:6893 udp
N/A 94.23.173.160:6893 udp
N/A 94.23.173.161:6893 udp
N/A 94.23.173.162:6893 udp
N/A 94.23.173.163:6893 udp
N/A 94.23.173.164:6893 udp
N/A 94.23.173.165:6893 udp
N/A 94.23.173.166:6893 udp
N/A 94.23.173.167:6893 udp
N/A 94.23.173.168:6893 udp
N/A 94.23.173.169:6893 udp
N/A 94.23.173.170:6893 udp
N/A 94.23.173.171:6893 udp
N/A 94.23.173.172:6893 udp
N/A 94.23.173.173:6893 udp
N/A 94.23.173.174:6893 udp
N/A 94.23.173.175:6893 udp
N/A 94.23.173.176:6893 udp
N/A 94.23.173.177:6893 udp
N/A 94.23.173.178:6893 udp
N/A 94.23.173.179:6893 udp
N/A 94.23.173.180:6893 udp
N/A 94.23.173.181:6893 udp
N/A 94.23.173.182:6893 udp
N/A 94.23.173.183:6893 udp
N/A 94.23.173.184:6893 udp
N/A 94.23.173.185:6893 udp
N/A 94.23.173.186:6893 udp
N/A 94.23.173.187:6893 udp
N/A 94.23.173.188:6893 udp
N/A 94.23.173.189:6893 udp
N/A 94.23.173.190:6893 udp
N/A 94.23.173.191:6893 udp
N/A 94.23.173.192:6893 udp
N/A 94.23.173.193:6893 udp
N/A 94.23.173.194:6893 udp
N/A 94.23.173.195:6893 udp
N/A 94.23.173.196:6893 udp
N/A 94.23.173.197:6893 udp
N/A 94.23.173.198:6893 udp
N/A 94.23.173.199:6893 udp
N/A 94.23.173.200:6893 udp
N/A 94.23.173.201:6893 udp
N/A 94.23.173.202:6893 udp
N/A 94.23.173.203:6893 udp
N/A 94.23.173.204:6893 udp
N/A 94.23.173.205:6893 udp
N/A 94.23.173.206:6893 udp
N/A 94.23.173.207:6893 udp
N/A 94.23.173.208:6893 udp
N/A 94.23.173.209:6893 udp
N/A 94.23.173.210:6893 udp
N/A 94.23.173.211:6893 udp
N/A 94.23.173.212:6893 udp
N/A 94.23.173.213:6893 udp
N/A 94.23.173.214:6893 udp
N/A 94.23.173.215:6893 udp
N/A 94.23.173.216:6893 udp
N/A 94.23.173.217:6893 udp
N/A 94.23.173.218:6893 udp
N/A 94.23.173.219:6893 udp
N/A 94.23.173.220:6893 udp
N/A 94.23.173.221:6893 udp
N/A 94.23.173.222:6893 udp
N/A 94.23.173.223:6893 udp
N/A 94.23.173.224:6893 udp
N/A 94.23.173.225:6893 udp
N/A 94.23.173.226:6893 udp
N/A 94.23.173.227:6893 udp
N/A 94.23.173.228:6893 udp
N/A 94.23.173.229:6893 udp
N/A 94.23.173.230:6893 udp
N/A 94.23.173.231:6893 udp
N/A 94.23.173.232:6893 udp
N/A 94.23.173.233:6893 udp
N/A 94.23.173.234:6893 udp
N/A 94.23.173.235:6893 udp
N/A 94.23.173.236:6893 udp
N/A 94.23.173.237:6893 udp
N/A 94.23.173.238:6893 udp
N/A 94.23.173.239:6893 udp
N/A 94.23.173.240:6893 udp
N/A 94.23.173.241:6893 udp
N/A 94.23.173.242:6893 udp
N/A 94.23.173.243:6893 udp
N/A 94.23.173.244:6893 udp
N/A 94.23.173.245:6893 udp
N/A 94.23.173.246:6893 udp
N/A 94.23.173.247:6893 udp
N/A 94.23.173.248:6893 udp
N/A 94.23.173.249:6893 udp
N/A 94.23.173.250:6893 udp
N/A 94.23.173.251:6893 udp
N/A 94.23.173.252:6893 udp
N/A 94.23.173.253:6893 udp
N/A 94.23.173.254:6893 udp
N/A 94.23.173.255:6893 udp
N/A 94.23.174.0:6893 udp
N/A 94.23.174.1:6893 udp
N/A 94.23.174.2:6893 udp
N/A 94.23.174.3:6893 udp
N/A 94.23.174.4:6893 udp
N/A 94.23.174.5:6893 udp
N/A 94.23.174.6:6893 udp
N/A 94.23.174.7:6893 udp
N/A 94.23.174.8:6893 udp
N/A 94.23.174.9:6893 udp
N/A 94.23.174.10:6893 udp
N/A 94.23.174.11:6893 udp
N/A 94.23.174.12:6893 udp
N/A 94.23.174.13:6893 udp
N/A 94.23.174.14:6893 udp
N/A 94.23.174.15:6893 udp
N/A 94.23.174.16:6893 udp
N/A 94.23.174.17:6893 udp
N/A 94.23.174.18:6893 udp
N/A 94.23.174.19:6893 udp
N/A 94.23.174.20:6893 udp
N/A 94.23.174.21:6893 udp
N/A 94.23.174.22:6893 udp
N/A 94.23.174.23:6893 udp
N/A 94.23.174.24:6893 udp
N/A 94.23.174.25:6893 udp
N/A 94.23.174.26:6893 udp
N/A 94.23.174.27:6893 udp
N/A 94.23.174.28:6893 udp
N/A 94.23.174.29:6893 udp
N/A 94.23.174.30:6893 udp
N/A 94.23.174.31:6893 udp
N/A 94.23.174.32:6893 udp
N/A 94.23.174.33:6893 udp
N/A 94.23.174.34:6893 udp
N/A 94.23.174.35:6893 udp
N/A 94.23.174.36:6893 udp
N/A 94.23.174.37:6893 udp
N/A 94.23.174.38:6893 udp
N/A 94.23.174.39:6893 udp
N/A 94.23.174.40:6893 udp
N/A 94.23.174.41:6893 udp
N/A 94.23.174.42:6893 udp
N/A 94.23.174.43:6893 udp
N/A 94.23.174.44:6893 udp
N/A 94.23.174.45:6893 udp
N/A 94.23.174.46:6893 udp
N/A 94.23.174.47:6893 udp
N/A 94.23.174.48:6893 udp
N/A 94.23.174.49:6893 udp
N/A 94.23.174.50:6893 udp
N/A 94.23.174.51:6893 udp
N/A 94.23.174.52:6893 udp
N/A 94.23.174.53:6893 udp
N/A 94.23.174.54:6893 udp
N/A 94.23.174.55:6893 udp
N/A 94.23.174.56:6893 udp
N/A 94.23.174.57:6893 udp
N/A 94.23.174.58:6893 udp
N/A 94.23.174.59:6893 udp
N/A 94.23.174.60:6893 udp
N/A 94.23.174.61:6893 udp
N/A 94.23.174.62:6893 udp
N/A 94.23.174.63:6893 udp
N/A 94.23.174.64:6893 udp
N/A 94.23.174.65:6893 udp
N/A 94.23.174.66:6893 udp
N/A 94.23.174.67:6893 udp
N/A 94.23.174.68:6893 udp
N/A 94.23.174.69:6893 udp
N/A 94.23.174.70:6893 udp
N/A 94.23.174.71:6893 udp
N/A 94.23.174.72:6893 udp
N/A 94.23.174.73:6893 udp
N/A 94.23.174.74:6893 udp
N/A 94.23.174.75:6893 udp
N/A 94.23.174.76:6893 udp
N/A 94.23.174.77:6893 udp
N/A 94.23.174.78:6893 udp
N/A 94.23.174.79:6893 udp
N/A 94.23.174.80:6893 udp
N/A 94.23.174.81:6893 udp
N/A 94.23.174.82:6893 udp
N/A 94.23.174.83:6893 udp
N/A 94.23.174.84:6893 udp
N/A 94.23.174.85:6893 udp
N/A 94.23.174.86:6893 udp
N/A 94.23.174.87:6893 udp
N/A 94.23.174.88:6893 udp
N/A 94.23.174.89:6893 udp
N/A 94.23.174.90:6893 udp
N/A 94.23.174.91:6893 udp
N/A 94.23.174.92:6893 udp
N/A 94.23.174.93:6893 udp
N/A 94.23.174.94:6893 udp
N/A 94.23.174.95:6893 udp
N/A 94.23.174.96:6893 udp
N/A 94.23.174.97:6893 udp
N/A 94.23.174.98:6893 udp
N/A 94.23.174.99:6893 udp
N/A 94.23.174.100:6893 udp
N/A 94.23.174.101:6893 udp
N/A 94.23.174.102:6893 udp
N/A 94.23.174.103:6893 udp
N/A 94.23.174.104:6893 udp
N/A 94.23.174.105:6893 udp
N/A 94.23.174.106:6893 udp
N/A 94.23.174.107:6893 udp
N/A 94.23.174.108:6893 udp
N/A 94.23.174.109:6893 udp
N/A 94.23.174.110:6893 udp
N/A 94.23.174.111:6893 udp
N/A 94.23.174.112:6893 udp
N/A 94.23.174.113:6893 udp
N/A 94.23.174.114:6893 udp
N/A 94.23.174.115:6893 udp
N/A 94.23.174.116:6893 udp
N/A 94.23.174.117:6893 udp
N/A 94.23.174.118:6893 udp
N/A 94.23.174.119:6893 udp
N/A 94.23.174.120:6893 udp
N/A 94.23.174.121:6893 udp
N/A 94.23.174.122:6893 udp
N/A 94.23.174.123:6893 udp
N/A 94.23.174.124:6893 udp
N/A 94.23.174.125:6893 udp
N/A 94.23.174.126:6893 udp
N/A 94.23.174.127:6893 udp
N/A 94.23.174.128:6893 udp
N/A 94.23.174.129:6893 udp
N/A 94.23.174.130:6893 udp
N/A 94.23.174.131:6893 udp
N/A 94.23.174.132:6893 udp
N/A 94.23.174.133:6893 udp
N/A 94.23.174.134:6893 udp
N/A 94.23.174.135:6893 udp
N/A 94.23.174.136:6893 udp
N/A 94.23.174.137:6893 udp
N/A 94.23.174.138:6893 udp
N/A 94.23.174.139:6893 udp
N/A 94.23.174.140:6893 udp
N/A 94.23.174.141:6893 udp
N/A 94.23.174.142:6893 udp
N/A 94.23.174.143:6893 udp
N/A 94.23.174.144:6893 udp
N/A 94.23.174.145:6893 udp
N/A 94.23.174.146:6893 udp
N/A 94.23.174.147:6893 udp
N/A 94.23.174.148:6893 udp
N/A 94.23.174.149:6893 udp
N/A 94.23.174.150:6893 udp
N/A 94.23.174.151:6893 udp
N/A 94.23.174.152:6893 udp
N/A 94.23.174.153:6893 udp
N/A 94.23.174.154:6893 udp
N/A 94.23.174.155:6893 udp
N/A 94.23.174.156:6893 udp
N/A 94.23.174.157:6893 udp
N/A 94.23.174.158:6893 udp
N/A 94.23.174.159:6893 udp
N/A 94.23.174.160:6893 udp
N/A 94.23.174.161:6893 udp
N/A 94.23.174.162:6893 udp
N/A 94.23.174.163:6893 udp
N/A 94.23.174.164:6893 udp
N/A 94.23.174.165:6893 udp
N/A 94.23.174.166:6893 udp
N/A 94.23.174.167:6893 udp
N/A 94.23.174.168:6893 udp
N/A 94.23.174.169:6893 udp
N/A 94.23.174.170:6893 udp
N/A 94.23.174.171:6893 udp
N/A 94.23.174.172:6893 udp
N/A 94.23.174.173:6893 udp
N/A 94.23.174.174:6893 udp
N/A 94.23.174.175:6893 udp
N/A 94.23.174.176:6893 udp
N/A 94.23.174.177:6893 udp
N/A 94.23.174.178:6893 udp
N/A 94.23.174.179:6893 udp
N/A 94.23.174.180:6893 udp
N/A 94.23.174.181:6893 udp
N/A 94.23.174.182:6893 udp
N/A 94.23.174.183:6893 udp
N/A 94.23.174.184:6893 udp
N/A 94.23.174.185:6893 udp
N/A 94.23.174.186:6893 udp
N/A 94.23.174.187:6893 udp
N/A 94.23.174.188:6893 udp
N/A 94.23.174.189:6893 udp
N/A 94.23.174.190:6893 udp
N/A 94.23.174.191:6893 udp
N/A 94.23.174.192:6893 udp
N/A 94.23.174.193:6893 udp
N/A 94.23.174.194:6893 udp
N/A 94.23.174.195:6893 udp
N/A 94.23.174.196:6893 udp
N/A 94.23.174.197:6893 udp
N/A 94.23.174.198:6893 udp
N/A 94.23.174.199:6893 udp
N/A 94.23.174.200:6893 udp
N/A 94.23.174.201:6893 udp
N/A 94.23.174.202:6893 udp
N/A 94.23.174.203:6893 udp
N/A 94.23.174.204:6893 udp
N/A 94.23.174.205:6893 udp
N/A 94.23.174.206:6893 udp
N/A 94.23.174.207:6893 udp
N/A 94.23.174.208:6893 udp
N/A 94.23.174.209:6893 udp
N/A 94.23.174.210:6893 udp
N/A 94.23.174.211:6893 udp
N/A 94.23.174.212:6893 udp
N/A 94.23.174.213:6893 udp
N/A 94.23.174.214:6893 udp
N/A 94.23.174.215:6893 udp
N/A 94.23.174.216:6893 udp
N/A 94.23.174.217:6893 udp
N/A 94.23.174.218:6893 udp
N/A 94.23.174.219:6893 udp
N/A 94.23.174.220:6893 udp
N/A 94.23.174.221:6893 udp
N/A 94.23.174.222:6893 udp
N/A 94.23.174.223:6893 udp
N/A 94.23.174.224:6893 udp
N/A 94.23.174.225:6893 udp
N/A 94.23.174.226:6893 udp
N/A 94.23.174.227:6893 udp
N/A 94.23.174.228:6893 udp
N/A 94.23.174.229:6893 udp
N/A 94.23.174.230:6893 udp
N/A 94.23.174.231:6893 udp
N/A 94.23.174.232:6893 udp
N/A 94.23.174.233:6893 udp
N/A 94.23.174.234:6893 udp
N/A 94.23.174.235:6893 udp
N/A 94.23.174.236:6893 udp
N/A 94.23.174.237:6893 udp
N/A 94.23.174.238:6893 udp
N/A 94.23.174.239:6893 udp
N/A 94.23.174.240:6893 udp
N/A 94.23.174.241:6893 udp
N/A 94.23.174.242:6893 udp
N/A 94.23.174.243:6893 udp
N/A 94.23.174.244:6893 udp
N/A 94.23.174.245:6893 udp
N/A 94.23.174.246:6893 udp
N/A 94.23.174.247:6893 udp
N/A 94.23.174.248:6893 udp
N/A 94.23.174.249:6893 udp
N/A 94.23.174.250:6893 udp
N/A 94.23.174.251:6893 udp
N/A 94.23.174.252:6893 udp
N/A 94.23.174.253:6893 udp
N/A 94.23.174.254:6893 udp
N/A 94.23.174.255:6893 udp
N/A 94.23.175.0:6893 udp
N/A 94.23.175.1:6893 udp
N/A 94.23.175.2:6893 udp
N/A 94.23.175.3:6893 udp
N/A 94.23.175.4:6893 udp
N/A 94.23.175.5:6893 udp
N/A 94.23.175.6:6893 udp
N/A 94.23.175.7:6893 udp
N/A 94.23.175.8:6893 udp
N/A 94.23.175.9:6893 udp
N/A 94.23.175.10:6893 udp
N/A 94.23.175.11:6893 udp
N/A 94.23.175.12:6893 udp
N/A 94.23.175.13:6893 udp
N/A 94.23.175.14:6893 udp
N/A 94.23.175.15:6893 udp
N/A 94.23.175.16:6893 udp
N/A 94.23.175.17:6893 udp
N/A 94.23.175.18:6893 udp
N/A 94.23.175.19:6893 udp
N/A 94.23.175.20:6893 udp
N/A 94.23.175.21:6893 udp
N/A 94.23.175.22:6893 udp
N/A 94.23.175.23:6893 udp
N/A 94.23.175.24:6893 udp
N/A 94.23.175.25:6893 udp
N/A 94.23.175.26:6893 udp
N/A 94.23.175.27:6893 udp
N/A 94.23.175.28:6893 udp
N/A 94.23.175.29:6893 udp
N/A 94.23.175.30:6893 udp
N/A 94.23.175.31:6893 udp
N/A 94.23.175.32:6893 udp
N/A 94.23.175.33:6893 udp
N/A 94.23.175.34:6893 udp
N/A 94.23.175.35:6893 udp
N/A 94.23.175.36:6893 udp
N/A 94.23.175.37:6893 udp
N/A 94.23.175.38:6893 udp
N/A 94.23.175.39:6893 udp
N/A 94.23.175.40:6893 udp
N/A 94.23.175.41:6893 udp
N/A 94.23.175.42:6893 udp
N/A 94.23.175.43:6893 udp
N/A 94.23.175.44:6893 udp
N/A 94.23.175.45:6893 udp
N/A 94.23.175.46:6893 udp
N/A 94.23.175.47:6893 udp
N/A 94.23.175.48:6893 udp
N/A 94.23.175.49:6893 udp
N/A 94.23.175.50:6893 udp
N/A 94.23.175.51:6893 udp
N/A 94.23.175.52:6893 udp
N/A 94.23.175.53:6893 udp
N/A 94.23.175.54:6893 udp
N/A 94.23.175.55:6893 udp
N/A 94.23.175.56:6893 udp
N/A 94.23.175.57:6893 udp
N/A 94.23.175.58:6893 udp
N/A 94.23.175.59:6893 udp
N/A 94.23.175.60:6893 udp
N/A 94.23.175.61:6893 udp
N/A 94.23.175.62:6893 udp
N/A 94.23.175.63:6893 udp
N/A 94.23.175.64:6893 udp
N/A 94.23.175.65:6893 udp
N/A 94.23.175.66:6893 udp
N/A 94.23.175.67:6893 udp
N/A 94.23.175.68:6893 udp
N/A 94.23.175.69:6893 udp
N/A 94.23.175.70:6893 udp
N/A 94.23.175.71:6893 udp
N/A 94.23.175.72:6893 udp
N/A 94.23.175.73:6893 udp
N/A 94.23.175.74:6893 udp
N/A 94.23.175.75:6893 udp
N/A 94.23.175.76:6893 udp
N/A 94.23.175.77:6893 udp
N/A 94.23.175.78:6893 udp
N/A 94.23.175.79:6893 udp
N/A 94.23.175.80:6893 udp
N/A 94.23.175.81:6893 udp
N/A 94.23.175.82:6893 udp
N/A 94.23.175.83:6893 udp
N/A 94.23.175.84:6893 udp
N/A 94.23.175.85:6893 udp
N/A 94.23.175.86:6893 udp
N/A 94.23.175.87:6893 udp
N/A 94.23.175.88:6893 udp
N/A 94.23.175.89:6893 udp
N/A 94.23.175.90:6893 udp
N/A 94.23.175.91:6893 udp
N/A 94.23.175.92:6893 udp
N/A 94.23.175.93:6893 udp
N/A 94.23.175.94:6893 udp
N/A 94.23.175.95:6893 udp
N/A 94.23.175.96:6893 udp
N/A 94.23.175.97:6893 udp
N/A 94.23.175.98:6893 udp
N/A 94.23.175.99:6893 udp
N/A 94.23.175.100:6893 udp
N/A 94.23.175.101:6893 udp
N/A 94.23.175.102:6893 udp
N/A 94.23.175.103:6893 udp
N/A 94.23.175.104:6893 udp
N/A 94.23.175.105:6893 udp
N/A 94.23.175.106:6893 udp
N/A 94.23.175.107:6893 udp
N/A 94.23.175.108:6893 udp
N/A 94.23.175.109:6893 udp
N/A 94.23.175.110:6893 udp
N/A 94.23.175.111:6893 udp
N/A 94.23.175.112:6893 udp
N/A 94.23.175.113:6893 udp
N/A 94.23.175.114:6893 udp
N/A 94.23.175.115:6893 udp
N/A 94.23.175.116:6893 udp
N/A 94.23.175.117:6893 udp
N/A 94.23.175.118:6893 udp
N/A 94.23.175.119:6893 udp
N/A 94.23.175.120:6893 udp
N/A 94.23.175.121:6893 udp
N/A 94.23.175.122:6893 udp
N/A 94.23.175.123:6893 udp
N/A 94.23.175.124:6893 udp
N/A 94.23.175.125:6893 udp
N/A 94.23.175.126:6893 udp
N/A 94.23.175.127:6893 udp
N/A 94.23.175.128:6893 udp
N/A 94.23.175.129:6893 udp
N/A 94.23.175.130:6893 udp
N/A 94.23.175.131:6893 udp
N/A 94.23.175.132:6893 udp
N/A 94.23.175.133:6893 udp
N/A 94.23.175.134:6893 udp
N/A 94.23.175.135:6893 udp
N/A 94.23.175.136:6893 udp
N/A 94.23.175.137:6893 udp
N/A 94.23.175.138:6893 udp
N/A 94.23.175.139:6893 udp
N/A 94.23.175.140:6893 udp
N/A 94.23.175.141:6893 udp
N/A 94.23.175.142:6893 udp
N/A 94.23.175.143:6893 udp
N/A 94.23.175.144:6893 udp
N/A 94.23.175.145:6893 udp
N/A 94.23.175.146:6893 udp
N/A 94.23.175.147:6893 udp
N/A 94.23.175.148:6893 udp
N/A 94.23.175.149:6893 udp
N/A 94.23.175.150:6893 udp
N/A 94.23.175.151:6893 udp
N/A 94.23.175.152:6893 udp
N/A 94.23.175.153:6893 udp
N/A 94.23.175.154:6893 udp
N/A 94.23.175.155:6893 udp
N/A 94.23.175.156:6893 udp
N/A 94.23.175.157:6893 udp
N/A 94.23.175.158:6893 udp
N/A 94.23.175.159:6893 udp
N/A 94.23.175.160:6893 udp
N/A 94.23.175.161:6893 udp
N/A 94.23.175.162:6893 udp
N/A 94.23.175.163:6893 udp
N/A 94.23.175.164:6893 udp
N/A 94.23.175.165:6893 udp
N/A 94.23.175.166:6893 udp
N/A 94.23.175.167:6893 udp
N/A 94.23.175.168:6893 udp
N/A 94.23.175.169:6893 udp
N/A 94.23.175.170:6893 udp
N/A 94.23.175.171:6893 udp
N/A 94.23.175.172:6893 udp
N/A 94.23.175.173:6893 udp
N/A 94.23.175.174:6893 udp
N/A 94.23.175.175:6893 udp
N/A 94.23.175.176:6893 udp
N/A 94.23.175.177:6893 udp
N/A 94.23.175.178:6893 udp
N/A 94.23.175.179:6893 udp
N/A 94.23.175.180:6893 udp
N/A 94.23.175.181:6893 udp
N/A 94.23.175.182:6893 udp
N/A 94.23.175.183:6893 udp
N/A 94.23.175.184:6893 udp
N/A 94.23.175.185:6893 udp
N/A 94.23.175.186:6893 udp
N/A 94.23.175.187:6893 udp
N/A 94.23.175.188:6893 udp
N/A 94.23.175.189:6893 udp
N/A 94.23.175.190:6893 udp
N/A 94.23.175.191:6893 udp
N/A 94.23.175.192:6893 udp
N/A 94.23.175.193:6893 udp
N/A 94.23.175.194:6893 udp
N/A 94.23.175.195:6893 udp
N/A 94.23.175.196:6893 udp
N/A 94.23.175.197:6893 udp
N/A 94.23.175.198:6893 udp
N/A 94.23.175.199:6893 udp
N/A 94.23.175.200:6893 udp
N/A 94.23.175.201:6893 udp
N/A 94.23.175.202:6893 udp
N/A 94.23.175.203:6893 udp
N/A 94.23.175.204:6893 udp
N/A 94.23.175.205:6893 udp
N/A 94.23.175.206:6893 udp
N/A 94.23.175.207:6893 udp
N/A 94.23.175.208:6893 udp
N/A 94.23.175.209:6893 udp
N/A 94.23.175.210:6893 udp
N/A 94.23.175.211:6893 udp
N/A 94.23.175.212:6893 udp
N/A 94.23.175.213:6893 udp
N/A 94.23.175.214:6893 udp
N/A 94.23.175.215:6893 udp
N/A 94.23.175.216:6893 udp
N/A 94.23.175.217:6893 udp
N/A 94.23.175.218:6893 udp
N/A 94.23.175.219:6893 udp
N/A 94.23.175.220:6893 udp
N/A 94.23.175.221:6893 udp
N/A 94.23.175.222:6893 udp
N/A 94.23.175.223:6893 udp
N/A 94.23.175.224:6893 udp
N/A 94.23.175.225:6893 udp
N/A 94.23.175.226:6893 udp
N/A 94.23.175.227:6893 udp
N/A 94.23.175.228:6893 udp
N/A 94.23.175.229:6893 udp
N/A 94.23.175.230:6893 udp
N/A 94.23.175.231:6893 udp
N/A 94.23.175.232:6893 udp
N/A 94.23.175.233:6893 udp
N/A 94.23.175.234:6893 udp
N/A 94.23.175.235:6893 udp
N/A 94.23.175.236:6893 udp
N/A 94.23.175.237:6893 udp
N/A 94.23.175.238:6893 udp
N/A 94.23.175.239:6893 udp
N/A 94.23.175.240:6893 udp
N/A 94.23.175.241:6893 udp
N/A 94.23.175.242:6893 udp
N/A 94.23.175.243:6893 udp
N/A 94.23.175.244:6893 udp
N/A 94.23.175.245:6893 udp
N/A 94.23.175.246:6893 udp
N/A 94.23.175.247:6893 udp
N/A 94.23.175.248:6893 udp
N/A 94.23.175.249:6893 udp
N/A 94.23.175.250:6893 udp
N/A 94.23.175.251:6893 udp
N/A 94.23.175.252:6893 udp
N/A 94.23.175.253:6893 udp
N/A 94.23.175.254:6893 udp
N/A 94.23.175.255:6893 udp
N/A 8.8.8.8:53 api.blockcypher.com udp
N/A 104.20.21.251:80 api.blockcypher.com tcp
N/A 8.8.8.8:53 btc.blockr.io udp
N/A 8.8.8.8:53 bitaps.com udp
N/A 178.128.255.179:443 bitaps.com tcp
N/A 8.8.8.8:53 chain.so udp
N/A 172.67.157.138:443 chain.so tcp
N/A 8.8.8.8:53 sochain.com udp
N/A 104.26.15.247:443 sochain.com tcp
N/A 8.8.8.8:53 p27dokhpz2n7nvgr.1j9r76.top udp

Files

memory/616-0-0x0000000000000000-mapping.dmp

memory/2596-1-0x0000000000000000-mapping.dmp

memory/808-2-0x0000000000000000-mapping.dmp

memory/3960-3-0x0000000000000000-mapping.dmp

memory/3776-4-0x0000000000000000-mapping.dmp

memory/2708-5-0x0000000000000000-mapping.dmp

memory/2552-6-0x0000000000000000-mapping.dmp

C:\Users\Admin\Desktop\_READ_THIS_FILE_2WUFA011_.hta

MD5 e76bdaf51e92df34c359d39abe4b090f
SHA1 5024e729b130b1c26b7131fc6bcd8f13505ed891
SHA256 daf1852973de1f61d9a34ce63eca7e46f65b9e6bcf8af338f6495ec4a2e539ac
SHA512 53369e1355a5846ef6c94f36011b21a0e43c0c16cb7222e57363b01f273e13415c820cc3c30e124efa939cca9651fa6d504017751a86c14069d4b1be857d2dae

C:\Users\Admin\Desktop\_READ_THIS_FILE_2LPHT7K_.txt

MD5 87e57c7c38f87bc531f899ed95452626
SHA1 3dd2a8db2a7fedb5ae1dcf10a65b2327d5291f6d
SHA256 5a11fda2e992a4a65881bf9ad504fec6a86731d4eb9721780ba503c5689d7c9e
SHA512 042d12b4502c7954213596fbf81d3cee8480d267385bb7d99e32fa0d501bea4cbb580c7f3d0b1fea099df275de864a90e51174000c1d4d3fdf39bd4d94048839