Malware Analysis Report

2024-09-22 12:31

Sample ID 240418-ycybwseb91
Target http://github.com
Tags
cerber troldesh discovery evasion persistence ransomware trojan upx
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

Threat Level: Known bad

The file http://github.com was found to be: Known bad.

Malicious Activity Summary

cerber troldesh discovery evasion persistence ransomware trojan upx

Modifies WinLogon for persistence

Cerber

Troldesh, Shade, Encoder.858

Contacts a large (1121) amount of remote hosts

Modifies Windows Firewall

Loads dropped DLL

UPX packed file

Drops startup file

Legitimate hosting services abused for malware hosting/C2

Adds Run key to start application

Enumerates connected drives

Drops file in System32 directory

Sets desktop wallpaper using registry

Drops file in Windows directory

Drops file in Program Files directory

Runs ping.exe

Suspicious use of SendNotifyMessage

Uses Volume Shadow Copy service COM API

Enumerates system info in registry

Kills process with taskkill

Uses Task Scheduler COM API

Modifies registry class

Suspicious use of SetWindowsHookEx

Uses Volume Shadow Copy WMI provider

Suspicious use of WriteProcessMemory

Suspicious use of FindShellTrayWindow

Checks SCSI registry key(s)

Suspicious behavior: AddClipboardFormatListener

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Opens file in notepad (likely ransom note)

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of AdjustPrivilegeToken

Modifies data under HKEY_USERS

Modifies Internet Explorer settings

MITRE ATT&CK Matrix V13

Analysis: static1

Detonation Overview

Reported

2024-04-18 19:39

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-04-18 19:39

Reported

2024-04-18 19:59

Platform

win10-20240404-en

Max time kernel

1218s

Max time network

1218s

Command Line

C:\Windows\system32\lsass.exe

Signatures

Cerber

ransomware cerber

Modifies WinLogon for persistence

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit = "C:\\Windows\\system32\\userinit.exe,\"C:\\Program Files (x86)\\Def Group\\PC Defender\\Antispyware.exe\"" C:\Windows\syswow64\MsiExec.exe N/A

Troldesh, Shade, Encoder.858

ransomware trojan troldesh

Contacts a large (1121) amount of remote hosts

discovery

Modifies Windows Firewall

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A

Drops startup file

Description Indicator Process Target
File opened for modification \??\c:\users\admin\appdata\roaming\microsoft\word\startup\ C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Windows\sysWOW64\wbem\wmiprvse.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Software\Microsoft\Windows\CurrentVersion\Run\Client Server Runtime Subsystem = "\"C:\\ProgramData\\Windows\\csrss.exe\"" C:\Users\Admin\AppData\Local\Temp\Temp1_NoMoreRansom.zip\[email protected] N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\Q: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\v: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\w: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\A: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\e: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\q: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\r: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\H: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\g: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\p: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\X: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\x: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\M: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\i: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\P: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\k: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\l: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\a: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\o: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\S: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\m: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\K: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\b: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\h: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\n: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\t: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\y: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\z: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\B: C:\Windows\SysWOW64\msiexec.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\desktop C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification C:\Windows\SysWOW64\RCXEEF8.tmp C:\Users\Admin\AppData\Local\Temp\Temp1_XFC.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\documents C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File created C:\Windows\SysWOW64\fpfstb.dll C:\Users\Admin\AppData\Local\Temp\Temp1_XFC.zip\[email protected] N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\tmpDF24.bmp" C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Def Group\PC Defender\proccheck.exe C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Def Group\PC Defender\Antispyware.exe C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Def Group\PC Defender\hook.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\Installer\e609167.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\inprogressinstallinfo.ipi C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification C:\Windows\Installer\ C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File created C:\Windows\Installer\{FC2ABC8E-3715-4A32-B8B5-559380F45282}\_966CD4ED37489844400D0C.exe C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\WINDOWS\SysWOW64 C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\desktop C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification C:\Windows\Installer\MSI9261.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e60916b.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\documents C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File created C:\Windows\Installer\{FC2ABC8E-3715-4A32-B8B5-559380F45282}\_3F16219B047CF8432B7ADA.exe C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\{FC2ABC8E-3715-4A32-B8B5-559380F45282}\_966CD4ED37489844400D0C.exe C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0008 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\2003 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\2002 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004E C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\300A C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Mfg C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{88ad39db-0d0c-4a38-8435-4043826b5c91}\0009 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0065 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\DeviceDesc C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0052 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{80d81ea6-7473-4b0c-8216-efc11a2c4c8b}\0002 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\ConfigFlags C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0005 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0055 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{80d81ea6-7473-4b0c-8216-efc11a2c4c8b}\0002 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Capabilities C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{80d81ea6-7473-4b0c-8216-efc11a2c4c8b}\0004 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0058 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{88ad39db-0d0c-4a38-8435-4043826b5c91}\000A C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\2003 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0055 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Capabilities C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\300A C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0005 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{88ad39db-0d0c-4a38-8435-4043826b5c91}\0008 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{3464f7a4-2444-40b1-980a-e0903cb6d912}\0006 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004D C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\DeviceDesc C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{3464f7a4-2444-40b1-980a-e0903cb6d912}\0006 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004A C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\000A\ C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{80d81ea6-7473-4b0c-8216-efc11a2c4c8b}\0003 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0004 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\ConfigFlags C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{3464f7a4-2444-40b1-980a-e0903cb6d912}\0006 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0065 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0054 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004A C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{80d81ea6-7473-4b0c-8216-efc11a2c4c8b}\0003 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{80d81ea6-7473-4b0c-8216-efc11a2c4c8b}\0004 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004C C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0052 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Mfg C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0065 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{3464f7a4-2444-40b1-980a-e0903cb6d912}\000A\ C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\000A\ C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0008 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0051 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004C C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\300A C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{88ad39db-0d0c-4a38-8435-4043826b5c91}\000A C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\2006 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0034 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004D C:\Windows\system32\svchost.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\WINDOWS\SysWOW64\taskkill.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Software\Microsoft\Internet Explorer\LowRegistry\Shell Extensions\Cached C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Software\Microsoft\Internet Explorer\LowRegistry C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Software\Microsoft\Internet Explorer\LowRegistry\Shell Extensions C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1c C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133579427647766664" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\1A\52C64B7E C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software C:\Windows\syswow64\MsiExec.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows Script\Settings\JITDebug = "0" C:\Windows\syswow64\MsiExec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections C:\Windows\system32\svchost.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\1B C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache C:\Windows\system32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1b C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows Script\Settings C:\Windows\syswow64\MsiExec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft C:\Windows\syswow64\MsiExec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows Script C:\Windows\syswow64\MsiExec.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\E8CBA2CF517323A48B5B5539084F2528 C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\SourceList\Net C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.mspaint_8wekyb3d8bbwe\Internet Settings\Cache\Extensible Cache C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.mspaint_8wekyb3d8bbwe\Internet Settings\Cache\Content C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.mspaint_8wekyb3d8bbwe\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.mspaint_8wekyb3d8bbwe\Internet Settings\Cache\Cookies\CacheLimit = "1" C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\Temp1_PC Defender.zip\[email protected] N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\C73BCE36FA1AA0E45AB2649A3FA0D390 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\SourceList\Net C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\SourceList C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.mspaint_8wekyb3d8bbwe\Internet Settings\Cache\Content\CacheLimit = "51200" C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\AdvertiseFlags = "388" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\DeploymentFlags = "3" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\SourceList\Net\1 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\RarSFX0\\" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\SourceList\Media\1 = ";" C:\Windows\system32\msiexec.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\Clients = 3a0000000000 C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\AppData\\Local\\Temp\\RarSFX0\\" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.mspaint_8wekyb3d8bbwe\Internet Settings\Cache\History\CacheLimit = "1" C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\PackageCode = "18627594958587344B2B3984171915B1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\Assignment = "1" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\InstanceType = "0" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\AuthorizedLUAApp = "0" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\SourceList C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528 C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.mspaint_8wekyb3d8bbwe\Internet Settings\Cache C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\Language = "1033" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\SourceList\PackageName = "PCDefenderSilentSetup.msi" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\SourceList\Media C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\SourceList\Media C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\E8CBA2CF517323A48B5B5539084F2528 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.mspaint_8wekyb3d8bbwe\Internet Settings C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.mspaint_8wekyb3d8bbwe\Internet Settings\Cache\Cookies C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\SourceList C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\C73BCE36FA1AA0E45AB2649A3FA0D390 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.mspaint_8wekyb3d8bbwe\Internet Settings\Cache\Content\CachePrefix C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\E8CBA2CF517323A48B5B5539084F2528\DefaultFeature C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\ProductName = "PC Defender" C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\E8CBA2CF517323A48B5B5539084F2528\Version = "16777216" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\C73BCE36FA1AA0E45AB2649A3FA0D390\E8CBA2CF517323A48B5B5539084F2528 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.mspaint_8wekyb3d8bbwe\Internet Settings\Cache\History C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.mspaint_8wekyb3d8bbwe\Internet Settings\Cache\History\CachePrefix = "Visited:" C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\NOTEPAD.EXE N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\WINDOWS\SysWOW64\PING.EXE N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_XFC.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_XFC.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_NoMoreRansom.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_NoMoreRansom.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_NoMoreRansom.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_NoMoreRansom.zip\[email protected] N/A
N/A N/A C:\Windows\system32\mspaint.exe N/A
N/A N/A C:\Windows\system32\mspaint.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A
N/A N/A C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4404 wrote to memory of 2772 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2772 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 2552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 760 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 760 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4404 wrote to memory of 5052 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Uses Task Scheduler COM API

persistence

Uses Volume Shadow Copy WMI provider

ransomware

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\fontdrvhost.exe

"fontdrvhost.exe"

C:\Windows\system32\fontdrvhost.exe

"fontdrvhost.exe"

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k dcomlaunch -s PlugPlay

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k rpcss

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k dcomlaunch -s LSM

C:\Windows\system32\dwm.exe

"dwm.exe"

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s lmhosts

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s NcbService

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k netsvcs -s Schedule

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s EventLog

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k netsvcs -s ProfSvc

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k localservice -s nsi

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k netsvcs -s Themes

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k localservice -s EventSystem

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s Dhcp

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k netsvcs -s UserManager

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k netsvcs -s SENS

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k networkservice -s NlaSvc

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s AudioEndpointBuilder

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k networkservice -s Dnscache

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k localservice -s netprofm

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k appmodel -s StateRepository

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k netsvcs -s ShellHWDetection

C:\Windows\System32\spoolsv.exe

C:\Windows\System32\spoolsv.exe

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k networkservice -s LanmanWorkstation

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k appmodel -s tiledatamodelsvc

c:\windows\system32\sihost.exe

sihost.exe

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k netsvcs -s LanmanServer

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k netsvcs -s IKEEXT

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k networkservicenetworkrestricted -s PolicyAgent

c:\windows\system32\taskhostw.exe

taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k netsvcs -s Browser

C:\Windows\sysmon.exe

C:\Windows\sysmon.exe

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k networkservice -s CryptSvc

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s TrkWks

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k netsvcs -s Winmgmt

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k netsvcs -s WpnService

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k netsvcs -s TokenBroker

C:\Windows\Explorer.EXE

C:\Windows\Explorer.EXE

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\wbem\unsecapp.exe -Embedding

C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe

"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca

C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe

"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca

C:\Windows\System32\RuntimeBroker.exe

C:\Windows\System32\RuntimeBroker.exe -Embedding

C:\Windows\system32\DllHost.exe

C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k localservice -s CDPSvc

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -s SSDPSRV

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalService -s WinHttpAutoProxySvc

C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe

"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service

c:\windows\system32\svchost.exe

c:\windows\system32\svchost.exe -k netsvcs -s wlidsvc

C:\Windows\system32\DllHost.exe

C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}

C:\Windows\system32\ApplicationFrameHost.exe

C:\Windows\system32\ApplicationFrameHost.exe -Embedding

C:\Windows\system32\DllHost.exe

C:\Windows\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://github.com

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffc2aca9758,0x7ffc2aca9768,0x7ffc2aca9778

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1524 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1824 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2052 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2612 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2620 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4468 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4844 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4972 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3020 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4992 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=5208 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5352 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5508 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5340 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=5316 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=5516 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5032 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5240 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2912 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5908 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4576 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5956 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3592 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=688 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5612 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Users\Admin\AppData\Local\Temp\Temp1_PC Defender.zip\[email protected]

"C:\Users\Admin\AppData\Local\Temp\Temp1_PC Defender.zip\[email protected]"

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -s PcaSvc

C:\Windows\SysWOW64\msiexec.exe

"C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\RarSFX0\PCDefenderSilentSetup.msi"

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k swprv

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k netsvcs -s DsmSvc

C:\Windows\system32\srtasks.exe

C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2

C:\Windows\syswow64\MsiExec.exe

C:\Windows\syswow64\MsiExec.exe -Embedding E53078773F91AFE7A307FD9B86EE196F E Global\MSI0000

C:\Windows\sysWOW64\wbem\wmiprvse.exe

C:\Windows\sysWOW64\wbem\wmiprvse.exe -secured -Embedding

C:\Windows\system32\backgroundTaskHost.exe

"C:\Windows\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca

C:\Users\Admin\AppData\Local\Temp\Temp1_XFC.zip\[email protected]

"C:\Users\Admin\AppData\Local\Temp\Temp1_XFC.zip\[email protected]"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1840 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5840 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4684 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected]

"C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected]"

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall set allprofiles state on

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall reset

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___QEPF_.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}

C:\Windows\SysWOW64\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___Y2FZU3N_.txt

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\system32\cmd.exe" /d /c taskkill /f /im "E" > NUL & ping -n 1 127.0.0.1 > NUL & del "C" > NUL && exit

C:\WINDOWS\SysWOW64\taskkill.exe

taskkill /f /im "E"

C:\WINDOWS\SysWOW64\PING.EXE

ping -n 1 127.0.0.1

C:\Windows\SysWOW64\werfault.exe

werfault.exe /h /shared Global\9529c757018b49d5a8905201b9e49126 /t 3280 /p 1020

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=776 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Users\Admin\AppData\Local\Temp\Temp1_NoMoreRansom.zip\[email protected]

"C:\Users\Admin\AppData\Local\Temp\Temp1_NoMoreRansom.zip\[email protected]"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5972 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5952 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3904 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4684 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6068 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5364 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1580 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4536 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Windows\system32\mspaint.exe

"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Temp1_AdAvenger (5).zip\Ad Avenger 2_files\3b2d8f6a15a379f90883b1bc9709eada.png" /ForceBootstrapPaint3D

C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe

"C:\Program Files\WindowsApps\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe" -ServerName:Microsoft.MSPaint.AppX437q68k2qc2asvaagas2prv9tjej6ja9.mca

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=688 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6036 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4840 --field-trial-handle=1704,i,13900537931265878006,17946996461624278052,131072 /prefetch:8

C:\Users\Admin\AppData\Local\Temp\Temp1_Deskbottom.zip\[email protected]

"C:\Users\Admin\AppData\Local\Temp\Temp1_Deskbottom.zip\[email protected]"

Network

Country Destination Domain Proto
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:80 github.com tcp
GB 20.26.156.215:80 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 185.199.108.133:443 avatars.githubusercontent.com tcp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 185.199.108.154:443 github.githubassets.com tcp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 249.197.17.2.in-addr.arpa udp
US 8.8.8.8:53 154.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 133.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 collector.github.com udp
GB 142.250.200.10:443 content-autofill.googleapis.com tcp
US 140.82.112.21:443 collector.github.com tcp
US 140.82.112.21:443 collector.github.com tcp
US 8.8.8.8:53 api.github.com udp
US 140.82.112.21:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 10.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 21.112.82.140.in-addr.arpa udp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 apis.google.com udp
GB 142.250.200.14:443 apis.google.com tcp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 i.ytimg.com udp
GB 216.58.204.86:443 i.ytimg.com tcp
GB 216.58.204.86:443 i.ytimg.com tcp
GB 216.58.204.86:443 i.ytimg.com tcp
GB 216.58.204.86:443 i.ytimg.com tcp
GB 216.58.204.86:443 i.ytimg.com tcp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 86.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 www.youtube.com udp
GB 142.250.187.206:443 www.youtube.com tcp
GB 142.250.187.206:443 www.youtube.com udp
GB 216.58.204.86:443 i.ytimg.com udp
US 8.8.8.8:53 206.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 static.doubleclick.net udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 142.250.200.34:443 googleads.g.doubleclick.net tcp
GB 216.58.213.6:443 static.doubleclick.net tcp
GB 142.250.179.234:443 jnn-pa.googleapis.com udp
GB 142.250.200.34:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 6.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 234.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 camo.githubusercontent.com udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
US 192.178.48.227:443 beacons.gcp.gvt2.com tcp
US 192.178.48.227:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 227.48.178.192.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 16.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 192.178.48.227:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 collector.github.com udp
US 8.8.8.8:53 api.github.com udp
US 140.82.113.22:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 22.113.82.140.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
US 192.178.48.227:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 collector.github.com udp
US 8.8.8.8:53 api.github.com udp
US 140.82.114.22:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 22.114.82.140.in-addr.arpa udp
US 8.8.8.8:53 159.113.53.23.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 216.58.213.10:443 content-autofill.googleapis.com udp
GB 216.58.213.10:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 10.213.58.216.in-addr.arpa udp
IE 93.107.12.0:6893 udp
IE 93.107.12.1:6893 udp
IE 93.107.12.2:6893 udp
IE 93.107.12.3:6893 udp
IE 93.107.12.4:6893 udp
IE 93.107.12.5:6893 udp
IE 93.107.12.6:6893 udp
IE 93.107.12.7:6893 udp
IE 93.107.12.8:6893 udp
IE 93.107.12.9:6893 udp
IE 93.107.12.10:6893 udp
IE 93.107.12.11:6893 udp
IE 93.107.12.12:6893 udp
IE 93.107.12.13:6893 udp
IE 93.107.12.14:6893 udp
IE 93.107.12.15:6893 udp
IE 93.107.12.16:6893 udp
IE 93.107.12.17:6893 udp
IE 93.107.12.18:6893 udp
IE 93.107.12.19:6893 udp
IE 93.107.12.20:6893 udp
IE 93.107.12.21:6893 udp
IE 93.107.12.22:6893 udp
IE 93.107.12.23:6893 udp
IE 93.107.12.24:6893 udp
IE 93.107.12.25:6893 udp
IE 93.107.12.26:6893 udp
IE 93.107.12.27:6893 udp
IE 93.107.12.28:6893 udp
IE 93.107.12.29:6893 udp
IE 93.107.12.30:6893 udp
IE 93.107.12.31:6893 udp
TR 95.1.200.0:6893 udp
TR 95.1.200.1:6893 udp
TR 95.1.200.2:6893 udp
TR 95.1.200.3:6893 udp
TR 95.1.200.4:6893 udp
TR 95.1.200.5:6893 udp
TR 95.1.200.6:6893 udp
TR 95.1.200.7:6893 udp
TR 95.1.200.8:6893 udp
TR 95.1.200.9:6893 udp
TR 95.1.200.10:6893 udp
TR 95.1.200.11:6893 udp
TR 95.1.200.12:6893 udp
TR 95.1.200.13:6893 udp
TR 95.1.200.14:6893 udp
TR 95.1.200.15:6893 udp
TR 95.1.200.16:6893 udp
TR 95.1.200.17:6893 udp
TR 95.1.200.18:6893 udp
TR 95.1.200.19:6893 udp
TR 95.1.200.20:6893 udp
TR 95.1.200.21:6893 udp
TR 95.1.200.22:6893 udp
TR 95.1.200.23:6893 udp
TR 95.1.200.24:6893 udp
TR 95.1.200.25:6893 udp
TR 95.1.200.26:6893 udp
TR 95.1.200.27:6893 udp
TR 95.1.200.28:6893 udp
TR 95.1.200.29:6893 udp
TR 95.1.200.30:6893 udp
TR 95.1.200.31:6893 udp
FR 87.98.176.0:6893 udp
FR 87.98.176.1:6893 udp
FR 87.98.176.2:6893 udp
FR 87.98.176.3:6893 udp
FR 87.98.176.4:6893 udp
FR 87.98.176.5:6893 udp
FR 87.98.176.6:6893 udp
FR 87.98.176.7:6893 udp
FR 87.98.176.8:6893 udp
FR 87.98.176.9:6893 udp
FR 87.98.176.10:6893 udp
FR 87.98.176.11:6893 udp
FR 87.98.176.12:6893 udp
FR 87.98.176.13:6893 udp
FR 87.98.176.14:6893 udp
FR 87.98.176.15:6893 udp
FR 87.98.176.16:6893 udp
FR 87.98.176.17:6893 udp
FR 87.98.176.18:6893 udp
FR 87.98.176.19:6893 udp
FR 87.98.176.20:6893 udp
FR 87.98.176.21:6893 udp
FR 87.98.176.22:6893 udp
FR 87.98.176.23:6893 udp
FR 87.98.176.24:6893 udp
FR 87.98.176.25:6893 udp
FR 87.98.176.26:6893 udp
FR 87.98.176.27:6893 udp
FR 87.98.176.28:6893 udp
FR 87.98.176.29:6893 udp
FR 87.98.176.30:6893 udp
FR 87.98.176.31:6893 udp
FR 87.98.176.32:6893 udp
FR 87.98.176.33:6893 udp
FR 87.98.176.34:6893 udp
FR 87.98.176.35:6893 udp
FR 87.98.176.36:6893 udp
FR 87.98.176.37:6893 udp
FR 87.98.176.38:6893 udp
FR 87.98.176.39:6893 udp
FR 87.98.176.40:6893 udp
FR 87.98.176.41:6893 udp
FR 87.98.176.42:6893 udp
FR 87.98.176.43:6893 udp
FR 87.98.176.44:6893 udp
FR 87.98.176.45:6893 udp
FR 87.98.176.46:6893 udp
FR 87.98.176.47:6893 udp
FR 87.98.176.48:6893 udp
FR 87.98.176.49:6893 udp
FR 87.98.176.50:6893 udp
FR 87.98.176.51:6893 udp
FR 87.98.176.52:6893 udp
FR 87.98.176.53:6893 udp
FR 87.98.176.54:6893 udp
FR 87.98.176.55:6893 udp
FR 87.98.176.56:6893 udp
FR 87.98.176.57:6893 udp
FR 87.98.176.58:6893 udp
FR 87.98.176.59:6893 udp
FR 87.98.176.60:6893 udp
FR 87.98.176.61:6893 udp
FR 87.98.176.62:6893 udp
FR 87.98.176.63:6893 udp
FR 87.98.176.64:6893 udp
FR 87.98.176.65:6893 udp
FR 87.98.176.66:6893 udp
FR 87.98.176.67:6893 udp
FR 87.98.176.68:6893 udp
FR 87.98.176.69:6893 udp
FR 87.98.176.70:6893 udp
FR 87.98.176.71:6893 udp
FR 87.98.176.72:6893 udp
FR 87.98.176.73:6893 udp
FR 87.98.176.74:6893 udp
FR 87.98.176.75:6893 udp
FR 87.98.176.76:6893 udp
FR 87.98.176.77:6893 udp
FR 87.98.176.78:6893 udp
FR 87.98.176.79:6893 udp
FR 87.98.176.80:6893 udp
FR 87.98.176.81:6893 udp
FR 87.98.176.82:6893 udp
FR 87.98.176.83:6893 udp
FR 87.98.176.84:6893 udp
FR 87.98.176.85:6893 udp
FR 87.98.176.86:6893 udp
FR 87.98.176.87:6893 udp
FR 87.98.176.88:6893 udp
FR 87.98.176.89:6893 udp
FR 87.98.176.90:6893 udp
FR 87.98.176.91:6893 udp
FR 87.98.176.92:6893 udp
FR 87.98.176.93:6893 udp
FR 87.98.176.94:6893 udp
FR 87.98.176.95:6893 udp
FR 87.98.176.96:6893 udp
FR 87.98.176.97:6893 udp
FR 87.98.176.98:6893 udp
FR 87.98.176.99:6893 udp
FR 87.98.176.100:6893 udp
FR 87.98.176.101:6893 udp
FR 87.98.176.102:6893 udp
FR 87.98.176.103:6893 udp
FR 87.98.176.104:6893 udp
FR 87.98.176.105:6893 udp
FR 87.98.176.106:6893 udp
FR 87.98.176.107:6893 udp
FR 87.98.176.108:6893 udp
FR 87.98.176.109:6893 udp
FR 87.98.176.110:6893 udp
FR 87.98.176.111:6893 udp
FR 87.98.176.112:6893 udp
FR 87.98.176.113:6893 udp
FR 87.98.176.114:6893 udp
FR 87.98.176.115:6893 udp
FR 87.98.176.116:6893 udp
FR 87.98.176.117:6893 udp
FR 87.98.176.118:6893 udp
FR 87.98.176.119:6893 udp
FR 87.98.176.120:6893 udp
FR 87.98.176.121:6893 udp
FR 87.98.176.122:6893 udp
FR 87.98.176.123:6893 udp
FR 87.98.176.124:6893 udp
FR 87.98.176.125:6893 udp
FR 87.98.176.126:6893 udp
FR 87.98.176.127:6893 udp
FR 87.98.176.128:6893 udp
FR 87.98.176.129:6893 udp
FR 87.98.176.130:6893 udp
FR 87.98.176.131:6893 udp
FR 87.98.176.132:6893 udp
FR 87.98.176.133:6893 udp
FR 87.98.176.134:6893 udp
FR 87.98.176.135:6893 udp
FR 87.98.176.136:6893 udp
FR 87.98.176.137:6893 udp
FR 87.98.176.138:6893 udp
FR 87.98.176.139:6893 udp
FR 87.98.176.140:6893 udp
FR 87.98.176.141:6893 udp
FR 87.98.176.142:6893 udp
FR 87.98.176.143:6893 udp
FR 87.98.176.144:6893 udp
FR 87.98.176.145:6893 udp
FR 87.98.176.146:6893 udp
FR 87.98.176.147:6893 udp
FR 87.98.176.148:6893 udp
FR 87.98.176.149:6893 udp
FR 87.98.176.150:6893 udp
FR 87.98.176.151:6893 udp
FR 87.98.176.152:6893 udp
FR 87.98.176.153:6893 udp
FR 87.98.176.154:6893 udp
FR 87.98.176.155:6893 udp
FR 87.98.176.156:6893 udp
FR 87.98.176.157:6893 udp
FR 87.98.176.158:6893 udp
FR 87.98.176.159:6893 udp
FR 87.98.176.160:6893 udp
FR 87.98.176.161:6893 udp
FR 87.98.176.162:6893 udp
FR 87.98.176.163:6893 udp
FR 87.98.176.164:6893 udp
FR 87.98.176.165:6893 udp
FR 87.98.176.166:6893 udp
FR 87.98.176.167:6893 udp
FR 87.98.176.168:6893 udp
FR 87.98.176.169:6893 udp
FR 87.98.176.170:6893 udp
FR 87.98.176.171:6893 udp
FR 87.98.176.172:6893 udp
FR 87.98.176.173:6893 udp
FR 87.98.176.174:6893 udp
FR 87.98.176.175:6893 udp
FR 87.98.176.176:6893 udp
FR 87.98.176.177:6893 udp
FR 87.98.176.178:6893 udp
FR 87.98.176.179:6893 udp
FR 87.98.176.180:6893 udp
FR 87.98.176.181:6893 udp
FR 87.98.176.182:6893 udp
FR 87.98.176.183:6893 udp
FR 87.98.176.184:6893 udp
FR 87.98.176.185:6893 udp
FR 87.98.176.186:6893 udp
FR 87.98.176.187:6893 udp
FR 87.98.176.188:6893 udp
FR 87.98.176.189:6893 udp
FR 87.98.176.190:6893 udp
FR 87.98.176.191:6893 udp
FR 87.98.176.192:6893 udp
FR 87.98.176.193:6893 udp
FR 87.98.176.194:6893 udp
FR 87.98.176.195:6893 udp
FR 87.98.176.196:6893 udp
FR 87.98.176.197:6893 udp
FR 87.98.176.198:6893 udp
FR 87.98.176.199:6893 udp
FR 87.98.176.200:6893 udp
FR 87.98.176.201:6893 udp
FR 87.98.176.202:6893 udp
FR 87.98.176.203:6893 udp
FR 87.98.176.204:6893 udp
FR 87.98.176.205:6893 udp
FR 87.98.176.206:6893 udp
FR 87.98.176.207:6893 udp
FR 87.98.176.208:6893 udp
FR 87.98.176.209:6893 udp
FR 87.98.176.210:6893 udp
FR 87.98.176.211:6893 udp
FR 87.98.176.212:6893 udp
FR 87.98.176.213:6893 udp
FR 87.98.176.214:6893 udp
FR 87.98.176.215:6893 udp
FR 87.98.176.216:6893 udp
FR 87.98.176.217:6893 udp
FR 87.98.176.218:6893 udp
FR 87.98.176.219:6893 udp
FR 87.98.176.220:6893 udp
FR 87.98.176.221:6893 udp
FR 87.98.176.222:6893 udp
FR 87.98.176.223:6893 udp
FR 87.98.176.224:6893 udp
FR 87.98.176.225:6893 udp
FR 87.98.176.226:6893 udp
FR 87.98.176.227:6893 udp
FR 87.98.176.228:6893 udp
FR 87.98.176.229:6893 udp
FR 87.98.176.230:6893 udp
FR 87.98.176.231:6893 udp
FR 87.98.176.232:6893 udp
FR 87.98.176.233:6893 udp
FR 87.98.176.234:6893 udp
FR 87.98.176.235:6893 udp
FR 87.98.176.236:6893 udp
FR 87.98.176.237:6893 udp
FR 87.98.176.238:6893 udp
FR 87.98.176.239:6893 udp
FR 87.98.176.240:6893 udp
FR 87.98.176.241:6893 udp
FR 87.98.176.242:6893 udp
FR 87.98.176.243:6893 udp
FR 87.98.176.244:6893 udp
FR 87.98.176.245:6893 udp
FR 87.98.176.246:6893 udp
FR 87.98.176.247:6893 udp
FR 87.98.176.248:6893 udp
FR 87.98.176.249:6893 udp
FR 87.98.176.250:6893 udp
FR 87.98.176.251:6893 udp
FR 87.98.176.252:6893 udp
FR 87.98.176.253:6893 udp
FR 87.98.176.254:6893 udp
US 8.8.8.8:53 0.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 1.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 2.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 3.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 4.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 5.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 6.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 7.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 8.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 9.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 10.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 11.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 12.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 13.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 14.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 15.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 16.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 17.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 18.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 19.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 20.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 21.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 22.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 23.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 24.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 25.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 26.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 27.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 28.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 29.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 30.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 31.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 0.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 1.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 2.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 3.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 5.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 6.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 7.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 8.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 9.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 10.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 11.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 12.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 13.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 14.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 16.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 15.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 17.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 4.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 18.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 19.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 20.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 21.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 22.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 23.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 24.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 25.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 26.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 27.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 28.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 29.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 30.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 31.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 0.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 1.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 2.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 3.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 4.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 5.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 6.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 7.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 8.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 9.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 10.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 11.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 12.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 13.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 14.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 15.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 16.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 17.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 18.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 19.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 20.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 21.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 22.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 23.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 24.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 25.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 26.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 27.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 28.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 29.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 30.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 31.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 32.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 34.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 33.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 35.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 36.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 37.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 38.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 39.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 40.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 41.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 42.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 43.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 44.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 46.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 45.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 47.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 48.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 49.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 50.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 51.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 52.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 53.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 54.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 55.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 56.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 57.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 58.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 59.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 60.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 61.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 62.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 63.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 64.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 65.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 66.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 67.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 68.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 69.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 70.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 71.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 72.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 73.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 74.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 75.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 76.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 77.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 78.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 79.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 80.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 81.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 82.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 83.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 84.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 85.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 86.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 87.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 88.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 89.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 90.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 91.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 92.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 93.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 94.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 95.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 96.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 97.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 98.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 99.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 100.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 101.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 102.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 103.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 104.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 105.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 106.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 107.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 108.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 109.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 110.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 111.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 112.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 113.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 114.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 115.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 116.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 117.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 118.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 119.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 120.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 121.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 122.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 123.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 124.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 125.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 126.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 127.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 128.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 129.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 130.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 131.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 132.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 133.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 134.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 135.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 136.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 137.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 138.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 139.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 140.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 141.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 142.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 143.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 144.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 145.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 146.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 147.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 148.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 149.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 151.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 150.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 152.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 153.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 154.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 155.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 156.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 157.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 158.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 159.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 160.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 161.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 162.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 163.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 164.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 166.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 167.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 168.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 169.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 170.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 171.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 172.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 173.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 174.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 175.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 176.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 177.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 178.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 179.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 180.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 181.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 182.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 184.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 185.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 186.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 187.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 188.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 189.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 190.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 191.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 192.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 193.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 194.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 195.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 197.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 198.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 199.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 200.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 201.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 202.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 203.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 204.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 205.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 206.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 207.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 208.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 209.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 210.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 211.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 212.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 213.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 214.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 215.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 216.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 217.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 218.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 219.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 220.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 221.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 222.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 223.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 224.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 225.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 226.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 227.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 228.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 229.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 230.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 231.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 232.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 233.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 234.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 235.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 236.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 237.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 238.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 239.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 240.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 241.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 242.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 243.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 244.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 246.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 245.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 248.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 249.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 250.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 251.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 252.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 253.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 254.176.98.87.in-addr.arpa udp
FR 87.98.176.255:6893 udp
FR 87.98.177.0:6893 udp
FR 87.98.177.1:6893 udp
FR 87.98.177.2:6893 udp
FR 87.98.177.3:6893 udp
FR 87.98.177.4:6893 udp
FR 87.98.177.5:6893 udp
FR 87.98.177.6:6893 udp
FR 87.98.177.7:6893 udp
FR 87.98.177.8:6893 udp
FR 87.98.177.9:6893 udp
FR 87.98.177.10:6893 udp
FR 87.98.177.11:6893 udp
FR 87.98.177.12:6893 udp
FR 87.98.177.13:6893 udp
FR 87.98.177.14:6893 udp
FR 87.98.177.15:6893 udp
FR 87.98.177.16:6893 udp
FR 87.98.177.17:6893 udp
FR 87.98.177.18:6893 udp
FR 87.98.177.19:6893 udp
FR 87.98.177.20:6893 udp
FR 87.98.177.21:6893 udp
FR 87.98.177.22:6893 udp
FR 87.98.177.23:6893 udp
FR 87.98.177.24:6893 udp
FR 87.98.177.25:6893 udp
FR 87.98.177.26:6893 udp
FR 87.98.177.27:6893 udp
FR 87.98.177.28:6893 udp
FR 87.98.177.29:6893 udp
FR 87.98.177.30:6893 udp
FR 87.98.177.31:6893 udp
FR 87.98.177.32:6893 udp
FR 87.98.177.33:6893 udp
FR 87.98.177.34:6893 udp
FR 87.98.177.35:6893 udp
FR 87.98.177.36:6893 udp
FR 87.98.177.37:6893 udp
FR 87.98.177.38:6893 udp
FR 87.98.177.39:6893 udp
FR 87.98.177.40:6893 udp
FR 87.98.177.41:6893 udp
FR 87.98.177.42:6893 udp
FR 87.98.177.43:6893 udp
FR 87.98.177.44:6893 udp
FR 87.98.177.45:6893 udp
FR 87.98.177.46:6893 udp
FR 87.98.177.47:6893 udp
FR 87.98.177.48:6893 udp
FR 87.98.177.49:6893 udp
FR 87.98.177.50:6893 udp
FR 87.98.177.51:6893 udp
FR 87.98.177.52:6893 udp
FR 87.98.177.53:6893 udp
FR 87.98.177.54:6893 udp
FR 87.98.177.55:6893 udp
FR 87.98.177.56:6893 udp
FR 87.98.177.57:6893 udp
FR 87.98.177.58:6893 udp
FR 87.98.177.59:6893 udp
FR 87.98.177.60:6893 udp
FR 87.98.177.61:6893 udp
FR 87.98.177.62:6893 udp
FR 87.98.177.63:6893 udp
FR 87.98.177.64:6893 udp
FR 87.98.177.65:6893 udp
FR 87.98.177.66:6893 udp
FR 87.98.177.67:6893 udp
FR 87.98.177.68:6893 udp
FR 87.98.177.69:6893 udp
FR 87.98.177.70:6893 udp
FR 87.98.177.71:6893 udp
FR 87.98.177.72:6893 udp
FR 87.98.177.73:6893 udp
FR 87.98.177.74:6893 udp
FR 87.98.177.75:6893 udp
FR 87.98.177.76:6893 udp
FR 87.98.177.77:6893 udp
FR 87.98.177.78:6893 udp
FR 87.98.177.79:6893 udp
FR 87.98.177.80:6893 udp
FR 87.98.177.81:6893 udp
FR 87.98.177.82:6893 udp
FR 87.98.177.83:6893 udp
FR 87.98.177.84:6893 udp
FR 87.98.177.85:6893 udp
FR 87.98.177.86:6893 udp
FR 87.98.177.87:6893 udp
FR 87.98.177.88:6893 udp
FR 87.98.177.89:6893 udp
FR 87.98.177.90:6893 udp
FR 87.98.177.91:6893 udp
FR 87.98.177.92:6893 udp
FR 87.98.177.93:6893 udp
FR 87.98.177.94:6893 udp
FR 87.98.177.95:6893 udp
FR 87.98.177.96:6893 udp
FR 87.98.177.97:6893 udp
FR 87.98.177.98:6893 udp
FR 87.98.177.99:6893 udp
FR 87.98.177.100:6893 udp
FR 87.98.177.101:6893 udp
FR 87.98.177.102:6893 udp
FR 87.98.177.103:6893 udp
FR 87.98.177.104:6893 udp
FR 87.98.177.105:6893 udp
FR 87.98.177.106:6893 udp
FR 87.98.177.107:6893 udp
FR 87.98.177.108:6893 udp
FR 87.98.177.109:6893 udp
FR 87.98.177.110:6893 udp
FR 87.98.177.111:6893 udp
FR 87.98.177.112:6893 udp
FR 87.98.177.113:6893 udp
FR 87.98.177.114:6893 udp
FR 87.98.177.115:6893 udp
FR 87.98.177.116:6893 udp
FR 87.98.177.117:6893 udp
FR 87.98.177.118:6893 udp
FR 87.98.177.119:6893 udp
FR 87.98.177.120:6893 udp
FR 87.98.177.121:6893 udp
FR 87.98.177.122:6893 udp
FR 87.98.177.123:6893 udp
FR 87.98.177.124:6893 udp
FR 87.98.177.125:6893 udp
FR 87.98.177.126:6893 udp
FR 87.98.177.127:6893 udp
FR 87.98.177.128:6893 udp
FR 87.98.177.129:6893 udp
FR 87.98.177.130:6893 udp
FR 87.98.177.131:6893 udp
FR 87.98.177.132:6893 udp
FR 87.98.177.133:6893 udp
FR 87.98.177.134:6893 udp
FR 87.98.177.135:6893 udp
FR 87.98.177.136:6893 udp
FR 87.98.177.137:6893 udp
FR 87.98.177.138:6893 udp
FR 87.98.177.139:6893 udp
FR 87.98.177.140:6893 udp
FR 87.98.177.141:6893 udp
FR 87.98.177.142:6893 udp
FR 87.98.177.143:6893 udp
FR 87.98.177.144:6893 udp
FR 87.98.177.145:6893 udp
FR 87.98.177.146:6893 udp
FR 87.98.177.147:6893 udp
FR 87.98.177.148:6893 udp
FR 87.98.177.149:6893 udp
FR 87.98.177.150:6893 udp
FR 87.98.177.151:6893 udp
FR 87.98.177.152:6893 udp
FR 87.98.177.153:6893 udp
FR 87.98.177.154:6893 udp
FR 87.98.177.155:6893 udp
FR 87.98.177.156:6893 udp
FR 87.98.177.157:6893 udp
FR 87.98.177.158:6893 udp
FR 87.98.177.159:6893 udp
FR 87.98.177.160:6893 udp
FR 87.98.177.161:6893 udp
FR 87.98.177.162:6893 udp
FR 87.98.177.163:6893 udp
FR 87.98.177.164:6893 udp
FR 87.98.177.165:6893 udp
FR 87.98.177.166:6893 udp
FR 87.98.177.167:6893 udp
FR 87.98.177.168:6893 udp
FR 87.98.177.169:6893 udp
FR 87.98.177.170:6893 udp
FR 87.98.177.171:6893 udp
FR 87.98.177.172:6893 udp
FR 87.98.177.173:6893 udp
FR 87.98.177.174:6893 udp
FR 87.98.177.175:6893 udp
FR 87.98.177.176:6893 udp
FR 87.98.177.177:6893 udp
FR 87.98.177.178:6893 udp
FR 87.98.177.179:6893 udp
FR 87.98.177.180:6893 udp
FR 87.98.177.181:6893 udp
FR 87.98.177.182:6893 udp
FR 87.98.177.183:6893 udp
FR 87.98.177.184:6893 udp
FR 87.98.177.185:6893 udp
FR 87.98.177.186:6893 udp
FR 87.98.177.187:6893 udp
FR 87.98.177.188:6893 udp
FR 87.98.177.189:6893 udp
FR 87.98.177.190:6893 udp
FR 87.98.177.191:6893 udp
FR 87.98.177.192:6893 udp
FR 87.98.177.193:6893 udp
FR 87.98.177.194:6893 udp
FR 87.98.177.195:6893 udp
FR 87.98.177.196:6893 udp
FR 87.98.177.197:6893 udp
FR 87.98.177.198:6893 udp
FR 87.98.177.199:6893 udp
FR 87.98.177.200:6893 udp
FR 87.98.177.201:6893 udp
FR 87.98.177.202:6893 udp
FR 87.98.177.203:6893 udp
FR 87.98.177.204:6893 udp
FR 87.98.177.205:6893 udp
FR 87.98.177.206:6893 udp
FR 87.98.177.207:6893 udp
FR 87.98.177.208:6893 udp
FR 87.98.177.209:6893 udp
FR 87.98.177.210:6893 udp
FR 87.98.177.211:6893 udp
FR 87.98.177.212:6893 udp
FR 87.98.177.213:6893 udp
FR 87.98.177.214:6893 udp
FR 87.98.177.215:6893 udp
FR 87.98.177.216:6893 udp
FR 87.98.177.217:6893 udp
FR 87.98.177.218:6893 udp
FR 87.98.177.219:6893 udp
FR 87.98.177.220:6893 udp
FR 87.98.177.221:6893 udp
FR 87.98.177.222:6893 udp
FR 87.98.177.223:6893 udp
FR 87.98.177.224:6893 udp
FR 87.98.177.225:6893 udp
FR 87.98.177.226:6893 udp
FR 87.98.177.227:6893 udp
FR 87.98.177.228:6893 udp
FR 87.98.177.229:6893 udp
FR 87.98.177.230:6893 udp
FR 87.98.177.231:6893 udp
FR 87.98.177.232:6893 udp
FR 87.98.177.233:6893 udp
FR 87.98.177.234:6893 udp
FR 87.98.177.235:6893 udp
FR 87.98.177.236:6893 udp
FR 87.98.177.237:6893 udp
FR 87.98.177.238:6893 udp
FR 87.98.177.239:6893 udp
FR 87.98.177.240:6893 udp
FR 87.98.177.241:6893 udp
FR 87.98.177.242:6893 udp
FR 87.98.177.243:6893 udp
FR 87.98.177.244:6893 udp
FR 87.98.177.245:6893 udp
FR 87.98.177.246:6893 udp
FR 87.98.177.247:6893 udp
FR 87.98.177.248:6893 udp
FR 87.98.177.249:6893 udp
FR 87.98.177.250:6893 udp
FR 87.98.177.251:6893 udp
FR 87.98.177.252:6893 udp
FR 87.98.177.253:6893 udp
FR 87.98.177.254:6893 udp
US 8.8.8.8:53 255.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 0.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 1.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 2.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 4.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 3.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 5.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 6.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 7.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 8.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 9.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 10.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 12.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 11.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 14.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 15.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 16.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 13.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 18.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 19.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 20.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 22.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 21.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 23.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 25.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 26.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 27.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 28.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 29.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 30.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 31.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 32.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 33.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 34.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 35.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 36.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 37.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 38.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 39.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 40.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 41.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 42.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 43.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 45.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 44.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 46.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 47.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 49.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 48.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 50.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 51.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 52.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 53.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 54.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 55.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 56.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 57.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 58.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 59.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 60.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 61.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 62.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 63.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 64.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 65.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 66.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 67.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 68.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 69.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 70.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 71.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 72.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 73.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 74.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 75.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 76.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 77.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 78.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 79.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 80.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 81.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 82.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 83.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 84.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 85.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 86.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 87.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 88.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 89.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 90.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 91.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 92.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 94.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 95.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 96.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 97.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 98.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 99.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 100.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 101.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 102.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 103.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 104.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 105.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 106.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 107.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 108.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 109.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 110.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 111.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 112.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 113.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 114.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 115.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 116.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 117.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 119.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 118.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 120.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 121.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 122.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 123.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 124.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 125.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 126.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 127.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 128.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 129.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 130.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 131.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 132.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 134.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 133.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 135.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 136.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 137.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 138.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 140.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 142.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 143.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 144.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 145.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 146.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 147.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 148.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 149.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 150.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 151.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 152.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 154.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 153.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 155.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 156.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 157.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 158.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 159.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 160.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 161.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 162.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 163.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 164.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 165.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 166.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 167.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 168.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 169.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 170.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 171.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 172.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 173.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 174.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 175.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 176.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 177.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 178.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 179.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 180.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 181.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 182.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 183.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 184.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 185.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 186.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 187.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 188.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 189.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 190.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 191.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 192.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 193.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 194.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 195.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 196.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 197.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 198.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 199.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 200.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 201.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 202.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 203.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 204.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 206.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 205.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 207.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 208.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 209.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 210.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 211.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 212.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 213.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 214.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 215.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 216.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 218.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 219.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 220.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 221.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 222.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 223.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 224.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 226.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 225.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 227.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 228.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 229.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 230.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 231.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 232.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 233.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 234.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 235.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 236.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 237.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 238.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 239.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 240.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 241.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 242.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 243.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 244.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 245.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 246.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 247.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 248.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 249.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 250.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 251.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 252.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 253.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 254.177.98.87.in-addr.arpa udp
FR 87.98.177.255:6893 udp
FR 87.98.178.0:6893 udp
FR 87.98.178.1:6893 udp
FR 87.98.178.2:6893 udp
FR 87.98.178.3:6893 udp
FR 87.98.178.4:6893 udp
FR 87.98.178.5:6893 udp
FR 87.98.178.6:6893 udp
FR 87.98.178.7:6893 udp
FR 87.98.178.8:6893 udp
FR 87.98.178.9:6893 udp
FR 87.98.178.10:6893 udp
FR 87.98.178.11:6893 udp
FR 87.98.178.12:6893 udp
FR 87.98.178.13:6893 udp
FR 87.98.178.14:6893 udp
FR 87.98.178.15:6893 udp
FR 87.98.178.16:6893 udp
FR 87.98.178.17:6893 udp
FR 87.98.178.18:6893 udp
FR 87.98.178.19:6893 udp
FR 87.98.178.20:6893 udp
FR 87.98.178.21:6893 udp
FR 87.98.178.22:6893 udp
FR 87.98.178.23:6893 udp
FR 87.98.178.24:6893 udp
FR 87.98.178.25:6893 udp
FR 87.98.178.26:6893 udp
FR 87.98.178.27:6893 udp
FR 87.98.178.28:6893 udp
FR 87.98.178.29:6893 udp
FR 87.98.178.30:6893 udp
FR 87.98.178.31:6893 udp
FR 87.98.178.32:6893 udp
FR 87.98.178.33:6893 udp
FR 87.98.178.34:6893 udp
FR 87.98.178.35:6893 udp
FR 87.98.178.36:6893 udp
FR 87.98.178.37:6893 udp
FR 87.98.178.38:6893 udp
FR 87.98.178.39:6893 udp
FR 87.98.178.40:6893 udp
FR 87.98.178.41:6893 udp
FR 87.98.178.42:6893 udp
FR 87.98.178.43:6893 udp
FR 87.98.178.44:6893 udp
FR 87.98.178.45:6893 udp
FR 87.98.178.46:6893 udp
FR 87.98.178.47:6893 udp
FR 87.98.178.48:6893 udp
FR 87.98.178.49:6893 udp
FR 87.98.178.50:6893 udp
FR 87.98.178.51:6893 udp
FR 87.98.178.52:6893 udp
FR 87.98.178.53:6893 udp
FR 87.98.178.54:6893 udp
FR 87.98.178.55:6893 udp
FR 87.98.178.56:6893 udp
FR 87.98.178.57:6893 udp
FR 87.98.178.58:6893 udp
FR 87.98.178.59:6893 udp
FR 87.98.178.60:6893 udp
FR 87.98.178.61:6893 udp
FR 87.98.178.62:6893 udp
FR 87.98.178.63:6893 udp
FR 87.98.178.64:6893 udp
FR 87.98.178.65:6893 udp
FR 87.98.178.66:6893 udp
FR 87.98.178.67:6893 udp
FR 87.98.178.68:6893 udp
FR 87.98.178.69:6893 udp
FR 87.98.178.70:6893 udp
FR 87.98.178.71:6893 udp
FR 87.98.178.72:6893 udp
FR 87.98.178.73:6893 udp
FR 87.98.178.74:6893 udp
FR 87.98.178.75:6893 udp
FR 87.98.178.76:6893 udp
FR 87.98.178.77:6893 udp
FR 87.98.178.78:6893 udp
FR 87.98.178.79:6893 udp
FR 87.98.178.80:6893 udp
FR 87.98.178.81:6893 udp
FR 87.98.178.82:6893 udp
FR 87.98.178.83:6893 udp
FR 87.98.178.84:6893 udp
FR 87.98.178.85:6893 udp
FR 87.98.178.86:6893 udp
FR 87.98.178.87:6893 udp
FR 87.98.178.88:6893 udp
FR 87.98.178.89:6893 udp
FR 87.98.178.90:6893 udp
FR 87.98.178.91:6893 udp
FR 87.98.178.92:6893 udp
FR 87.98.178.93:6893 udp
FR 87.98.178.94:6893 udp
FR 87.98.178.95:6893 udp
FR 87.98.178.96:6893 udp
FR 87.98.178.97:6893 udp
FR 87.98.178.98:6893 udp
FR 87.98.178.99:6893 udp
FR 87.98.178.100:6893 udp
FR 87.98.178.101:6893 udp
FR 87.98.178.102:6893 udp
FR 87.98.178.103:6893 udp
FR 87.98.178.104:6893 udp
FR 87.98.178.105:6893 udp
FR 87.98.178.106:6893 udp
FR 87.98.178.107:6893 udp
FR 87.98.178.108:6893 udp
FR 87.98.178.109:6893 udp
FR 87.98.178.110:6893 udp
FR 87.98.178.111:6893 udp
FR 87.98.178.112:6893 udp
FR 87.98.178.113:6893 udp
FR 87.98.178.114:6893 udp
FR 87.98.178.115:6893 udp
FR 87.98.178.116:6893 udp
FR 87.98.178.117:6893 udp
FR 87.98.178.118:6893 udp
FR 87.98.178.119:6893 udp
FR 87.98.178.120:6893 udp
FR 87.98.178.121:6893 udp
FR 87.98.178.122:6893 udp
FR 87.98.178.123:6893 udp
FR 87.98.178.124:6893 udp
FR 87.98.178.125:6893 udp
FR 87.98.178.126:6893 udp
FR 87.98.178.127:6893 udp
FR 87.98.178.128:6893 udp
FR 87.98.178.129:6893 udp
FR 87.98.178.130:6893 udp
FR 87.98.178.131:6893 udp
FR 87.98.178.132:6893 udp
FR 87.98.178.133:6893 udp
FR 87.98.178.134:6893 udp
FR 87.98.178.135:6893 udp
FR 87.98.178.136:6893 udp
FR 87.98.178.137:6893 udp
FR 87.98.178.138:6893 udp
FR 87.98.178.139:6893 udp
FR 87.98.178.140:6893 udp
FR 87.98.178.141:6893 udp
FR 87.98.178.142:6893 udp
FR 87.98.178.143:6893 udp
FR 87.98.178.144:6893 udp
FR 87.98.178.145:6893 udp
FR 87.98.178.146:6893 udp
FR 87.98.178.147:6893 udp
FR 87.98.178.148:6893 udp
FR 87.98.178.149:6893 udp
FR 87.98.178.150:6893 udp
FR 87.98.178.151:6893 udp
FR 87.98.178.152:6893 udp
FR 87.98.178.153:6893 udp
FR 87.98.178.154:6893 udp
FR 87.98.178.155:6893 udp
FR 87.98.178.156:6893 udp
FR 87.98.178.157:6893 udp
FR 87.98.178.158:6893 udp
FR 87.98.178.159:6893 udp
FR 87.98.178.160:6893 udp
FR 87.98.178.161:6893 udp
FR 87.98.178.162:6893 udp
FR 87.98.178.163:6893 udp
FR 87.98.178.164:6893 udp
FR 87.98.178.165:6893 udp
FR 87.98.178.166:6893 udp
FR 87.98.178.167:6893 udp
FR 87.98.178.168:6893 udp
FR 87.98.178.169:6893 udp
FR 87.98.178.170:6893 udp
FR 87.98.178.171:6893 udp
FR 87.98.178.172:6893 udp
FR 87.98.178.173:6893 udp
FR 87.98.178.174:6893 udp
FR 87.98.178.175:6893 udp
FR 87.98.178.176:6893 udp
FR 87.98.178.177:6893 udp
FR 87.98.178.178:6893 udp
FR 87.98.178.179:6893 udp
FR 87.98.178.180:6893 udp
FR 87.98.178.181:6893 udp
FR 87.98.178.182:6893 udp
FR 87.98.178.183:6893 udp
FR 87.98.178.184:6893 udp
FR 87.98.178.185:6893 udp
FR 87.98.178.186:6893 udp
FR 87.98.178.187:6893 udp
FR 87.98.178.188:6893 udp
FR 87.98.178.189:6893 udp
FR 87.98.178.190:6893 udp
FR 87.98.178.191:6893 udp
FR 87.98.178.192:6893 udp
FR 87.98.178.193:6893 udp
FR 87.98.178.194:6893 udp
FR 87.98.178.195:6893 udp
FR 87.98.178.196:6893 udp
FR 87.98.178.197:6893 udp
FR 87.98.178.198:6893 udp
FR 87.98.178.199:6893 udp
FR 87.98.178.200:6893 udp
FR 87.98.178.201:6893 udp
FR 87.98.178.202:6893 udp
FR 87.98.178.203:6893 udp
FR 87.98.178.204:6893 udp
FR 87.98.178.205:6893 udp
FR 87.98.178.206:6893 udp
FR 87.98.178.207:6893 udp
FR 87.98.178.208:6893 udp
FR 87.98.178.209:6893 udp
FR 87.98.178.210:6893 udp
FR 87.98.178.211:6893 udp
FR 87.98.178.212:6893 udp
FR 87.98.178.213:6893 udp
FR 87.98.178.214:6893 udp
FR 87.98.178.215:6893 udp
FR 87.98.178.216:6893 udp
FR 87.98.178.217:6893 udp
FR 87.98.178.218:6893 udp
FR 87.98.178.219:6893 udp
FR 87.98.178.220:6893 udp
FR 87.98.178.221:6893 udp
FR 87.98.178.222:6893 udp
FR 87.98.178.223:6893 udp
FR 87.98.178.224:6893 udp
FR 87.98.178.225:6893 udp
FR 87.98.178.226:6893 udp
FR 87.98.178.227:6893 udp
FR 87.98.178.228:6893 udp
FR 87.98.178.229:6893 udp
FR 87.98.178.230:6893 udp
FR 87.98.178.231:6893 udp
FR 87.98.178.232:6893 udp
FR 87.98.178.233:6893 udp
FR 87.98.178.234:6893 udp
FR 87.98.178.235:6893 udp
FR 87.98.178.236:6893 udp
FR 87.98.178.237:6893 udp
FR 87.98.178.238:6893 udp
FR 87.98.178.239:6893 udp
FR 87.98.178.240:6893 udp
FR 87.98.178.241:6893 udp
FR 87.98.178.242:6893 udp
FR 87.98.178.243:6893 udp
FR 87.98.178.244:6893 udp
FR 87.98.178.245:6893 udp
FR 87.98.178.246:6893 udp
FR 87.98.178.247:6893 udp
FR 87.98.178.248:6893 udp
FR 87.98.178.249:6893 udp
FR 87.98.178.250:6893 udp
FR 87.98.178.251:6893 udp
FR 87.98.178.252:6893 udp
FR 87.98.178.253:6893 udp
FR 87.98.178.254:6893 udp
US 8.8.8.8:53 255.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 0.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 1.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 2.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 4.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 6.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 8.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 7.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 10.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 9.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 11.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 13.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 14.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 15.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 16.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 18.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 17.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 19.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 20.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 21.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 22.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 23.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 24.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 25.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 26.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 27.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 28.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 29.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 30.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 31.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 33.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 34.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 35.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 36.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 37.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 38.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 39.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 41.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 40.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 43.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 44.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 45.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 46.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 47.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 48.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 49.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 50.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 51.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 52.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 53.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 54.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 55.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 57.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 56.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 58.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 59.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 60.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 63.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 61.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 64.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 65.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 66.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 67.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 68.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 69.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 72.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 71.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 73.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 74.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 75.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 77.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 76.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 78.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 79.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 80.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 81.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 82.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 83.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 85.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 84.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 86.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 87.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 88.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 89.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 90.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 91.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 93.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 94.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 95.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 96.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 97.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 98.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 99.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 100.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 101.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 102.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 103.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 104.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 105.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 106.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 107.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 108.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 109.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 110.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 111.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 112.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 113.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 114.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 115.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 116.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 117.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 118.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 119.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 120.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 121.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 122.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 123.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 124.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 125.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 126.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 127.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 128.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 129.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 130.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 131.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 133.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 134.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 132.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 135.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 136.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 137.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 138.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 139.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 140.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 141.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 142.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 143.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 144.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 145.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 146.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 147.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 148.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 149.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 150.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 151.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 152.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 153.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 154.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 155.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 157.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 158.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 160.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 159.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 161.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 162.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 163.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 164.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 165.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 166.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 167.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 169.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 170.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 171.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 172.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 173.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 174.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 175.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 177.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 176.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 178.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 179.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 180.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 181.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 182.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 183.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 185.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 184.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 186.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 187.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 188.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 190.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 189.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 191.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 192.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 193.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 194.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 195.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 197.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 196.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 198.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 199.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 200.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 201.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 202.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 203.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 204.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 205.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 206.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 207.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 208.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 209.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 210.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 212.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 211.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 213.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 214.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 215.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 218.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 219.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 220.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 221.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 222.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 223.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 224.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 225.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 226.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 227.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 228.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 229.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 230.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 231.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 232.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 233.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 234.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 235.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 236.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 238.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 239.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 240.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 241.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 242.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 243.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 244.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 245.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 246.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 247.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 248.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 250.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 249.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 251.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 252.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 253.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 254.178.98.87.in-addr.arpa udp
FR 87.98.178.255:6893 udp
FR 87.98.179.0:6893 udp
FR 87.98.179.1:6893 udp
FR 87.98.179.2:6893 udp
FR 87.98.179.3:6893 udp
FR 87.98.179.4:6893 udp
FR 87.98.179.5:6893 udp
FR 87.98.179.6:6893 udp
FR 87.98.179.7:6893 udp
FR 87.98.179.8:6893 udp
FR 87.98.179.9:6893 udp
FR 87.98.179.10:6893 udp
FR 87.98.179.11:6893 udp
FR 87.98.179.12:6893 udp
FR 87.98.179.13:6893 udp
FR 87.98.179.14:6893 udp
FR 87.98.179.15:6893 udp
FR 87.98.179.16:6893 udp
FR 87.98.179.17:6893 udp
FR 87.98.179.18:6893 udp
FR 87.98.179.19:6893 udp
FR 87.98.179.20:6893 udp
FR 87.98.179.21:6893 udp
FR 87.98.179.22:6893 udp
FR 87.98.179.23:6893 udp
FR 87.98.179.24:6893 udp
FR 87.98.179.25:6893 udp
FR 87.98.179.26:6893 udp
FR 87.98.179.27:6893 udp
FR 87.98.179.28:6893 udp
FR 87.98.179.29:6893 udp
FR 87.98.179.30:6893 udp
FR 87.98.179.31:6893 udp
FR 87.98.179.32:6893 udp
FR 87.98.179.33:6893 udp
FR 87.98.179.34:6893 udp
FR 87.98.179.35:6893 udp
FR 87.98.179.36:6893 udp
FR 87.98.179.37:6893 udp
FR 87.98.179.38:6893 udp
FR 87.98.179.39:6893 udp
FR 87.98.179.40:6893 udp
FR 87.98.179.41:6893 udp
FR 87.98.179.42:6893 udp
FR 87.98.179.43:6893 udp
FR 87.98.179.44:6893 udp
FR 87.98.179.45:6893 udp
FR 87.98.179.46:6893 udp
FR 87.98.179.47:6893 udp
FR 87.98.179.48:6893 udp
FR 87.98.179.49:6893 udp
FR 87.98.179.50:6893 udp
FR 87.98.179.51:6893 udp
FR 87.98.179.52:6893 udp
FR 87.98.179.53:6893 udp
FR 87.98.179.54:6893 udp
FR 87.98.179.55:6893 udp
FR 87.98.179.56:6893 udp
FR 87.98.179.57:6893 udp
FR 87.98.179.58:6893 udp
FR 87.98.179.59:6893 udp
FR 87.98.179.60:6893 udp
FR 87.98.179.61:6893 udp
FR 87.98.179.62:6893 udp
FR 87.98.179.63:6893 udp
FR 87.98.179.64:6893 udp
FR 87.98.179.65:6893 udp
FR 87.98.179.66:6893 udp
FR 87.98.179.67:6893 udp
FR 87.98.179.68:6893 udp
FR 87.98.179.69:6893 udp
FR 87.98.179.70:6893 udp
FR 87.98.179.71:6893 udp
FR 87.98.179.72:6893 udp
FR 87.98.179.73:6893 udp
FR 87.98.179.74:6893 udp
FR 87.98.179.75:6893 udp
FR 87.98.179.76:6893 udp
FR 87.98.179.77:6893 udp
FR 87.98.179.78:6893 udp
FR 87.98.179.79:6893 udp
FR 87.98.179.80:6893 udp
FR 87.98.179.81:6893 udp
FR 87.98.179.82:6893 udp
FR 87.98.179.83:6893 udp
FR 87.98.179.84:6893 udp
FR 87.98.179.85:6893 udp
FR 87.98.179.86:6893 udp
FR 87.98.179.87:6893 udp
FR 87.98.179.88:6893 udp
FR 87.98.179.89:6893 udp
FR 87.98.179.90:6893 udp
FR 87.98.179.91:6893 udp
FR 87.98.179.92:6893 udp
FR 87.98.179.93:6893 udp
FR 87.98.179.94:6893 udp
FR 87.98.179.95:6893 udp
FR 87.98.179.96:6893 udp
FR 87.98.179.97:6893 udp
FR 87.98.179.98:6893 udp
FR 87.98.179.99:6893 udp
FR 87.98.179.100:6893 udp
FR 87.98.179.101:6893 udp
FR 87.98.179.102:6893 udp
FR 87.98.179.103:6893 udp
FR 87.98.179.104:6893 udp
FR 87.98.179.105:6893 udp
FR 87.98.179.106:6893 udp
FR 87.98.179.107:6893 udp
FR 87.98.179.108:6893 udp
FR 87.98.179.109:6893 udp
FR 87.98.179.110:6893 udp
FR 87.98.179.111:6893 udp
FR 87.98.179.112:6893 udp
FR 87.98.179.113:6893 udp
FR 87.98.179.114:6893 udp
FR 87.98.179.115:6893 udp
FR 87.98.179.116:6893 udp
FR 87.98.179.117:6893 udp
FR 87.98.179.118:6893 udp
FR 87.98.179.119:6893 udp
FR 87.98.179.120:6893 udp
FR 87.98.179.121:6893 udp
FR 87.98.179.122:6893 udp
FR 87.98.179.123:6893 udp
FR 87.98.179.124:6893 udp
FR 87.98.179.125:6893 udp
FR 87.98.179.126:6893 udp
FR 87.98.179.127:6893 udp
FR 87.98.179.128:6893 udp
FR 87.98.179.129:6893 udp
FR 87.98.179.130:6893 udp
FR 87.98.179.131:6893 udp
FR 87.98.179.132:6893 udp
FR 87.98.179.133:6893 udp
FR 87.98.179.134:6893 udp
FR 87.98.179.135:6893 udp
FR 87.98.179.136:6893 udp
FR 87.98.179.137:6893 udp
FR 87.98.179.138:6893 udp
FR 87.98.179.139:6893 udp
FR 87.98.179.140:6893 udp
FR 87.98.179.141:6893 udp
FR 87.98.179.142:6893 udp
FR 87.98.179.143:6893 udp
FR 87.98.179.144:6893 udp
FR 87.98.179.145:6893 udp
FR 87.98.179.146:6893 udp
FR 87.98.179.147:6893 udp
FR 87.98.179.148:6893 udp
FR 87.98.179.149:6893 udp
FR 87.98.179.150:6893 udp
FR 87.98.179.151:6893 udp
FR 87.98.179.152:6893 udp
FR 87.98.179.153:6893 udp
FR 87.98.179.154:6893 udp
FR 87.98.179.155:6893 udp
FR 87.98.179.156:6893 udp
FR 87.98.179.157:6893 udp
FR 87.98.179.158:6893 udp
FR 87.98.179.159:6893 udp
FR 87.98.179.160:6893 udp
FR 87.98.179.161:6893 udp
FR 87.98.179.162:6893 udp
FR 87.98.179.163:6893 udp
FR 87.98.179.164:6893 udp
FR 87.98.179.165:6893 udp
FR 87.98.179.166:6893 udp
FR 87.98.179.167:6893 udp
FR 87.98.179.168:6893 udp
FR 87.98.179.169:6893 udp
FR 87.98.179.170:6893 udp
FR 87.98.179.171:6893 udp
FR 87.98.179.172:6893 udp
FR 87.98.179.173:6893 udp
FR 87.98.179.174:6893 udp
FR 87.98.179.175:6893 udp
FR 87.98.179.176:6893 udp
FR 87.98.179.177:6893 udp
FR 87.98.179.178:6893 udp
FR 87.98.179.179:6893 udp
FR 87.98.179.180:6893 udp
FR 87.98.179.181:6893 udp
FR 87.98.179.182:6893 udp
FR 87.98.179.183:6893 udp
FR 87.98.179.184:6893 udp
FR 87.98.179.185:6893 udp
FR 87.98.179.186:6893 udp
FR 87.98.179.187:6893 udp
FR 87.98.179.188:6893 udp
FR 87.98.179.189:6893 udp
FR 87.98.179.190:6893 udp
FR 87.98.179.191:6893 udp
FR 87.98.179.192:6893 udp
FR 87.98.179.193:6893 udp
FR 87.98.179.194:6893 udp
FR 87.98.179.195:6893 udp
FR 87.98.179.196:6893 udp
FR 87.98.179.197:6893 udp
FR 87.98.179.198:6893 udp
FR 87.98.179.199:6893 udp
FR 87.98.179.200:6893 udp
FR 87.98.179.201:6893 udp
FR 87.98.179.202:6893 udp
FR 87.98.179.203:6893 udp
FR 87.98.179.204:6893 udp
FR 87.98.179.205:6893 udp
FR 87.98.179.206:6893 udp
FR 87.98.179.207:6893 udp
FR 87.98.179.208:6893 udp
FR 87.98.179.209:6893 udp
FR 87.98.179.210:6893 udp
FR 87.98.179.211:6893 udp
FR 87.98.179.212:6893 udp
FR 87.98.179.213:6893 udp
FR 87.98.179.214:6893 udp
FR 87.98.179.215:6893 udp
FR 87.98.179.216:6893 udp
FR 87.98.179.217:6893 udp
FR 87.98.179.218:6893 udp
FR 87.98.179.219:6893 udp
FR 87.98.179.220:6893 udp
FR 87.98.179.221:6893 udp
FR 87.98.179.222:6893 udp
FR 87.98.179.223:6893 udp
FR 87.98.179.224:6893 udp
FR 87.98.179.225:6893 udp
FR 87.98.179.226:6893 udp
FR 87.98.179.227:6893 udp
FR 87.98.179.228:6893 udp
FR 87.98.179.229:6893 udp
FR 87.98.179.230:6893 udp
FR 87.98.179.231:6893 udp
FR 87.98.179.232:6893 udp
FR 87.98.179.233:6893 udp
FR 87.98.179.234:6893 udp
FR 87.98.179.235:6893 udp
FR 87.98.179.236:6893 udp
FR 87.98.179.237:6893 udp
FR 87.98.179.238:6893 udp
FR 87.98.179.239:6893 udp
FR 87.98.179.240:6893 udp
FR 87.98.179.241:6893 udp
FR 87.98.179.242:6893 udp
FR 87.98.179.243:6893 udp
FR 87.98.179.244:6893 udp
FR 87.98.179.245:6893 udp
FR 87.98.179.246:6893 udp
FR 87.98.179.247:6893 udp
FR 87.98.179.248:6893 udp
FR 87.98.179.249:6893 udp
FR 87.98.179.250:6893 udp
FR 87.98.179.251:6893 udp
FR 87.98.179.252:6893 udp
FR 87.98.179.253:6893 udp
FR 87.98.179.254:6893 udp
US 8.8.8.8:53 255.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 0.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 1.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 2.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 3.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 4.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 5.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 6.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 7.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 8.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 9.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 10.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 11.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 12.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 13.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 14.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 15.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 16.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 17.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 19.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 20.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 24.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 23.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 21.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 25.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 27.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 26.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 28.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 30.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 22.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 32.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 31.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 33.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 35.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 36.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 34.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 37.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 38.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 39.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 18.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 41.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 43.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 44.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 45.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 47.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 48.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 46.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 40.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 49.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 50.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 51.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 52.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 53.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 54.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 55.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 56.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 57.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 58.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 59.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 60.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 61.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 62.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 63.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 64.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 65.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 66.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 67.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 68.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 69.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 70.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 71.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 72.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 73.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 74.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 75.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 76.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 77.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 78.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 79.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 81.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 80.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 82.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 84.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 83.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 85.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 86.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 87.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 88.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 89.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 90.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 91.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 92.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 93.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 94.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 95.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 97.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 96.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 100.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 101.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 102.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 103.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 104.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 105.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 106.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 108.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 109.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 110.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 111.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 112.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 113.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 114.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 115.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 116.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 117.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 118.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 119.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 121.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 120.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 122.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 123.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 124.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 125.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 126.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 127.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 128.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 129.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 130.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 131.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 132.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 134.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 133.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 135.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 136.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 137.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 138.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 140.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 141.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 142.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 143.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 144.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 145.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 146.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 147.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 148.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 149.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 150.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 151.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 152.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 153.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 154.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 155.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 156.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 157.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 158.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 159.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 160.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 162.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 163.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 164.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 165.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 166.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 167.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 168.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 169.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 170.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 171.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 172.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 173.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 174.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 175.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 176.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 177.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 178.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 179.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 180.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 181.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 183.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 184.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 185.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 186.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 187.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 188.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 189.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 190.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 191.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 192.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 193.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 194.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 195.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 197.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 198.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 199.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 200.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 202.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 201.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 203.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 205.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 206.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 207.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 208.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 209.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 210.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 211.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 212.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 213.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 204.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 215.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 216.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 217.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 218.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 219.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 220.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 221.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 222.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 223.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 224.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 225.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 226.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 227.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 228.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 229.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 230.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 231.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 232.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 233.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 234.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 235.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 236.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 237.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 238.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 239.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 240.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 241.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 242.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 243.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 244.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 247.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 248.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 249.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 250.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 251.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 252.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 253.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 254.179.98.87.in-addr.arpa udp
FR 87.98.179.255:6893 udp
US 8.8.8.8:53 255.179.98.87.in-addr.arpa udp
IE 93.107.12.0:6893 udp
IE 93.107.12.1:6893 udp
IE 93.107.12.2:6893 udp
IE 93.107.12.3:6893 udp
IE 93.107.12.4:6893 udp
IE 93.107.12.5:6893 udp
IE 93.107.12.6:6893 udp
IE 93.107.12.7:6893 udp
IE 93.107.12.8:6893 udp
IE 93.107.12.9:6893 udp
IE 93.107.12.10:6893 udp
IE 93.107.12.11:6893 udp
IE 93.107.12.12:6893 udp
IE 93.107.12.13:6893 udp
IE 93.107.12.14:6893 udp
IE 93.107.12.15:6893 udp
IE 93.107.12.16:6893 udp
IE 93.107.12.17:6893 udp
IE 93.107.12.18:6893 udp
IE 93.107.12.19:6893 udp
IE 93.107.12.20:6893 udp
IE 93.107.12.21:6893 udp
IE 93.107.12.22:6893 udp
IE 93.107.12.23:6893 udp
IE 93.107.12.24:6893 udp
IE 93.107.12.25:6893 udp
IE 93.107.12.26:6893 udp
IE 93.107.12.27:6893 udp
IE 93.107.12.28:6893 udp
IE 93.107.12.29:6893 udp
IE 93.107.12.30:6893 udp
IE 93.107.12.31:6893 udp
TR 95.1.200.0:6893 udp
TR 95.1.200.1:6893 udp
TR 95.1.200.2:6893 udp
TR 95.1.200.3:6893 udp
TR 95.1.200.4:6893 udp
TR 95.1.200.5:6893 udp
TR 95.1.200.6:6893 udp
TR 95.1.200.7:6893 udp
TR 95.1.200.8:6893 udp
TR 95.1.200.9:6893 udp
TR 95.1.200.10:6893 udp
TR 95.1.200.11:6893 udp
TR 95.1.200.12:6893 udp
TR 95.1.200.13:6893 udp
TR 95.1.200.14:6893 udp
TR 95.1.200.15:6893 udp
TR 95.1.200.16:6893 udp
TR 95.1.200.17:6893 udp
TR 95.1.200.18:6893 udp
TR 95.1.200.19:6893 udp
TR 95.1.200.20:6893 udp
TR 95.1.200.21:6893 udp
TR 95.1.200.22:6893 udp
TR 95.1.200.23:6893 udp
TR 95.1.200.24:6893 udp
TR 95.1.200.25:6893 udp
TR 95.1.200.26:6893 udp
TR 95.1.200.27:6893 udp
TR 95.1.200.28:6893 udp
TR 95.1.200.29:6893 udp
TR 95.1.200.30:6893 udp
TR 95.1.200.31:6893 udp
FR 87.98.176.0:6893 udp
FR 87.98.176.1:6893 udp
FR 87.98.176.2:6893 udp
FR 87.98.176.3:6893 udp
FR 87.98.176.4:6893 udp
FR 87.98.176.5:6893 udp
FR 87.98.176.6:6893 udp
FR 87.98.176.7:6893 udp
FR 87.98.176.8:6893 udp
FR 87.98.176.9:6893 udp
FR 87.98.176.10:6893 udp
FR 87.98.176.11:6893 udp
FR 87.98.176.12:6893 udp
FR 87.98.176.13:6893 udp
FR 87.98.176.14:6893 udp
FR 87.98.176.15:6893 udp
FR 87.98.176.16:6893 udp
FR 87.98.176.17:6893 udp
FR 87.98.176.18:6893 udp
FR 87.98.176.19:6893 udp
FR 87.98.176.20:6893 udp
FR 87.98.176.21:6893 udp
FR 87.98.176.22:6893 udp
FR 87.98.176.23:6893 udp
FR 87.98.176.24:6893 udp
FR 87.98.176.25:6893 udp
FR 87.98.176.26:6893 udp
FR 87.98.176.27:6893 udp
FR 87.98.176.28:6893 udp
FR 87.98.176.29:6893 udp
FR 87.98.176.30:6893 udp
FR 87.98.176.31:6893 udp
FR 87.98.176.32:6893 udp
FR 87.98.176.33:6893 udp
FR 87.98.176.34:6893 udp
FR 87.98.176.35:6893 udp
FR 87.98.176.36:6893 udp
FR 87.98.176.37:6893 udp
FR 87.98.176.38:6893 udp
FR 87.98.176.39:6893 udp
FR 87.98.176.40:6893 udp
FR 87.98.176.41:6893 udp
FR 87.98.176.42:6893 udp
FR 87.98.176.43:6893 udp
FR 87.98.176.44:6893 udp
FR 87.98.176.45:6893 udp
FR 87.98.176.46:6893 udp
FR 87.98.176.47:6893 udp
FR 87.98.176.48:6893 udp
FR 87.98.176.49:6893 udp
FR 87.98.176.50:6893 udp
FR 87.98.176.51:6893 udp
FR 87.98.176.52:6893 udp
FR 87.98.176.53:6893 udp
FR 87.98.176.54:6893 udp
FR 87.98.176.55:6893 udp
FR 87.98.176.56:6893 udp
FR 87.98.176.57:6893 udp
FR 87.98.176.58:6893 udp
FR 87.98.176.59:6893 udp
FR 87.98.176.60:6893 udp
FR 87.98.176.61:6893 udp
FR 87.98.176.62:6893 udp
FR 87.98.176.63:6893 udp
FR 87.98.176.64:6893 udp
FR 87.98.176.65:6893 udp
FR 87.98.176.66:6893 udp
FR 87.98.176.67:6893 udp
FR 87.98.176.68:6893 udp
FR 87.98.176.69:6893 udp
FR 87.98.176.70:6893 udp
FR 87.98.176.71:6893 udp
FR 87.98.176.72:6893 udp
FR 87.98.176.73:6893 udp
FR 87.98.176.74:6893 udp
FR 87.98.176.75:6893 udp
FR 87.98.176.76:6893 udp
FR 87.98.176.77:6893 udp
FR 87.98.176.78:6893 udp
FR 87.98.176.79:6893 udp
FR 87.98.176.80:6893 udp
FR 87.98.176.81:6893 udp
FR 87.98.176.82:6893 udp
FR 87.98.176.83:6893 udp
FR 87.98.176.84:6893 udp
FR 87.98.176.85:6893 udp
FR 87.98.176.86:6893 udp
FR 87.98.176.87:6893 udp
FR 87.98.176.88:6893 udp
FR 87.98.176.89:6893 udp
FR 87.98.176.90:6893 udp
FR 87.98.176.91:6893 udp
FR 87.98.176.92:6893 udp
FR 87.98.176.93:6893 udp
FR 87.98.176.94:6893 udp
FR 87.98.176.95:6893 udp
FR 87.98.176.96:6893 udp
FR 87.98.176.97:6893 udp
FR 87.98.176.98:6893 udp
FR 87.98.176.99:6893 udp
FR 87.98.176.100:6893 udp
FR 87.98.176.101:6893 udp
FR 87.98.176.102:6893 udp
FR 87.98.176.103:6893 udp
FR 87.98.176.104:6893 udp
FR 87.98.176.105:6893 udp
FR 87.98.176.106:6893 udp
FR 87.98.176.107:6893 udp
FR 87.98.176.108:6893 udp
FR 87.98.176.109:6893 udp
FR 87.98.176.110:6893 udp
FR 87.98.176.111:6893 udp
FR 87.98.176.112:6893 udp
FR 87.98.176.113:6893 udp
FR 87.98.176.114:6893 udp
FR 87.98.176.115:6893 udp
FR 87.98.176.116:6893 udp
FR 87.98.176.117:6893 udp
FR 87.98.176.118:6893 udp
FR 87.98.176.119:6893 udp
FR 87.98.176.120:6893 udp
FR 87.98.176.121:6893 udp
FR 87.98.176.122:6893 udp
FR 87.98.176.123:6893 udp
FR 87.98.176.124:6893 udp
FR 87.98.176.125:6893 udp
FR 87.98.176.126:6893 udp
FR 87.98.176.127:6893 udp
FR 87.98.176.128:6893 udp
FR 87.98.176.129:6893 udp
FR 87.98.176.130:6893 udp
FR 87.98.176.131:6893 udp
FR 87.98.176.132:6893 udp
FR 87.98.176.133:6893 udp
FR 87.98.176.134:6893 udp
FR 87.98.176.135:6893 udp
FR 87.98.176.136:6893 udp
FR 87.98.176.137:6893 udp
FR 87.98.176.138:6893 udp
FR 87.98.176.139:6893 udp
FR 87.98.176.140:6893 udp
FR 87.98.176.141:6893 udp
FR 87.98.176.142:6893 udp
FR 87.98.176.143:6893 udp
FR 87.98.176.144:6893 udp
FR 87.98.176.145:6893 udp
FR 87.98.176.146:6893 udp
FR 87.98.176.147:6893 udp
FR 87.98.176.148:6893 udp
FR 87.98.176.149:6893 udp
FR 87.98.176.150:6893 udp
FR 87.98.176.151:6893 udp
FR 87.98.176.152:6893 udp
FR 87.98.176.153:6893 udp
FR 87.98.176.154:6893 udp
FR 87.98.176.155:6893 udp
FR 87.98.176.156:6893 udp
FR 87.98.176.157:6893 udp
FR 87.98.176.158:6893 udp
FR 87.98.176.159:6893 udp
FR 87.98.176.160:6893 udp
FR 87.98.176.161:6893 udp
FR 87.98.176.162:6893 udp
FR 87.98.176.163:6893 udp
FR 87.98.176.164:6893 udp
FR 87.98.176.165:6893 udp
FR 87.98.176.166:6893 udp
FR 87.98.176.167:6893 udp
FR 87.98.176.168:6893 udp
FR 87.98.176.169:6893 udp
FR 87.98.176.170:6893 udp
FR 87.98.176.171:6893 udp
FR 87.98.176.172:6893 udp
FR 87.98.176.173:6893 udp
FR 87.98.176.174:6893 udp
FR 87.98.176.175:6893 udp
FR 87.98.176.176:6893 udp
FR 87.98.176.177:6893 udp
FR 87.98.176.178:6893 udp
FR 87.98.176.179:6893 udp
FR 87.98.176.180:6893 udp
FR 87.98.176.181:6893 udp
FR 87.98.176.182:6893 udp
FR 87.98.176.183:6893 udp
FR 87.98.176.184:6893 udp
FR 87.98.176.185:6893 udp
FR 87.98.176.186:6893 udp
FR 87.98.176.187:6893 udp
FR 87.98.176.188:6893 udp
FR 87.98.176.189:6893 udp
FR 87.98.176.190:6893 udp
FR 87.98.176.191:6893 udp
FR 87.98.176.192:6893 udp
FR 87.98.176.193:6893 udp
FR 87.98.176.194:6893 udp
FR 87.98.176.195:6893 udp
FR 87.98.176.196:6893 udp
FR 87.98.176.197:6893 udp
FR 87.98.176.198:6893 udp
FR 87.98.176.199:6893 udp
FR 87.98.176.200:6893 udp
FR 87.98.176.201:6893 udp
FR 87.98.176.202:6893 udp
FR 87.98.176.203:6893 udp
FR 87.98.176.204:6893 udp
FR 87.98.176.205:6893 udp
FR 87.98.176.206:6893 udp
FR 87.98.176.207:6893 udp
FR 87.98.176.208:6893 udp
FR 87.98.176.209:6893 udp
FR 87.98.176.210:6893 udp
FR 87.98.176.211:6893 udp
FR 87.98.176.212:6893 udp
FR 87.98.176.213:6893 udp
FR 87.98.176.214:6893 udp
FR 87.98.176.215:6893 udp
FR 87.98.176.216:6893 udp
FR 87.98.176.217:6893 udp
FR 87.98.176.218:6893 udp
FR 87.98.176.219:6893 udp
FR 87.98.176.220:6893 udp
FR 87.98.176.221:6893 udp
FR 87.98.176.222:6893 udp
FR 87.98.176.223:6893 udp
FR 87.98.176.224:6893 udp
FR 87.98.176.225:6893 udp
FR 87.98.176.226:6893 udp
FR 87.98.176.227:6893 udp
FR 87.98.176.228:6893 udp
FR 87.98.176.229:6893 udp
FR 87.98.176.230:6893 udp
FR 87.98.176.231:6893 udp
FR 87.98.176.232:6893 udp
FR 87.98.176.233:6893 udp
FR 87.98.176.234:6893 udp
FR 87.98.176.235:6893 udp
FR 87.98.176.236:6893 udp
FR 87.98.176.237:6893 udp
FR 87.98.176.238:6893 udp
FR 87.98.176.239:6893 udp
FR 87.98.176.240:6893 udp
FR 87.98.176.241:6893 udp
FR 87.98.176.242:6893 udp
FR 87.98.176.243:6893 udp
FR 87.98.176.244:6893 udp
FR 87.98.176.245:6893 udp
FR 87.98.176.246:6893 udp
FR 87.98.176.247:6893 udp
FR 87.98.176.248:6893 udp
FR 87.98.176.249:6893 udp
FR 87.98.176.250:6893 udp
FR 87.98.176.251:6893 udp
FR 87.98.176.252:6893 udp
FR 87.98.176.253:6893 udp
FR 87.98.176.254:6893 udp
FR 87.98.176.255:6893 udp
FR 87.98.177.0:6893 udp
FR 87.98.177.1:6893 udp
FR 87.98.177.2:6893 udp
FR 87.98.177.3:6893 udp
FR 87.98.177.4:6893 udp
FR 87.98.177.5:6893 udp
FR 87.98.177.6:6893 udp
FR 87.98.177.7:6893 udp
FR 87.98.177.8:6893 udp
FR 87.98.177.9:6893 udp
FR 87.98.177.10:6893 udp
FR 87.98.177.11:6893 udp
FR 87.98.177.12:6893 udp
FR 87.98.177.13:6893 udp
FR 87.98.177.14:6893 udp
FR 87.98.177.15:6893 udp
FR 87.98.177.16:6893 udp
FR 87.98.177.17:6893 udp
FR 87.98.177.18:6893 udp
FR 87.98.177.19:6893 udp
FR 87.98.177.20:6893 udp
FR 87.98.177.21:6893 udp
FR 87.98.177.22:6893 udp
FR 87.98.177.23:6893 udp
FR 87.98.177.24:6893 udp
FR 87.98.177.25:6893 udp
FR 87.98.177.26:6893 udp
FR 87.98.177.27:6893 udp
FR 87.98.177.28:6893 udp
FR 87.98.177.29:6893 udp
FR 87.98.177.30:6893 udp
FR 87.98.177.31:6893 udp
FR 87.98.177.32:6893 udp
FR 87.98.177.33:6893 udp
FR 87.98.177.34:6893 udp
FR 87.98.177.35:6893 udp
FR 87.98.177.36:6893 udp
FR 87.98.177.37:6893 udp
FR 87.98.177.38:6893 udp
FR 87.98.177.39:6893 udp
FR 87.98.177.40:6893 udp
FR 87.98.177.41:6893 udp
FR 87.98.177.42:6893 udp
FR 87.98.177.43:6893 udp
FR 87.98.177.44:6893 udp
FR 87.98.177.45:6893 udp
FR 87.98.177.46:6893 udp
FR 87.98.177.47:6893 udp
FR 87.98.177.48:6893 udp
FR 87.98.177.49:6893 udp
FR 87.98.177.50:6893 udp
FR 87.98.177.51:6893 udp
FR 87.98.177.52:6893 udp
FR 87.98.177.53:6893 udp
FR 87.98.177.54:6893 udp
FR 87.98.177.55:6893 udp
FR 87.98.177.56:6893 udp
FR 87.98.177.57:6893 udp
FR 87.98.177.58:6893 udp
FR 87.98.177.59:6893 udp
FR 87.98.177.60:6893 udp
FR 87.98.177.61:6893 udp
FR 87.98.177.62:6893 udp
FR 87.98.177.63:6893 udp
FR 87.98.177.64:6893 udp
FR 87.98.177.65:6893 udp
FR 87.98.177.66:6893 udp
FR 87.98.177.67:6893 udp
FR 87.98.177.68:6893 udp
FR 87.98.177.69:6893 udp
FR 87.98.177.70:6893 udp
FR 87.98.177.71:6893 udp
FR 87.98.177.72:6893 udp
FR 87.98.177.73:6893 udp
FR 87.98.177.74:6893 udp
FR 87.98.177.75:6893 udp
FR 87.98.177.76:6893 udp
FR 87.98.177.77:6893 udp
FR 87.98.177.78:6893 udp
FR 87.98.177.79:6893 udp
FR 87.98.177.80:6893 udp
FR 87.98.177.81:6893 udp
FR 87.98.177.82:6893 udp
FR 87.98.177.83:6893 udp
FR 87.98.177.84:6893 udp
FR 87.98.177.85:6893 udp
FR 87.98.177.86:6893 udp
FR 87.98.177.87:6893 udp
FR 87.98.177.88:6893 udp
FR 87.98.177.89:6893 udp
FR 87.98.177.90:6893 udp
FR 87.98.177.91:6893 udp
FR 87.98.177.92:6893 udp
FR 87.98.177.93:6893 udp
FR 87.98.177.94:6893 udp
FR 87.98.177.95:6893 udp
FR 87.98.177.96:6893 udp
FR 87.98.177.97:6893 udp
FR 87.98.177.98:6893 udp
FR 87.98.177.99:6893 udp
FR 87.98.177.100:6893 udp
FR 87.98.177.101:6893 udp
FR 87.98.177.102:6893 udp
FR 87.98.177.103:6893 udp
FR 87.98.177.104:6893 udp
FR 87.98.177.105:6893 udp
FR 87.98.177.106:6893 udp
FR 87.98.177.107:6893 udp
FR 87.98.177.108:6893 udp
FR 87.98.177.109:6893 udp
FR 87.98.177.110:6893 udp
FR 87.98.177.111:6893 udp
FR 87.98.177.112:6893 udp
FR 87.98.177.113:6893 udp
FR 87.98.177.114:6893 udp
FR 87.98.177.115:6893 udp
FR 87.98.177.116:6893 udp
FR 87.98.177.117:6893 udp
FR 87.98.177.118:6893 udp
FR 87.98.177.119:6893 udp
FR 87.98.177.120:6893 udp
FR 87.98.177.121:6893 udp
FR 87.98.177.122:6893 udp
FR 87.98.177.123:6893 udp
FR 87.98.177.124:6893 udp
FR 87.98.177.125:6893 udp
FR 87.98.177.126:6893 udp
FR 87.98.177.127:6893 udp
FR 87.98.177.128:6893 udp
FR 87.98.177.129:6893 udp
FR 87.98.177.130:6893 udp
FR 87.98.177.131:6893 udp
FR 87.98.177.132:6893 udp
FR 87.98.177.133:6893 udp
FR 87.98.177.134:6893 udp
FR 87.98.177.135:6893 udp
FR 87.98.177.136:6893 udp
FR 87.98.177.137:6893 udp
FR 87.98.177.138:6893 udp
FR 87.98.177.139:6893 udp
FR 87.98.177.140:6893 udp
FR 87.98.177.141:6893 udp
FR 87.98.177.142:6893 udp
FR 87.98.177.143:6893 udp
FR 87.98.177.144:6893 udp
FR 87.98.177.145:6893 udp
FR 87.98.177.146:6893 udp
FR 87.98.177.147:6893 udp
FR 87.98.177.148:6893 udp
FR 87.98.177.149:6893 udp
FR 87.98.177.150:6893 udp
FR 87.98.177.151:6893 udp
FR 87.98.177.152:6893 udp
FR 87.98.177.153:6893 udp
FR 87.98.177.154:6893 udp
FR 87.98.177.155:6893 udp
FR 87.98.177.156:6893 udp
FR 87.98.177.157:6893 udp
FR 87.98.177.158:6893 udp
FR 87.98.177.159:6893 udp
FR 87.98.177.160:6893 udp
FR 87.98.177.161:6893 udp
FR 87.98.177.162:6893 udp
FR 87.98.177.163:6893 udp
FR 87.98.177.164:6893 udp
FR 87.98.177.165:6893 udp
FR 87.98.177.166:6893 udp
FR 87.98.177.167:6893 udp
FR 87.98.177.168:6893 udp
FR 87.98.177.169:6893 udp
FR 87.98.177.170:6893 udp
FR 87.98.177.171:6893 udp
FR 87.98.177.172:6893 udp
FR 87.98.177.173:6893 udp
FR 87.98.177.174:6893 udp
FR 87.98.177.175:6893 udp
FR 87.98.177.176:6893 udp
FR 87.98.177.177:6893 udp
FR 87.98.177.178:6893 udp
FR 87.98.177.179:6893 udp
FR 87.98.177.180:6893 udp
FR 87.98.177.181:6893 udp
FR 87.98.177.182:6893 udp
FR 87.98.177.183:6893 udp
FR 87.98.177.184:6893 udp
FR 87.98.177.185:6893 udp
FR 87.98.177.186:6893 udp
FR 87.98.177.187:6893 udp
FR 87.98.177.188:6893 udp
FR 87.98.177.189:6893 udp
FR 87.98.177.190:6893 udp
FR 87.98.177.191:6893 udp
FR 87.98.177.192:6893 udp
FR 87.98.177.193:6893 udp
FR 87.98.177.194:6893 udp
FR 87.98.177.195:6893 udp
FR 87.98.177.196:6893 udp
FR 87.98.177.197:6893 udp
FR 87.98.177.198:6893 udp
FR 87.98.177.199:6893 udp
FR 87.98.177.200:6893 udp
FR 87.98.177.201:6893 udp
FR 87.98.177.202:6893 udp
FR 87.98.177.203:6893 udp
FR 87.98.177.204:6893 udp
FR 87.98.177.205:6893 udp
FR 87.98.177.206:6893 udp
FR 87.98.177.207:6893 udp
FR 87.98.177.208:6893 udp
FR 87.98.177.209:6893 udp
FR 87.98.177.210:6893 udp
FR 87.98.177.211:6893 udp
FR 87.98.177.212:6893 udp
FR 87.98.177.213:6893 udp
FR 87.98.177.214:6893 udp
FR 87.98.177.215:6893 udp
FR 87.98.177.216:6893 udp
FR 87.98.177.217:6893 udp
FR 87.98.177.218:6893 udp
FR 87.98.177.219:6893 udp
FR 87.98.177.220:6893 udp
FR 87.98.177.221:6893 udp
FR 87.98.177.222:6893 udp
FR 87.98.177.223:6893 udp
FR 87.98.177.224:6893 udp
FR 87.98.177.225:6893 udp
FR 87.98.177.226:6893 udp
FR 87.98.177.227:6893 udp
FR 87.98.177.228:6893 udp
FR 87.98.177.229:6893 udp
FR 87.98.177.230:6893 udp
FR 87.98.177.231:6893 udp
FR 87.98.177.232:6893 udp
FR 87.98.177.233:6893 udp
FR 87.98.177.234:6893 udp
FR 87.98.177.235:6893 udp
FR 87.98.177.236:6893 udp
FR 87.98.177.237:6893 udp
FR 87.98.177.238:6893 udp
FR 87.98.177.239:6893 udp
FR 87.98.177.240:6893 udp
FR 87.98.177.241:6893 udp
FR 87.98.177.242:6893 udp
FR 87.98.177.243:6893 udp
FR 87.98.177.244:6893 udp
FR 87.98.177.245:6893 udp
FR 87.98.177.246:6893 udp
FR 87.98.177.247:6893 udp
FR 87.98.177.248:6893 udp
FR 87.98.177.249:6893 udp
FR 87.98.177.250:6893 udp
FR 87.98.177.251:6893 udp
FR 87.98.177.252:6893 udp
FR 87.98.177.253:6893 udp
FR 87.98.177.254:6893 udp
FR 87.98.177.255:6893 udp
FR 87.98.178.0:6893 udp
FR 87.98.178.1:6893 udp
FR 87.98.178.2:6893 udp
FR 87.98.178.3:6893 udp
FR 87.98.178.4:6893 udp
FR 87.98.178.5:6893 udp
FR 87.98.178.6:6893 udp
FR 87.98.178.7:6893 udp
FR 87.98.178.8:6893 udp
FR 87.98.178.9:6893 udp
FR 87.98.178.10:6893 udp
FR 87.98.178.11:6893 udp
FR 87.98.178.12:6893 udp
FR 87.98.178.13:6893 udp
FR 87.98.178.14:6893 udp
FR 87.98.178.15:6893 udp
FR 87.98.178.16:6893 udp
FR 87.98.178.17:6893 udp
FR 87.98.178.18:6893 udp
FR 87.98.178.19:6893 udp
FR 87.98.178.20:6893 udp
FR 87.98.178.21:6893 udp
FR 87.98.178.22:6893 udp
FR 87.98.178.23:6893 udp
FR 87.98.178.24:6893 udp
FR 87.98.178.25:6893 udp
FR 87.98.178.26:6893 udp
FR 87.98.178.27:6893 udp
FR 87.98.178.28:6893 udp
FR 87.98.178.29:6893 udp
FR 87.98.178.30:6893 udp
FR 87.98.178.31:6893 udp
FR 87.98.178.32:6893 udp
FR 87.98.178.33:6893 udp
FR 87.98.178.34:6893 udp
FR 87.98.178.35:6893 udp
FR 87.98.178.36:6893 udp
FR 87.98.178.37:6893 udp
FR 87.98.178.38:6893 udp
FR 87.98.178.39:6893 udp
FR 87.98.178.40:6893 udp
FR 87.98.178.41:6893 udp
FR 87.98.178.42:6893 udp
FR 87.98.178.43:6893 udp
FR 87.98.178.44:6893 udp
FR 87.98.178.45:6893 udp
FR 87.98.178.46:6893 udp
FR 87.98.178.47:6893 udp
FR 87.98.178.48:6893 udp
FR 87.98.178.49:6893 udp
FR 87.98.178.50:6893 udp
FR 87.98.178.51:6893 udp
FR 87.98.178.52:6893 udp
FR 87.98.178.53:6893 udp
FR 87.98.178.54:6893 udp
FR 87.98.178.55:6893 udp
FR 87.98.178.56:6893 udp
FR 87.98.178.57:6893 udp
FR 87.98.178.58:6893 udp
FR 87.98.178.59:6893 udp
FR 87.98.178.60:6893 udp
FR 87.98.178.61:6893 udp
FR 87.98.178.62:6893 udp
FR 87.98.178.63:6893 udp
FR 87.98.178.64:6893 udp
FR 87.98.178.65:6893 udp
FR 87.98.178.66:6893 udp
FR 87.98.178.67:6893 udp
FR 87.98.178.68:6893 udp
FR 87.98.178.69:6893 udp
FR 87.98.178.70:6893 udp
FR 87.98.178.71:6893 udp
FR 87.98.178.72:6893 udp
FR 87.98.178.73:6893 udp
FR 87.98.178.74:6893 udp
FR 87.98.178.75:6893 udp
FR 87.98.178.76:6893 udp
FR 87.98.178.77:6893 udp
FR 87.98.178.78:6893 udp
FR 87.98.178.79:6893 udp
FR 87.98.178.80:6893 udp
FR 87.98.178.81:6893 udp
FR 87.98.178.82:6893 udp
FR 87.98.178.83:6893 udp
FR 87.98.178.84:6893 udp
FR 87.98.178.85:6893 udp
FR 87.98.178.86:6893 udp
FR 87.98.178.87:6893 udp
FR 87.98.178.88:6893 udp
FR 87.98.178.89:6893 udp
FR 87.98.178.90:6893 udp
FR 87.98.178.91:6893 udp
FR 87.98.178.92:6893 udp
FR 87.98.178.93:6893 udp
FR 87.98.178.94:6893 udp
FR 87.98.178.95:6893 udp
FR 87.98.178.96:6893 udp
FR 87.98.178.97:6893 udp
FR 87.98.178.98:6893 udp
FR 87.98.178.99:6893 udp
FR 87.98.178.100:6893 udp
FR 87.98.178.101:6893 udp
FR 87.98.178.102:6893 udp
FR 87.98.178.103:6893 udp
FR 87.98.178.104:6893 udp
FR 87.98.178.105:6893 udp
FR 87.98.178.106:6893 udp
FR 87.98.178.107:6893 udp
FR 87.98.178.108:6893 udp
FR 87.98.178.109:6893 udp
FR 87.98.178.110:6893 udp
FR 87.98.178.111:6893 udp
FR 87.98.178.112:6893 udp
FR 87.98.178.113:6893 udp
FR 87.98.178.114:6893 udp
FR 87.98.178.115:6893 udp
FR 87.98.178.116:6893 udp
FR 87.98.178.117:6893 udp
FR 87.98.178.118:6893 udp
FR 87.98.178.119:6893 udp
FR 87.98.178.120:6893 udp
FR 87.98.178.121:6893 udp
FR 87.98.178.122:6893 udp
FR 87.98.178.123:6893 udp
FR 87.98.178.124:6893 udp
FR 87.98.178.125:6893 udp
FR 87.98.178.126:6893 udp
FR 87.98.178.127:6893 udp
FR 87.98.178.128:6893 udp
FR 87.98.178.129:6893 udp
FR 87.98.178.130:6893 udp
FR 87.98.178.131:6893 udp
FR 87.98.178.132:6893 udp
FR 87.98.178.133:6893 udp
FR 87.98.178.134:6893 udp
FR 87.98.178.135:6893 udp
FR 87.98.178.136:6893 udp
FR 87.98.178.137:6893 udp
FR 87.98.178.138:6893 udp
FR 87.98.178.139:6893 udp
FR 87.98.178.140:6893 udp
FR 87.98.178.141:6893 udp
FR 87.98.178.142:6893 udp
FR 87.98.178.143:6893 udp
FR 87.98.178.144:6893 udp
FR 87.98.178.145:6893 udp
FR 87.98.178.146:6893 udp
FR 87.98.178.147:6893 udp
FR 87.98.178.148:6893 udp
FR 87.98.178.149:6893 udp
FR 87.98.178.150:6893 udp
FR 87.98.178.151:6893 udp
FR 87.98.178.152:6893 udp
FR 87.98.178.153:6893 udp
FR 87.98.178.154:6893 udp
FR 87.98.178.155:6893 udp
FR 87.98.178.156:6893 udp
FR 87.98.178.157:6893 udp
FR 87.98.178.158:6893 udp
FR 87.98.178.159:6893 udp
FR 87.98.178.160:6893 udp
FR 87.98.178.161:6893 udp
FR 87.98.178.162:6893 udp
FR 87.98.178.163:6893 udp
FR 87.98.178.164:6893 udp
FR 87.98.178.165:6893 udp
FR 87.98.178.166:6893 udp
FR 87.98.178.167:6893 udp
FR 87.98.178.168:6893 udp
FR 87.98.178.169:6893 udp
FR 87.98.178.170:6893 udp
FR 87.98.178.171:6893 udp
FR 87.98.178.172:6893 udp
FR 87.98.178.173:6893 udp
FR 87.98.178.174:6893 udp
FR 87.98.178.175:6893 udp
FR 87.98.178.176:6893 udp
FR 87.98.178.177:6893 udp
FR 87.98.178.178:6893 udp
FR 87.98.178.179:6893 udp
FR 87.98.178.180:6893 udp
FR 87.98.178.181:6893 udp
FR 87.98.178.182:6893 udp
FR 87.98.178.183:6893 udp
FR 87.98.178.184:6893 udp
FR 87.98.178.185:6893 udp
FR 87.98.178.186:6893 udp
FR 87.98.178.187:6893 udp
FR 87.98.178.188:6893 udp
FR 87.98.178.189:6893 udp
FR 87.98.178.190:6893 udp
FR 87.98.178.191:6893 udp
FR 87.98.178.192:6893 udp
FR 87.98.178.193:6893 udp
FR 87.98.178.194:6893 udp
FR 87.98.178.195:6893 udp
FR 87.98.178.196:6893 udp
FR 87.98.178.197:6893 udp
FR 87.98.178.198:6893 udp
FR 87.98.178.199:6893 udp
FR 87.98.178.200:6893 udp
FR 87.98.178.201:6893 udp
FR 87.98.178.202:6893 udp
FR 87.98.178.203:6893 udp
FR 87.98.178.204:6893 udp
FR 87.98.178.205:6893 udp
FR 87.98.178.206:6893 udp
FR 87.98.178.207:6893 udp
FR 87.98.178.208:6893 udp
FR 87.98.178.209:6893 udp
FR 87.98.178.210:6893 udp
FR 87.98.178.211:6893 udp
FR 87.98.178.212:6893 udp
FR 87.98.178.213:6893 udp
FR 87.98.178.214:6893 udp
FR 87.98.178.215:6893 udp
FR 87.98.178.216:6893 udp
FR 87.98.178.217:6893 udp
FR 87.98.178.218:6893 udp
FR 87.98.178.219:6893 udp
FR 87.98.178.220:6893 udp
FR 87.98.178.221:6893 udp
FR 87.98.178.222:6893 udp
FR 87.98.178.223:6893 udp
FR 87.98.178.224:6893 udp
FR 87.98.178.225:6893 udp
FR 87.98.178.226:6893 udp
FR 87.98.178.227:6893 udp
FR 87.98.178.228:6893 udp
FR 87.98.178.229:6893 udp
FR 87.98.178.230:6893 udp
FR 87.98.178.231:6893 udp
FR 87.98.178.232:6893 udp
FR 87.98.178.233:6893 udp
FR 87.98.178.234:6893 udp
FR 87.98.178.235:6893 udp
FR 87.98.178.236:6893 udp
FR 87.98.178.237:6893 udp
FR 87.98.178.238:6893 udp
FR 87.98.178.239:6893 udp
FR 87.98.178.240:6893 udp
FR 87.98.178.241:6893 udp
FR 87.98.178.242:6893 udp
FR 87.98.178.243:6893 udp
FR 87.98.178.244:6893 udp
FR 87.98.178.245:6893 udp
FR 87.98.178.246:6893 udp
FR 87.98.178.247:6893 udp
FR 87.98.178.248:6893 udp
FR 87.98.178.249:6893 udp
FR 87.98.178.250:6893 udp
FR 87.98.178.251:6893 udp
FR 87.98.178.252:6893 udp
FR 87.98.178.253:6893 udp
FR 87.98.178.254:6893 udp
FR 87.98.178.255:6893 udp
FR 87.98.179.0:6893 udp
FR 87.98.179.1:6893 udp
FR 87.98.179.2:6893 udp
FR 87.98.179.3:6893 udp
FR 87.98.179.4:6893 udp
FR 87.98.179.5:6893 udp
FR 87.98.179.6:6893 udp
FR 87.98.179.7:6893 udp
FR 87.98.179.8:6893 udp
FR 87.98.179.9:6893 udp
FR 87.98.179.10:6893 udp
FR 87.98.179.11:6893 udp
FR 87.98.179.12:6893 udp
FR 87.98.179.13:6893 udp
FR 87.98.179.14:6893 udp
FR 87.98.179.15:6893 udp
FR 87.98.179.16:6893 udp
FR 87.98.179.17:6893 udp
FR 87.98.179.18:6893 udp
FR 87.98.179.19:6893 udp
FR 87.98.179.20:6893 udp
FR 87.98.179.21:6893 udp
FR 87.98.179.22:6893 udp
FR 87.98.179.23:6893 udp
FR 87.98.179.24:6893 udp
FR 87.98.179.25:6893 udp
FR 87.98.179.26:6893 udp
FR 87.98.179.27:6893 udp
FR 87.98.179.28:6893 udp
FR 87.98.179.29:6893 udp
FR 87.98.179.30:6893 udp
FR 87.98.179.31:6893 udp
FR 87.98.179.32:6893 udp
FR 87.98.179.33:6893 udp
FR 87.98.179.34:6893 udp
FR 87.98.179.35:6893 udp
FR 87.98.179.36:6893 udp
FR 87.98.179.37:6893 udp
FR 87.98.179.38:6893 udp
FR 87.98.179.39:6893 udp
FR 87.98.179.40:6893 udp
FR 87.98.179.41:6893 udp
FR 87.98.179.42:6893 udp
FR 87.98.179.43:6893 udp
FR 87.98.179.44:6893 udp
FR 87.98.179.45:6893 udp
FR 87.98.179.46:6893 udp
FR 87.98.179.47:6893 udp
FR 87.98.179.48:6893 udp
FR 87.98.179.49:6893 udp
FR 87.98.179.50:6893 udp
FR 87.98.179.51:6893 udp
FR 87.98.179.52:6893 udp
FR 87.98.179.53:6893 udp
FR 87.98.179.54:6893 udp
FR 87.98.179.55:6893 udp
FR 87.98.179.56:6893 udp
FR 87.98.179.57:6893 udp
FR 87.98.179.58:6893 udp
FR 87.98.179.59:6893 udp
FR 87.98.179.60:6893 udp
FR 87.98.179.61:6893 udp
FR 87.98.179.62:6893 udp
FR 87.98.179.63:6893 udp
FR 87.98.179.64:6893 udp
FR 87.98.179.65:6893 udp
FR 87.98.179.66:6893 udp
FR 87.98.179.67:6893 udp
FR 87.98.179.68:6893 udp
FR 87.98.179.69:6893 udp
FR 87.98.179.70:6893 udp
FR 87.98.179.71:6893 udp
FR 87.98.179.72:6893 udp
FR 87.98.179.73:6893 udp
FR 87.98.179.74:6893 udp
FR 87.98.179.75:6893 udp
FR 87.98.179.76:6893 udp
FR 87.98.179.77:6893 udp
FR 87.98.179.78:6893 udp
FR 87.98.179.79:6893 udp
FR 87.98.179.80:6893 udp
FR 87.98.179.81:6893 udp
FR 87.98.179.82:6893 udp
FR 87.98.179.83:6893 udp
FR 87.98.179.84:6893 udp
FR 87.98.179.85:6893 udp
FR 87.98.179.86:6893 udp
FR 87.98.179.87:6893 udp
FR 87.98.179.88:6893 udp
FR 87.98.179.89:6893 udp
FR 87.98.179.90:6893 udp
FR 87.98.179.91:6893 udp
FR 87.98.179.92:6893 udp
FR 87.98.179.93:6893 udp
FR 87.98.179.94:6893 udp
FR 87.98.179.95:6893 udp
FR 87.98.179.96:6893 udp
FR 87.98.179.97:6893 udp
FR 87.98.179.98:6893 udp
FR 87.98.179.99:6893 udp
FR 87.98.179.100:6893 udp
FR 87.98.179.101:6893 udp
FR 87.98.179.102:6893 udp
FR 87.98.179.103:6893 udp
FR 87.98.179.104:6893 udp
FR 87.98.179.105:6893 udp
FR 87.98.179.106:6893 udp
FR 87.98.179.107:6893 udp
FR 87.98.179.108:6893 udp
FR 87.98.179.109:6893 udp
FR 87.98.179.110:6893 udp
FR 87.98.179.111:6893 udp
FR 87.98.179.112:6893 udp
FR 87.98.179.113:6893 udp
FR 87.98.179.114:6893 udp
FR 87.98.179.115:6893 udp
FR 87.98.179.116:6893 udp
FR 87.98.179.117:6893 udp
FR 87.98.179.118:6893 udp
FR 87.98.179.119:6893 udp
FR 87.98.179.120:6893 udp
FR 87.98.179.121:6893 udp
FR 87.98.179.122:6893 udp
FR 87.98.179.123:6893 udp
FR 87.98.179.124:6893 udp
FR 87.98.179.125:6893 udp
FR 87.98.179.126:6893 udp
FR 87.98.179.127:6893 udp
FR 87.98.179.128:6893 udp
FR 87.98.179.129:6893 udp
FR 87.98.179.130:6893 udp
FR 87.98.179.131:6893 udp
FR 87.98.179.132:6893 udp
FR 87.98.179.133:6893 udp
FR 87.98.179.134:6893 udp
FR 87.98.179.135:6893 udp
FR 87.98.179.136:6893 udp
FR 87.98.179.137:6893 udp
FR 87.98.179.138:6893 udp
FR 87.98.179.139:6893 udp
FR 87.98.179.140:6893 udp
FR 87.98.179.141:6893 udp
FR 87.98.179.142:6893 udp
FR 87.98.179.143:6893 udp
FR 87.98.179.144:6893 udp
FR 87.98.179.145:6893 udp
FR 87.98.179.146:6893 udp
FR 87.98.179.147:6893 udp
FR 87.98.179.148:6893 udp
FR 87.98.179.149:6893 udp
FR 87.98.179.150:6893 udp
FR 87.98.179.151:6893 udp
FR 87.98.179.152:6893 udp
FR 87.98.179.153:6893 udp
FR 87.98.179.154:6893 udp
FR 87.98.179.155:6893 udp
FR 87.98.179.156:6893 udp
FR 87.98.179.157:6893 udp
FR 87.98.179.158:6893 udp
FR 87.98.179.159:6893 udp
FR 87.98.179.160:6893 udp
FR 87.98.179.161:6893 udp
FR 87.98.179.162:6893 udp
FR 87.98.179.163:6893 udp
FR 87.98.179.164:6893 udp
FR 87.98.179.165:6893 udp
FR 87.98.179.166:6893 udp
FR 87.98.179.167:6893 udp
FR 87.98.179.168:6893 udp
FR 87.98.179.169:6893 udp
FR 87.98.179.170:6893 udp
FR 87.98.179.171:6893 udp
FR 87.98.179.172:6893 udp
FR 87.98.179.173:6893 udp
FR 87.98.179.174:6893 udp
FR 87.98.179.175:6893 udp
FR 87.98.179.176:6893 udp
FR 87.98.179.177:6893 udp
FR 87.98.179.178:6893 udp
FR 87.98.179.179:6893 udp
FR 87.98.179.180:6893 udp
FR 87.98.179.181:6893 udp
FR 87.98.179.182:6893 udp
FR 87.98.179.183:6893 udp
FR 87.98.179.184:6893 udp
FR 87.98.179.185:6893 udp
FR 87.98.179.186:6893 udp
FR 87.98.179.187:6893 udp
FR 87.98.179.188:6893 udp
FR 87.98.179.189:6893 udp
FR 87.98.179.190:6893 udp
FR 87.98.179.191:6893 udp
FR 87.98.179.192:6893 udp
FR 87.98.179.193:6893 udp
FR 87.98.179.194:6893 udp
FR 87.98.179.195:6893 udp
FR 87.98.179.196:6893 udp
FR 87.98.179.197:6893 udp
FR 87.98.179.198:6893 udp
FR 87.98.179.199:6893 udp
FR 87.98.179.200:6893 udp
FR 87.98.179.201:6893 udp
FR 87.98.179.202:6893 udp
FR 87.98.179.203:6893 udp
FR 87.98.179.204:6893 udp
FR 87.98.179.205:6893 udp
FR 87.98.179.206:6893 udp
FR 87.98.179.207:6893 udp
FR 87.98.179.208:6893 udp
FR 87.98.179.209:6893 udp
FR 87.98.179.210:6893 udp
FR 87.98.179.211:6893 udp
FR 87.98.179.212:6893 udp
FR 87.98.179.213:6893 udp
FR 87.98.179.214:6893 udp
FR 87.98.179.215:6893 udp
FR 87.98.179.216:6893 udp
FR 87.98.179.217:6893 udp
FR 87.98.179.218:6893 udp
FR 87.98.179.219:6893 udp
FR 87.98.179.220:6893 udp
FR 87.98.179.221:6893 udp
FR 87.98.179.222:6893 udp
FR 87.98.179.223:6893 udp
FR 87.98.179.224:6893 udp
FR 87.98.179.225:6893 udp
FR 87.98.179.226:6893 udp
FR 87.98.179.227:6893 udp
FR 87.98.179.228:6893 udp
FR 87.98.179.229:6893 udp
FR 87.98.179.230:6893 udp
FR 87.98.179.231:6893 udp
FR 87.98.179.232:6893 udp
FR 87.98.179.233:6893 udp
FR 87.98.179.234:6893 udp
FR 87.98.179.235:6893 udp
FR 87.98.179.236:6893 udp
FR 87.98.179.237:6893 udp
FR 87.98.179.238:6893 udp
FR 87.98.179.239:6893 udp
FR 87.98.179.240:6893 udp
FR 87.98.179.241:6893 udp
FR 87.98.179.242:6893 udp
FR 87.98.179.243:6893 udp
FR 87.98.179.244:6893 udp
FR 87.98.179.245:6893 udp
FR 87.98.179.246:6893 udp
FR 87.98.179.247:6893 udp
FR 87.98.179.248:6893 udp
FR 87.98.179.249:6893 udp
FR 87.98.179.250:6893 udp
FR 87.98.179.251:6893 udp
FR 87.98.179.252:6893 udp
FR 87.98.179.253:6893 udp
FR 87.98.179.254:6893 udp
FR 87.98.179.255:6893 udp
US 8.8.8.8:53 25.251.17.2.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
N/A 127.0.0.1:51303 tcp
SE 171.25.193.9:80 tcp
US 8.8.8.8:53 9.193.25.171.in-addr.arpa udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.210:443 api.github.com tcp
AT 86.59.21.38:443 tcp
US 8.8.8.8:53 183.142.211.20.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 collector.github.com udp
US 8.8.8.8:53 github.com udp
US 140.82.112.22:443 collector.github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 22.112.82.140.in-addr.arpa udp
US 154.35.32.5:443 tcp

Files

\??\pipe\crashpad_4404_FKQTXUXMMPFFHKGH

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 4914b0f5f5a4927ba35ec9c2faad8386
SHA1 fbca76867961ef657a70159cba15680c0d5ef7c9
SHA256 40538cc2d7e72ef5e3ca44f18134c382a7d8dae4ff59d0f4745754f0d055cf5f
SHA512 265b7c5dba5871af284cc62b2b9fd9e832ab5eb4078861f164296cc67b35be7a89a1c8752faae4f2f547da80d906d43de7c030c3b58bb224b48fcd14d9168553

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ed8d17e205eade25b740b9db320fad0a
SHA1 4122e5ab0ee0af3f9dbabfbae5ab67f514e89ed1
SHA256 bc28f3c13ae73fc19c0b7b7ccaacfd1c2cf30e52abdbe4eff5fd01a2ab70371f
SHA512 95b70b5a9c5c654594c3a72a26ec2efdc93b0de41c015f4b589523e945e10bc90a7c5a442e95b072be688aacd57230aa35ff29aff533bcb17f46a1d392705378

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8e3b08b99abc9004d13d412d5025d5c6
SHA1 a52c55a8f4bab0fb3b004df9ce3e8813f812a242
SHA256 8a9b21228b5597d5781466140589515c9bca2c7d8682837dee9fa07bb7421be3
SHA512 2b49946502e806e48a1420c6492e4143f2763d68befba45644fe8b1ebdaf77ad1ec72909848dd371e34b9639db4b06ed2b84dcf034b60afa9d6fda2c52de9fac

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 bbd6d922592e7ec7c0fa8248ffafd505
SHA1 2192046b3d7d26d40c9cec96441e053395488fc8
SHA256 c3b7aac505ffb6bdbccee728e389f52df2d51fecc4e2e9e3b90a0f114a773fe4
SHA512 8ea092c7a31f3a6c89fb7c7e96900bc19f5a2f6573f99421b79bfb1664d563d766a8f1bd9c1f25600310f4c8331599350bce2e4259132c5d3082a6872f4fd064

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f0b41e290ba00837c72b508854edb239
SHA1 8323493780f7006b5e61cca52e1a9e39c7388b89
SHA256 021638fd343eca562c9f58e5c59c15a13024fac81118bdc88775eeba46f5b81b
SHA512 d8e068d6b350ecfee776642c5d711f2d27c09240b1ceaff0830f7236d3813a77cb329ecee8c1287f65d529b98092e2c86623f7072fdf15ca6bab092ae3e80d7c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 dc4ff912739ae5f6e93718063bee5892
SHA1 9a09549ef642f10c274a9ca3a4b889872af28fc8
SHA256 22a98139f37aa69d85b87577925dcd7eeeec698fc50a3548e4cce0e78bd0247c
SHA512 5e0c978aac6ee3c191478c32da09a3174d6e4acbb6602859656561d06c99e81fa8091763463cd23c26e960f7a63cc36a7311c4ab5e8691ac592b0f5db98c0e6e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 9a92f3f4b63ecec6f0d76c3642a98187
SHA1 54c519d4632c16d29b07408d0d7f3aacdb9db25a
SHA256 67e9a6d508c8d413c42c698570e336ec2dc7c9dbe049ba7f213d6f40864538b1
SHA512 15a7f276c0e5f57c48994b5e3b0253d50a7765575249648f4036b14e823fd50ae88c91ce2de9aada37129db01b62abc1da2853faff31c85d97f507115b9deaed

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 ae1bccd6831ebfe5ad03b482ee266e4f
SHA1 01f4179f48f1af383b275d7ee338dd160b6f558a
SHA256 1b11047e738f76c94c9d15ee981ec46b286a54def1a7852ca1ade7f908988649
SHA512 baf7ff6747f30e542c254f46a9678b9dbf42312933962c391b79eca6fcb615e4ba9283c00f554d6021e594f18c087899bc9b5362c41c0d6f862bba7fb9f83038

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe57f55c.TMP

MD5 01c324913d47c9270cba657624d04ca3
SHA1 61ce7bd3dbe339760f0a0b84b39d17011d069431
SHA256 ae279c9b306c30b7f8ccb681845c3c8e743fbbb704de0f408b193ef0691fef2c
SHA512 2d67cefba940b9061b0e75ef661a44c90fc8b849e033aeed12cfc7aa892b888e973b75b60406e9dd8bcd8cfc70b3aa118f9f6323c85bb3d319c1aba268389038

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000002

MD5 054eddc788c0f1f493b8c77bf7cc17c6
SHA1 d4b8a02fcd9245ec11c79e5e282b25e83603cdb1
SHA256 238219b3b6039bd51428cb678daca149e8611f2db3b3756897f98426d01a00a6
SHA512 72433d5d3ee5417621e60cd745e0bce70330e529950ec44478cd87c4b48dedfc1d4adcf406fa1ffb6887804aab6f4ad6be7e96e2978a85127dc3a382f1cffdf4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000004

MD5 e1831f8fadccd3ffa076214089522cea
SHA1 10acd26c218ff1bbbe6ac785eab5485045f61881
SHA256 9b9a4a9191b023df1aa66258eb19fc64ae5356cfc97a9dda258c6cc8ba1059ac
SHA512 372c486ac381358cc301f32cd89b7a05da7380c03fa524147c2ddf3f5e23f9b57c17485aaedc85b413461a879afc42e729547b0c96c26c49bbdb7301cd064298

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000003

MD5 e1f8c1a199ca38a7811716335fb94d43
SHA1 e35ea248cba54eb9830c06268004848400461164
SHA256 78f0f79cdd0e79a9fba9b367697255425b78da4364dc522bc59a3ce65fe95a6c
SHA512 12310f32ee77701c1e3491325a843d938c792f42bfdbbc599fe4b2f6703f5fe6588fbcd58a6a2d519050fc9ef53619e2e35dfadcbda4b218df8a912a59a5381a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010

MD5 e9a5315fe482aa6a84b4cd461a41a5cc
SHA1 06833b57adceda1c91eaa2072d368c54fe4995b0
SHA256 6a00fd28670b7ddc6725260bf6cf4c345762edcc5e74e4eb77367b4969efa9c9
SHA512 86dcee3ad5c69dfb9bf6f0e8246b1bf2f95a27188c17e1cab7b9270774c37b8d0e6b2acfd33f144ba74d17c849299a9c750dab9c8f1bff09147befb7876421c9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 dea05b597dbf03c34190ca40d8833433
SHA1 5c84170b750bc8a6cd196039df7c0136a74b9aea
SHA256 67214ec617d5aa4de0fb807e56e1ff9371b33df3cc9f1daa03f672d4ff3ecb6c
SHA512 3c942aa56a4267e7ec20619c97338cc9c9e395ec20ca46c341e87b3f303ddb268484773632aeb034939abb5183da44222d203613a2fd5343a9927ccee9a0fcd3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 3f30461f38347ce8f0e71b28bfae42ac
SHA1 199fa11343fe88f14872130441ad44f1559d9aa9
SHA256 8246c6f6ecbf178ecabe82a7ab1c49c2502bd1b7682c97a6df464c3f5a9941e6
SHA512 98f9d864c10c1ae3639965a3d9496f188dacc5bc8b00072d35ec9b2ee4a9c8126ca37e8439eba263b85e3e12ae491b9f4f80878af744dcaf691fe142a0bdcb0f

C:\Users\Admin\Downloads\UserOverflow.zip

MD5 e63eb8701abeafc17e18807f996a2c4b
SHA1 e11387f6c188416f43e1a72f4ffdd759f4e43e54
SHA256 7eafd43c18f9613d762567cb5e00d58df71208d6b94c23d634daec42170e0d6c
SHA512 d996ea9566a588bb30fbaeb38435026804b80770a22a1438589e86e47f13ef07187538a105613bfc907bf9a6a377805f69d9e9de071e7ae57aeb11d4ac98a136

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 cb21b484d7f503ea5b6dd1c4a2da5012
SHA1 c9160bacc8d3836ed7310509ef5e6641cd57ea0d
SHA256 517c791ce282f7b35c84b78762127c2162706ab989d64c5d1c1da591bda2fa05
SHA512 e078f80b09319696af1f06c0590ab5096bdcb7f43370103d29ae27ffaf919136e9b0b06376642e9857f24600115c6294b6bd922c1f97bf228a917b64a30e9e98

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 09ff9f99142fdc6e3458978b19f7bdc4
SHA1 e22912290eca9da5bfc8182145bed5a5089b5942
SHA256 fa3df3d05da38f1684e582c258c0f82b171dcedf7bfae04506d21275b4ea1020
SHA512 999f394011c93b558756c6f2045ff13d8872b9fd9d17a91158bb49831b302146ba8ba54703fcba8744f2d6fb83daa4432588c771be49a843fbcbdad52741ac28

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 3806e2dbfb6c2392531760da1e7d02af
SHA1 8877be2173003e7298b58b66070f9d07fec973f7
SHA256 499e0b2bc1fac3abe4b691476a5188014d0a2103815023569cb86d3da6f0a11b
SHA512 6d6274c2f42efb6c487274c5438447d2e35566cf8e66b5c384e646e20656642c59901593d8e5a74c65bb37b9bbe5fd9f87806ef9d1a01a93ba9c08434b521f1d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 105fb7d69af8ba44d3f78ad75665e78a
SHA1 a46c88d5921c303f090d28a06f3e2468220435c0
SHA256 819dea68d24283a0762e0b6a8c1e299cf8b368f01547e9b586fab8982cf67ecd
SHA512 f62d7e84925fdac9613948c67bdde27d0057c933866d68575973c55bf9bca1182efae6b4100095f8ef14888f577e2e9dc0f705e83916b9f02ec97f4311db1082

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5868d7.TMP

MD5 53e6583d407f2e9ddc4ef47a955c706d
SHA1 4428f67e38885f032f4111cb38a5226f1d25af5b
SHA256 b2b555899140c1063fb6f6029789d9a9e6ae1843352b2881c4d4fc60356ee44d
SHA512 c11b6d40a05d1ae54bc28af2b4278308485d8ee3c9e8e7d1470bc5e848b0546a18269d54af2bd345b32be0ec59bb5871b26d6d04068f9c915beb97a06d1fa6db

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 279007b579e552dbf066158c8f2f0e19
SHA1 2ea64b100220a55e48a69a5eb5266f2cfa837571
SHA256 7abf2ee2955b9f54750402fd355b047ad96cd6d1643703310087ee7691424ce9
SHA512 776aae37571b672140605f0d9e48916cefdef4a24c5645487c87067701ccb5f7a4b1153081800b2632198cfc058c5066e65507c2f56a2ce7058c751160e3ca23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 9bae1c9264bb217bbf765e6c1367a015
SHA1 93566f7ee1dcbc55133d97c82cd6f31b40e656a5
SHA256 85dcd01958d8e92828728b8d49a1cbac8070c639b00b976644a4c3ae952ba8c6
SHA512 6bb06d396519b5d77dd0834f9592f6a2aadc06fe15c1ad9ac14de5b4879ef146f0af720f3fca2105613154dc704c79fb7fd53e8ae4f04564703965d8b8c275dd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 19fc682672f0bfcd252224182e295ed2
SHA1 d105407fdb02bed4962fa3f1700e940a70d93b24
SHA256 a69bdb26d48a546e2d445286805e2d052a27c08736eb5c9d61e781673641d861
SHA512 28a20d597a562bf919765df9bb47b807e38c3694a031be2c9e17fd6bb757a6bd3582d56dcf6c7698cbb29e1c929f7ea403388daefc48e998a565f78c47cb98a1

C:\Users\Admin\Downloads\AnViPC2009.zip

MD5 9a38c29ff9e12ba2892381eb51c79934
SHA1 76fcf6bcaac32f624fa0154a9177e44469b5886a
SHA256 45b75a116aa3b07f90a7c2d9a83c2cde524797df88bb5e20f9dc1e74d8527861
SHA512 c26d8c252d6f18a2ae4419bbfe27099862a625cbc40d8f104fa20cb361da112ebe6a17935ac3613c24b58f9c291d2219e55f59e0fa40b81f92fccf190115e734

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 f6c5b91ca3a9a0263a5493005cb30b5b
SHA1 c21443ca19e4cf31a3b66e0d47c79c3b8b3b24b9
SHA256 d2acbb84efa6d99f7f8efb12bad96ee75d2bd8b306e55c80c280e412682e49b6
SHA512 ebdd85c64d9267cfc009c71585dd6fda98d4a9172264622810b87a974e512ed220e3deadcb4447ed2bf8fae8a982afce584a4d0ddd4d5979d3770fc83fccf8f9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 18bc34865bdb68fe54d0aa9d91eb8d5d
SHA1 c65107c6a913d099d79175744ee834a87c73995c
SHA256 c4752123e5ae70915723f74a726cfb93bf4465a2b8fd55f6ee1f3e88cba8ce39
SHA512 457fce47359f47faca250f759789747ec337757010b79358da0764907aa4d0856fc3c84b5f1ff8a5a8b3afbfa414a5f6343068e9e87e01e488efe99a40b5f2e7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 3d72863303195927f4609deaf18400da
SHA1 70c4ef8e5d65ad56ab41f141e80955a6e279a789
SHA256 30cc488f34becd0d34e3496c5285368f5ca1524e8702071df1125f8c0ca578d8
SHA512 0887d4f0628a7b7ac873fe7394d761035f692642f80e2af4e8294ba5b583a4c1d74df18dc58017006c1c381d423c38206ded794d479f4555b3e8a7ef3aed8236

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 46adfc0627b8fc1655ebc5859d5e26a8
SHA1 e82e2ea585c4861f2d5800185a963f9c31f7933d
SHA256 915c1b74cde7a290702b3273b1268fdd5670705ac4059586222c748b2aa3b83b
SHA512 7e24d7c2058e859115775268acf1e84372abfe2b384ea753e907538fb5dc0a13e030ae0b319e64a16a18dab666875e0204a316f0673d4c3a017b57a3ed860392

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 45c014cd6ad15200744fd4f085dd67bd
SHA1 ab318c7f80d2f72efd9b209de5ccbf926352bad6
SHA256 6d39d84f00386b64ddbfca2db3f88b92295914fa0cd5d9068ded5d8584175c8f
SHA512 8f58090e667cee3cfdd5aaecf394b8e27f65f01ee8f25962acec0bd296b07c352b8a8427aa3167e70cf0576f5118c5ef3e1c615b65adeb01bb0b357bc863c3dd

C:\Users\Admin\Downloads\PC Defender.zip

MD5 c2c0e8a4b2790140ea1aae223669c48f
SHA1 664a18b5db524fad9e43df2b9c3c0577562082a7
SHA256 b23eccb36868753a1131a9a6b88b33324b3cdd7e232fb80cb5df4e2994f5a9e6
SHA512 df22757f866564887154c54a053f919f03a27ced1446b95979b02b8960ec499167f6e9c3a1f76e8359ad044c8a5ed2c6addc4874a712f75726a24d3029a8587e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\7f74373c-3317-47a2-b076-949c957fe7f9.tmp

MD5 9b83dab2a62362c7842e743ffeb3cd21
SHA1 1bc3ec1f6930f2ebc67764d419ea0089d825ffa7
SHA256 01d916d257ef97a167755f3d297b607989a7517991244c98e22426ab00c3a322
SHA512 2f90058f5d696cec826aa4a08025d64d35a533d4f265366575ab0c7c0e9b6272f2b3be008d5b08426046b5c45715b19e71b0250cba8f6d3c9fd2bce2f97b1c05

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 70eab7b4d8200954a44c508877afb52c
SHA1 fff1a54dc5c9cebc6ba70f093249a1b65f86a9c7
SHA256 3dfe4af6e2dcb7d855424247d5ed36b6b573fa458b13dd28c3ee98b43b553497
SHA512 e531c3903e86e9994ebeae68de06d201b023d836a7ce6a241c4485d005eac046636aab54b7f4d7471cd4d2b68cf4904be76792b5fc12863766fbe127dd2ffc47

C:\Users\Admin\Downloads\XFC.zip

MD5 7808dde5c4f694e10a02079121ef8ffa
SHA1 c40cbe977a1abcd34506ea80f101677c1b64503d
SHA256 8b33efd883f9c13bfef8544018f823ae6ed3469ac476864469cf4a3abb4c203b
SHA512 aa64707a077fcf9cc41e7db85e5160214442a808caed627b5f083ac0da8e87bf33f3545162e06f51483ce498706912e94b83419d825aba11d7bc184d602b9e76

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 42e71ab38c51ad5a5e731dd6cb99b28e
SHA1 c8dbeac48363635282fd3a46434aec3c9e10aca7
SHA256 254c25ab2553a84ee0267ac5c1e8f40b81cd3b662e379a1ec8f4475b4ce38bb3
SHA512 e987e8f56c2f79f2e56ff872218b2fdc6b9d7a80ea3313c8910f9c4ff658036f2d1e620c0bf8aa4d29708d8cb299e1b04192a0b116ca43f3c668607f4dc8010b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 408cb205e391f571156814a22e918240
SHA1 d70731c1494028d2d8136b1d6f43093703d072b2
SHA256 ebef8c833ab056565a9ef768c8f6bd5d7783aef70eaefe53412dc1cd986ae9ee
SHA512 7846241625e398d6eb1fb1188ce09ecfca5ff4207561d740922f53cd18fde77eaf5636d19ecd47d0b5715cd7a4c726508d70340ba436e82e54e84f23a126b577

C:\Users\Admin\AppData\Local\Temp\RarSFX0\PCDefenderSilentSetup.msi

MD5 7f728acab22868ca02cc1ba0a14f5d64
SHA1 9e3e82b152447b8bcd27583fbdab7aa91ca4739d
SHA256 586f9a9af50b2a3321e77d2b4583741cc4842967af9429cc371534f7179caec4
SHA512 9bc8bb97e6d4f18ec484fcd792466cb5df0bf0447cbaa19a41258ef80e599e8a2b2c83c700f32f30bef578b03614af1b554844d051435dc9f510ccbd56686800

C:\Windows\Installer\{FC2ABC8E-3715-4A32-B8B5-559380F45282}\_3F16219B047CF8432B7ADA.exe

MD5 b84df77564555c63c899fce0fcec7edb
SHA1 e63e7560b3c583616102cad58b06433b1a9903b0
SHA256 912ebab4ab2ea830b961df778dd854e555c89e05e25b7c02b3737429115405f9
SHA512 857717981c44a6a5fbb1bd34308e981c448746e0ea2d5bea94516fea20d0186e00a3547ad0b948c10fd9493e3ca00c0899927b0fa51c240697faacbbecca033a

C:\Config.Msi\e60916a.rbs

MD5 4780f5ddd8eac232f73cb2b8193cc490
SHA1 0798d49866d4f90f73d3747000544378097cd233
SHA256 4a6cbe21d403438e46f325bb107ae6907cd2545d0a03dc05b77db64be6702948
SHA512 f8ab3476b3faa43d1d73fbf3bca01f4527b7040b4f96720047d855711ec2d17a4a97a473c075ed5b5e5acbadaa1c923b41f48d63ab5de9e4b6373a308c837f13

\??\Volume{39cd0eda-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{b2d40473-8263-4df4-bdf5-653e92ac4e84}_OnDiskSnapshotProp

MD5 41ec19e145ced0ec1de825760660aa8b
SHA1 02b73c84c383565900a3ea4cc00c274c70153be4
SHA256 3782af10455d67d0c65bcbb77ed25761f759bb1382a61dda7271f28503008b9a
SHA512 33c78e1ac7c3e741cd2e5f5d4a3beae101bf71fc333b26f966657488b27e830538e26214d133042e60a627fde2309448b4a18b090a70f43fbba8faa91dc5d099

\??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2

MD5 ac4dd343a832e3a1cb98f5864af9fc6e
SHA1 c751cf764456f5a912e08710ab71524ad95bc291
SHA256 6c41ea6ba27b732d307aae4c7c6ee5c179d970d1833b1a7a05b3c4781b0797af
SHA512 3ad3cf4005aa28d7302b341a9f0069fcdf076ff92fb4844bfa9e91f33d93ad275c9e37393f2bd50885cdc33e4fb28170b2348ce9728871abf43bb4dee533affc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 bda42c4891d6238b9f809660730256cc
SHA1 5b4476617c83f111e92c007d0f348c5944239611
SHA256 a0227115aa9ffd918b35cdd49c0d7051d88fbb0f04abf9a5f9f02290e9e9c977
SHA512 41c34311c47d91eb29a5f04b8ab3ed0aed67f24f207a3e9f8304791b76695d90825f6f3c4057e7a0930b9af1d0b64b5b3ca6d942eeb31cfe041cf8cb20f09c82

C:\Windows\SysWOW64\fpfstb.dll

MD5 e1313b2911f7bf6d2015b4bc1083bbcd
SHA1 1a9b89aedcc2e1f47df24e26e7ca9dd132142176
SHA256 30d271f0c2bd9dfbab62bc37237e3eb43e6d2ccc6c3431062f06f918260cd86a
SHA512 a92a17db4da8b35fa704b740c1de768e4f628e0358471e0324cbce2e6254fccb26a0647e18fb597dcca190f1271d7b5a0a3e58508e37c540a9b8fe9f82f4b97c

memory/3684-910-0x000000006FFF0000-0x0000000070000000-memory.dmp

memory/3684-911-0x0000000074D60000-0x00000000760A8000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b6dd2c56a8a545036404a46f5b33410a
SHA1 b43769624847ce77f76d445e4980b5694d20dccc
SHA256 82d77ced8874af07ffc7249b2cc84b10a64e48a2a50e05d829f31062c48f1bd8
SHA512 a72c06416dbc1d9dd046b4180887cbc98070dfb8ba79ae4f55f54de84fd7fe9a2ba01e027cd344d98454fd449e5ed068bc5c2289d0db920d0e5858d2f89a467a

C:\Users\Admin\Downloads\ddom.py

MD5 2bb7a31b5f742d86dc3da75062721ca1
SHA1 56b13fb8ee798225754f9e5041344481ceb8d898
SHA256 efb2c2a1a35d64c72c38fe933c11035e3d8c3849a36ecb37cd10c903a4267ca6
SHA512 b362a589519def2b2ff167bc76e4268fcebf690e9c17fbf710055312eb9cf9f30bba0264767fa60f912f5368e1808ae0f1aecca2c109d039ac846a9fd6414bd6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 af15ce71b8ee6f2b68b0d1162339404c
SHA1 9e2cf6116d08ec7177f26208b6a06389a891d4de
SHA256 64d8dbdbdc8781ad0bd1bc07d34f9279faba0bfab52c68605243f74cd0bcec51
SHA512 de7f61c05fb668870e9eec44b28d41d46baec811116cc72bcb8874ae5adb3a12104838f4e592e2abb1a8e11a9058a8405a100146e78a30e8d1b341c9c7703d71

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 96d584c3ca3a4cc93908f3f8b761b0c8
SHA1 5803be6f3c123a2c9e9ef9c532560e59d6fbb8c9
SHA256 4f8c70475ec903339bc0fde82ceca3253a198b60b48c6fcca656027c853dc651
SHA512 52b52a702c25d45501a464caa1d38840d8b2961213c6e3933dc1e7c6f3cd865c042c8f0b32107ed94521cb812b23ed126f7e14395874e07f848b6b682315897d

C:\Users\Admin\Downloads\Cerber 5.zip

MD5 10d74de972a374bb9b35944901556f5f
SHA1 593f11e2aa70a1508d5e58ea65bec0ae04b68d64
SHA256 ab9f6ac4a669e6cbd9cfb7f7a53f8d2393cd9753cc1b1f0953f8655d80a4a1df
SHA512 1755be2bd1e2c9894865492903f9bf03a460fb4c952f84b748268bf050c3ece4185b612c855804c7600549170742359f694750a46e5148e00b5604aca5020218

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c60c298289178a3d03d8d9f8d299e29c
SHA1 1d147a1de6471b22814b907678545d6062a095f5
SHA256 7607fda934b417127665a35f1ffe3036ca9588105640674ce327e279791b7b85
SHA512 8fd64d16463f699a2fb9c3422e4699df22570602ba4a26e307549e5c1cc939f266b8c3f721a8bf0b1a054060e984139ff42bae2a59d3412214b4430e86ce4ba5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b6991eff7d18769703a365fc5ede38ac
SHA1 e7e3af31ee61b69068c8528412c6224c8ab58032
SHA256 fcb381e96c5d8e7acbc29eab7be05e1c06f8d050e46136a1044825db209c5832
SHA512 0b1935d29ffabec058d64438ac16458ab1e6c708b9623b5f4c4d811e8329735c40d1c1a1ca3c7867c89e8d2de0ac1abc1aee9f652c6101f5b3bfd17e7f7c0270

memory/2572-987-0x0000000001490000-0x00000000014C1000-memory.dmp

memory/2572-988-0x0000000000400000-0x0000000000433000-memory.dmp

memory/2572-989-0x0000000000400000-0x0000000000433000-memory.dmp

memory/2572-993-0x0000000000400000-0x0000000000433000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\OneNote\16.0\_R_E_A_D___T_H_I_S___CKEP1SA_.hta

MD5 e4f28b570442d3265959a64038a8001d
SHA1 6166a3cd2922f507aff6d1015c2a395df866732b
SHA256 40992d00fd633724a88190c36492e9a9941008b6bdbe47ad82995472f0489bd4
SHA512 307156a56a47672517eb55fd059e84bbdf7af9e0a563ef6148a20a12377413f84a1092748521745cd23529536ff139b16bac91a0b1317c8a6c5ff24d04fe9994

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\_R_E_A_D___T_H_I_S___58QY7S8M_.txt

MD5 d027361fa608aeb9d3de83b7a4681042
SHA1 4f49e241c4898964c493ec41c0db41509f309e3e
SHA256 5a514452a8d48468df1ed841ea16c512def7515df5c02a8eedd9075bd69a6e2a
SHA512 fba4d91f901df32f921cb62707a67e9230e56d2d6d646ea38249136b83b4a354dd0d9bfee0ea58f38787a39ee140f4875d82f483bf70dd17bfc8f127c19a078d

memory/2572-1383-0x0000000000400000-0x0000000000433000-memory.dmp

memory/2572-1404-0x0000000000400000-0x0000000000433000-memory.dmp

memory/2572-1405-0x0000000000440000-0x000000000044E000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ed9ac4b6228c7c759ae07806e9d480a5
SHA1 c8766885313b9d50b3c05541f7a2010dfcc79cc8
SHA256 f29535b26130174af0ed63326ada1f1e699678bc1e8a3015dd220ddc884f997c
SHA512 15a1b3a6e4e1f994a5ea17fef35fd7617a5fad3d3be3c27b294887cb5d905689663becd6774424623ec5f13fc70a18c63544b3d59a90b15e22cd132b38a8cecd

memory/3684-1419-0x0000000074D60000-0x00000000760A8000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 e8fe288afbcdda7323b7d46343c032ef
SHA1 9e56db62571d42cc54895bfd8abe775e4a9c5791
SHA256 49843a3bd636f18521d01d5fecf2a33f0455f4a2e3eabce2a8e842c85b793fc2
SHA512 88907ea0f3b6b13c7064b4169990e903a04d66688ef3dbcd82e443415500a4b3c80d62b3f3996a51be141e7dff02043ff560163d35135772898c0377298368ba

C:\Users\Admin\Downloads\NoMoreRansom.zip

MD5 f315e49d46914e3989a160bbcfc5de85
SHA1 99654bfeaad090d95deef3a2e9d5d021d2dc5f63
SHA256 5cbb6442c47708558da29588e0d8ef0b34c4716be4a47e7c715ea844fbcf60d7
SHA512 224747b15d0713afcb2641f8f3aa1687516d42e045d456b3ed096a42757a6c10c6626672366c9b632349cf6ffe41011724e6f4b684837de9b719d0f351dfd22e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 9a313a02bdf3e917e7adec9b4a17679f
SHA1 a5aa31e6ae725f1e901ed8655a2cbded2a510bfb
SHA256 5a255aaad69ed037ebdb7b6f6eaa2da1155c68de40f2d68c2c384a4a5fd9dd66
SHA512 dc8fa0bd735ecf3db9ee45d6df9ee658734b4315aaa8c460ddccac2be47a5880111d1c18735ac446e6543083f858bb8d66599c37fd7e9cf6a32d2f5c92957452

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 036f3a82bc2c962a0b0e289790b11137
SHA1 b64f9ddb0efbb8b9bfbba6284a638fa5f695f7a6
SHA256 b32e5d5134e60d0c9f9cfa857f96107804afed3608459536d57d9fafefbc7450
SHA512 3934c737e77b65fc3780b273bbe9c9a89ece14a1e93b40a37a1132c65d0c5150d3317bdeb6e260f3f42d04f26e5e8dfb4ed55a38d53d7466f0ad2240a96c6ccf

memory/5076-1456-0x0000000002230000-0x00000000022FE000-memory.dmp

memory/5076-1457-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1458-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1459-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1460-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1461-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1465-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1466-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1467-0x0000000000400000-0x00000000005DE000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7b635e327eaf223a608352b84d784d01
SHA1 6bb8710380b59fee1b5d76c43248e9bb876ae8b8
SHA256 9afdc0d2e98fdccd8620f580f3737f1b6020244eaae42c8914ef43762c37f40d
SHA512 79ad9d6f8baaf201b3af48279523e4a963897deb57effb6ba7ce110c696525bee29586df8c916cde31b8c38ef0588d174001f3b9cd75b93c540beaa66148bc92

memory/5076-1477-0x0000000000400000-0x00000000005DE000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7ed6888246ba283a59f89945035a22aa
SHA1 6019ae6aeaeba55868b9e33fa5807d738c97b7ce
SHA256 034047e24c4a5315aea64cba5fc5c80cd75ecd35dfa11bc29aba78029c04f5ff
SHA512 33955cc8ff02ef3fd08d05b8d17ebc452aab9f092af33fbfba3e30f4b08fba209c2652e2cfefd0b9ac760c871b770fa8088930c0b0f0fbdfeada6a48f9b4e32f

memory/5076-1487-0x0000000000400000-0x00000000005DE000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 0486cf865b6f1320c0ad9c3fd16d9ada
SHA1 d92ce84e577c54804fadd0e0c2da8a68ced2493c
SHA256 3818a71ed296d824a614fe007253f6721bd601ee216b7b7eeb63542fc89c4138
SHA512 3dbb26c37fba822d2fbba271fc5fd4fb860a310fb735c36cf1b8d67f7db25fb5976eee599ecdb23e30272d54dc8fcd0a38e34e9296101e8fbcbefe28235896c2

C:\Users\Admin\Downloads\Activation Security Warning.zip

MD5 22c615e3ede5c9ce4b0e6b157d3cb5a8
SHA1 4ade6563786d60e20d7d9e004cbb669db2f61f96
SHA256 36652fe4c6d926fe6398d49a448b138fc4eca926341bc7feece230dcd540dca5
SHA512 0dfcf308be70663966625a23c5acd8763a0e2644da7d5965aef168764a44c4200d5116af8f27dee0b8da12783f50d3ece95ec29b53e690673d0a1b859e2b8328

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\blob_storage\1de2acb9-5c5f-4c20-aceb-002dc9a03544\4

MD5 93857ddb925d953198f5f72b5f4e9361
SHA1 3a34c73475866b616fd5341cf0bda0f70a490df9
SHA256 d0e94d0118ac8f5bf1b4df3f8991d33d2e5431ce4fb3e6e365a09955a035b097
SHA512 780e6c5a718cbe1b96ceea91cf67a787adb9b02ee3178fd4defb5934b74316b51f795044f7ca6d6fe9a59db65c6a7e975292171aa93f03318f148f3056ae538c

memory/5076-1512-0x0000000000400000-0x00000000005DE000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 f67411a67eb791b36283b2012318c5ac
SHA1 380cc6db967b060062293e2ff8046810b4211fe8
SHA256 12aaef96f5f114a502534255ed63a645285bfa37ec0e95ce3bf754d5cc2d1cb1
SHA512 793540c576a2746a9b09d595f95746e13295560b37b262a7005e9e55449eb265e557d3ce1c8e218b5c9db4699070f29d89be64dd9c3da092091e3b373dc69110

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ee7f54713ed853e1d6237cb251c3a08b
SHA1 e479b035faf01c799a8c33ed310ff259b60bdb3e
SHA256 21a88fd56eb6950db2a5d952763d5289ceaf494b7fbc945acb52c604d0d10e81
SHA512 7a9cd6a8cf6d9f9545c251bf842898cc843aa0de18d38283848922a2b50828b81d64c4cf134712b1391415f15d3f403dce44123de9438962f3157aacffc192a0

memory/5076-1543-0x0000000000400000-0x00000000005DE000-memory.dmp

C:\Users\Admin\Downloads\ed44e49c-f7ed-4f1d-9201-bbc34db5fafc.tmp

MD5 dd0cd5436709146f9ded29cdab6f9847
SHA1 3edf49f80bb9c4a46ca9379e25c8366d94be7d0d
SHA256 d0607369ec47f863c1b6bf52527c54a5bbabb97736c22f46eb01c45864a68fdf
SHA512 253766a39558d4fe1c61274dbbc6e04631aecf2f1247bd9d3dce75b970e2628d0b0530dbb321ce8475a0e30e2aa2b970aa821a7f38920fc19d55c4765a129cbb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d504b3187d8a2bc7e1212d9464b07c43
SHA1 9536a05b32ddec3d49b77809f572f82a73b9eeef
SHA256 e8ed97cc473540566cb67db5c9c6356321aa147667c7e855bfcf096957416225
SHA512 cb7ad765e5c37b8631d4405b08d0597fe832c041921837bb99bcb92edae51dbb318d35dd2b1c534c3368cb520fddb8f64d687757b4d3d04532c8bda4939c3400

memory/5076-1592-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1593-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1596-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1606-0x0000000000400000-0x00000000005DE000-memory.dmp

C:\Users\Admin\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\Projects.json

MD5 1e5ea04d3821813238f4bbd19f277b17
SHA1 1bdc1c1e0ce61d7cba60c07e3f4f9b26f2eb1b2b
SHA256 d0c8ec3657205b2e0a586c22ea2ab186884b8670e42112e90d30100043812745
SHA512 b0d15d20a1b53746ec6a71f5aff75c9a24cd2ad43b01e5e4dac8977e53885b7666be1409026be5264b62939dc76f51e4dfec66f23a602981cd29844d8f8dc73c

C:\Users\Admin\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\cloudCommunitySettings.json

MD5 404a3ec24e3ebf45be65e77f75990825
SHA1 1e05647cf0a74cedfdeabfa3e8ee33b919780a61
SHA256 cc45905af3aaa62601a69c748a06a2fa48eca3b28d44d8ec18764a7e8e4c3da2
SHA512 a55382b72267375821b0a229d3529ed54cef0f295f550d1e95661bafccec606aa1cd72e059d37d78e7d2927ae72e2919941251d233152f5eeb32ffdfc96023e5

memory/5076-1681-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1682-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1683-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1684-0x0000000000400000-0x00000000005DE000-memory.dmp

C:\Users\Admin\Downloads\ERROR #DW6BD36.zip

MD5 b4d04928e9a135b023592a2922da704e
SHA1 a21543834176e54c960157b6db41ea0a513ba002
SHA256 0046fadf9e0a0a8b91b5cbac23ce3108de5f8b3bc577af7f4a18757e1d76a69f
SHA512 c934ffd66e600a030b652ef68490371ead2f713a70eb127d7abdb2a139cc1f59b9dcc179f75d5e979dcaf9dde62ec85c37172dc4502e857f7e7dff61b0541931

memory/5076-1698-0x0000000000400000-0x00000000005DE000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c522457bdc37fa9424ff01989961db24
SHA1 ea7038f4fa42cd7eb3213c61ed76b80d0d79865c
SHA256 cea2d0a39f723c00de8a69a784180ff277bb347900f00a43c9b8052dbae43b25
SHA512 b2072e1aeab030d7024bd3eb5975a19d840624dffdd5f829aa091666fa85687bce02b9e5178dea4a280247734c73e961c84833b218851ea483bd6116b97146d4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fd6fb4be4124b7a9148eb3e285be2a15
SHA1 64b470617551180353ef4f504e7fd54bee056f6d
SHA256 0941e9153530dc36d920da7814a861e509a59143662bd72908ab30c0a46d19b2
SHA512 f40126ec4218a0bf62251453e8fb1e6bbff781d86ba8b8448e260321d76577f56f9378ed07ae17d0b6ca58f91e174d166c990a5c623bb79674388d79e308cb0b

memory/5076-1727-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1728-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1729-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1730-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1731-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1732-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1733-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1734-0x0000000000400000-0x00000000005DE000-memory.dmp

memory/5076-1735-0x0000000000400000-0x00000000005DE000-memory.dmp

C:\Users\Admin\Downloads\Deskbottom.zip

MD5 0575625e5ced1be9f4018c5afa456406
SHA1 70f86daa07564d318c2825e08e2f70e8bcbd7967
SHA256 37e612d9c4d2fdc46c132a1ebac107c720e45135f5c79956140f8d38a951332f
SHA512 992f17fe1348d9f4d5f3870302a268998194e8d59c1087b3474568434e8dd90aeefe57aff7d0caa91fcfe7239cf9e9f38094b3767ae9d9bb592c41942282088f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b6d32b14629137ec1ed9eb917c17781c
SHA1 ac36e966e7ec5b2192ed58b2e00239e3cef9fa4b
SHA256 6e192c269f509eee0e84365ba0c6acbfb260b53c74b987da2c05ad01c2ed9c28
SHA512 cf5e403a428614cb8f10487558096b7d7bef779488855243710151ae5a86226f604162910901988adcc3ade97090f758a89f945639bc9514b8875cec9ab2c7e0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1b37eac8a70ad807e59850e844b54dc6
SHA1 a12c3c6d17cf1596c929d58cfa37018fb5ec8e65
SHA256 f23186b8fbca33b89dabee8eb8b5d7aaa7a371ae7e360ecbba126c80c86ddf9d
SHA512 64e2a6dad8f95c6ffaf1dfbb30892432b2070660c04194dad4e6fc38f652ce0db1fe68304863875d2fec85c574ce8443c09800c8908637f2ef3783b21035914e

memory/2688-1781-0x00000000005F0000-0x00000000005F1000-memory.dmp