Analysis Overview
SHA256
20f9fc2278fae267ea2b4711b0f043c85aff368faaeed5b0c3c483c11a699925
Threat Level: Known bad
The file 347251943c940494c6e21c268907bbcc_JaffaCakes118 was found to be: Known bad.
Malicious Activity Summary
Cerber
Deletes shadow copies
Contacts a large (1093) amount of remote hosts
Blocklisted process makes network request
Loads dropped DLL
Executes dropped EXE
Reads user/profile data of web browsers
Deletes itself
Suspicious use of SetThreadContext
Sets desktop wallpaper using registry
Drops file in Program Files directory
Enumerates physical storage devices
Command and Scripting Interpreter: JavaScript
Unsigned PE
Program crash
Suspicious use of SetWindowsHookEx
Suspicious use of SendNotifyMessage
Suspicious behavior: MapViewOfSection
Kills process with taskkill
Suspicious use of AdjustPrivilegeToken
Suspicious behavior: GetForegroundWindowSpam
Suspicious use of WriteProcessMemory
Uses Volume Shadow Copy service COM API
Modifies Internet Explorer settings
Enumerates system info in registry
Suspicious use of FindShellTrayWindow
Runs ping.exe
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious behavior: EnumeratesProcesses
MITRE ATT&CK Matrix V13
Analysis: static1
Detonation Overview
Reported
2024-05-11 11:51
Signatures
Unsigned PE
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
Analysis: behavioral5
Detonation Overview
Submitted
2024-05-11 11:51
Reported
2024-05-11 11:53
Platform
win7-20240221-en
Max time kernel
121s
Max time network
122s
Command Line
Signatures
Executes dropped EXE
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\~nsu.tmp\Au_.exe | N/A |
Loads dropped DLL
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\Uninstall.exe | N/A |
Enumerates physical storage devices
Suspicious behavior: GetForegroundWindowSpam
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\~nsu.tmp\Au_.exe | N/A |
Suspicious use of WriteProcessMemory
| Description | Indicator | Process | Target |
| PID 2164 wrote to memory of 2844 | N/A | C:\Users\Admin\AppData\Local\Temp\Uninstall.exe | C:\Users\Admin\AppData\Local\Temp\~nsu.tmp\Au_.exe |
| PID 2164 wrote to memory of 2844 | N/A | C:\Users\Admin\AppData\Local\Temp\Uninstall.exe | C:\Users\Admin\AppData\Local\Temp\~nsu.tmp\Au_.exe |
| PID 2164 wrote to memory of 2844 | N/A | C:\Users\Admin\AppData\Local\Temp\Uninstall.exe | C:\Users\Admin\AppData\Local\Temp\~nsu.tmp\Au_.exe |
| PID 2164 wrote to memory of 2844 | N/A | C:\Users\Admin\AppData\Local\Temp\Uninstall.exe | C:\Users\Admin\AppData\Local\Temp\~nsu.tmp\Au_.exe |
Processes
C:\Users\Admin\AppData\Local\Temp\Uninstall.exe
"C:\Users\Admin\AppData\Local\Temp\Uninstall.exe"
C:\Users\Admin\AppData\Local\Temp\~nsu.tmp\Au_.exe
"C:\Users\Admin\AppData\Local\Temp\~nsu.tmp\Au_.exe" _?=C:\Users\Admin\AppData\Local\Temp\
Network
Files
\Users\Admin\AppData\Local\Temp\~nsu.tmp\Au_.exe
| MD5 | 2a6c7a4130c659029ff5ccedb7f94c2b |
| SHA1 | 17e6f9288fcfdf8810f70a8aba5a939eff3a973c |
| SHA256 | 514b76cfd9050f937c45bfd3c9c9f85c2c7be84e2f275af0c8a781e143cb6c39 |
| SHA512 | 7ed874cb0f3c0a4458e5158b1f11f70ae16ce3fcfd057da9a2f192542267576eef7a22b93909cad0c067e9b0f56dfe1039d97bc01b734f4686f57d65cbc3a2d7 |
Analysis: behavioral8
Detonation Overview
Submitted
2024-05-11 11:51
Reported
2024-05-11 11:53
Platform
win10v2004-20240508-en
Max time kernel
145s
Max time network
128s
Command Line
Signatures
Enumerates system info in registry
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
Suspicious use of WriteProcessMemory
Processes
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\audio_WhatAbouts.html
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa6da846f8,0x7ffa6da84708,0x7ffa6da84718
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,12019898121207424348,16746481237522954867,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,12019898121207424348,16746481237522954867,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2328 /prefetch:3
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,12019898121207424348,16746481237522954867,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2872 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,12019898121207424348,16746481237522954867,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,12019898121207424348,16746481237522954867,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,12019898121207424348,16746481237522954867,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1912 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,12019898121207424348,16746481237522954867,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1912 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,12019898121207424348,16746481237522954867,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5136 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,12019898121207424348,16746481237522954867,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5144 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,12019898121207424348,16746481237522954867,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3412 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,12019898121207424348,16746481237522954867,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3448 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,12019898121207424348,16746481237522954867,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5084 /prefetch:2
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | www.tgm.org | udp |
| US | 8.8.8.8:53 | 69.31.126.40.in-addr.arpa | udp |
| CA | 198.72.127.75:80 | www.tgm.org | tcp |
| US | 8.8.8.8:53 | g.bing.com | udp |
| US | 204.79.197.237:443 | g.bing.com | tcp |
| NL | 23.62.61.155:443 | www.bing.com | tcp |
| US | 8.8.8.8:53 | 75.127.72.198.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 237.197.79.204.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 77.190.18.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 155.61.62.23.in-addr.arpa | udp |
| NL | 23.62.61.155:443 | www.bing.com | tcp |
| N/A | 224.0.0.251:5353 | udp | |
| US | 8.8.8.8:53 | 55.36.223.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 26.165.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 206.23.85.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 11.227.111.52.in-addr.arpa | udp |
Files
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | 87f7abeb82600e1e640b843ad50fe0a1 |
| SHA1 | 045bbada3f23fc59941bf7d0210fb160cb78ae87 |
| SHA256 | b35d6906050d90a81d23646f86c20a8f5d42f058ffc6436fb0a2b8bd71ee1262 |
| SHA512 | ea8e7f24ab823ad710ce079c86c40aa957353a00d2775732c23e31be88a10d212e974c4691279aa86016c4660f5795febf739a15207833df6ed964a9ed99d618 |
\??\pipe\LOCAL\crashpad_208_OVQHBVZUAMGRAAIW
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| SHA512 | cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | f61fa5143fe872d1d8f1e9f8dc6544f9 |
| SHA1 | df44bab94d7388fb38c63085ec4db80cfc5eb009 |
| SHA256 | 284a24b5b40860240db00ef3ae6a33c9fa8349ab5490a634e27b2c6e9a191c64 |
| SHA512 | 971000784a6518bb39c5cf043292c7ab659162275470f5f6b632ea91a6bcae83bc80517ceb983dd5abfe8fb4e157344cb65c27e609a879eec00b33c5fad563a6 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 813105082ca7f8e244a543649640c9fc |
| SHA1 | 6cb00e380fed2854f323bcd7c4211ad213a2c0d9 |
| SHA256 | be02866ddec5904ce6809a96f037eb0359ad4adcaf9b0c91a6be4ff6676e5de6 |
| SHA512 | 05828cb5388ae709e9ec44b4278ad203d468bb322dc24cbbe9ae1b09f375847e8c55415f3e959eb59b7e2d2f509588a7b15a73c9f827f0f5f487ea2738f6bcc6 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
| MD5 | 6752a1d65b201c13b62ea44016eb221f |
| SHA1 | 58ecf154d01a62233ed7fb494ace3c3d4ffce08b |
| SHA256 | 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd |
| SHA512 | 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | 257c4b9317a443e207fb1f5baa31d5a5 |
| SHA1 | 13941206b34b7a21b1f9b8aaefddb17df2ca1709 |
| SHA256 | f0fb703c799ab671b0d558d52f828c36315044dc0405e30024bd8d7a8431daac |
| SHA512 | af3612ee465ff6fb39e17c45b138f7da6443ddff02a7ad7faea95464fc120824fec1eb676131efdae1a429b5879864e53f547adc4b52dacc9677346ff3c065c0 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 3cf18ab47e5e1b102b0bfd3f4e0ae161 |
| SHA1 | a982b97789db94e90c959cb3f66c3725c95d9d75 |
| SHA256 | 77d9d5977034d769b076684aee4c9e933995d6bb7b14cb058845e7aa7486feb8 |
| SHA512 | d14277c26902a852ddeb7fcfb81d5b423c289ebb74b222193b3ccc4f1a73fea4b6c500f2726daf19136ab76d991df0147f104cb333db1279dfa7f988bee776bc |
Analysis: behavioral10
Detonation Overview
Submitted
2024-05-11 11:51
Reported
2024-05-11 11:53
Platform
win10v2004-20240508-en
Max time kernel
149s
Max time network
155s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\embed.js
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | g.bing.com | udp |
| US | 204.79.197.237:443 | g.bing.com | tcp |
| NL | 23.62.61.97:443 | www.bing.com | tcp |
| US | 8.8.8.8:53 | 237.197.79.204.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 77.190.18.2.in-addr.arpa | udp |
| NL | 23.62.61.97:443 | www.bing.com | tcp |
| US | 8.8.8.8:53 | 97.61.62.23.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 4.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 88.156.103.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 50.23.12.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 206.23.85.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.210.232.199.in-addr.arpa | udp |
| US | 52.111.229.43:443 | tcp | |
| US | 8.8.8.8:53 | 11.227.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 27.173.189.20.in-addr.arpa | udp |
Files
Analysis: behavioral1
Detonation Overview
Submitted
2024-05-11 11:51
Reported
2024-05-11 11:53
Platform
win7-20240221-en
Max time kernel
120s
Max time network
143s
Command Line
Signatures
Cerber
Deletes shadow copies
Blocklisted process makes network request
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\mshta.exe | N/A |
| N/A | N/A | C:\Windows\SysWOW64\mshta.exe | N/A |
| N/A | N/A | C:\Windows\SysWOW64\mshta.exe | N/A |
Contacts a large (1093) amount of remote hosts
Deletes itself
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\system32\cmd.exe | N/A |
Loads dropped DLL
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe | N/A |
Reads user/profile data of web browsers
Sets desktop wallpaper using registry
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\tmpDAA6.bmp" | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe | N/A |
Suspicious use of SetThreadContext
| Description | Indicator | Process | Target |
| PID 1520 set thread context of 2964 | N/A | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe |
Drops file in Program Files directory
| Description | Indicator | Process | Target |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\ACADEMIC.ONE | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\README.hta | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\BLANK.ONE | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\BUSINESS.ONE | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\DESIGNER.ONE | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\PLANNERS.ONE | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe | N/A |
Enumerates physical storage devices
Kills process with taskkill
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\system32\taskkill.exe | N/A |
Modifies Internet Explorer settings
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main | C:\Windows\SysWOW64\mshta.exe | N/A |
Runs ping.exe
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\system32\PING.EXE | N/A |
Suspicious behavior: EnumeratesProcesses
Suspicious behavior: MapViewOfSection
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe | N/A |
Suspicious use of AdjustPrivilegeToken
| Description | Indicator | Process | Target |
| Token: SeDebugPrivilege | N/A | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe | N/A |
| Token: SeIncreaseQuotaPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeSecurityPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeTakeOwnershipPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeLoadDriverPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeSystemProfilePrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeSystemtimePrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeProfSingleProcessPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeIncBasePriorityPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeCreatePagefilePrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeBackupPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeRestorePrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeSystemEnvironmentPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeRemoteShutdownPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeUndockPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeManageVolumePrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: 33 | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: 34 | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: 35 | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeIncreaseQuotaPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeSecurityPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeTakeOwnershipPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeLoadDriverPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeSystemProfilePrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeSystemtimePrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeProfSingleProcessPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeIncBasePriorityPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeCreatePagefilePrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeBackupPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeRestorePrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeShutdownPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeSystemEnvironmentPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeRemoteShutdownPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeUndockPrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeManageVolumePrivilege | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: 33 | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: 34 | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: 35 | N/A | C:\Windows\system32\wbem\WMIC.exe | N/A |
| Token: SeBackupPrivilege | N/A | C:\Windows\system32\vssvc.exe | N/A |
| Token: SeRestorePrivilege | N/A | C:\Windows\system32\vssvc.exe | N/A |
| Token: SeAuditPrivilege | N/A | C:\Windows\system32\vssvc.exe | N/A |
| Token: SeDebugPrivilege | N/A | C:\Windows\system32\taskkill.exe | N/A |
Suspicious use of SetWindowsHookEx
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\mshta.exe | N/A |
| N/A | N/A | C:\Windows\SysWOW64\mshta.exe | N/A |
Suspicious use of WriteProcessMemory
Uses Volume Shadow Copy service COM API
Processes
C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe"
C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe"
C:\Windows\system32\cmd.exe
"C:\Windows\system32\cmd.exe"
C:\Windows\system32\wbem\WMIC.exe
C:\Windows\system32\wbem\wmic.exe shadowcopy delete
C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{3F6B5E16-092A-41ED-930B-0B4125D91D4E}
C:\Windows\SysWOW64\mshta.exe
"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\AppData\Local\Temp\README.hta"
C:\Windows\system32\cmd.exe
"C:\Windows\system32\cmd.exe"
C:\Windows\system32\taskkill.exe
taskkill /f /im "347251943c940494c6e21c268907bbcc_JaffaCakes118.exe"
C:\Windows\system32\PING.EXE
ping -n 1 127.0.0.1
Network
| Country | Destination | Domain | Proto |
| US | 65.55.50.0:6892 | udp | |
| US | 65.55.50.1:6892 | udp | |
| US | 65.55.50.2:6892 | udp | |
| US | 65.55.50.3:6892 | udp | |
| US | 65.55.50.4:6892 | udp | |
| US | 65.55.50.5:6892 | udp | |
| US | 65.55.50.6:6892 | udp | |
| US | 65.55.50.7:6892 | udp | |
| US | 65.55.50.8:6892 | udp | |
| US | 65.55.50.9:6892 | udp | |
| US | 65.55.50.10:6892 | udp | |
| US | 65.55.50.11:6892 | udp | |
| US | 65.55.50.12:6892 | udp | |
| US | 65.55.50.13:6892 | udp | |
| US | 65.55.50.14:6892 | udp | |
| US | 65.55.50.15:6892 | udp | |
| US | 65.55.50.16:6892 | udp | |
| US | 65.55.50.17:6892 | udp | |
| US | 65.55.50.18:6892 | udp | |
| US | 65.55.50.19:6892 | udp | |
| US | 65.55.50.20:6892 | udp | |
| US | 65.55.50.21:6892 | udp | |
| US | 65.55.50.22:6892 | udp | |
| US | 65.55.50.23:6892 | udp | |
| US | 65.55.50.24:6892 | udp | |
| US | 65.55.50.25:6892 | udp | |
| US | 65.55.50.26:6892 | udp | |
| US | 65.55.50.27:6892 | udp | |
| US | 65.55.50.28:6892 | udp | |
| US | 65.55.50.29:6892 | udp | |
| US | 65.55.50.30:6892 | udp | |
| US | 65.55.50.31:6892 | udp | |
| NL | 192.42.118.0:6892 | udp | |
| NL | 192.42.118.1:6892 | udp | |
| NL | 192.42.118.2:6892 | udp | |
| NL | 192.42.118.3:6892 | udp | |
| NL | 192.42.118.4:6892 | udp | |
| NL | 192.42.118.5:6892 | udp | |
| NL | 192.42.118.6:6892 | udp | |
| NL | 192.42.118.7:6892 | udp | |
| NL | 192.42.118.8:6892 | udp | |
| NL | 192.42.118.9:6892 | udp | |
| NL | 192.42.118.10:6892 | udp | |
| NL | 192.42.118.11:6892 | udp | |
| NL | 192.42.118.12:6892 | udp | |
| NL | 192.42.118.13:6892 | udp | |
| NL | 192.42.118.14:6892 | udp | |
| NL | 192.42.118.15:6892 | udp | |
| NL | 192.42.118.16:6892 | udp | |
| NL | 192.42.118.17:6892 | udp | |
| NL | 192.42.118.18:6892 | udp | |
| NL | 192.42.118.19:6892 | udp | |
| NL | 192.42.118.20:6892 | udp | |
| NL | 192.42.118.21:6892 | udp | |
| NL | 192.42.118.22:6892 | udp | |
| NL | 192.42.118.23:6892 | udp | |
| NL | 192.42.118.24:6892 | udp | |
| NL | 192.42.118.25:6892 | udp | |
| NL | 192.42.118.26:6892 | udp | |
| NL | 192.42.118.27:6892 | udp | |
| NL | 192.42.118.28:6892 | udp | |
| NL | 192.42.118.29:6892 | udp | |
| NL | 192.42.118.30:6892 | udp | |
| NL | 192.42.118.31:6892 | udp | |
| LT | 194.165.16.0:6892 | udp | |
| LT | 194.165.16.1:6892 | udp | |
| LT | 194.165.16.2:6892 | udp | |
| LT | 194.165.16.3:6892 | udp | |
| LT | 194.165.16.4:6892 | udp | |
| LT | 194.165.16.5:6892 | udp | |
| LT | 194.165.16.6:6892 | udp | |
| LT | 194.165.16.7:6892 | udp | |
| LT | 194.165.16.8:6892 | udp | |
| LT | 194.165.16.9:6892 | udp | |
| LT | 194.165.16.10:6892 | udp | |
| LT | 194.165.16.11:6892 | udp | |
| LT | 194.165.16.12:6892 | udp | |
| LT | 194.165.16.13:6892 | udp | |
| LT | 194.165.16.14:6892 | udp | |
| LT | 194.165.16.15:6892 | udp | |
| LT | 194.165.16.16:6892 | udp | |
| LT | 194.165.16.17:6892 | udp | |
| LT | 194.165.16.18:6892 | udp | |
| LT | 194.165.16.19:6892 | udp | |
| LT | 194.165.16.20:6892 | udp | |
| LT | 194.165.16.21:6892 | udp | |
| LT | 194.165.16.22:6892 | udp | |
| LT | 194.165.16.23:6892 | udp | |
| LT | 194.165.16.24:6892 | udp | |
| LT | 194.165.16.25:6892 | udp | |
| LT | 194.165.16.26:6892 | udp | |
| LT | 194.165.16.27:6892 | udp | |
| LT | 194.165.16.28:6892 | udp | |
| LT | 194.165.16.29:6892 | udp | |
| LT | 194.165.16.30:6892 | udp | |
| LT | 194.165.16.31:6892 | udp | |
| LT | 194.165.16.32:6892 | udp | |
| LT | 194.165.16.33:6892 | udp | |
| LT | 194.165.16.34:6892 | udp | |
| LT | 194.165.16.35:6892 | udp | |
| LT | 194.165.16.36:6892 | udp | |
| LT | 194.165.16.37:6892 | udp | |
| LT | 194.165.16.38:6892 | udp | |
| LT | 194.165.16.39:6892 | udp | |
| LT | 194.165.16.40:6892 | udp | |
| LT | 194.165.16.41:6892 | udp | |
| LT | 194.165.16.42:6892 | udp | |
| LT | 194.165.16.43:6892 | udp | |
| LT | 194.165.16.44:6892 | udp | |
| LT | 194.165.16.45:6892 | udp | |
| LT | 194.165.16.46:6892 | udp | |
| LT | 194.165.16.47:6892 | udp | |
| LT | 194.165.16.48:6892 | udp | |
| LT | 194.165.16.49:6892 | udp | |
| LT | 194.165.16.50:6892 | udp | |
| LT | 194.165.16.51:6892 | udp | |
| LT | 194.165.16.52:6892 | udp | |
| LT | 194.165.16.53:6892 | udp | |
| LT | 194.165.16.54:6892 | udp | |
| LT | 194.165.16.55:6892 | udp | |
| LT | 194.165.16.56:6892 | udp | |
| LT | 194.165.16.57:6892 | udp | |
| LT | 194.165.16.58:6892 | udp | |
| LT | 194.165.16.59:6892 | udp | |
| LT | 194.165.16.60:6892 | udp | |
| LT | 194.165.16.61:6892 | udp | |
| LT | 194.165.16.62:6892 | udp | |
| LT | 194.165.16.63:6892 | udp | |
| LT | 194.165.16.64:6892 | udp | |
| LT | 194.165.16.65:6892 | udp | |
| LT | 194.165.16.66:6892 | udp | |
| LT | 194.165.16.67:6892 | udp | |
| LT | 194.165.16.68:6892 | udp | |
| LT | 194.165.16.69:6892 | udp | |
| LT | 194.165.16.70:6892 | udp | |
| LT | 194.165.16.71:6892 | udp | |
| LT | 194.165.16.72:6892 | udp | |
| LT | 194.165.16.73:6892 | udp | |
| LT | 194.165.16.74:6892 | udp | |
| LT | 194.165.16.75:6892 | udp | |
| LT | 194.165.16.76:6892 | udp | |
| LT | 194.165.16.77:6892 | udp | |
| LT | 194.165.16.78:6892 | udp | |
| LT | 194.165.16.79:6892 | udp | |
| LT | 194.165.16.80:6892 | udp | |
| LT | 194.165.16.81:6892 | udp | |
| LT | 194.165.16.82:6892 | udp | |
| LT | 194.165.16.83:6892 | udp | |
| LT | 194.165.16.84:6892 | udp | |
| LT | 194.165.16.85:6892 | udp | |
| LT | 194.165.16.86:6892 | udp | |
| LT | 194.165.16.87:6892 | udp | |
| LT | 194.165.16.88:6892 | udp | |
| LT | 194.165.16.89:6892 | udp | |
| LT | 194.165.16.90:6892 | udp | |
| LT | 194.165.16.91:6892 | udp | |
| LT | 194.165.16.92:6892 | udp | |
| LT | 194.165.16.93:6892 | udp | |
| LT | 194.165.16.94:6892 | udp | |
| LT | 194.165.16.95:6892 | udp | |
| LT | 194.165.16.96:6892 | udp | |
| LT | 194.165.16.97:6892 | udp | |
| LT | 194.165.16.98:6892 | udp | |
| LT | 194.165.16.99:6892 | udp | |
| LT | 194.165.16.100:6892 | udp | |
| LT | 194.165.16.101:6892 | udp | |
| LT | 194.165.16.102:6892 | udp | |
| LT | 194.165.16.103:6892 | udp | |
| LT | 194.165.16.104:6892 | udp | |
| LT | 194.165.16.105:6892 | udp | |
| LT | 194.165.16.106:6892 | udp | |
| LT | 194.165.16.107:6892 | udp | |
| LT | 194.165.16.108:6892 | udp | |
| LT | 194.165.16.109:6892 | udp | |
| LT | 194.165.16.110:6892 | udp | |
| LT | 194.165.16.111:6892 | udp | |
| LT | 194.165.16.112:6892 | udp | |
| LT | 194.165.16.113:6892 | udp | |
| LT | 194.165.16.114:6892 | udp | |
| LT | 194.165.16.115:6892 | udp | |
| LT | 194.165.16.116:6892 | udp | |
| LT | 194.165.16.117:6892 | udp | |
| LT | 194.165.16.118:6892 | udp | |
| LT | 194.165.16.119:6892 | udp | |
| LT | 194.165.16.120:6892 | udp | |
| LT | 194.165.16.121:6892 | udp | |
| LT | 194.165.16.122:6892 | udp | |
| LT | 194.165.16.123:6892 | udp | |
| LT | 194.165.16.124:6892 | udp | |
| LT | 194.165.16.125:6892 | udp | |
| LT | 194.165.16.126:6892 | udp | |
| LT | 194.165.16.127:6892 | udp | |
| LT | 194.165.16.128:6892 | udp | |
| LT | 194.165.16.129:6892 | udp | |
| LT | 194.165.16.130:6892 | udp | |
| LT | 194.165.16.131:6892 | udp | |
| LT | 194.165.16.132:6892 | udp | |
| LT | 194.165.16.133:6892 | udp | |
| LT | 194.165.16.134:6892 | udp | |
| LT | 194.165.16.135:6892 | udp | |
| LT | 194.165.16.136:6892 | udp | |
| LT | 194.165.16.137:6892 | udp | |
| LT | 194.165.16.138:6892 | udp | |
| LT | 194.165.16.139:6892 | udp | |
| LT | 194.165.16.140:6892 | udp | |
| LT | 194.165.16.141:6892 | udp | |
| LT | 194.165.16.142:6892 | udp | |
| LT | 194.165.16.143:6892 | udp | |
| LT | 194.165.16.144:6892 | udp | |
| LT | 194.165.16.145:6892 | udp | |
| LT | 194.165.16.146:6892 | udp | |
| LT | 194.165.16.147:6892 | udp | |
| LT | 194.165.16.148:6892 | udp | |
| LT | 194.165.16.149:6892 | udp | |
| LT | 194.165.16.150:6892 | udp | |
| LT | 194.165.16.151:6892 | udp | |
| LT | 194.165.16.152:6892 | udp | |
| LT | 194.165.16.153:6892 | udp | |
| LT | 194.165.16.154:6892 | udp | |
| LT | 194.165.16.155:6892 | udp | |
| LT | 194.165.16.156:6892 | udp | |
| LT | 194.165.16.157:6892 | udp | |
| LT | 194.165.16.158:6892 | udp | |
| LT | 194.165.16.159:6892 | udp | |
| LT | 194.165.16.160:6892 | udp | |
| LT | 194.165.16.161:6892 | udp | |
| LT | 194.165.16.162:6892 | udp | |
| LT | 194.165.16.163:6892 | udp | |
| LT | 194.165.16.164:6892 | udp | |
| LT | 194.165.16.165:6892 | udp | |
| LT | 194.165.16.166:6892 | udp | |
| LT | 194.165.16.167:6892 | udp | |
| LT | 194.165.16.168:6892 | udp | |
| LT | 194.165.16.169:6892 | udp | |
| LT | 194.165.16.170:6892 | udp | |
| LT | 194.165.16.171:6892 | udp | |
| LT | 194.165.16.172:6892 | udp | |
| LT | 194.165.16.173:6892 | udp | |
| LT | 194.165.16.174:6892 | udp | |
| LT | 194.165.16.175:6892 | udp | |
| LT | 194.165.16.176:6892 | udp | |
| LT | 194.165.16.177:6892 | udp | |
| LT | 194.165.16.178:6892 | udp | |
| LT | 194.165.16.179:6892 | udp | |
| LT | 194.165.16.180:6892 | udp | |
| LT | 194.165.16.181:6892 | udp | |
| LT | 194.165.16.182:6892 | udp | |
| LT | 194.165.16.183:6892 | udp | |
| LT | 194.165.16.184:6892 | udp | |
| LT | 194.165.16.185:6892 | udp | |
| LT | 194.165.16.186:6892 | udp | |
| LT | 194.165.16.187:6892 | udp | |
| LT | 194.165.16.188:6892 | udp | |
| LT | 194.165.16.189:6892 | udp | |
| LT | 194.165.16.190:6892 | udp | |
| LT | 194.165.16.191:6892 | udp | |
| LT | 194.165.16.192:6892 | udp | |
| LT | 194.165.16.193:6892 | udp | |
| LT | 194.165.16.194:6892 | udp | |
| LT | 194.165.16.195:6892 | udp | |
| LT | 194.165.16.196:6892 | udp | |
| LT | 194.165.16.197:6892 | udp | |
| LT | 194.165.16.198:6892 | udp | |
| LT | 194.165.16.199:6892 | udp | |
| LT | 194.165.16.200:6892 | udp | |
| LT | 194.165.16.201:6892 | udp | |
| LT | 194.165.16.202:6892 | udp | |
| LT | 194.165.16.203:6892 | udp | |
| LT | 194.165.16.204:6892 | udp | |
| LT | 194.165.16.205:6892 | udp | |
| LT | 194.165.16.206:6892 | udp | |
| LT | 194.165.16.207:6892 | udp | |
| LT | 194.165.16.208:6892 | udp | |
| LT | 194.165.16.209:6892 | udp | |
| LT | 194.165.16.210:6892 | udp | |
| LT | 194.165.16.211:6892 | udp | |
| LT | 194.165.16.212:6892 | udp | |
| LT | 194.165.16.213:6892 | udp | |
| LT | 194.165.16.214:6892 | udp | |
| LT | 194.165.16.215:6892 | udp | |
| LT | 194.165.16.216:6892 | udp | |
| LT | 194.165.16.217:6892 | udp | |
| LT | 194.165.16.218:6892 | udp | |
| LT | 194.165.16.219:6892 | udp | |
| LT | 194.165.16.220:6892 | udp | |
| LT | 194.165.16.221:6892 | udp | |
| LT | 194.165.16.222:6892 | udp | |
| LT | 194.165.16.223:6892 | udp | |
| LT | 194.165.16.224:6892 | udp | |
| LT | 194.165.16.225:6892 | udp | |
| LT | 194.165.16.226:6892 | udp | |
| LT | 194.165.16.227:6892 | udp | |
| LT | 194.165.16.228:6892 | udp | |
| LT | 194.165.16.229:6892 | udp | |
| LT | 194.165.16.230:6892 | udp | |
| LT | 194.165.16.231:6892 | udp | |
| LT | 194.165.16.232:6892 | udp | |
| LT | 194.165.16.233:6892 | udp | |
| LT | 194.165.16.234:6892 | udp | |
| LT | 194.165.16.235:6892 | udp | |
| LT | 194.165.16.236:6892 | udp | |
| LT | 194.165.16.237:6892 | udp | |
| LT | 194.165.16.238:6892 | udp | |
| LT | 194.165.16.239:6892 | udp | |
| LT | 194.165.16.240:6892 | udp | |
| LT | 194.165.16.241:6892 | udp | |
| LT | 194.165.16.242:6892 | udp | |
| LT | 194.165.16.243:6892 | udp | |
| LT | 194.165.16.244:6892 | udp | |
| LT | 194.165.16.245:6892 | udp | |
| LT | 194.165.16.246:6892 | udp | |
| LT | 194.165.16.247:6892 | udp | |
| LT | 194.165.16.248:6892 | udp | |
| LT | 194.165.16.249:6892 | udp | |
| LT | 194.165.16.250:6892 | udp | |
| LT | 194.165.16.251:6892 | udp | |
| LT | 194.165.16.252:6892 | udp | |
| LT | 194.165.16.253:6892 | udp | |
| LT | 194.165.16.254:6892 | udp | |
| LT | 194.165.16.255:6892 | udp | |
| LT | 194.165.17.0:6892 | udp | |
| LT | 194.165.17.1:6892 | udp | |
| LT | 194.165.17.2:6892 | udp | |
| LT | 194.165.17.3:6892 | udp | |
| LT | 194.165.17.4:6892 | udp | |
| LT | 194.165.17.5:6892 | udp | |
| LT | 194.165.17.6:6892 | udp | |
| LT | 194.165.17.7:6892 | udp | |
| LT | 194.165.17.8:6892 | udp | |
| LT | 194.165.17.9:6892 | udp | |
| LT | 194.165.17.10:6892 | udp | |
| LT | 194.165.17.11:6892 | udp | |
| LT | 194.165.17.12:6892 | udp | |
| LT | 194.165.17.13:6892 | udp | |
| LT | 194.165.17.14:6892 | udp | |
| LT | 194.165.17.15:6892 | udp | |
| LT | 194.165.17.16:6892 | udp | |
| LT | 194.165.17.17:6892 | udp | |
| LT | 194.165.17.18:6892 | udp | |
| LT | 194.165.17.19:6892 | udp | |
| LT | 194.165.17.20:6892 | udp | |
| LT | 194.165.17.21:6892 | udp | |
| LT | 194.165.17.22:6892 | udp | |
| LT | 194.165.17.23:6892 | udp | |
| LT | 194.165.17.24:6892 | udp | |
| LT | 194.165.17.25:6892 | udp | |
| LT | 194.165.17.26:6892 | udp | |
| LT | 194.165.17.27:6892 | udp | |
| LT | 194.165.17.28:6892 | udp | |
| LT | 194.165.17.29:6892 | udp | |
| LT | 194.165.17.30:6892 | udp | |
| LT | 194.165.17.31:6892 | udp | |
| LT | 194.165.17.32:6892 | udp | |
| LT | 194.165.17.33:6892 | udp | |
| LT | 194.165.17.34:6892 | udp | |
| LT | 194.165.17.35:6892 | udp | |
| LT | 194.165.17.36:6892 | udp | |
| LT | 194.165.17.37:6892 | udp | |
| LT | 194.165.17.38:6892 | udp | |
| LT | 194.165.17.39:6892 | udp | |
| LT | 194.165.17.40:6892 | udp | |
| LT | 194.165.17.41:6892 | udp | |
| LT | 194.165.17.42:6892 | udp | |
| LT | 194.165.17.43:6892 | udp | |
| LT | 194.165.17.44:6892 | udp | |
| LT | 194.165.17.45:6892 | udp | |
| LT | 194.165.17.46:6892 | udp | |
| LT | 194.165.17.47:6892 | udp | |
| LT | 194.165.17.48:6892 | udp | |
| LT | 194.165.17.49:6892 | udp | |
| LT | 194.165.17.50:6892 | udp | |
| LT | 194.165.17.51:6892 | udp | |
| LT | 194.165.17.52:6892 | udp | |
| LT | 194.165.17.53:6892 | udp | |
| LT | 194.165.17.54:6892 | udp | |
| LT | 194.165.17.55:6892 | udp | |
| LT | 194.165.17.56:6892 | udp | |
| LT | 194.165.17.57:6892 | udp | |
| LT | 194.165.17.58:6892 | udp | |
| LT | 194.165.17.59:6892 | udp | |
| LT | 194.165.17.60:6892 | udp | |
| LT | 194.165.17.61:6892 | udp | |
| LT | 194.165.17.62:6892 | udp | |
| LT | 194.165.17.63:6892 | udp | |
| LT | 194.165.17.64:6892 | udp | |
| LT | 194.165.17.65:6892 | udp | |
| LT | 194.165.17.66:6892 | udp | |
| LT | 194.165.17.67:6892 | udp | |
| LT | 194.165.17.68:6892 | udp | |
| LT | 194.165.17.69:6892 | udp | |
| LT | 194.165.17.70:6892 | udp | |
| LT | 194.165.17.71:6892 | udp | |
| LT | 194.165.17.72:6892 | udp | |
| LT | 194.165.17.73:6892 | udp | |
| LT | 194.165.17.74:6892 | udp | |
| LT | 194.165.17.75:6892 | udp | |
| LT | 194.165.17.76:6892 | udp | |
| LT | 194.165.17.77:6892 | udp | |
| LT | 194.165.17.78:6892 | udp | |
| LT | 194.165.17.79:6892 | udp | |
| LT | 194.165.17.80:6892 | udp | |
| LT | 194.165.17.81:6892 | udp | |
| LT | 194.165.17.82:6892 | udp | |
| LT | 194.165.17.83:6892 | udp | |
| LT | 194.165.17.84:6892 | udp | |
| LT | 194.165.17.85:6892 | udp | |
| LT | 194.165.17.86:6892 | udp | |
| LT | 194.165.17.87:6892 | udp | |
| LT | 194.165.17.88:6892 | udp | |
| LT | 194.165.17.89:6892 | udp | |
| LT | 194.165.17.90:6892 | udp | |
| LT | 194.165.17.91:6892 | udp | |
| LT | 194.165.17.92:6892 | udp | |
| LT | 194.165.17.93:6892 | udp | |
| LT | 194.165.17.94:6892 | udp | |
| LT | 194.165.17.95:6892 | udp | |
| LT | 194.165.17.96:6892 | udp | |
| LT | 194.165.17.97:6892 | udp | |
| LT | 194.165.17.98:6892 | udp | |
| LT | 194.165.17.99:6892 | udp | |
| LT | 194.165.17.100:6892 | udp | |
| LT | 194.165.17.101:6892 | udp | |
| LT | 194.165.17.102:6892 | udp | |
| LT | 194.165.17.103:6892 | udp | |
| LT | 194.165.17.104:6892 | udp | |
| LT | 194.165.17.105:6892 | udp | |
| LT | 194.165.17.106:6892 | udp | |
| LT | 194.165.17.107:6892 | udp | |
| LT | 194.165.17.108:6892 | udp | |
| LT | 194.165.17.109:6892 | udp | |
| LT | 194.165.17.110:6892 | udp | |
| LT | 194.165.17.111:6892 | udp | |
| LT | 194.165.17.112:6892 | udp | |
| LT | 194.165.17.113:6892 | udp | |
| LT | 194.165.17.114:6892 | udp | |
| LT | 194.165.17.115:6892 | udp | |
| LT | 194.165.17.116:6892 | udp | |
| LT | 194.165.17.117:6892 | udp | |
| LT | 194.165.17.118:6892 | udp | |
| LT | 194.165.17.119:6892 | udp | |
| LT | 194.165.17.120:6892 | udp | |
| LT | 194.165.17.121:6892 | udp | |
| LT | 194.165.17.122:6892 | udp | |
| LT | 194.165.17.123:6892 | udp | |
| LT | 194.165.17.124:6892 | udp | |
| LT | 194.165.17.125:6892 | udp | |
| LT | 194.165.17.126:6892 | udp | |
| LT | 194.165.17.127:6892 | udp | |
| LT | 194.165.17.128:6892 | udp | |
| LT | 194.165.17.129:6892 | udp | |
| LT | 194.165.17.130:6892 | udp | |
| LT | 194.165.17.131:6892 | udp | |
| LT | 194.165.17.132:6892 | udp | |
| LT | 194.165.17.133:6892 | udp | |
| LT | 194.165.17.134:6892 | udp | |
| LT | 194.165.17.135:6892 | udp | |
| LT | 194.165.17.136:6892 | udp | |
| LT | 194.165.17.137:6892 | udp | |
| LT | 194.165.17.138:6892 | udp | |
| LT | 194.165.17.139:6892 | udp | |
| LT | 194.165.17.140:6892 | udp | |
| LT | 194.165.17.141:6892 | udp | |
| LT | 194.165.17.142:6892 | udp | |
| LT | 194.165.17.143:6892 | udp | |
| LT | 194.165.17.144:6892 | udp | |
| LT | 194.165.17.145:6892 | udp | |
| LT | 194.165.17.146:6892 | udp | |
| LT | 194.165.17.147:6892 | udp | |
| LT | 194.165.17.148:6892 | udp | |
| LT | 194.165.17.149:6892 | udp | |
| LT | 194.165.17.150:6892 | udp | |
| LT | 194.165.17.151:6892 | udp | |
| LT | 194.165.17.152:6892 | udp | |
| LT | 194.165.17.153:6892 | udp | |
| LT | 194.165.17.154:6892 | udp | |
| LT | 194.165.17.155:6892 | udp | |
| LT | 194.165.17.156:6892 | udp | |
| LT | 194.165.17.157:6892 | udp | |
| LT | 194.165.17.158:6892 | udp | |
| LT | 194.165.17.159:6892 | udp | |
| LT | 194.165.17.160:6892 | udp | |
| LT | 194.165.17.161:6892 | udp | |
| LT | 194.165.17.162:6892 | udp | |
| LT | 194.165.17.163:6892 | udp | |
| LT | 194.165.17.164:6892 | udp | |
| LT | 194.165.17.165:6892 | udp | |
| LT | 194.165.17.166:6892 | udp | |
| LT | 194.165.17.167:6892 | udp | |
| LT | 194.165.17.168:6892 | udp | |
| LT | 194.165.17.169:6892 | udp | |
| LT | 194.165.17.170:6892 | udp | |
| LT | 194.165.17.171:6892 | udp | |
| LT | 194.165.17.172:6892 | udp | |
| LT | 194.165.17.173:6892 | udp | |
| LT | 194.165.17.174:6892 | udp | |
| LT | 194.165.17.175:6892 | udp | |
| LT | 194.165.17.176:6892 | udp | |
| LT | 194.165.17.177:6892 | udp | |
| LT | 194.165.17.178:6892 | udp | |
| LT | 194.165.17.179:6892 | udp | |
| LT | 194.165.17.180:6892 | udp | |
| LT | 194.165.17.181:6892 | udp | |
| LT | 194.165.17.182:6892 | udp | |
| LT | 194.165.17.183:6892 | udp | |
| LT | 194.165.17.184:6892 | udp | |
| LT | 194.165.17.185:6892 | udp | |
| LT | 194.165.17.186:6892 | udp | |
| LT | 194.165.17.187:6892 | udp | |
| LT | 194.165.17.188:6892 | udp | |
| LT | 194.165.17.189:6892 | udp | |
| LT | 194.165.17.190:6892 | udp | |
| LT | 194.165.17.191:6892 | udp | |
| LT | 194.165.17.192:6892 | udp | |
| LT | 194.165.17.193:6892 | udp | |
| LT | 194.165.17.194:6892 | udp | |
| LT | 194.165.17.195:6892 | udp | |
| LT | 194.165.17.196:6892 | udp | |
| LT | 194.165.17.197:6892 | udp | |
| LT | 194.165.17.198:6892 | udp | |
| LT | 194.165.17.199:6892 | udp | |
| LT | 194.165.17.200:6892 | udp | |
| LT | 194.165.17.201:6892 | udp | |
| LT | 194.165.17.202:6892 | udp | |
| LT | 194.165.17.203:6892 | udp | |
| LT | 194.165.17.204:6892 | udp | |
| LT | 194.165.17.205:6892 | udp | |
| LT | 194.165.17.206:6892 | udp | |
| LT | 194.165.17.207:6892 | udp | |
| LT | 194.165.17.208:6892 | udp | |
| LT | 194.165.17.209:6892 | udp | |
| LT | 194.165.17.210:6892 | udp | |
| LT | 194.165.17.211:6892 | udp | |
| LT | 194.165.17.212:6892 | udp | |
| LT | 194.165.17.213:6892 | udp | |
| LT | 194.165.17.214:6892 | udp | |
| LT | 194.165.17.215:6892 | udp | |
| LT | 194.165.17.216:6892 | udp | |
| LT | 194.165.17.217:6892 | udp | |
| LT | 194.165.17.218:6892 | udp | |
| LT | 194.165.17.219:6892 | udp | |
| LT | 194.165.17.220:6892 | udp | |
| LT | 194.165.17.221:6892 | udp | |
| LT | 194.165.17.222:6892 | udp | |
| LT | 194.165.17.223:6892 | udp | |
| LT | 194.165.17.224:6892 | udp | |
| LT | 194.165.17.225:6892 | udp | |
| LT | 194.165.17.226:6892 | udp | |
| LT | 194.165.17.227:6892 | udp | |
| LT | 194.165.17.228:6892 | udp | |
| LT | 194.165.17.229:6892 | udp | |
| LT | 194.165.17.230:6892 | udp | |
| LT | 194.165.17.231:6892 | udp | |
| LT | 194.165.17.232:6892 | udp | |
| LT | 194.165.17.233:6892 | udp | |
| LT | 194.165.17.234:6892 | udp | |
| LT | 194.165.17.235:6892 | udp | |
| LT | 194.165.17.236:6892 | udp | |
| LT | 194.165.17.237:6892 | udp | |
| LT | 194.165.17.238:6892 | udp | |
| LT | 194.165.17.239:6892 | udp | |
| LT | 194.165.17.240:6892 | udp | |
| LT | 194.165.17.241:6892 | udp | |
| LT | 194.165.17.242:6892 | udp | |
| LT | 194.165.17.243:6892 | udp | |
| LT | 194.165.17.244:6892 | udp | |
| LT | 194.165.17.245:6892 | udp | |
| LT | 194.165.17.246:6892 | udp | |
| LT | 194.165.17.247:6892 | udp | |
| LT | 194.165.17.248:6892 | udp | |
| LT | 194.165.17.249:6892 | udp | |
| LT | 194.165.17.250:6892 | udp | |
| LT | 194.165.17.251:6892 | udp | |
| LT | 194.165.17.252:6892 | udp | |
| LT | 194.165.17.253:6892 | udp | |
| LT | 194.165.17.254:6892 | udp | |
| LT | 194.165.17.255:6892 | udp | |
| RU | 194.165.18.0:6892 | udp | |
| RU | 194.165.18.1:6892 | udp | |
| RU | 194.165.18.2:6892 | udp | |
| RU | 194.165.18.3:6892 | udp | |
| RU | 194.165.18.4:6892 | udp | |
| RU | 194.165.18.5:6892 | udp | |
| RU | 194.165.18.6:6892 | udp | |
| RU | 194.165.18.7:6892 | udp | |
| RU | 194.165.18.8:6892 | udp | |
| RU | 194.165.18.9:6892 | udp | |
| RU | 194.165.18.10:6892 | udp | |
| RU | 194.165.18.11:6892 | udp | |
| RU | 194.165.18.12:6892 | udp | |
| RU | 194.165.18.13:6892 | udp | |
| RU | 194.165.18.14:6892 | udp | |
| RU | 194.165.18.15:6892 | udp | |
| RU | 194.165.18.16:6892 | udp | |
| RU | 194.165.18.17:6892 | udp | |
| RU | 194.165.18.18:6892 | udp | |
| RU | 194.165.18.19:6892 | udp | |
| RU | 194.165.18.20:6892 | udp | |
| RU | 194.165.18.21:6892 | udp | |
| RU | 194.165.18.22:6892 | udp | |
| RU | 194.165.18.23:6892 | udp | |
| RU | 194.165.18.24:6892 | udp | |
| RU | 194.165.18.25:6892 | udp | |
| RU | 194.165.18.26:6892 | udp | |
| RU | 194.165.18.27:6892 | udp | |
| RU | 194.165.18.28:6892 | udp | |
| RU | 194.165.18.29:6892 | udp | |
| RU | 194.165.18.30:6892 | udp | |
| RU | 194.165.18.31:6892 | udp | |
| RU | 194.165.18.32:6892 | udp | |
| RU | 194.165.18.33:6892 | udp | |
| RU | 194.165.18.34:6892 | udp | |
| RU | 194.165.18.35:6892 | udp | |
| RU | 194.165.18.36:6892 | udp | |
| RU | 194.165.18.37:6892 | udp | |
| RU | 194.165.18.38:6892 | udp | |
| RU | 194.165.18.39:6892 | udp | |
| RU | 194.165.18.40:6892 | udp | |
| RU | 194.165.18.41:6892 | udp | |
| RU | 194.165.18.42:6892 | udp | |
| RU | 194.165.18.43:6892 | udp | |
| RU | 194.165.18.44:6892 | udp | |
| RU | 194.165.18.45:6892 | udp | |
| RU | 194.165.18.46:6892 | udp | |
| RU | 194.165.18.47:6892 | udp | |
| RU | 194.165.18.48:6892 | udp | |
| RU | 194.165.18.49:6892 | udp | |
| RU | 194.165.18.50:6892 | udp | |
| RU | 194.165.18.51:6892 | udp | |
| RU | 194.165.18.52:6892 | udp | |
| RU | 194.165.18.53:6892 | udp | |
| RU | 194.165.18.54:6892 | udp | |
| RU | 194.165.18.55:6892 | udp | |
| RU | 194.165.18.56:6892 | udp | |
| RU | 194.165.18.57:6892 | udp | |
| RU | 194.165.18.58:6892 | udp | |
| RU | 194.165.18.59:6892 | udp | |
| RU | 194.165.18.60:6892 | udp | |
| RU | 194.165.18.61:6892 | udp | |
| RU | 194.165.18.62:6892 | udp | |
| RU | 194.165.18.63:6892 | udp | |
| RU | 194.165.18.64:6892 | udp | |
| RU | 194.165.18.65:6892 | udp | |
| RU | 194.165.18.66:6892 | udp | |
| RU | 194.165.18.67:6892 | udp | |
| RU | 194.165.18.68:6892 | udp | |
| RU | 194.165.18.69:6892 | udp | |
| RU | 194.165.18.70:6892 | udp | |
| RU | 194.165.18.71:6892 | udp | |
| RU | 194.165.18.72:6892 | udp | |
| RU | 194.165.18.73:6892 | udp | |
| RU | 194.165.18.74:6892 | udp | |
| RU | 194.165.18.75:6892 | udp | |
| RU | 194.165.18.76:6892 | udp | |
| RU | 194.165.18.77:6892 | udp | |
| RU | 194.165.18.78:6892 | udp | |
| RU | 194.165.18.79:6892 | udp | |
| RU | 194.165.18.80:6892 | udp | |
| RU | 194.165.18.81:6892 | udp | |
| RU | 194.165.18.82:6892 | udp | |
| RU | 194.165.18.83:6892 | udp | |
| RU | 194.165.18.84:6892 | udp | |
| RU | 194.165.18.85:6892 | udp | |
| RU | 194.165.18.86:6892 | udp | |
| RU | 194.165.18.87:6892 | udp | |
| RU | 194.165.18.88:6892 | udp | |
| RU | 194.165.18.89:6892 | udp | |
| RU | 194.165.18.90:6892 | udp | |
| RU | 194.165.18.91:6892 | udp | |
| RU | 194.165.18.92:6892 | udp | |
| RU | 194.165.18.93:6892 | udp | |
| RU | 194.165.18.94:6892 | udp | |
| RU | 194.165.18.95:6892 | udp | |
| RU | 194.165.18.96:6892 | udp | |
| RU | 194.165.18.97:6892 | udp | |
| RU | 194.165.18.98:6892 | udp | |
| RU | 194.165.18.99:6892 | udp | |
| RU | 194.165.18.100:6892 | udp | |
| RU | 194.165.18.101:6892 | udp | |
| RU | 194.165.18.102:6892 | udp | |
| RU | 194.165.18.103:6892 | udp | |
| RU | 194.165.18.104:6892 | udp | |
| RU | 194.165.18.105:6892 | udp | |
| RU | 194.165.18.106:6892 | udp | |
| RU | 194.165.18.107:6892 | udp | |
| RU | 194.165.18.108:6892 | udp | |
| RU | 194.165.18.109:6892 | udp | |
| RU | 194.165.18.110:6892 | udp | |
| RU | 194.165.18.111:6892 | udp | |
| RU | 194.165.18.112:6892 | udp | |
| RU | 194.165.18.113:6892 | udp | |
| RU | 194.165.18.114:6892 | udp | |
| RU | 194.165.18.115:6892 | udp | |
| RU | 194.165.18.116:6892 | udp | |
| RU | 194.165.18.117:6892 | udp | |
| RU | 194.165.18.118:6892 | udp | |
| RU | 194.165.18.119:6892 | udp | |
| RU | 194.165.18.120:6892 | udp | |
| RU | 194.165.18.121:6892 | udp | |
| RU | 194.165.18.122:6892 | udp | |
| RU | 194.165.18.123:6892 | udp | |
| RU | 194.165.18.124:6892 | udp | |
| RU | 194.165.18.125:6892 | udp | |
| RU | 194.165.18.126:6892 | udp | |
| RU | 194.165.18.127:6892 | udp | |
| RU | 194.165.18.128:6892 | udp | |
| RU | 194.165.18.129:6892 | udp | |
| RU | 194.165.18.130:6892 | udp | |
| RU | 194.165.18.131:6892 | udp | |
| RU | 194.165.18.132:6892 | udp | |
| RU | 194.165.18.133:6892 | udp | |
| RU | 194.165.18.134:6892 | udp | |
| RU | 194.165.18.135:6892 | udp | |
| RU | 194.165.18.136:6892 | udp | |
| RU | 194.165.18.137:6892 | udp | |
| RU | 194.165.18.138:6892 | udp | |
| RU | 194.165.18.139:6892 | udp | |
| RU | 194.165.18.140:6892 | udp | |
| RU | 194.165.18.141:6892 | udp | |
| RU | 194.165.18.142:6892 | udp | |
| RU | 194.165.18.143:6892 | udp | |
| RU | 194.165.18.144:6892 | udp | |
| RU | 194.165.18.145:6892 | udp | |
| RU | 194.165.18.146:6892 | udp | |
| RU | 194.165.18.147:6892 | udp | |
| RU | 194.165.18.148:6892 | udp | |
| RU | 194.165.18.149:6892 | udp | |
| RU | 194.165.18.150:6892 | udp | |
| RU | 194.165.18.151:6892 | udp | |
| RU | 194.165.18.152:6892 | udp | |
| RU | 194.165.18.153:6892 | udp | |
| RU | 194.165.18.154:6892 | udp | |
| RU | 194.165.18.155:6892 | udp | |
| RU | 194.165.18.156:6892 | udp | |
| RU | 194.165.18.157:6892 | udp | |
| RU | 194.165.18.158:6892 | udp | |
| RU | 194.165.18.159:6892 | udp | |
| RU | 194.165.18.160:6892 | udp | |
| RU | 194.165.18.161:6892 | udp | |
| RU | 194.165.18.162:6892 | udp | |
| RU | 194.165.18.163:6892 | udp | |
| RU | 194.165.18.164:6892 | udp | |
| RU | 194.165.18.165:6892 | udp | |
| RU | 194.165.18.166:6892 | udp | |
| RU | 194.165.18.167:6892 | udp | |
| RU | 194.165.18.168:6892 | udp | |
| RU | 194.165.18.169:6892 | udp | |
| RU | 194.165.18.170:6892 | udp | |
| RU | 194.165.18.171:6892 | udp | |
| RU | 194.165.18.172:6892 | udp | |
| RU | 194.165.18.173:6892 | udp | |
| RU | 194.165.18.174:6892 | udp | |
| RU | 194.165.18.175:6892 | udp | |
| RU | 194.165.18.176:6892 | udp | |
| RU | 194.165.18.177:6892 | udp | |
| RU | 194.165.18.178:6892 | udp | |
| RU | 194.165.18.179:6892 | udp | |
| RU | 194.165.18.180:6892 | udp | |
| RU | 194.165.18.181:6892 | udp | |
| RU | 194.165.18.182:6892 | udp | |
| RU | 194.165.18.183:6892 | udp | |
| RU | 194.165.18.184:6892 | udp | |
| RU | 194.165.18.185:6892 | udp | |
| RU | 194.165.18.186:6892 | udp | |
| RU | 194.165.18.187:6892 | udp | |
| RU | 194.165.18.188:6892 | udp | |
| RU | 194.165.18.189:6892 | udp | |
| RU | 194.165.18.190:6892 | udp | |
| RU | 194.165.18.191:6892 | udp | |
| RU | 194.165.18.192:6892 | udp | |
| RU | 194.165.18.193:6892 | udp | |
| RU | 194.165.18.194:6892 | udp | |
| RU | 194.165.18.195:6892 | udp | |
| RU | 194.165.18.196:6892 | udp | |
| RU | 194.165.18.197:6892 | udp | |
| RU | 194.165.18.198:6892 | udp | |
| RU | 194.165.18.199:6892 | udp | |
| RU | 194.165.18.200:6892 | udp | |
| RU | 194.165.18.201:6892 | udp | |
| RU | 194.165.18.202:6892 | udp | |
| RU | 194.165.18.203:6892 | udp | |
| RU | 194.165.18.204:6892 | udp | |
| RU | 194.165.18.205:6892 | udp | |
| RU | 194.165.18.206:6892 | udp | |
| RU | 194.165.18.207:6892 | udp | |
| RU | 194.165.18.208:6892 | udp | |
| RU | 194.165.18.209:6892 | udp | |
| RU | 194.165.18.210:6892 | udp | |
| RU | 194.165.18.211:6892 | udp | |
| RU | 194.165.18.212:6892 | udp | |
| RU | 194.165.18.213:6892 | udp | |
| RU | 194.165.18.214:6892 | udp | |
| RU | 194.165.18.215:6892 | udp | |
| RU | 194.165.18.216:6892 | udp | |
| RU | 194.165.18.217:6892 | udp | |
| RU | 194.165.18.218:6892 | udp | |
| RU | 194.165.18.219:6892 | udp | |
| RU | 194.165.18.220:6892 | udp | |
| RU | 194.165.18.221:6892 | udp | |
| RU | 194.165.18.222:6892 | udp | |
| RU | 194.165.18.223:6892 | udp | |
| RU | 194.165.18.224:6892 | udp | |
| RU | 194.165.18.225:6892 | udp | |
| RU | 194.165.18.226:6892 | udp | |
| RU | 194.165.18.227:6892 | udp | |
| RU | 194.165.18.228:6892 | udp | |
| RU | 194.165.18.229:6892 | udp | |
| RU | 194.165.18.230:6892 | udp | |
| RU | 194.165.18.231:6892 | udp | |
| RU | 194.165.18.232:6892 | udp | |
| RU | 194.165.18.233:6892 | udp | |
| RU | 194.165.18.234:6892 | udp | |
| RU | 194.165.18.235:6892 | udp | |
| RU | 194.165.18.236:6892 | udp | |
| RU | 194.165.18.237:6892 | udp | |
| RU | 194.165.18.238:6892 | udp | |
| RU | 194.165.18.239:6892 | udp | |
| RU | 194.165.18.240:6892 | udp | |
| RU | 194.165.18.241:6892 | udp | |
| RU | 194.165.18.242:6892 | udp | |
| RU | 194.165.18.243:6892 | udp | |
| RU | 194.165.18.244:6892 | udp | |
| RU | 194.165.18.245:6892 | udp | |
| RU | 194.165.18.246:6892 | udp | |
| RU | 194.165.18.247:6892 | udp | |
| RU | 194.165.18.248:6892 | udp | |
| RU | 194.165.18.249:6892 | udp | |
| RU | 194.165.18.250:6892 | udp | |
| RU | 194.165.18.251:6892 | udp | |
| RU | 194.165.18.252:6892 | udp | |
| RU | 194.165.18.253:6892 | udp | |
| RU | 194.165.18.254:6892 | udp | |
| RU | 194.165.18.255:6892 | udp | |
| RU | 194.165.19.0:6892 | udp | |
| RU | 194.165.19.1:6892 | udp | |
| RU | 194.165.19.2:6892 | udp | |
| RU | 194.165.19.3:6892 | udp | |
| RU | 194.165.19.4:6892 | udp | |
| RU | 194.165.19.5:6892 | udp | |
| RU | 194.165.19.6:6892 | udp | |
| RU | 194.165.19.7:6892 | udp | |
| RU | 194.165.19.8:6892 | udp | |
| RU | 194.165.19.9:6892 | udp | |
| RU | 194.165.19.10:6892 | udp | |
| RU | 194.165.19.11:6892 | udp | |
| RU | 194.165.19.12:6892 | udp | |
| RU | 194.165.19.13:6892 | udp | |
| RU | 194.165.19.14:6892 | udp | |
| RU | 194.165.19.15:6892 | udp | |
| RU | 194.165.19.16:6892 | udp | |
| RU | 194.165.19.17:6892 | udp | |
| RU | 194.165.19.18:6892 | udp | |
| RU | 194.165.19.19:6892 | udp | |
| RU | 194.165.19.20:6892 | udp | |
| RU | 194.165.19.21:6892 | udp | |
| RU | 194.165.19.22:6892 | udp | |
| RU | 194.165.19.23:6892 | udp | |
| RU | 194.165.19.24:6892 | udp | |
| RU | 194.165.19.25:6892 | udp | |
| RU | 194.165.19.26:6892 | udp | |
| RU | 194.165.19.27:6892 | udp | |
| RU | 194.165.19.28:6892 | udp | |
| RU | 194.165.19.29:6892 | udp | |
| RU | 194.165.19.30:6892 | udp | |
| RU | 194.165.19.31:6892 | udp | |
| RU | 194.165.19.32:6892 | udp | |
| RU | 194.165.19.33:6892 | udp | |
| RU | 194.165.19.34:6892 | udp | |
| RU | 194.165.19.35:6892 | udp | |
| RU | 194.165.19.36:6892 | udp | |
| RU | 194.165.19.37:6892 | udp | |
| RU | 194.165.19.38:6892 | udp | |
| RU | 194.165.19.39:6892 | udp | |
| RU | 194.165.19.40:6892 | udp | |
| RU | 194.165.19.41:6892 | udp | |
| RU | 194.165.19.42:6892 | udp | |
| RU | 194.165.19.43:6892 | udp | |
| RU | 194.165.19.44:6892 | udp | |
| RU | 194.165.19.45:6892 | udp | |
| RU | 194.165.19.46:6892 | udp | |
| RU | 194.165.19.47:6892 | udp | |
| RU | 194.165.19.48:6892 | udp | |
| RU | 194.165.19.49:6892 | udp | |
| RU | 194.165.19.50:6892 | udp | |
| RU | 194.165.19.51:6892 | udp | |
| RU | 194.165.19.52:6892 | udp | |
| RU | 194.165.19.53:6892 | udp | |
| RU | 194.165.19.54:6892 | udp | |
| RU | 194.165.19.55:6892 | udp | |
| RU | 194.165.19.56:6892 | udp | |
| RU | 194.165.19.57:6892 | udp | |
| RU | 194.165.19.58:6892 | udp | |
| RU | 194.165.19.59:6892 | udp | |
| RU | 194.165.19.60:6892 | udp | |
| RU | 194.165.19.61:6892 | udp | |
| RU | 194.165.19.62:6892 | udp | |
| RU | 194.165.19.63:6892 | udp | |
| RU | 194.165.19.64:6892 | udp | |
| RU | 194.165.19.65:6892 | udp | |
| RU | 194.165.19.66:6892 | udp | |
| RU | 194.165.19.67:6892 | udp | |
| RU | 194.165.19.68:6892 | udp | |
| RU | 194.165.19.69:6892 | udp | |
| RU | 194.165.19.70:6892 | udp | |
| RU | 194.165.19.71:6892 | udp | |
| RU | 194.165.19.72:6892 | udp | |
| RU | 194.165.19.73:6892 | udp | |
| RU | 194.165.19.74:6892 | udp | |
| RU | 194.165.19.75:6892 | udp | |
| RU | 194.165.19.76:6892 | udp | |
| RU | 194.165.19.77:6892 | udp | |
| RU | 194.165.19.78:6892 | udp | |
| RU | 194.165.19.79:6892 | udp | |
| RU | 194.165.19.80:6892 | udp | |
| RU | 194.165.19.81:6892 | udp | |
| RU | 194.165.19.82:6892 | udp | |
| RU | 194.165.19.83:6892 | udp | |
| RU | 194.165.19.84:6892 | udp | |
| RU | 194.165.19.85:6892 | udp | |
| RU | 194.165.19.86:6892 | udp | |
| RU | 194.165.19.87:6892 | udp | |
| RU | 194.165.19.88:6892 | udp | |
| RU | 194.165.19.89:6892 | udp | |
| RU | 194.165.19.90:6892 | udp | |
| RU | 194.165.19.91:6892 | udp | |
| RU | 194.165.19.92:6892 | udp | |
| RU | 194.165.19.93:6892 | udp | |
| RU | 194.165.19.94:6892 | udp | |
| RU | 194.165.19.95:6892 | udp | |
| RU | 194.165.19.96:6892 | udp | |
| RU | 194.165.19.97:6892 | udp | |
| RU | 194.165.19.98:6892 | udp | |
| RU | 194.165.19.99:6892 | udp | |
| RU | 194.165.19.100:6892 | udp | |
| RU | 194.165.19.101:6892 | udp | |
| RU | 194.165.19.102:6892 | udp | |
| RU | 194.165.19.103:6892 | udp | |
| RU | 194.165.19.104:6892 | udp | |
| RU | 194.165.19.105:6892 | udp | |
| RU | 194.165.19.106:6892 | udp | |
| RU | 194.165.19.107:6892 | udp | |
| RU | 194.165.19.108:6892 | udp | |
| RU | 194.165.19.109:6892 | udp | |
| RU | 194.165.19.110:6892 | udp | |
| RU | 194.165.19.111:6892 | udp | |
| RU | 194.165.19.112:6892 | udp | |
| RU | 194.165.19.113:6892 | udp | |
| RU | 194.165.19.114:6892 | udp | |
| RU | 194.165.19.115:6892 | udp | |
| RU | 194.165.19.116:6892 | udp | |
| RU | 194.165.19.117:6892 | udp | |
| RU | 194.165.19.118:6892 | udp | |
| RU | 194.165.19.119:6892 | udp | |
| RU | 194.165.19.120:6892 | udp | |
| RU | 194.165.19.121:6892 | udp | |
| RU | 194.165.19.122:6892 | udp | |
| RU | 194.165.19.123:6892 | udp | |
| RU | 194.165.19.124:6892 | udp | |
| RU | 194.165.19.125:6892 | udp | |
| RU | 194.165.19.126:6892 | udp | |
| RU | 194.165.19.127:6892 | udp | |
| RU | 194.165.19.128:6892 | udp | |
| RU | 194.165.19.129:6892 | udp | |
| RU | 194.165.19.130:6892 | udp | |
| RU | 194.165.19.131:6892 | udp | |
| RU | 194.165.19.132:6892 | udp | |
| RU | 194.165.19.133:6892 | udp | |
| RU | 194.165.19.134:6892 | udp | |
| RU | 194.165.19.135:6892 | udp | |
| RU | 194.165.19.136:6892 | udp | |
| RU | 194.165.19.137:6892 | udp | |
| RU | 194.165.19.138:6892 | udp | |
| RU | 194.165.19.139:6892 | udp | |
| RU | 194.165.19.140:6892 | udp | |
| RU | 194.165.19.141:6892 | udp | |
| RU | 194.165.19.142:6892 | udp | |
| RU | 194.165.19.143:6892 | udp | |
| RU | 194.165.19.144:6892 | udp | |
| RU | 194.165.19.145:6892 | udp | |
| RU | 194.165.19.146:6892 | udp | |
| RU | 194.165.19.147:6892 | udp | |
| RU | 194.165.19.148:6892 | udp | |
| RU | 194.165.19.149:6892 | udp | |
| RU | 194.165.19.150:6892 | udp | |
| RU | 194.165.19.151:6892 | udp | |
| RU | 194.165.19.152:6892 | udp | |
| RU | 194.165.19.153:6892 | udp | |
| RU | 194.165.19.154:6892 | udp | |
| RU | 194.165.19.155:6892 | udp | |
| RU | 194.165.19.156:6892 | udp | |
| RU | 194.165.19.157:6892 | udp | |
| RU | 194.165.19.158:6892 | udp | |
| RU | 194.165.19.159:6892 | udp | |
| RU | 194.165.19.160:6892 | udp | |
| RU | 194.165.19.161:6892 | udp | |
| RU | 194.165.19.162:6892 | udp | |
| RU | 194.165.19.163:6892 | udp | |
| RU | 194.165.19.164:6892 | udp | |
| RU | 194.165.19.165:6892 | udp | |
| RU | 194.165.19.166:6892 | udp | |
| RU | 194.165.19.167:6892 | udp | |
| RU | 194.165.19.168:6892 | udp | |
| RU | 194.165.19.169:6892 | udp | |
| RU | 194.165.19.170:6892 | udp | |
| RU | 194.165.19.171:6892 | udp | |
| RU | 194.165.19.172:6892 | udp | |
| RU | 194.165.19.173:6892 | udp | |
| RU | 194.165.19.174:6892 | udp | |
| RU | 194.165.19.175:6892 | udp | |
| RU | 194.165.19.176:6892 | udp | |
| RU | 194.165.19.177:6892 | udp | |
| RU | 194.165.19.178:6892 | udp | |
| RU | 194.165.19.179:6892 | udp | |
| RU | 194.165.19.180:6892 | udp | |
| RU | 194.165.19.181:6892 | udp | |
| RU | 194.165.19.182:6892 | udp | |
| RU | 194.165.19.183:6892 | udp | |
| RU | 194.165.19.184:6892 | udp | |
| RU | 194.165.19.185:6892 | udp | |
| RU | 194.165.19.186:6892 | udp | |
| RU | 194.165.19.187:6892 | udp | |
| RU | 194.165.19.188:6892 | udp | |
| RU | 194.165.19.189:6892 | udp | |
| RU | 194.165.19.190:6892 | udp | |
| RU | 194.165.19.191:6892 | udp | |
| RU | 194.165.19.192:6892 | udp | |
| RU | 194.165.19.193:6892 | udp | |
| RU | 194.165.19.194:6892 | udp | |
| RU | 194.165.19.195:6892 | udp | |
| RU | 194.165.19.196:6892 | udp | |
| RU | 194.165.19.197:6892 | udp | |
| RU | 194.165.19.198:6892 | udp | |
| RU | 194.165.19.199:6892 | udp | |
| RU | 194.165.19.200:6892 | udp | |
| RU | 194.165.19.201:6892 | udp | |
| RU | 194.165.19.202:6892 | udp | |
| RU | 194.165.19.203:6892 | udp | |
| RU | 194.165.19.204:6892 | udp | |
| RU | 194.165.19.205:6892 | udp | |
| RU | 194.165.19.206:6892 | udp | |
| RU | 194.165.19.207:6892 | udp | |
| RU | 194.165.19.208:6892 | udp | |
| RU | 194.165.19.209:6892 | udp | |
| RU | 194.165.19.210:6892 | udp | |
| RU | 194.165.19.211:6892 | udp | |
| RU | 194.165.19.212:6892 | udp | |
| RU | 194.165.19.213:6892 | udp | |
| RU | 194.165.19.214:6892 | udp | |
| RU | 194.165.19.215:6892 | udp | |
| RU | 194.165.19.216:6892 | udp | |
| RU | 194.165.19.217:6892 | udp | |
| RU | 194.165.19.218:6892 | udp | |
| RU | 194.165.19.219:6892 | udp | |
| RU | 194.165.19.220:6892 | udp | |
| RU | 194.165.19.221:6892 | udp | |
| RU | 194.165.19.222:6892 | udp | |
| RU | 194.165.19.223:6892 | udp | |
| RU | 194.165.19.224:6892 | udp | |
| RU | 194.165.19.225:6892 | udp | |
| RU | 194.165.19.226:6892 | udp | |
| RU | 194.165.19.227:6892 | udp | |
| RU | 194.165.19.228:6892 | udp | |
| RU | 194.165.19.229:6892 | udp | |
| RU | 194.165.19.230:6892 | udp | |
| RU | 194.165.19.231:6892 | udp | |
| RU | 194.165.19.232:6892 | udp | |
| RU | 194.165.19.233:6892 | udp | |
| RU | 194.165.19.234:6892 | udp | |
| RU | 194.165.19.235:6892 | udp | |
| RU | 194.165.19.236:6892 | udp | |
| RU | 194.165.19.237:6892 | udp | |
| RU | 194.165.19.238:6892 | udp | |
| RU | 194.165.19.239:6892 | udp | |
| RU | 194.165.19.240:6892 | udp | |
| RU | 194.165.19.241:6892 | udp | |
| RU | 194.165.19.242:6892 | udp | |
| RU | 194.165.19.243:6892 | udp | |
| RU | 194.165.19.244:6892 | udp | |
| RU | 194.165.19.245:6892 | udp | |
| RU | 194.165.19.246:6892 | udp | |
| RU | 194.165.19.247:6892 | udp | |
| RU | 194.165.19.248:6892 | udp | |
| RU | 194.165.19.249:6892 | udp | |
| RU | 194.165.19.250:6892 | udp | |
| RU | 194.165.19.251:6892 | udp | |
| RU | 194.165.19.252:6892 | udp | |
| RU | 194.165.19.253:6892 | udp | |
| RU | 194.165.19.254:6892 | udp | |
| RU | 194.165.19.255:6892 | udp | |
| US | 65.55.50.0:6892 | udp | |
| US | 65.55.50.1:6892 | udp | |
| US | 65.55.50.2:6892 | udp | |
| US | 65.55.50.3:6892 | udp | |
| US | 65.55.50.4:6892 | udp | |
| US | 65.55.50.5:6892 | udp | |
| US | 65.55.50.6:6892 | udp | |
| US | 65.55.50.7:6892 | udp | |
| US | 65.55.50.8:6892 | udp | |
| US | 65.55.50.9:6892 | udp | |
| US | 65.55.50.10:6892 | udp | |
| US | 65.55.50.11:6892 | udp | |
| US | 65.55.50.12:6892 | udp | |
| US | 65.55.50.13:6892 | udp | |
| US | 65.55.50.14:6892 | udp | |
| US | 65.55.50.15:6892 | udp | |
| US | 65.55.50.16:6892 | udp | |
| US | 65.55.50.17:6892 | udp | |
| US | 65.55.50.18:6892 | udp | |
| US | 65.55.50.19:6892 | udp | |
| US | 65.55.50.20:6892 | udp | |
| US | 65.55.50.21:6892 | udp | |
| US | 65.55.50.22:6892 | udp | |
| US | 65.55.50.23:6892 | udp | |
| US | 65.55.50.24:6892 | udp | |
| US | 65.55.50.25:6892 | udp | |
| US | 65.55.50.26:6892 | udp | |
| US | 65.55.50.27:6892 | udp | |
| US | 65.55.50.28:6892 | udp | |
| US | 65.55.50.29:6892 | udp | |
| US | 65.55.50.30:6892 | udp | |
| US | 65.55.50.31:6892 | udp | |
| NL | 192.42.118.0:6892 | udp | |
| NL | 192.42.118.1:6892 | udp | |
| NL | 192.42.118.2:6892 | udp | |
| NL | 192.42.118.3:6892 | udp | |
| NL | 192.42.118.4:6892 | udp | |
| NL | 192.42.118.5:6892 | udp | |
| NL | 192.42.118.6:6892 | udp | |
| NL | 192.42.118.7:6892 | udp | |
| NL | 192.42.118.8:6892 | udp | |
| NL | 192.42.118.9:6892 | udp | |
| NL | 192.42.118.10:6892 | udp | |
| NL | 192.42.118.11:6892 | udp | |
| NL | 192.42.118.12:6892 | udp | |
| NL | 192.42.118.13:6892 | udp | |
| NL | 192.42.118.14:6892 | udp | |
| NL | 192.42.118.15:6892 | udp | |
| NL | 192.42.118.16:6892 | udp | |
| NL | 192.42.118.17:6892 | udp | |
| NL | 192.42.118.18:6892 | udp | |
| NL | 192.42.118.19:6892 | udp | |
| NL | 192.42.118.20:6892 | udp | |
| NL | 192.42.118.21:6892 | udp | |
| NL | 192.42.118.22:6892 | udp | |
| NL | 192.42.118.23:6892 | udp | |
| NL | 192.42.118.24:6892 | udp | |
| NL | 192.42.118.25:6892 | udp | |
| NL | 192.42.118.26:6892 | udp | |
| NL | 192.42.118.27:6892 | udp | |
| NL | 192.42.118.28:6892 | udp | |
| NL | 192.42.118.29:6892 | udp | |
| NL | 192.42.118.30:6892 | udp | |
| NL | 192.42.118.31:6892 | udp | |
| LT | 194.165.16.0:6892 | udp | |
| LT | 194.165.16.1:6892 | udp | |
| LT | 194.165.16.2:6892 | udp | |
| LT | 194.165.16.3:6892 | udp | |
| LT | 194.165.16.4:6892 | udp | |
| LT | 194.165.16.5:6892 | udp | |
| LT | 194.165.16.6:6892 | udp | |
| LT | 194.165.16.7:6892 | udp | |
| LT | 194.165.16.8:6892 | udp | |
| LT | 194.165.16.9:6892 | udp | |
| LT | 194.165.16.10:6892 | udp | |
| LT | 194.165.16.11:6892 | udp | |
| LT | 194.165.16.12:6892 | udp | |
| LT | 194.165.16.13:6892 | udp | |
| LT | 194.165.16.14:6892 | udp | |
| LT | 194.165.16.15:6892 | udp | |
| LT | 194.165.16.16:6892 | udp | |
| LT | 194.165.16.17:6892 | udp | |
| LT | 194.165.16.18:6892 | udp | |
| LT | 194.165.16.19:6892 | udp | |
| LT | 194.165.16.20:6892 | udp | |
| LT | 194.165.16.21:6892 | udp | |
| LT | 194.165.16.22:6892 | udp | |
| LT | 194.165.16.23:6892 | udp | |
| LT | 194.165.16.24:6892 | udp | |
| LT | 194.165.16.25:6892 | udp | |
| LT | 194.165.16.26:6892 | udp | |
| LT | 194.165.16.27:6892 | udp | |
| LT | 194.165.16.28:6892 | udp | |
| LT | 194.165.16.29:6892 | udp | |
| LT | 194.165.16.30:6892 | udp | |
| LT | 194.165.16.31:6892 | udp | |
| LT | 194.165.16.32:6892 | udp | |
| LT | 194.165.16.33:6892 | udp | |
| LT | 194.165.16.34:6892 | udp | |
| LT | 194.165.16.35:6892 | udp | |
| LT | 194.165.16.36:6892 | udp | |
| LT | 194.165.16.37:6892 | udp | |
| LT | 194.165.16.38:6892 | udp | |
| LT | 194.165.16.39:6892 | udp | |
| LT | 194.165.16.40:6892 | udp | |
| LT | 194.165.16.41:6892 | udp | |
| LT | 194.165.16.42:6892 | udp | |
| LT | 194.165.16.43:6892 | udp | |
| LT | 194.165.16.44:6892 | udp | |
| LT | 194.165.16.45:6892 | udp | |
| LT | 194.165.16.46:6892 | udp | |
| LT | 194.165.16.47:6892 | udp | |
| LT | 194.165.16.48:6892 | udp | |
| LT | 194.165.16.49:6892 | udp | |
| LT | 194.165.16.50:6892 | udp | |
| LT | 194.165.16.51:6892 | udp | |
| LT | 194.165.16.52:6892 | udp | |
| LT | 194.165.16.53:6892 | udp | |
| LT | 194.165.16.54:6892 | udp | |
| LT | 194.165.16.55:6892 | udp | |
| LT | 194.165.16.56:6892 | udp | |
| LT | 194.165.16.57:6892 | udp | |
| LT | 194.165.16.58:6892 | udp | |
| LT | 194.165.16.59:6892 | udp | |
| LT | 194.165.16.60:6892 | udp | |
| LT | 194.165.16.61:6892 | udp | |
| LT | 194.165.16.62:6892 | udp | |
| LT | 194.165.16.63:6892 | udp | |
| LT | 194.165.16.64:6892 | udp | |
| LT | 194.165.16.65:6892 | udp | |
| LT | 194.165.16.66:6892 | udp | |
| LT | 194.165.16.67:6892 | udp | |
| LT | 194.165.16.68:6892 | udp | |
| LT | 194.165.16.69:6892 | udp | |
| LT | 194.165.16.70:6892 | udp | |
| LT | 194.165.16.71:6892 | udp | |
| LT | 194.165.16.72:6892 | udp | |
| LT | 194.165.16.73:6892 | udp | |
| LT | 194.165.16.74:6892 | udp | |
| LT | 194.165.16.75:6892 | udp | |
| LT | 194.165.16.76:6892 | udp | |
| LT | 194.165.16.77:6892 | udp | |
| LT | 194.165.16.78:6892 | udp | |
| LT | 194.165.16.79:6892 | udp | |
| LT | 194.165.16.80:6892 | udp | |
| LT | 194.165.16.81:6892 | udp | |
| LT | 194.165.16.82:6892 | udp | |
| LT | 194.165.16.83:6892 | udp | |
| LT | 194.165.16.84:6892 | udp | |
| LT | 194.165.16.85:6892 | udp | |
| LT | 194.165.16.86:6892 | udp | |
| LT | 194.165.16.87:6892 | udp | |
| LT | 194.165.16.88:6892 | udp | |
| LT | 194.165.16.89:6892 | udp | |
| LT | 194.165.16.90:6892 | udp | |
| LT | 194.165.16.91:6892 | udp | |
| LT | 194.165.16.92:6892 | udp | |
| LT | 194.165.16.93:6892 | udp | |
| LT | 194.165.16.94:6892 | udp | |
| LT | 194.165.16.95:6892 | udp | |
| LT | 194.165.16.96:6892 | udp | |
| LT | 194.165.16.97:6892 | udp | |
| LT | 194.165.16.98:6892 | udp | |
| LT | 194.165.16.99:6892 | udp | |
| LT | 194.165.16.100:6892 | udp | |
| LT | 194.165.16.101:6892 | udp | |
| LT | 194.165.16.102:6892 | udp | |
| LT | 194.165.16.103:6892 | udp | |
| LT | 194.165.16.104:6892 | udp | |
| LT | 194.165.16.105:6892 | udp | |
| LT | 194.165.16.106:6892 | udp | |
| LT | 194.165.16.107:6892 | udp | |
| LT | 194.165.16.108:6892 | udp | |
| LT | 194.165.16.109:6892 | udp | |
| LT | 194.165.16.110:6892 | udp | |
| LT | 194.165.16.111:6892 | udp | |
| LT | 194.165.16.112:6892 | udp | |
| LT | 194.165.16.113:6892 | udp | |
| LT | 194.165.16.114:6892 | udp | |
| LT | 194.165.16.115:6892 | udp | |
| LT | 194.165.16.116:6892 | udp | |
| LT | 194.165.16.117:6892 | udp | |
| LT | 194.165.16.118:6892 | udp | |
| LT | 194.165.16.119:6892 | udp | |
| LT | 194.165.16.120:6892 | udp | |
| LT | 194.165.16.121:6892 | udp | |
| LT | 194.165.16.122:6892 | udp | |
| LT | 194.165.16.123:6892 | udp | |
| LT | 194.165.16.124:6892 | udp | |
| LT | 194.165.16.125:6892 | udp | |
| LT | 194.165.16.126:6892 | udp | |
| LT | 194.165.16.127:6892 | udp | |
| LT | 194.165.16.128:6892 | udp | |
| LT | 194.165.16.129:6892 | udp | |
| LT | 194.165.16.130:6892 | udp | |
| LT | 194.165.16.131:6892 | udp | |
| LT | 194.165.16.132:6892 | udp | |
| LT | 194.165.16.133:6892 | udp | |
| LT | 194.165.16.134:6892 | udp | |
| LT | 194.165.16.135:6892 | udp | |
| LT | 194.165.16.136:6892 | udp | |
| LT | 194.165.16.137:6892 | udp | |
| LT | 194.165.16.138:6892 | udp | |
| LT | 194.165.16.139:6892 | udp | |
| LT | 194.165.16.140:6892 | udp | |
| LT | 194.165.16.141:6892 | udp | |
| LT | 194.165.16.142:6892 | udp | |
| LT | 194.165.16.143:6892 | udp | |
| LT | 194.165.16.144:6892 | udp | |
| LT | 194.165.16.145:6892 | udp | |
| LT | 194.165.16.146:6892 | udp | |
| LT | 194.165.16.147:6892 | udp | |
| LT | 194.165.16.148:6892 | udp | |
| LT | 194.165.16.149:6892 | udp | |
| LT | 194.165.16.150:6892 | udp | |
| LT | 194.165.16.151:6892 | udp | |
| LT | 194.165.16.152:6892 | udp | |
| LT | 194.165.16.153:6892 | udp | |
| LT | 194.165.16.154:6892 | udp | |
| LT | 194.165.16.155:6892 | udp | |
| LT | 194.165.16.156:6892 | udp | |
| LT | 194.165.16.157:6892 | udp | |
| LT | 194.165.16.158:6892 | udp | |
| LT | 194.165.16.159:6892 | udp | |
| LT | 194.165.16.160:6892 | udp | |
| LT | 194.165.16.161:6892 | udp | |
| LT | 194.165.16.162:6892 | udp | |
| LT | 194.165.16.163:6892 | udp | |
| LT | 194.165.16.164:6892 | udp | |
| LT | 194.165.16.165:6892 | udp | |
| LT | 194.165.16.166:6892 | udp | |
| LT | 194.165.16.167:6892 | udp | |
| LT | 194.165.16.168:6892 | udp | |
| LT | 194.165.16.169:6892 | udp | |
| LT | 194.165.16.170:6892 | udp | |
| LT | 194.165.16.171:6892 | udp | |
| LT | 194.165.16.172:6892 | udp | |
| LT | 194.165.16.173:6892 | udp | |
| LT | 194.165.16.174:6892 | udp | |
| LT | 194.165.16.175:6892 | udp | |
| LT | 194.165.16.176:6892 | udp | |
| LT | 194.165.16.177:6892 | udp | |
| LT | 194.165.16.178:6892 | udp | |
| LT | 194.165.16.179:6892 | udp | |
| LT | 194.165.16.180:6892 | udp | |
| LT | 194.165.16.181:6892 | udp | |
| LT | 194.165.16.182:6892 | udp | |
| LT | 194.165.16.183:6892 | udp | |
| LT | 194.165.16.184:6892 | udp | |
| LT | 194.165.16.185:6892 | udp | |
| LT | 194.165.16.186:6892 | udp | |
| LT | 194.165.16.187:6892 | udp | |
| LT | 194.165.16.188:6892 | udp | |
| LT | 194.165.16.189:6892 | udp | |
| LT | 194.165.16.190:6892 | udp | |
| LT | 194.165.16.191:6892 | udp | |
| LT | 194.165.16.192:6892 | udp | |
| LT | 194.165.16.193:6892 | udp | |
| LT | 194.165.16.194:6892 | udp | |
| LT | 194.165.16.195:6892 | udp | |
| LT | 194.165.16.196:6892 | udp | |
| LT | 194.165.16.197:6892 | udp | |
| LT | 194.165.16.198:6892 | udp | |
| LT | 194.165.16.199:6892 | udp | |
| LT | 194.165.16.200:6892 | udp | |
| LT | 194.165.16.201:6892 | udp | |
| LT | 194.165.16.202:6892 | udp | |
| LT | 194.165.16.203:6892 | udp | |
| LT | 194.165.16.204:6892 | udp | |
| LT | 194.165.16.205:6892 | udp | |
| LT | 194.165.16.206:6892 | udp | |
| LT | 194.165.16.207:6892 | udp | |
| LT | 194.165.16.208:6892 | udp | |
| LT | 194.165.16.209:6892 | udp | |
| LT | 194.165.16.210:6892 | udp | |
| LT | 194.165.16.211:6892 | udp | |
| LT | 194.165.16.212:6892 | udp | |
| LT | 194.165.16.213:6892 | udp | |
| LT | 194.165.16.214:6892 | udp | |
| LT | 194.165.16.215:6892 | udp | |
| LT | 194.165.16.216:6892 | udp | |
| LT | 194.165.16.217:6892 | udp | |
| LT | 194.165.16.218:6892 | udp | |
| LT | 194.165.16.219:6892 | udp | |
| LT | 194.165.16.220:6892 | udp | |
| LT | 194.165.16.221:6892 | udp | |
| LT | 194.165.16.222:6892 | udp | |
| LT | 194.165.16.223:6892 | udp | |
| LT | 194.165.16.224:6892 | udp | |
| LT | 194.165.16.225:6892 | udp | |
| LT | 194.165.16.226:6892 | udp | |
| LT | 194.165.16.227:6892 | udp | |
| LT | 194.165.16.228:6892 | udp | |
| LT | 194.165.16.229:6892 | udp | |
| LT | 194.165.16.230:6892 | udp | |
| LT | 194.165.16.231:6892 | udp | |
| LT | 194.165.16.232:6892 | udp | |
| LT | 194.165.16.233:6892 | udp | |
| LT | 194.165.16.234:6892 | udp | |
| LT | 194.165.16.235:6892 | udp | |
| LT | 194.165.16.236:6892 | udp | |
| LT | 194.165.16.237:6892 | udp | |
| LT | 194.165.16.238:6892 | udp | |
| LT | 194.165.16.239:6892 | udp | |
| LT | 194.165.16.240:6892 | udp | |
| LT | 194.165.16.241:6892 | udp | |
| LT | 194.165.16.242:6892 | udp | |
| LT | 194.165.16.243:6892 | udp | |
| LT | 194.165.16.244:6892 | udp | |
| LT | 194.165.16.245:6892 | udp | |
| LT | 194.165.16.246:6892 | udp | |
| LT | 194.165.16.247:6892 | udp | |
| LT | 194.165.16.248:6892 | udp | |
| LT | 194.165.16.249:6892 | udp | |
| LT | 194.165.16.250:6892 | udp | |
| LT | 194.165.16.251:6892 | udp | |
| LT | 194.165.16.252:6892 | udp | |
| LT | 194.165.16.253:6892 | udp | |
| LT | 194.165.16.254:6892 | udp | |
| LT | 194.165.16.255:6892 | udp | |
| LT | 194.165.17.0:6892 | udp | |
| LT | 194.165.17.1:6892 | udp | |
| LT | 194.165.17.2:6892 | udp | |
| LT | 194.165.17.3:6892 | udp | |
| LT | 194.165.17.4:6892 | udp | |
| LT | 194.165.17.5:6892 | udp | |
| LT | 194.165.17.6:6892 | udp | |
| LT | 194.165.17.7:6892 | udp | |
| LT | 194.165.17.8:6892 | udp | |
| LT | 194.165.17.9:6892 | udp | |
| LT | 194.165.17.10:6892 | udp | |
| LT | 194.165.17.11:6892 | udp | |
| LT | 194.165.17.12:6892 | udp | |
| LT | 194.165.17.13:6892 | udp | |
| LT | 194.165.17.14:6892 | udp | |
| LT | 194.165.17.15:6892 | udp | |
| LT | 194.165.17.16:6892 | udp | |
| LT | 194.165.17.17:6892 | udp | |
| LT | 194.165.17.18:6892 | udp | |
| LT | 194.165.17.19:6892 | udp | |
| LT | 194.165.17.20:6892 | udp | |
| LT | 194.165.17.21:6892 | udp | |
| LT | 194.165.17.22:6892 | udp | |
| LT | 194.165.17.23:6892 | udp | |
| LT | 194.165.17.24:6892 | udp | |
| LT | 194.165.17.25:6892 | udp | |
| LT | 194.165.17.26:6892 | udp | |
| LT | 194.165.17.27:6892 | udp | |
| LT | 194.165.17.28:6892 | udp | |
| LT | 194.165.17.29:6892 | udp | |
| LT | 194.165.17.30:6892 | udp | |
| LT | 194.165.17.31:6892 | udp | |
| LT | 194.165.17.32:6892 | udp | |
| LT | 194.165.17.33:6892 | udp | |
| LT | 194.165.17.34:6892 | udp | |
| LT | 194.165.17.35:6892 | udp | |
| LT | 194.165.17.36:6892 | udp | |
| LT | 194.165.17.37:6892 | udp | |
| LT | 194.165.17.38:6892 | udp | |
| LT | 194.165.17.39:6892 | udp | |
| LT | 194.165.17.40:6892 | udp | |
| LT | 194.165.17.41:6892 | udp | |
| LT | 194.165.17.42:6892 | udp | |
| LT | 194.165.17.43:6892 | udp | |
| LT | 194.165.17.44:6892 | udp | |
| LT | 194.165.17.45:6892 | udp | |
| LT | 194.165.17.46:6892 | udp | |
| LT | 194.165.17.47:6892 | udp | |
| LT | 194.165.17.48:6892 | udp | |
| LT | 194.165.17.49:6892 | udp | |
| LT | 194.165.17.50:6892 | udp | |
| LT | 194.165.17.51:6892 | udp | |
| LT | 194.165.17.52:6892 | udp | |
| LT | 194.165.17.53:6892 | udp | |
| LT | 194.165.17.54:6892 | udp | |
| LT | 194.165.17.55:6892 | udp | |
| LT | 194.165.17.56:6892 | udp | |
| LT | 194.165.17.57:6892 | udp | |
| LT | 194.165.17.58:6892 | udp | |
| LT | 194.165.17.59:6892 | udp | |
| LT | 194.165.17.60:6892 | udp | |
| LT | 194.165.17.61:6892 | udp | |
| LT | 194.165.17.62:6892 | udp | |
| LT | 194.165.17.63:6892 | udp | |
| LT | 194.165.17.64:6892 | udp | |
| LT | 194.165.17.65:6892 | udp | |
| LT | 194.165.17.66:6892 | udp | |
| LT | 194.165.17.67:6892 | udp | |
| LT | 194.165.17.68:6892 | udp | |
| LT | 194.165.17.69:6892 | udp | |
| LT | 194.165.17.70:6892 | udp | |
| LT | 194.165.17.71:6892 | udp | |
| LT | 194.165.17.72:6892 | udp | |
| LT | 194.165.17.73:6892 | udp | |
| LT | 194.165.17.74:6892 | udp | |
| LT | 194.165.17.75:6892 | udp | |
| LT | 194.165.17.76:6892 | udp | |
| LT | 194.165.17.77:6892 | udp | |
| LT | 194.165.17.78:6892 | udp | |
| LT | 194.165.17.79:6892 | udp | |
| LT | 194.165.17.80:6892 | udp | |
| LT | 194.165.17.81:6892 | udp | |
| LT | 194.165.17.82:6892 | udp | |
| LT | 194.165.17.83:6892 | udp | |
| LT | 194.165.17.84:6892 | udp | |
| LT | 194.165.17.85:6892 | udp | |
| LT | 194.165.17.86:6892 | udp | |
| LT | 194.165.17.87:6892 | udp | |
| LT | 194.165.17.88:6892 | udp | |
| LT | 194.165.17.89:6892 | udp | |
| LT | 194.165.17.90:6892 | udp | |
| LT | 194.165.17.91:6892 | udp | |
| LT | 194.165.17.92:6892 | udp | |
| LT | 194.165.17.93:6892 | udp | |
| LT | 194.165.17.94:6892 | udp | |
| LT | 194.165.17.95:6892 | udp | |
| LT | 194.165.17.96:6892 | udp | |
| LT | 194.165.17.97:6892 | udp | |
| LT | 194.165.17.98:6892 | udp | |
| LT | 194.165.17.99:6892 | udp | |
| LT | 194.165.17.100:6892 | udp | |
| LT | 194.165.17.101:6892 | udp | |
| LT | 194.165.17.102:6892 | udp | |
| LT | 194.165.17.103:6892 | udp | |
| LT | 194.165.17.104:6892 | udp | |
| LT | 194.165.17.105:6892 | udp | |
| LT | 194.165.17.106:6892 | udp | |
| LT | 194.165.17.107:6892 | udp | |
| LT | 194.165.17.108:6892 | udp | |
| LT | 194.165.17.109:6892 | udp | |
| LT | 194.165.17.110:6892 | udp | |
| LT | 194.165.17.111:6892 | udp | |
| LT | 194.165.17.112:6892 | udp | |
| LT | 194.165.17.113:6892 | udp | |
| LT | 194.165.17.114:6892 | udp | |
| LT | 194.165.17.115:6892 | udp | |
| LT | 194.165.17.116:6892 | udp | |
| LT | 194.165.17.117:6892 | udp | |
| LT | 194.165.17.118:6892 | udp | |
| LT | 194.165.17.119:6892 | udp | |
| LT | 194.165.17.120:6892 | udp | |
| LT | 194.165.17.121:6892 | udp | |
| LT | 194.165.17.122:6892 | udp | |
| LT | 194.165.17.123:6892 | udp | |
| LT | 194.165.17.124:6892 | udp | |
| LT | 194.165.17.125:6892 | udp | |
| LT | 194.165.17.126:6892 | udp | |
| LT | 194.165.17.127:6892 | udp | |
| LT | 194.165.17.128:6892 | udp | |
| LT | 194.165.17.129:6892 | udp | |
| LT | 194.165.17.130:6892 | udp | |
| LT | 194.165.17.131:6892 | udp | |
| LT | 194.165.17.132:6892 | udp | |
| LT | 194.165.17.133:6892 | udp | |
| LT | 194.165.17.134:6892 | udp | |
| LT | 194.165.17.135:6892 | udp | |
| LT | 194.165.17.136:6892 | udp | |
| LT | 194.165.17.137:6892 | udp | |
| LT | 194.165.17.138:6892 | udp | |
| LT | 194.165.17.139:6892 | udp | |
| LT | 194.165.17.140:6892 | udp | |
| LT | 194.165.17.141:6892 | udp | |
| LT | 194.165.17.142:6892 | udp | |
| LT | 194.165.17.143:6892 | udp | |
| LT | 194.165.17.144:6892 | udp | |
| LT | 194.165.17.145:6892 | udp | |
| LT | 194.165.17.146:6892 | udp | |
| LT | 194.165.17.147:6892 | udp | |
| LT | 194.165.17.148:6892 | udp | |
| LT | 194.165.17.149:6892 | udp | |
| LT | 194.165.17.150:6892 | udp | |
| LT | 194.165.17.151:6892 | udp | |
| LT | 194.165.17.152:6892 | udp | |
| LT | 194.165.17.153:6892 | udp | |
| LT | 194.165.17.154:6892 | udp | |
| LT | 194.165.17.155:6892 | udp | |
| LT | 194.165.17.156:6892 | udp | |
| LT | 194.165.17.157:6892 | udp | |
| LT | 194.165.17.158:6892 | udp | |
| LT | 194.165.17.159:6892 | udp | |
| LT | 194.165.17.160:6892 | udp | |
| LT | 194.165.17.161:6892 | udp | |
| LT | 194.165.17.162:6892 | udp | |
| LT | 194.165.17.163:6892 | udp | |
| LT | 194.165.17.164:6892 | udp | |
| LT | 194.165.17.165:6892 | udp | |
| LT | 194.165.17.166:6892 | udp | |
| LT | 194.165.17.167:6892 | udp | |
| LT | 194.165.17.168:6892 | udp | |
| LT | 194.165.17.169:6892 | udp | |
| LT | 194.165.17.170:6892 | udp | |
| LT | 194.165.17.171:6892 | udp | |
| LT | 194.165.17.172:6892 | udp | |
| LT | 194.165.17.173:6892 | udp | |
| LT | 194.165.17.174:6892 | udp | |
| LT | 194.165.17.175:6892 | udp | |
| LT | 194.165.17.176:6892 | udp | |
| LT | 194.165.17.177:6892 | udp | |
| LT | 194.165.17.178:6892 | udp | |
| LT | 194.165.17.179:6892 | udp | |
| LT | 194.165.17.180:6892 | udp | |
| LT | 194.165.17.181:6892 | udp | |
| LT | 194.165.17.182:6892 | udp | |
| LT | 194.165.17.183:6892 | udp | |
| LT | 194.165.17.184:6892 | udp | |
| LT | 194.165.17.185:6892 | udp | |
| LT | 194.165.17.186:6892 | udp | |
| LT | 194.165.17.187:6892 | udp | |
| LT | 194.165.17.188:6892 | udp | |
| LT | 194.165.17.189:6892 | udp | |
| LT | 194.165.17.190:6892 | udp | |
| LT | 194.165.17.191:6892 | udp | |
| LT | 194.165.17.192:6892 | udp | |
| LT | 194.165.17.193:6892 | udp | |
| LT | 194.165.17.194:6892 | udp | |
| LT | 194.165.17.195:6892 | udp | |
| LT | 194.165.17.196:6892 | udp | |
| LT | 194.165.17.197:6892 | udp | |
| LT | 194.165.17.198:6892 | udp | |
| LT | 194.165.17.199:6892 | udp | |
| LT | 194.165.17.200:6892 | udp | |
| LT | 194.165.17.201:6892 | udp | |
| LT | 194.165.17.202:6892 | udp | |
| LT | 194.165.17.203:6892 | udp | |
| LT | 194.165.17.204:6892 | udp | |
| LT | 194.165.17.205:6892 | udp | |
| LT | 194.165.17.206:6892 | udp | |
| LT | 194.165.17.207:6892 | udp | |
| LT | 194.165.17.208:6892 | udp | |
| LT | 194.165.17.209:6892 | udp | |
| LT | 194.165.17.210:6892 | udp | |
| LT | 194.165.17.211:6892 | udp | |
| LT | 194.165.17.212:6892 | udp | |
| LT | 194.165.17.213:6892 | udp | |
| LT | 194.165.17.214:6892 | udp | |
| LT | 194.165.17.215:6892 | udp | |
| LT | 194.165.17.216:6892 | udp | |
| LT | 194.165.17.217:6892 | udp | |
| LT | 194.165.17.218:6892 | udp | |
| LT | 194.165.17.219:6892 | udp | |
| LT | 194.165.17.220:6892 | udp | |
| LT | 194.165.17.221:6892 | udp | |
| LT | 194.165.17.222:6892 | udp | |
| LT | 194.165.17.223:6892 | udp | |
| LT | 194.165.17.224:6892 | udp | |
| LT | 194.165.17.225:6892 | udp | |
| LT | 194.165.17.226:6892 | udp | |
| LT | 194.165.17.227:6892 | udp | |
| LT | 194.165.17.228:6892 | udp | |
| LT | 194.165.17.229:6892 | udp | |
| LT | 194.165.17.230:6892 | udp | |
| LT | 194.165.17.231:6892 | udp | |
| LT | 194.165.17.232:6892 | udp | |
| LT | 194.165.17.233:6892 | udp | |
| LT | 194.165.17.234:6892 | udp | |
| LT | 194.165.17.235:6892 | udp | |
| LT | 194.165.17.236:6892 | udp | |
| LT | 194.165.17.237:6892 | udp | |
| LT | 194.165.17.238:6892 | udp | |
| LT | 194.165.17.239:6892 | udp | |
| LT | 194.165.17.240:6892 | udp | |
| LT | 194.165.17.241:6892 | udp | |
| LT | 194.165.17.242:6892 | udp | |
| LT | 194.165.17.243:6892 | udp | |
| LT | 194.165.17.244:6892 | udp | |
| LT | 194.165.17.245:6892 | udp | |
| LT | 194.165.17.246:6892 | udp | |
| LT | 194.165.17.247:6892 | udp | |
| LT | 194.165.17.248:6892 | udp | |
| LT | 194.165.17.249:6892 | udp | |
| LT | 194.165.17.250:6892 | udp | |
| LT | 194.165.17.251:6892 | udp | |
| LT | 194.165.17.252:6892 | udp | |
| LT | 194.165.17.253:6892 | udp | |
| LT | 194.165.17.254:6892 | udp | |
| LT | 194.165.17.255:6892 | udp | |
| RU | 194.165.18.0:6892 | udp | |
| RU | 194.165.18.1:6892 | udp | |
| RU | 194.165.18.2:6892 | udp | |
| RU | 194.165.18.3:6892 | udp | |
| RU | 194.165.18.4:6892 | udp | |
| RU | 194.165.18.5:6892 | udp | |
| RU | 194.165.18.6:6892 | udp | |
| RU | 194.165.18.7:6892 | udp | |
| RU | 194.165.18.8:6892 | udp | |
| RU | 194.165.18.9:6892 | udp | |
| RU | 194.165.18.10:6892 | udp | |
| RU | 194.165.18.11:6892 | udp | |
| RU | 194.165.18.12:6892 | udp | |
| RU | 194.165.18.13:6892 | udp | |
| RU | 194.165.18.14:6892 | udp | |
| RU | 194.165.18.15:6892 | udp | |
| RU | 194.165.18.16:6892 | udp | |
| RU | 194.165.18.17:6892 | udp | |
| RU | 194.165.18.18:6892 | udp | |
| RU | 194.165.18.19:6892 | udp | |
| RU | 194.165.18.20:6892 | udp | |
| RU | 194.165.18.21:6892 | udp | |
| RU | 194.165.18.22:6892 | udp | |
| RU | 194.165.18.23:6892 | udp | |
| RU | 194.165.18.24:6892 | udp | |
| RU | 194.165.18.25:6892 | udp | |
| RU | 194.165.18.26:6892 | udp | |
| RU | 194.165.18.27:6892 | udp | |
| RU | 194.165.18.28:6892 | udp | |
| RU | 194.165.18.29:6892 | udp | |
| RU | 194.165.18.30:6892 | udp | |
| RU | 194.165.18.31:6892 | udp | |
| RU | 194.165.18.32:6892 | udp | |
| RU | 194.165.18.33:6892 | udp | |
| RU | 194.165.18.34:6892 | udp | |
| RU | 194.165.18.35:6892 | udp | |
| RU | 194.165.18.36:6892 | udp | |
| RU | 194.165.18.37:6892 | udp | |
| RU | 194.165.18.38:6892 | udp | |
| RU | 194.165.18.39:6892 | udp | |
| RU | 194.165.18.40:6892 | udp | |
| RU | 194.165.18.41:6892 | udp | |
| RU | 194.165.18.42:6892 | udp | |
| RU | 194.165.18.43:6892 | udp | |
| RU | 194.165.18.44:6892 | udp | |
| RU | 194.165.18.45:6892 | udp | |
| RU | 194.165.18.46:6892 | udp | |
| RU | 194.165.18.47:6892 | udp | |
| RU | 194.165.18.48:6892 | udp | |
| RU | 194.165.18.49:6892 | udp | |
| RU | 194.165.18.50:6892 | udp | |
| RU | 194.165.18.51:6892 | udp | |
| RU | 194.165.18.52:6892 | udp | |
| RU | 194.165.18.53:6892 | udp | |
| RU | 194.165.18.54:6892 | udp | |
| RU | 194.165.18.55:6892 | udp | |
| RU | 194.165.18.56:6892 | udp | |
| RU | 194.165.18.57:6892 | udp | |
| RU | 194.165.18.58:6892 | udp | |
| RU | 194.165.18.59:6892 | udp | |
| RU | 194.165.18.60:6892 | udp | |
| RU | 194.165.18.61:6892 | udp | |
| RU | 194.165.18.62:6892 | udp | |
| RU | 194.165.18.63:6892 | udp | |
| RU | 194.165.18.64:6892 | udp | |
| RU | 194.165.18.65:6892 | udp | |
| RU | 194.165.18.66:6892 | udp | |
| RU | 194.165.18.67:6892 | udp | |
| RU | 194.165.18.68:6892 | udp | |
| RU | 194.165.18.69:6892 | udp | |
| RU | 194.165.18.70:6892 | udp | |
| RU | 194.165.18.71:6892 | udp | |
| RU | 194.165.18.72:6892 | udp | |
| RU | 194.165.18.73:6892 | udp | |
| RU | 194.165.18.74:6892 | udp | |
| RU | 194.165.18.75:6892 | udp | |
| RU | 194.165.18.76:6892 | udp | |
| RU | 194.165.18.77:6892 | udp | |
| RU | 194.165.18.78:6892 | udp | |
| RU | 194.165.18.79:6892 | udp | |
| RU | 194.165.18.80:6892 | udp | |
| RU | 194.165.18.81:6892 | udp | |
| RU | 194.165.18.82:6892 | udp | |
| RU | 194.165.18.83:6892 | udp | |
| RU | 194.165.18.84:6892 | udp | |
| RU | 194.165.18.85:6892 | udp | |
| RU | 194.165.18.86:6892 | udp | |
| RU | 194.165.18.87:6892 | udp | |
| RU | 194.165.18.88:6892 | udp | |
| RU | 194.165.18.89:6892 | udp | |
| RU | 194.165.18.90:6892 | udp | |
| RU | 194.165.18.91:6892 | udp | |
| RU | 194.165.18.92:6892 | udp | |
| RU | 194.165.18.93:6892 | udp | |
| RU | 194.165.18.94:6892 | udp | |
| RU | 194.165.18.95:6892 | udp | |
| RU | 194.165.18.96:6892 | udp | |
| RU | 194.165.18.97:6892 | udp | |
| RU | 194.165.18.98:6892 | udp | |
| RU | 194.165.18.99:6892 | udp | |
| RU | 194.165.18.100:6892 | udp | |
| RU | 194.165.18.101:6892 | udp | |
| RU | 194.165.18.102:6892 | udp | |
| RU | 194.165.18.103:6892 | udp | |
| RU | 194.165.18.104:6892 | udp | |
| RU | 194.165.18.105:6892 | udp | |
| RU | 194.165.18.106:6892 | udp | |
| RU | 194.165.18.107:6892 | udp | |
| RU | 194.165.18.108:6892 | udp | |
| RU | 194.165.18.109:6892 | udp | |
| RU | 194.165.18.110:6892 | udp | |
| RU | 194.165.18.111:6892 | udp | |
| RU | 194.165.18.112:6892 | udp | |
| RU | 194.165.18.113:6892 | udp | |
| RU | 194.165.18.114:6892 | udp | |
| RU | 194.165.18.115:6892 | udp | |
| RU | 194.165.18.116:6892 | udp | |
| RU | 194.165.18.117:6892 | udp | |
| RU | 194.165.18.118:6892 | udp | |
| RU | 194.165.18.119:6892 | udp | |
| RU | 194.165.18.120:6892 | udp | |
| RU | 194.165.18.121:6892 | udp | |
| RU | 194.165.18.122:6892 | udp | |
| RU | 194.165.18.123:6892 | udp | |
| RU | 194.165.18.124:6892 | udp | |
| RU | 194.165.18.125:6892 | udp | |
| RU | 194.165.18.126:6892 | udp | |
| RU | 194.165.18.127:6892 | udp | |
| RU | 194.165.18.128:6892 | udp | |
| RU | 194.165.18.129:6892 | udp | |
| RU | 194.165.18.130:6892 | udp | |
| RU | 194.165.18.131:6892 | udp | |
| RU | 194.165.18.132:6892 | udp | |
| RU | 194.165.18.133:6892 | udp | |
| RU | 194.165.18.134:6892 | udp | |
| RU | 194.165.18.135:6892 | udp | |
| RU | 194.165.18.136:6892 | udp | |
| RU | 194.165.18.137:6892 | udp | |
| RU | 194.165.18.138:6892 | udp | |
| RU | 194.165.18.139:6892 | udp | |
| RU | 194.165.18.140:6892 | udp | |
| RU | 194.165.18.141:6892 | udp | |
| RU | 194.165.18.142:6892 | udp | |
| RU | 194.165.18.143:6892 | udp | |
| RU | 194.165.18.144:6892 | udp | |
| RU | 194.165.18.145:6892 | udp | |
| RU | 194.165.18.146:6892 | udp | |
| RU | 194.165.18.147:6892 | udp | |
| RU | 194.165.18.148:6892 | udp | |
| RU | 194.165.18.149:6892 | udp | |
| RU | 194.165.18.150:6892 | udp | |
| RU | 194.165.18.151:6892 | udp | |
| RU | 194.165.18.152:6892 | udp | |
| RU | 194.165.18.153:6892 | udp | |
| RU | 194.165.18.154:6892 | udp | |
| RU | 194.165.18.155:6892 | udp | |
| RU | 194.165.18.156:6892 | udp | |
| RU | 194.165.18.157:6892 | udp | |
| RU | 194.165.18.158:6892 | udp | |
| RU | 194.165.18.159:6892 | udp | |
| RU | 194.165.18.160:6892 | udp | |
| RU | 194.165.18.161:6892 | udp | |
| RU | 194.165.18.162:6892 | udp | |
| RU | 194.165.18.163:6892 | udp | |
| RU | 194.165.18.164:6892 | udp | |
| RU | 194.165.18.165:6892 | udp | |
| RU | 194.165.18.166:6892 | udp | |
| RU | 194.165.18.167:6892 | udp | |
| RU | 194.165.18.168:6892 | udp | |
| RU | 194.165.18.169:6892 | udp | |
| RU | 194.165.18.170:6892 | udp | |
| RU | 194.165.18.171:6892 | udp | |
| RU | 194.165.18.172:6892 | udp | |
| RU | 194.165.18.173:6892 | udp | |
| RU | 194.165.18.174:6892 | udp | |
| RU | 194.165.18.175:6892 | udp | |
| RU | 194.165.18.176:6892 | udp | |
| RU | 194.165.18.177:6892 | udp | |
| RU | 194.165.18.178:6892 | udp | |
| RU | 194.165.18.179:6892 | udp | |
| RU | 194.165.18.180:6892 | udp | |
| RU | 194.165.18.181:6892 | udp | |
| RU | 194.165.18.182:6892 | udp | |
| RU | 194.165.18.183:6892 | udp | |
| RU | 194.165.18.184:6892 | udp | |
| RU | 194.165.18.185:6892 | udp | |
| RU | 194.165.18.186:6892 | udp | |
| RU | 194.165.18.187:6892 | udp | |
| RU | 194.165.18.188:6892 | udp | |
| RU | 194.165.18.189:6892 | udp | |
| RU | 194.165.18.190:6892 | udp | |
| RU | 194.165.18.191:6892 | udp | |
| RU | 194.165.18.192:6892 | udp | |
| RU | 194.165.18.193:6892 | udp | |
| RU | 194.165.18.194:6892 | udp | |
| RU | 194.165.18.195:6892 | udp | |
| RU | 194.165.18.196:6892 | udp | |
| RU | 194.165.18.197:6892 | udp | |
| RU | 194.165.18.198:6892 | udp | |
| RU | 194.165.18.199:6892 | udp | |
| RU | 194.165.18.200:6892 | udp | |
| RU | 194.165.18.201:6892 | udp | |
| RU | 194.165.18.202:6892 | udp | |
| RU | 194.165.18.203:6892 | udp | |
| RU | 194.165.18.204:6892 | udp | |
| RU | 194.165.18.205:6892 | udp | |
| RU | 194.165.18.206:6892 | udp | |
| RU | 194.165.18.207:6892 | udp | |
| RU | 194.165.18.208:6892 | udp | |
| RU | 194.165.18.209:6892 | udp | |
| RU | 194.165.18.210:6892 | udp | |
| RU | 194.165.18.211:6892 | udp | |
| RU | 194.165.18.212:6892 | udp | |
| RU | 194.165.18.213:6892 | udp | |
| RU | 194.165.18.214:6892 | udp | |
| RU | 194.165.18.215:6892 | udp | |
| RU | 194.165.18.216:6892 | udp | |
| RU | 194.165.18.217:6892 | udp | |
| RU | 194.165.18.218:6892 | udp | |
| RU | 194.165.18.219:6892 | udp | |
| RU | 194.165.18.220:6892 | udp | |
| RU | 194.165.18.221:6892 | udp | |
| RU | 194.165.18.222:6892 | udp | |
| RU | 194.165.18.223:6892 | udp | |
| RU | 194.165.18.224:6892 | udp | |
| RU | 194.165.18.225:6892 | udp | |
| RU | 194.165.18.226:6892 | udp | |
| RU | 194.165.18.227:6892 | udp | |
| RU | 194.165.18.228:6892 | udp | |
| RU | 194.165.18.229:6892 | udp | |
| RU | 194.165.18.230:6892 | udp | |
| RU | 194.165.18.231:6892 | udp | |
| RU | 194.165.18.232:6892 | udp | |
| RU | 194.165.18.233:6892 | udp | |
| RU | 194.165.18.234:6892 | udp | |
| RU | 194.165.18.235:6892 | udp | |
| RU | 194.165.18.236:6892 | udp | |
| RU | 194.165.18.237:6892 | udp | |
| RU | 194.165.18.238:6892 | udp | |
| RU | 194.165.18.239:6892 | udp | |
| RU | 194.165.18.240:6892 | udp | |
| RU | 194.165.18.241:6892 | udp | |
| RU | 194.165.18.242:6892 | udp | |
| RU | 194.165.18.243:6892 | udp | |
| RU | 194.165.18.244:6892 | udp | |
| RU | 194.165.18.245:6892 | udp | |
| RU | 194.165.18.246:6892 | udp | |
| RU | 194.165.18.247:6892 | udp | |
| RU | 194.165.18.248:6892 | udp | |
| RU | 194.165.18.249:6892 | udp | |
| RU | 194.165.18.250:6892 | udp | |
| RU | 194.165.18.251:6892 | udp | |
| RU | 194.165.18.252:6892 | udp | |
| RU | 194.165.18.253:6892 | udp | |
| RU | 194.165.18.254:6892 | udp | |
| RU | 194.165.18.255:6892 | udp | |
| RU | 194.165.19.0:6892 | udp | |
| RU | 194.165.19.1:6892 | udp | |
| RU | 194.165.19.2:6892 | udp | |
| RU | 194.165.19.3:6892 | udp | |
| RU | 194.165.19.4:6892 | udp | |
| RU | 194.165.19.5:6892 | udp | |
| RU | 194.165.19.6:6892 | udp | |
| RU | 194.165.19.7:6892 | udp | |
| RU | 194.165.19.8:6892 | udp | |
| RU | 194.165.19.9:6892 | udp | |
| RU | 194.165.19.10:6892 | udp | |
| RU | 194.165.19.11:6892 | udp | |
| RU | 194.165.19.12:6892 | udp | |
| RU | 194.165.19.13:6892 | udp | |
| RU | 194.165.19.14:6892 | udp | |
| RU | 194.165.19.15:6892 | udp | |
| RU | 194.165.19.16:6892 | udp | |
| RU | 194.165.19.17:6892 | udp | |
| RU | 194.165.19.18:6892 | udp | |
| RU | 194.165.19.19:6892 | udp | |
| RU | 194.165.19.20:6892 | udp | |
| RU | 194.165.19.21:6892 | udp | |
| RU | 194.165.19.22:6892 | udp | |
| RU | 194.165.19.23:6892 | udp | |
| RU | 194.165.19.24:6892 | udp | |
| RU | 194.165.19.25:6892 | udp | |
| RU | 194.165.19.26:6892 | udp | |
| RU | 194.165.19.27:6892 | udp | |
| RU | 194.165.19.28:6892 | udp | |
| RU | 194.165.19.29:6892 | udp | |
| RU | 194.165.19.30:6892 | udp | |
| RU | 194.165.19.31:6892 | udp | |
| RU | 194.165.19.32:6892 | udp | |
| RU | 194.165.19.33:6892 | udp | |
| RU | 194.165.19.34:6892 | udp | |
| RU | 194.165.19.35:6892 | udp | |
| RU | 194.165.19.36:6892 | udp | |
| RU | 194.165.19.37:6892 | udp | |
| RU | 194.165.19.38:6892 | udp | |
| RU | 194.165.19.39:6892 | udp | |
| RU | 194.165.19.40:6892 | udp | |
| RU | 194.165.19.41:6892 | udp | |
| RU | 194.165.19.42:6892 | udp | |
| RU | 194.165.19.43:6892 | udp | |
| RU | 194.165.19.44:6892 | udp | |
| RU | 194.165.19.45:6892 | udp | |
| RU | 194.165.19.46:6892 | udp | |
| RU | 194.165.19.47:6892 | udp | |
| RU | 194.165.19.48:6892 | udp | |
| RU | 194.165.19.49:6892 | udp | |
| RU | 194.165.19.50:6892 | udp | |
| RU | 194.165.19.51:6892 | udp | |
| RU | 194.165.19.52:6892 | udp | |
| RU | 194.165.19.53:6892 | udp | |
| RU | 194.165.19.54:6892 | udp | |
| RU | 194.165.19.55:6892 | udp | |
| RU | 194.165.19.56:6892 | udp | |
| RU | 194.165.19.57:6892 | udp | |
| RU | 194.165.19.58:6892 | udp | |
| RU | 194.165.19.59:6892 | udp | |
| RU | 194.165.19.60:6892 | udp | |
| RU | 194.165.19.61:6892 | udp | |
| RU | 194.165.19.62:6892 | udp | |
| RU | 194.165.19.63:6892 | udp | |
| RU | 194.165.19.64:6892 | udp | |
| RU | 194.165.19.65:6892 | udp | |
| RU | 194.165.19.66:6892 | udp | |
| RU | 194.165.19.67:6892 | udp | |
| RU | 194.165.19.68:6892 | udp | |
| RU | 194.165.19.69:6892 | udp | |
| RU | 194.165.19.70:6892 | udp | |
| RU | 194.165.19.71:6892 | udp | |
| RU | 194.165.19.72:6892 | udp | |
| RU | 194.165.19.73:6892 | udp | |
| RU | 194.165.19.74:6892 | udp | |
| RU | 194.165.19.75:6892 | udp | |
| RU | 194.165.19.76:6892 | udp | |
| RU | 194.165.19.77:6892 | udp | |
| RU | 194.165.19.78:6892 | udp | |
| RU | 194.165.19.79:6892 | udp | |
| RU | 194.165.19.80:6892 | udp | |
| RU | 194.165.19.81:6892 | udp | |
| RU | 194.165.19.82:6892 | udp | |
| RU | 194.165.19.83:6892 | udp | |
| RU | 194.165.19.84:6892 | udp | |
| RU | 194.165.19.85:6892 | udp | |
| RU | 194.165.19.86:6892 | udp | |
| RU | 194.165.19.87:6892 | udp | |
| RU | 194.165.19.88:6892 | udp | |
| RU | 194.165.19.89:6892 | udp | |
| RU | 194.165.19.90:6892 | udp | |
| RU | 194.165.19.91:6892 | udp | |
| RU | 194.165.19.92:6892 | udp | |
| RU | 194.165.19.93:6892 | udp | |
| RU | 194.165.19.94:6892 | udp | |
| RU | 194.165.19.95:6892 | udp | |
| RU | 194.165.19.96:6892 | udp | |
| RU | 194.165.19.97:6892 | udp | |
| RU | 194.165.19.98:6892 | udp | |
| RU | 194.165.19.99:6892 | udp | |
| RU | 194.165.19.100:6892 | udp | |
| RU | 194.165.19.101:6892 | udp | |
| RU | 194.165.19.102:6892 | udp | |
| RU | 194.165.19.103:6892 | udp | |
| RU | 194.165.19.104:6892 | udp | |
| RU | 194.165.19.105:6892 | udp | |
| RU | 194.165.19.106:6892 | udp | |
| RU | 194.165.19.107:6892 | udp | |
| RU | 194.165.19.108:6892 | udp | |
| RU | 194.165.19.109:6892 | udp | |
| RU | 194.165.19.110:6892 | udp | |
| RU | 194.165.19.111:6892 | udp | |
| RU | 194.165.19.112:6892 | udp | |
| RU | 194.165.19.113:6892 | udp | |
| RU | 194.165.19.114:6892 | udp | |
| RU | 194.165.19.115:6892 | udp | |
| RU | 194.165.19.116:6892 | udp | |
| RU | 194.165.19.117:6892 | udp | |
| RU | 194.165.19.118:6892 | udp | |
| RU | 194.165.19.119:6892 | udp | |
| RU | 194.165.19.120:6892 | udp | |
| RU | 194.165.19.121:6892 | udp | |
| RU | 194.165.19.122:6892 | udp | |
| RU | 194.165.19.123:6892 | udp | |
| RU | 194.165.19.124:6892 | udp | |
| RU | 194.165.19.125:6892 | udp | |
| RU | 194.165.19.126:6892 | udp | |
| RU | 194.165.19.127:6892 | udp | |
| RU | 194.165.19.128:6892 | udp | |
| RU | 194.165.19.129:6892 | udp | |
| RU | 194.165.19.130:6892 | udp | |
| RU | 194.165.19.131:6892 | udp | |
| RU | 194.165.19.132:6892 | udp | |
| RU | 194.165.19.133:6892 | udp | |
| RU | 194.165.19.134:6892 | udp | |
| RU | 194.165.19.135:6892 | udp | |
| RU | 194.165.19.136:6892 | udp | |
| RU | 194.165.19.137:6892 | udp | |
| RU | 194.165.19.138:6892 | udp | |
| RU | 194.165.19.139:6892 | udp | |
| RU | 194.165.19.140:6892 | udp | |
| RU | 194.165.19.141:6892 | udp | |
| RU | 194.165.19.142:6892 | udp | |
| RU | 194.165.19.143:6892 | udp | |
| RU | 194.165.19.144:6892 | udp | |
| RU | 194.165.19.145:6892 | udp | |
| RU | 194.165.19.146:6892 | udp | |
| RU | 194.165.19.147:6892 | udp | |
| RU | 194.165.19.148:6892 | udp | |
| RU | 194.165.19.149:6892 | udp | |
| RU | 194.165.19.150:6892 | udp | |
| RU | 194.165.19.151:6892 | udp | |
| RU | 194.165.19.152:6892 | udp | |
| RU | 194.165.19.153:6892 | udp | |
| RU | 194.165.19.154:6892 | udp | |
| RU | 194.165.19.155:6892 | udp | |
| RU | 194.165.19.156:6892 | udp | |
| RU | 194.165.19.157:6892 | udp | |
| RU | 194.165.19.158:6892 | udp | |
| RU | 194.165.19.159:6892 | udp | |
| RU | 194.165.19.160:6892 | udp | |
| RU | 194.165.19.161:6892 | udp | |
| RU | 194.165.19.162:6892 | udp | |
| RU | 194.165.19.163:6892 | udp | |
| RU | 194.165.19.164:6892 | udp | |
| RU | 194.165.19.165:6892 | udp | |
| RU | 194.165.19.166:6892 | udp | |
| RU | 194.165.19.167:6892 | udp | |
| RU | 194.165.19.168:6892 | udp | |
| RU | 194.165.19.169:6892 | udp | |
| RU | 194.165.19.170:6892 | udp | |
| RU | 194.165.19.171:6892 | udp | |
| RU | 194.165.19.172:6892 | udp | |
| RU | 194.165.19.173:6892 | udp | |
| RU | 194.165.19.174:6892 | udp | |
| RU | 194.165.19.175:6892 | udp | |
| RU | 194.165.19.176:6892 | udp | |
| RU | 194.165.19.177:6892 | udp | |
| RU | 194.165.19.178:6892 | udp | |
| RU | 194.165.19.179:6892 | udp | |
| RU | 194.165.19.180:6892 | udp | |
| RU | 194.165.19.181:6892 | udp | |
| RU | 194.165.19.182:6892 | udp | |
| RU | 194.165.19.183:6892 | udp | |
| RU | 194.165.19.184:6892 | udp | |
| RU | 194.165.19.185:6892 | udp | |
| RU | 194.165.19.186:6892 | udp | |
| RU | 194.165.19.187:6892 | udp | |
| RU | 194.165.19.188:6892 | udp | |
| RU | 194.165.19.189:6892 | udp | |
| RU | 194.165.19.190:6892 | udp | |
| RU | 194.165.19.191:6892 | udp | |
| RU | 194.165.19.192:6892 | udp | |
| RU | 194.165.19.193:6892 | udp | |
| RU | 194.165.19.194:6892 | udp | |
| RU | 194.165.19.195:6892 | udp | |
| RU | 194.165.19.196:6892 | udp | |
| RU | 194.165.19.197:6892 | udp | |
| RU | 194.165.19.198:6892 | udp | |
| RU | 194.165.19.199:6892 | udp | |
| RU | 194.165.19.200:6892 | udp | |
| RU | 194.165.19.201:6892 | udp | |
| RU | 194.165.19.202:6892 | udp | |
| RU | 194.165.19.203:6892 | udp | |
| RU | 194.165.19.204:6892 | udp | |
| RU | 194.165.19.205:6892 | udp | |
| RU | 194.165.19.206:6892 | udp | |
| RU | 194.165.19.207:6892 | udp | |
| RU | 194.165.19.208:6892 | udp | |
| RU | 194.165.19.209:6892 | udp | |
| RU | 194.165.19.210:6892 | udp | |
| RU | 194.165.19.211:6892 | udp | |
| RU | 194.165.19.212:6892 | udp | |
| RU | 194.165.19.213:6892 | udp | |
| RU | 194.165.19.214:6892 | udp | |
| RU | 194.165.19.215:6892 | udp | |
| RU | 194.165.19.216:6892 | udp | |
| RU | 194.165.19.217:6892 | udp | |
| RU | 194.165.19.218:6892 | udp | |
| RU | 194.165.19.219:6892 | udp | |
| RU | 194.165.19.220:6892 | udp | |
| RU | 194.165.19.221:6892 | udp | |
| RU | 194.165.19.222:6892 | udp | |
| RU | 194.165.19.223:6892 | udp | |
| RU | 194.165.19.224:6892 | udp | |
| RU | 194.165.19.225:6892 | udp | |
| RU | 194.165.19.226:6892 | udp | |
| RU | 194.165.19.227:6892 | udp | |
| RU | 194.165.19.228:6892 | udp | |
| RU | 194.165.19.229:6892 | udp | |
| RU | 194.165.19.230:6892 | udp | |
| RU | 194.165.19.231:6892 | udp | |
| RU | 194.165.19.232:6892 | udp | |
| RU | 194.165.19.233:6892 | udp | |
| RU | 194.165.19.234:6892 | udp | |
| RU | 194.165.19.235:6892 | udp | |
| RU | 194.165.19.236:6892 | udp | |
| RU | 194.165.19.237:6892 | udp | |
| RU | 194.165.19.238:6892 | udp | |
| RU | 194.165.19.239:6892 | udp | |
| RU | 194.165.19.240:6892 | udp | |
| RU | 194.165.19.241:6892 | udp | |
| RU | 194.165.19.242:6892 | udp | |
| RU | 194.165.19.243:6892 | udp | |
| RU | 194.165.19.244:6892 | udp | |
| RU | 194.165.19.245:6892 | udp | |
| RU | 194.165.19.246:6892 | udp | |
| RU | 194.165.19.247:6892 | udp | |
| RU | 194.165.19.248:6892 | udp | |
| RU | 194.165.19.249:6892 | udp | |
| RU | 194.165.19.250:6892 | udp | |
| RU | 194.165.19.251:6892 | udp | |
| RU | 194.165.19.252:6892 | udp | |
| RU | 194.165.19.253:6892 | udp | |
| RU | 194.165.19.254:6892 | udp | |
| RU | 194.165.19.255:6892 | udp | |
| US | 65.55.50.0:6892 | udp | |
| US | 65.55.50.1:6892 | udp | |
| US | 65.55.50.2:6892 | udp | |
| US | 65.55.50.3:6892 | udp | |
| US | 65.55.50.4:6892 | udp | |
| US | 65.55.50.5:6892 | udp | |
| US | 65.55.50.6:6892 | udp | |
| US | 65.55.50.7:6892 | udp | |
| US | 65.55.50.8:6892 | udp | |
| US | 65.55.50.9:6892 | udp | |
| US | 65.55.50.10:6892 | udp | |
| US | 65.55.50.11:6892 | udp | |
| US | 65.55.50.12:6892 | udp | |
| US | 65.55.50.13:6892 | udp | |
| US | 65.55.50.14:6892 | udp | |
| US | 65.55.50.15:6892 | udp | |
| US | 65.55.50.16:6892 | udp | |
| US | 65.55.50.17:6892 | udp | |
| US | 65.55.50.18:6892 | udp | |
| US | 65.55.50.19:6892 | udp | |
| US | 65.55.50.20:6892 | udp | |
| US | 65.55.50.21:6892 | udp | |
| US | 65.55.50.22:6892 | udp | |
| US | 65.55.50.23:6892 | udp | |
| US | 65.55.50.24:6892 | udp | |
| US | 65.55.50.25:6892 | udp | |
| US | 65.55.50.26:6892 | udp | |
| US | 65.55.50.27:6892 | udp | |
| US | 65.55.50.28:6892 | udp | |
| US | 65.55.50.29:6892 | udp | |
| US | 65.55.50.30:6892 | udp | |
| US | 65.55.50.31:6892 | udp | |
| NL | 192.42.118.0:6892 | udp | |
| NL | 192.42.118.1:6892 | udp | |
| NL | 192.42.118.2:6892 | udp | |
| NL | 192.42.118.3:6892 | udp | |
| NL | 192.42.118.4:6892 | udp | |
| NL | 192.42.118.5:6892 | udp | |
| NL | 192.42.118.6:6892 | udp | |
| NL | 192.42.118.7:6892 | udp | |
| NL | 192.42.118.8:6892 | udp | |
| NL | 192.42.118.9:6892 | udp | |
| NL | 192.42.118.10:6892 | udp | |
| NL | 192.42.118.11:6892 | udp | |
| NL | 192.42.118.12:6892 | udp | |
| NL | 192.42.118.13:6892 | udp | |
| NL | 192.42.118.14:6892 | udp | |
| NL | 192.42.118.15:6892 | udp | |
| NL | 192.42.118.16:6892 | udp | |
| NL | 192.42.118.17:6892 | udp | |
| NL | 192.42.118.18:6892 | udp | |
| NL | 192.42.118.19:6892 | udp | |
| NL | 192.42.118.20:6892 | udp | |
| NL | 192.42.118.21:6892 | udp | |
| NL | 192.42.118.22:6892 | udp | |
| NL | 192.42.118.23:6892 | udp | |
| NL | 192.42.118.24:6892 | udp | |
| NL | 192.42.118.25:6892 | udp | |
| NL | 192.42.118.26:6892 | udp | |
| NL | 192.42.118.27:6892 | udp | |
| NL | 192.42.118.28:6892 | udp | |
| NL | 192.42.118.29:6892 | udp | |
| NL | 192.42.118.30:6892 | udp | |
| NL | 192.42.118.31:6892 | udp | |
| LT | 194.165.16.0:6892 | udp | |
| LT | 194.165.16.1:6892 | udp | |
| LT | 194.165.16.2:6892 | udp | |
| LT | 194.165.16.3:6892 | udp | |
| LT | 194.165.16.4:6892 | udp | |
| LT | 194.165.16.5:6892 | udp | |
| LT | 194.165.16.6:6892 | udp | |
| LT | 194.165.16.7:6892 | udp | |
| LT | 194.165.16.8:6892 | udp | |
| LT | 194.165.16.9:6892 | udp | |
| LT | 194.165.16.10:6892 | udp | |
| LT | 194.165.16.11:6892 | udp | |
| LT | 194.165.16.12:6892 | udp | |
| LT | 194.165.16.13:6892 | udp | |
| LT | 194.165.16.14:6892 | udp | |
| LT | 194.165.16.15:6892 | udp | |
| LT | 194.165.16.16:6892 | udp | |
| LT | 194.165.16.17:6892 | udp | |
| LT | 194.165.16.18:6892 | udp | |
| LT | 194.165.16.19:6892 | udp | |
| LT | 194.165.16.20:6892 | udp | |
| LT | 194.165.16.21:6892 | udp | |
| LT | 194.165.16.22:6892 | udp | |
| LT | 194.165.16.23:6892 | udp | |
| LT | 194.165.16.24:6892 | udp | |
| LT | 194.165.16.25:6892 | udp | |
| LT | 194.165.16.26:6892 | udp | |
| LT | 194.165.16.27:6892 | udp | |
| LT | 194.165.16.28:6892 | udp | |
| LT | 194.165.16.29:6892 | udp | |
| LT | 194.165.16.30:6892 | udp | |
| LT | 194.165.16.31:6892 | udp | |
| LT | 194.165.16.32:6892 | udp | |
| LT | 194.165.16.33:6892 | udp | |
| LT | 194.165.16.34:6892 | udp | |
| LT | 194.165.16.35:6892 | udp | |
| LT | 194.165.16.36:6892 | udp | |
| LT | 194.165.16.37:6892 | udp | |
| LT | 194.165.16.38:6892 | udp | |
| LT | 194.165.16.39:6892 | udp | |
| LT | 194.165.16.40:6892 | udp | |
| LT | 194.165.16.41:6892 | udp | |
| LT | 194.165.16.42:6892 | udp | |
| LT | 194.165.16.43:6892 | udp | |
| LT | 194.165.16.44:6892 | udp | |
| LT | 194.165.16.45:6892 | udp | |
| LT | 194.165.16.46:6892 | udp | |
| LT | 194.165.16.47:6892 | udp | |
| LT | 194.165.16.48:6892 | udp | |
| LT | 194.165.16.49:6892 | udp | |
| LT | 194.165.16.50:6892 | udp | |
| LT | 194.165.16.51:6892 | udp | |
| LT | 194.165.16.52:6892 | udp | |
| LT | 194.165.16.53:6892 | udp | |
| LT | 194.165.16.54:6892 | udp | |
| LT | 194.165.16.55:6892 | udp | |
| LT | 194.165.16.56:6892 | udp | |
| LT | 194.165.16.57:6892 | udp | |
| LT | 194.165.16.58:6892 | udp | |
| LT | 194.165.16.59:6892 | udp | |
| LT | 194.165.16.60:6892 | udp | |
| LT | 194.165.16.61:6892 | udp | |
| LT | 194.165.16.62:6892 | udp | |
| LT | 194.165.16.63:6892 | udp | |
| LT | 194.165.16.64:6892 | udp | |
| LT | 194.165.16.65:6892 | udp | |
| LT | 194.165.16.66:6892 | udp | |
| LT | 194.165.16.67:6892 | udp | |
| LT | 194.165.16.68:6892 | udp | |
| LT | 194.165.16.69:6892 | udp | |
| LT | 194.165.16.70:6892 | udp | |
| LT | 194.165.16.71:6892 | udp | |
| LT | 194.165.16.72:6892 | udp | |
| LT | 194.165.16.73:6892 | udp | |
| LT | 194.165.16.74:6892 | udp | |
| LT | 194.165.16.75:6892 | udp | |
| LT | 194.165.16.76:6892 | udp | |
| LT | 194.165.16.77:6892 | udp | |
| LT | 194.165.16.78:6892 | udp | |
| LT | 194.165.16.79:6892 | udp | |
| LT | 194.165.16.80:6892 | udp | |
| LT | 194.165.16.81:6892 | udp | |
| LT | 194.165.16.82:6892 | udp | |
| LT | 194.165.16.83:6892 | udp | |
| LT | 194.165.16.84:6892 | udp | |
| LT | 194.165.16.85:6892 | udp | |
| LT | 194.165.16.86:6892 | udp | |
| LT | 194.165.16.87:6892 | udp | |
| LT | 194.165.16.88:6892 | udp | |
| LT | 194.165.16.89:6892 | udp | |
| LT | 194.165.16.90:6892 | udp | |
| LT | 194.165.16.91:6892 | udp | |
| LT | 194.165.16.92:6892 | udp | |
| LT | 194.165.16.93:6892 | udp | |
| LT | 194.165.16.94:6892 | udp | |
| LT | 194.165.16.95:6892 | udp | |
| LT | 194.165.16.96:6892 | udp | |
| LT | 194.165.16.97:6892 | udp | |
| LT | 194.165.16.98:6892 | udp | |
| LT | 194.165.16.99:6892 | udp | |
| LT | 194.165.16.100:6892 | udp | |
| LT | 194.165.16.101:6892 | udp | |
| LT | 194.165.16.102:6892 | udp | |
| LT | 194.165.16.103:6892 | udp | |
| LT | 194.165.16.104:6892 | udp | |
| LT | 194.165.16.105:6892 | udp | |
| LT | 194.165.16.106:6892 | udp | |
| LT | 194.165.16.107:6892 | udp | |
| LT | 194.165.16.108:6892 | udp | |
| LT | 194.165.16.109:6892 | udp | |
| LT | 194.165.16.110:6892 | udp | |
| LT | 194.165.16.111:6892 | udp | |
| LT | 194.165.16.112:6892 | udp | |
| LT | 194.165.16.113:6892 | udp | |
| LT | 194.165.16.114:6892 | udp | |
| LT | 194.165.16.115:6892 | udp | |
| LT | 194.165.16.116:6892 | udp | |
| LT | 194.165.16.117:6892 | udp | |
| LT | 194.165.16.118:6892 | udp | |
| LT | 194.165.16.119:6892 | udp | |
| LT | 194.165.16.120:6892 | udp | |
| LT | 194.165.16.121:6892 | udp | |
| LT | 194.165.16.122:6892 | udp | |
| LT | 194.165.16.123:6892 | udp | |
| LT | 194.165.16.124:6892 | udp | |
| LT | 194.165.16.125:6892 | udp | |
| LT | 194.165.16.126:6892 | udp | |
| LT | 194.165.16.127:6892 | udp | |
| LT | 194.165.16.128:6892 | udp | |
| LT | 194.165.16.129:6892 | udp | |
| LT | 194.165.16.130:6892 | udp | |
| LT | 194.165.16.131:6892 | udp | |
| LT | 194.165.16.132:6892 | udp | |
| LT | 194.165.16.133:6892 | udp | |
| LT | 194.165.16.134:6892 | udp | |
| LT | 194.165.16.135:6892 | udp | |
| LT | 194.165.16.136:6892 | udp | |
| LT | 194.165.16.137:6892 | udp | |
| LT | 194.165.16.138:6892 | udp | |
| LT | 194.165.16.139:6892 | udp | |
| LT | 194.165.16.140:6892 | udp | |
| LT | 194.165.16.141:6892 | udp | |
| LT | 194.165.16.142:6892 | udp | |
| LT | 194.165.16.143:6892 | udp | |
| LT | 194.165.16.144:6892 | udp | |
| LT | 194.165.16.145:6892 | udp | |
| LT | 194.165.16.146:6892 | udp | |
| LT | 194.165.16.147:6892 | udp | |
| LT | 194.165.16.148:6892 | udp | |
| LT | 194.165.16.149:6892 | udp | |
| LT | 194.165.16.150:6892 | udp | |
| LT | 194.165.16.151:6892 | udp | |
| LT | 194.165.16.152:6892 | udp | |
| LT | 194.165.16.153:6892 | udp | |
| LT | 194.165.16.154:6892 | udp | |
| LT | 194.165.16.155:6892 | udp | |
| LT | 194.165.16.156:6892 | udp | |
| LT | 194.165.16.157:6892 | udp | |
| LT | 194.165.16.158:6892 | udp | |
| LT | 194.165.16.159:6892 | udp | |
| LT | 194.165.16.160:6892 | udp | |
| LT | 194.165.16.161:6892 | udp | |
| LT | 194.165.16.162:6892 | udp | |
| LT | 194.165.16.163:6892 | udp | |
| LT | 194.165.16.164:6892 | udp | |
| LT | 194.165.16.165:6892 | udp | |
| LT | 194.165.16.166:6892 | udp | |
| LT | 194.165.16.167:6892 | udp | |
| LT | 194.165.16.168:6892 | udp | |
| LT | 194.165.16.169:6892 | udp | |
| LT | 194.165.16.170:6892 | udp | |
| LT | 194.165.16.171:6892 | udp | |
| LT | 194.165.16.172:6892 | udp | |
| LT | 194.165.16.173:6892 | udp | |
| LT | 194.165.16.174:6892 | udp | |
| LT | 194.165.16.175:6892 | udp | |
| LT | 194.165.16.176:6892 | udp | |
| LT | 194.165.16.177:6892 | udp | |
| LT | 194.165.16.178:6892 | udp | |
| LT | 194.165.16.179:6892 | udp | |
| LT | 194.165.16.180:6892 | udp | |
| LT | 194.165.16.181:6892 | udp | |
| LT | 194.165.16.182:6892 | udp | |
| LT | 194.165.16.183:6892 | udp | |
| LT | 194.165.16.184:6892 | udp | |
| LT | 194.165.16.185:6892 | udp | |
| LT | 194.165.16.186:6892 | udp | |
| LT | 194.165.16.187:6892 | udp | |
| LT | 194.165.16.188:6892 | udp | |
| LT | 194.165.16.189:6892 | udp | |
| LT | 194.165.16.190:6892 | udp | |
| LT | 194.165.16.191:6892 | udp | |
| LT | 194.165.16.192:6892 | udp | |
| LT | 194.165.16.193:6892 | udp | |
| LT | 194.165.16.194:6892 | udp | |
| LT | 194.165.16.195:6892 | udp | |
| LT | 194.165.16.196:6892 | udp | |
| LT | 194.165.16.197:6892 | udp | |
| LT | 194.165.16.198:6892 | udp | |
| LT | 194.165.16.199:6892 | udp | |
| LT | 194.165.16.200:6892 | udp | |
| LT | 194.165.16.201:6892 | udp | |
| LT | 194.165.16.202:6892 | udp | |
| LT | 194.165.16.203:6892 | udp | |
| LT | 194.165.16.204:6892 | udp | |
| LT | 194.165.16.205:6892 | udp | |
| LT | 194.165.16.206:6892 | udp | |
| LT | 194.165.16.207:6892 | udp | |
| LT | 194.165.16.208:6892 | udp | |
| LT | 194.165.16.209:6892 | udp | |
| LT | 194.165.16.210:6892 | udp | |
| LT | 194.165.16.211:6892 | udp | |
| LT | 194.165.16.212:6892 | udp | |
| LT | 194.165.16.213:6892 | udp | |
| LT | 194.165.16.214:6892 | udp | |
| LT | 194.165.16.215:6892 | udp | |
| LT | 194.165.16.216:6892 | udp | |
| LT | 194.165.16.217:6892 | udp | |
| LT | 194.165.16.218:6892 | udp | |
| LT | 194.165.16.219:6892 | udp | |
| LT | 194.165.16.220:6892 | udp | |
| LT | 194.165.16.221:6892 | udp | |
| LT | 194.165.16.222:6892 | udp | |
| LT | 194.165.16.223:6892 | udp | |
| LT | 194.165.16.224:6892 | udp | |
| LT | 194.165.16.225:6892 | udp | |
| LT | 194.165.16.226:6892 | udp | |
| LT | 194.165.16.227:6892 | udp | |
| LT | 194.165.16.228:6892 | udp | |
| LT | 194.165.16.229:6892 | udp | |
| LT | 194.165.16.230:6892 | udp | |
| LT | 194.165.16.231:6892 | udp | |
| LT | 194.165.16.232:6892 | udp | |
| LT | 194.165.16.233:6892 | udp | |
| LT | 194.165.16.234:6892 | udp | |
| LT | 194.165.16.235:6892 | udp | |
| LT | 194.165.16.236:6892 | udp | |
| LT | 194.165.16.237:6892 | udp | |
| LT | 194.165.16.238:6892 | udp | |
| LT | 194.165.16.239:6892 | udp | |
| LT | 194.165.16.240:6892 | udp | |
| LT | 194.165.16.241:6892 | udp | |
| LT | 194.165.16.242:6892 | udp | |
| LT | 194.165.16.243:6892 | udp | |
| LT | 194.165.16.244:6892 | udp | |
| LT | 194.165.16.245:6892 | udp | |
| LT | 194.165.16.246:6892 | udp | |
| LT | 194.165.16.247:6892 | udp | |
| LT | 194.165.16.248:6892 | udp | |
| LT | 194.165.16.249:6892 | udp | |
| LT | 194.165.16.250:6892 | udp | |
| LT | 194.165.16.251:6892 | udp | |
| LT | 194.165.16.252:6892 | udp | |
| LT | 194.165.16.253:6892 | udp | |
| LT | 194.165.16.254:6892 | udp | |
| LT | 194.165.16.255:6892 | udp | |
| LT | 194.165.17.0:6892 | udp | |
| LT | 194.165.17.1:6892 | udp | |
| LT | 194.165.17.2:6892 | udp | |
| LT | 194.165.17.3:6892 | udp | |
| LT | 194.165.17.4:6892 | udp | |
| LT | 194.165.17.5:6892 | udp | |
| LT | 194.165.17.6:6892 | udp | |
| LT | 194.165.17.7:6892 | udp | |
| LT | 194.165.17.8:6892 | udp | |
| LT | 194.165.17.9:6892 | udp | |
| LT | 194.165.17.10:6892 | udp | |
| LT | 194.165.17.11:6892 | udp | |
| LT | 194.165.17.12:6892 | udp | |
| LT | 194.165.17.13:6892 | udp | |
| LT | 194.165.17.14:6892 | udp | |
| LT | 194.165.17.15:6892 | udp | |
| LT | 194.165.17.16:6892 | udp | |
| LT | 194.165.17.17:6892 | udp | |
| LT | 194.165.17.18:6892 | udp | |
| LT | 194.165.17.19:6892 | udp | |
| LT | 194.165.17.20:6892 | udp | |
| LT | 194.165.17.21:6892 | udp | |
| LT | 194.165.17.22:6892 | udp | |
| LT | 194.165.17.23:6892 | udp | |
| LT | 194.165.17.24:6892 | udp | |
| LT | 194.165.17.25:6892 | udp | |
| LT | 194.165.17.26:6892 | udp | |
| LT | 194.165.17.27:6892 | udp | |
| LT | 194.165.17.28:6892 | udp | |
| LT | 194.165.17.29:6892 | udp | |
| LT | 194.165.17.30:6892 | udp | |
| LT | 194.165.17.31:6892 | udp | |
| LT | 194.165.17.32:6892 | udp | |
| LT | 194.165.17.33:6892 | udp | |
| LT | 194.165.17.34:6892 | udp | |
| LT | 194.165.17.35:6892 | udp | |
| LT | 194.165.17.36:6892 | udp | |
| LT | 194.165.17.37:6892 | udp | |
| LT | 194.165.17.38:6892 | udp | |
| LT | 194.165.17.39:6892 | udp | |
| LT | 194.165.17.40:6892 | udp | |
| LT | 194.165.17.41:6892 | udp | |
| LT | 194.165.17.42:6892 | udp | |
| LT | 194.165.17.43:6892 | udp | |
| LT | 194.165.17.44:6892 | udp | |
| LT | 194.165.17.45:6892 | udp | |
| LT | 194.165.17.46:6892 | udp | |
| LT | 194.165.17.47:6892 | udp | |
| LT | 194.165.17.48:6892 | udp | |
| LT | 194.165.17.49:6892 | udp | |
| LT | 194.165.17.50:6892 | udp | |
| LT | 194.165.17.51:6892 | udp | |
| LT | 194.165.17.52:6892 | udp | |
| LT | 194.165.17.53:6892 | udp | |
| LT | 194.165.17.54:6892 | udp | |
| LT | 194.165.17.55:6892 | udp | |
| LT | 194.165.17.56:6892 | udp | |
| LT | 194.165.17.57:6892 | udp | |
| LT | 194.165.17.58:6892 | udp | |
| LT | 194.165.17.59:6892 | udp | |
| LT | 194.165.17.60:6892 | udp | |
| LT | 194.165.17.61:6892 | udp | |
| LT | 194.165.17.62:6892 | udp | |
| LT | 194.165.17.63:6892 | udp | |
| LT | 194.165.17.64:6892 | udp | |
| LT | 194.165.17.65:6892 | udp | |
| LT | 194.165.17.66:6892 | udp | |
| LT | 194.165.17.67:6892 | udp | |
| LT | 194.165.17.68:6892 | udp | |
| LT | 194.165.17.69:6892 | udp | |
| LT | 194.165.17.70:6892 | udp | |
| LT | 194.165.17.71:6892 | udp | |
| LT | 194.165.17.72:6892 | udp | |
| LT | 194.165.17.73:6892 | udp | |
| LT | 194.165.17.74:6892 | udp | |
| LT | 194.165.17.75:6892 | udp | |
| LT | 194.165.17.76:6892 | udp | |
| LT | 194.165.17.77:6892 | udp | |
| LT | 194.165.17.78:6892 | udp | |
| LT | 194.165.17.79:6892 | udp | |
| LT | 194.165.17.80:6892 | udp | |
| LT | 194.165.17.81:6892 | udp | |
| LT | 194.165.17.82:6892 | udp | |
| LT | 194.165.17.83:6892 | udp | |
| LT | 194.165.17.84:6892 | udp | |
| LT | 194.165.17.85:6892 | udp | |
| LT | 194.165.17.86:6892 | udp | |
| LT | 194.165.17.87:6892 | udp | |
| LT | 194.165.17.88:6892 | udp | |
| LT | 194.165.17.89:6892 | udp | |
| LT | 194.165.17.90:6892 | udp | |
| LT | 194.165.17.91:6892 | udp | |
| LT | 194.165.17.92:6892 | udp | |
| LT | 194.165.17.93:6892 | udp | |
| LT | 194.165.17.94:6892 | udp | |
| LT | 194.165.17.95:6892 | udp | |
| LT | 194.165.17.96:6892 | udp | |
| LT | 194.165.17.97:6892 | udp | |
| LT | 194.165.17.98:6892 | udp | |
| LT | 194.165.17.99:6892 | udp | |
| LT | 194.165.17.100:6892 | udp | |
| LT | 194.165.17.101:6892 | udp | |
| LT | 194.165.17.102:6892 | udp | |
| LT | 194.165.17.103:6892 | udp | |
| LT | 194.165.17.104:6892 | udp | |
| LT | 194.165.17.105:6892 | udp | |
| LT | 194.165.17.106:6892 | udp | |
| LT | 194.165.17.107:6892 | udp | |
| LT | 194.165.17.108:6892 | udp | |
| LT | 194.165.17.109:6892 | udp | |
| LT | 194.165.17.110:6892 | udp | |
| LT | 194.165.17.111:6892 | udp | |
| LT | 194.165.17.112:6892 | udp | |
| LT | 194.165.17.113:6892 | udp | |
| LT | 194.165.17.114:6892 | udp | |
| LT | 194.165.17.115:6892 | udp | |
| LT | 194.165.17.116:6892 | udp | |
| LT | 194.165.17.117:6892 | udp | |
| LT | 194.165.17.118:6892 | udp | |
| LT | 194.165.17.119:6892 | udp | |
| LT | 194.165.17.120:6892 | udp | |
| LT | 194.165.17.121:6892 | udp | |
| LT | 194.165.17.122:6892 | udp | |
| LT | 194.165.17.123:6892 | udp | |
| LT | 194.165.17.124:6892 | udp | |
| LT | 194.165.17.125:6892 | udp | |
| LT | 194.165.17.126:6892 | udp | |
| LT | 194.165.17.127:6892 | udp | |
| LT | 194.165.17.128:6892 | udp | |
| LT | 194.165.17.129:6892 | udp | |
| LT | 194.165.17.130:6892 | udp | |
| LT | 194.165.17.131:6892 | udp | |
| LT | 194.165.17.132:6892 | udp | |
| LT | 194.165.17.133:6892 | udp | |
| LT | 194.165.17.134:6892 | udp | |
| LT | 194.165.17.135:6892 | udp | |
| LT | 194.165.17.136:6892 | udp | |
| LT | 194.165.17.137:6892 | udp | |
| LT | 194.165.17.138:6892 | udp | |
| LT | 194.165.17.139:6892 | udp | |
| LT | 194.165.17.140:6892 | udp | |
| LT | 194.165.17.141:6892 | udp | |
| LT | 194.165.17.142:6892 | udp | |
| LT | 194.165.17.143:6892 | udp | |
| LT | 194.165.17.144:6892 | udp | |
| LT | 194.165.17.145:6892 | udp | |
| LT | 194.165.17.146:6892 | udp | |
| LT | 194.165.17.147:6892 | udp | |
| LT | 194.165.17.148:6892 | udp | |
| LT | 194.165.17.149:6892 | udp | |
| LT | 194.165.17.150:6892 | udp | |
| LT | 194.165.17.151:6892 | udp | |
| LT | 194.165.17.152:6892 | udp | |
| LT | 194.165.17.153:6892 | udp | |
| LT | 194.165.17.154:6892 | udp | |
| LT | 194.165.17.155:6892 | udp | |
| LT | 194.165.17.156:6892 | udp | |
| LT | 194.165.17.157:6892 | udp | |
| LT | 194.165.17.158:6892 | udp | |
| LT | 194.165.17.159:6892 | udp | |
| LT | 194.165.17.160:6892 | udp | |
| LT | 194.165.17.161:6892 | udp | |
| LT | 194.165.17.162:6892 | udp | |
| LT | 194.165.17.163:6892 | udp | |
| LT | 194.165.17.164:6892 | udp | |
| LT | 194.165.17.165:6892 | udp | |
| LT | 194.165.17.166:6892 | udp | |
| LT | 194.165.17.167:6892 | udp | |
| LT | 194.165.17.168:6892 | udp | |
| LT | 194.165.17.169:6892 | udp | |
| LT | 194.165.17.170:6892 | udp | |
| LT | 194.165.17.171:6892 | udp | |
| LT | 194.165.17.172:6892 | udp | |
| LT | 194.165.17.173:6892 | udp | |
| LT | 194.165.17.174:6892 | udp | |
| LT | 194.165.17.175:6892 | udp | |
| LT | 194.165.17.176:6892 | udp | |
| LT | 194.165.17.177:6892 | udp | |
| LT | 194.165.17.178:6892 | udp | |
| LT | 194.165.17.179:6892 | udp | |
| LT | 194.165.17.180:6892 | udp | |
| LT | 194.165.17.181:6892 | udp | |
| LT | 194.165.17.182:6892 | udp | |
| LT | 194.165.17.183:6892 | udp | |
| LT | 194.165.17.184:6892 | udp | |
| LT | 194.165.17.185:6892 | udp | |
| LT | 194.165.17.186:6892 | udp | |
| LT | 194.165.17.187:6892 | udp | |
| LT | 194.165.17.188:6892 | udp | |
| LT | 194.165.17.189:6892 | udp | |
| LT | 194.165.17.190:6892 | udp | |
| LT | 194.165.17.191:6892 | udp | |
| LT | 194.165.17.192:6892 | udp | |
| LT | 194.165.17.193:6892 | udp | |
| LT | 194.165.17.194:6892 | udp | |
| LT | 194.165.17.195:6892 | udp | |
| LT | 194.165.17.196:6892 | udp | |
| LT | 194.165.17.197:6892 | udp | |
| LT | 194.165.17.198:6892 | udp | |
| LT | 194.165.17.199:6892 | udp | |
| LT | 194.165.17.200:6892 | udp | |
| LT | 194.165.17.201:6892 | udp | |
| LT | 194.165.17.202:6892 | udp | |
| LT | 194.165.17.203:6892 | udp | |
| LT | 194.165.17.204:6892 | udp | |
| LT | 194.165.17.205:6892 | udp | |
| LT | 194.165.17.206:6892 | udp | |
| LT | 194.165.17.207:6892 | udp | |
| LT | 194.165.17.208:6892 | udp | |
| LT | 194.165.17.209:6892 | udp | |
| LT | 194.165.17.210:6892 | udp | |
| LT | 194.165.17.211:6892 | udp | |
| LT | 194.165.17.212:6892 | udp | |
| LT | 194.165.17.213:6892 | udp | |
| LT | 194.165.17.214:6892 | udp | |
| LT | 194.165.17.215:6892 | udp | |
| LT | 194.165.17.216:6892 | udp | |
| LT | 194.165.17.217:6892 | udp | |
| LT | 194.165.17.218:6892 | udp | |
| LT | 194.165.17.219:6892 | udp | |
| LT | 194.165.17.220:6892 | udp | |
| LT | 194.165.17.221:6892 | udp | |
| LT | 194.165.17.222:6892 | udp | |
| LT | 194.165.17.223:6892 | udp | |
| LT | 194.165.17.224:6892 | udp | |
| LT | 194.165.17.225:6892 | udp | |
| LT | 194.165.17.226:6892 | udp | |
| LT | 194.165.17.227:6892 | udp | |
| LT | 194.165.17.228:6892 | udp | |
| LT | 194.165.17.229:6892 | udp | |
| LT | 194.165.17.230:6892 | udp | |
| LT | 194.165.17.231:6892 | udp | |
| LT | 194.165.17.232:6892 | udp | |
| LT | 194.165.17.233:6892 | udp | |
| LT | 194.165.17.234:6892 | udp | |
| LT | 194.165.17.235:6892 | udp | |
| LT | 194.165.17.236:6892 | udp | |
| LT | 194.165.17.237:6892 | udp | |
| LT | 194.165.17.238:6892 | udp | |
| LT | 194.165.17.239:6892 | udp | |
| LT | 194.165.17.240:6892 | udp | |
| LT | 194.165.17.241:6892 | udp | |
| LT | 194.165.17.242:6892 | udp | |
| LT | 194.165.17.243:6892 | udp | |
| LT | 194.165.17.244:6892 | udp | |
| LT | 194.165.17.245:6892 | udp | |
| LT | 194.165.17.246:6892 | udp | |
| LT | 194.165.17.247:6892 | udp | |
| LT | 194.165.17.248:6892 | udp | |
| LT | 194.165.17.249:6892 | udp | |
| LT | 194.165.17.250:6892 | udp | |
| LT | 194.165.17.251:6892 | udp | |
| LT | 194.165.17.252:6892 | udp | |
| LT | 194.165.17.253:6892 | udp | |
| LT | 194.165.17.254:6892 | udp | |
| LT | 194.165.17.255:6892 | udp | |
| RU | 194.165.18.0:6892 | udp | |
| RU | 194.165.18.1:6892 | udp | |
| RU | 194.165.18.2:6892 | udp | |
| RU | 194.165.18.3:6892 | udp | |
| RU | 194.165.18.4:6892 | udp | |
| RU | 194.165.18.5:6892 | udp | |
| RU | 194.165.18.6:6892 | udp | |
| RU | 194.165.18.7:6892 | udp | |
| RU | 194.165.18.8:6892 | udp | |
| RU | 194.165.18.9:6892 | udp | |
| RU | 194.165.18.10:6892 | udp | |
| RU | 194.165.18.11:6892 | udp | |
| RU | 194.165.18.12:6892 | udp | |
| RU | 194.165.18.13:6892 | udp | |
| RU | 194.165.18.14:6892 | udp | |
| RU | 194.165.18.15:6892 | udp | |
| RU | 194.165.18.16:6892 | udp | |
| RU | 194.165.18.17:6892 | udp | |
| RU | 194.165.18.18:6892 | udp | |
| RU | 194.165.18.19:6892 | udp | |
| RU | 194.165.18.20:6892 | udp | |
| RU | 194.165.18.21:6892 | udp | |
| RU | 194.165.18.22:6892 | udp | |
| RU | 194.165.18.23:6892 | udp | |
| RU | 194.165.18.24:6892 | udp | |
| RU | 194.165.18.25:6892 | udp | |
| RU | 194.165.18.26:6892 | udp | |
| RU | 194.165.18.27:6892 | udp | |
| RU | 194.165.18.28:6892 | udp | |
| RU | 194.165.18.29:6892 | udp | |
| RU | 194.165.18.30:6892 | udp | |
| RU | 194.165.18.31:6892 | udp | |
| RU | 194.165.18.32:6892 | udp | |
| RU | 194.165.18.33:6892 | udp | |
| RU | 194.165.18.34:6892 | udp | |
| RU | 194.165.18.35:6892 | udp | |
| RU | 194.165.18.36:6892 | udp | |
| RU | 194.165.18.37:6892 | udp | |
| RU | 194.165.18.38:6892 | udp | |
| RU | 194.165.18.39:6892 | udp | |
| RU | 194.165.18.40:6892 | udp | |
| RU | 194.165.18.41:6892 | udp | |
| RU | 194.165.18.42:6892 | udp | |
| RU | 194.165.18.43:6892 | udp | |
| RU | 194.165.18.44:6892 | udp | |
| RU | 194.165.18.45:6892 | udp | |
| RU | 194.165.18.46:6892 | udp | |
| RU | 194.165.18.47:6892 | udp | |
| RU | 194.165.18.48:6892 | udp | |
| RU | 194.165.18.49:6892 | udp | |
| RU | 194.165.18.50:6892 | udp | |
| RU | 194.165.18.51:6892 | udp | |
| RU | 194.165.18.52:6892 | udp | |
| RU | 194.165.18.53:6892 | udp | |
| RU | 194.165.18.54:6892 | udp | |
| RU | 194.165.18.55:6892 | udp | |
| RU | 194.165.18.56:6892 | udp | |
| RU | 194.165.18.57:6892 | udp | |
| RU | 194.165.18.58:6892 | udp | |
| RU | 194.165.18.59:6892 | udp | |
| RU | 194.165.18.60:6892 | udp | |
| RU | 194.165.18.61:6892 | udp | |
| RU | 194.165.18.62:6892 | udp | |
| RU | 194.165.18.63:6892 | udp | |
| RU | 194.165.18.64:6892 | udp | |
| RU | 194.165.18.65:6892 | udp | |
| RU | 194.165.18.66:6892 | udp | |
| RU | 194.165.18.67:6892 | udp | |
| RU | 194.165.18.68:6892 | udp | |
| RU | 194.165.18.69:6892 | udp | |
| RU | 194.165.18.70:6892 | udp | |
| RU | 194.165.18.71:6892 | udp | |
| RU | 194.165.18.72:6892 | udp | |
| RU | 194.165.18.73:6892 | udp | |
| RU | 194.165.18.74:6892 | udp | |
| RU | 194.165.18.75:6892 | udp | |
| RU | 194.165.18.76:6892 | udp | |
| RU | 194.165.18.77:6892 | udp | |
| RU | 194.165.18.78:6892 | udp | |
| RU | 194.165.18.79:6892 | udp | |
| RU | 194.165.18.80:6892 | udp | |
| RU | 194.165.18.81:6892 | udp | |
| RU | 194.165.18.82:6892 | udp | |
| RU | 194.165.18.83:6892 | udp | |
| RU | 194.165.18.84:6892 | udp | |
| RU | 194.165.18.85:6892 | udp | |
| RU | 194.165.18.86:6892 | udp | |
| RU | 194.165.18.87:6892 | udp | |
| RU | 194.165.18.88:6892 | udp | |
| RU | 194.165.18.89:6892 | udp | |
| RU | 194.165.18.90:6892 | udp | |
| RU | 194.165.18.91:6892 | udp | |
| RU | 194.165.18.92:6892 | udp | |
| RU | 194.165.18.93:6892 | udp | |
| RU | 194.165.18.94:6892 | udp | |
| RU | 194.165.18.95:6892 | udp | |
| RU | 194.165.18.96:6892 | udp | |
| RU | 194.165.18.97:6892 | udp | |
| RU | 194.165.18.98:6892 | udp | |
| RU | 194.165.18.99:6892 | udp | |
| RU | 194.165.18.100:6892 | udp | |
| RU | 194.165.18.101:6892 | udp | |
| RU | 194.165.18.102:6892 | udp | |
| RU | 194.165.18.103:6892 | udp | |
| RU | 194.165.18.104:6892 | udp | |
| RU | 194.165.18.105:6892 | udp | |
| RU | 194.165.18.106:6892 | udp | |
| RU | 194.165.18.107:6892 | udp | |
| RU | 194.165.18.108:6892 | udp | |
| RU | 194.165.18.109:6892 | udp | |
| RU | 194.165.18.110:6892 | udp | |
| RU | 194.165.18.111:6892 | udp | |
| RU | 194.165.18.112:6892 | udp | |
| RU | 194.165.18.113:6892 | udp | |
| RU | 194.165.18.114:6892 | udp | |
| RU | 194.165.18.115:6892 | udp | |
| RU | 194.165.18.116:6892 | udp | |
| RU | 194.165.18.117:6892 | udp | |
| RU | 194.165.18.118:6892 | udp | |
| RU | 194.165.18.119:6892 | udp | |
| RU | 194.165.18.120:6892 | udp | |
| RU | 194.165.18.121:6892 | udp | |
| RU | 194.165.18.122:6892 | udp | |
| RU | 194.165.18.123:6892 | udp | |
| RU | 194.165.18.124:6892 | udp | |
| RU | 194.165.18.125:6892 | udp | |
| RU | 194.165.18.126:6892 | udp | |
| RU | 194.165.18.127:6892 | udp | |
| RU | 194.165.18.128:6892 | udp | |
| RU | 194.165.18.129:6892 | udp | |
| RU | 194.165.18.130:6892 | udp | |
| RU | 194.165.18.131:6892 | udp | |
| RU | 194.165.18.132:6892 | udp | |
| RU | 194.165.18.133:6892 | udp | |
| RU | 194.165.18.134:6892 | udp | |
| RU | 194.165.18.135:6892 | udp | |
| RU | 194.165.18.136:6892 | udp | |
| RU | 194.165.18.137:6892 | udp | |
| RU | 194.165.18.138:6892 | udp | |
| RU | 194.165.18.139:6892 | udp | |
| RU | 194.165.18.140:6892 | udp | |
| RU | 194.165.18.141:6892 | udp | |
| RU | 194.165.18.142:6892 | udp | |
| RU | 194.165.18.143:6892 | udp | |
| RU | 194.165.18.144:6892 | udp | |
| RU | 194.165.18.145:6892 | udp | |
| RU | 194.165.18.146:6892 | udp | |
| RU | 194.165.18.147:6892 | udp | |
| RU | 194.165.18.148:6892 | udp | |
| RU | 194.165.18.149:6892 | udp | |
| RU | 194.165.18.150:6892 | udp | |
| RU | 194.165.18.151:6892 | udp | |
| RU | 194.165.18.152:6892 | udp | |
| RU | 194.165.18.153:6892 | udp | |
| RU | 194.165.18.154:6892 | udp | |
| RU | 194.165.18.155:6892 | udp | |
| RU | 194.165.18.156:6892 | udp | |
| RU | 194.165.18.157:6892 | udp | |
| RU | 194.165.18.158:6892 | udp | |
| RU | 194.165.18.159:6892 | udp | |
| RU | 194.165.18.160:6892 | udp | |
| RU | 194.165.18.161:6892 | udp | |
| RU | 194.165.18.162:6892 | udp | |
| RU | 194.165.18.163:6892 | udp | |
| RU | 194.165.18.164:6892 | udp | |
| RU | 194.165.18.165:6892 | udp | |
| RU | 194.165.18.166:6892 | udp | |
| RU | 194.165.18.167:6892 | udp | |
| RU | 194.165.18.168:6892 | udp | |
| RU | 194.165.18.169:6892 | udp | |
| RU | 194.165.18.170:6892 | udp | |
| RU | 194.165.18.171:6892 | udp | |
| RU | 194.165.18.172:6892 | udp | |
| RU | 194.165.18.173:6892 | udp | |
| RU | 194.165.18.174:6892 | udp | |
| RU | 194.165.18.175:6892 | udp | |
| RU | 194.165.18.176:6892 | udp | |
| RU | 194.165.18.177:6892 | udp | |
| RU | 194.165.18.178:6892 | udp | |
| RU | 194.165.18.179:6892 | udp | |
| RU | 194.165.18.180:6892 | udp | |
| RU | 194.165.18.181:6892 | udp | |
| RU | 194.165.18.182:6892 | udp | |
| RU | 194.165.18.183:6892 | udp | |
| RU | 194.165.18.184:6892 | udp | |
| RU | 194.165.18.185:6892 | udp | |
| RU | 194.165.18.186:6892 | udp | |
| RU | 194.165.18.187:6892 | udp | |
| RU | 194.165.18.188:6892 | udp | |
| RU | 194.165.18.189:6892 | udp | |
| RU | 194.165.18.190:6892 | udp | |
| RU | 194.165.18.191:6892 | udp | |
| RU | 194.165.18.192:6892 | udp | |
| RU | 194.165.18.193:6892 | udp | |
| RU | 194.165.18.194:6892 | udp | |
| RU | 194.165.18.195:6892 | udp | |
| RU | 194.165.18.196:6892 | udp | |
| RU | 194.165.18.197:6892 | udp | |
| RU | 194.165.18.198:6892 | udp | |
| RU | 194.165.18.199:6892 | udp | |
| RU | 194.165.18.200:6892 | udp | |
| RU | 194.165.18.201:6892 | udp | |
| RU | 194.165.18.202:6892 | udp | |
| RU | 194.165.18.203:6892 | udp | |
| RU | 194.165.18.204:6892 | udp | |
| RU | 194.165.18.205:6892 | udp | |
| RU | 194.165.18.206:6892 | udp | |
| RU | 194.165.18.207:6892 | udp | |
| RU | 194.165.18.208:6892 | udp | |
| RU | 194.165.18.209:6892 | udp | |
| RU | 194.165.18.210:6892 | udp | |
| RU | 194.165.18.211:6892 | udp | |
| RU | 194.165.18.212:6892 | udp | |
| RU | 194.165.18.213:6892 | udp | |
| RU | 194.165.18.214:6892 | udp | |
| RU | 194.165.18.215:6892 | udp | |
| RU | 194.165.18.216:6892 | udp | |
| RU | 194.165.18.217:6892 | udp | |
| RU | 194.165.18.218:6892 | udp | |
| RU | 194.165.18.219:6892 | udp | |
| RU | 194.165.18.220:6892 | udp | |
| RU | 194.165.18.221:6892 | udp | |
| RU | 194.165.18.222:6892 | udp | |
| RU | 194.165.18.223:6892 | udp | |
| RU | 194.165.18.224:6892 | udp | |
| RU | 194.165.18.225:6892 | udp | |
| RU | 194.165.18.226:6892 | udp | |
| RU | 194.165.18.227:6892 | udp | |
| RU | 194.165.18.228:6892 | udp | |
| RU | 194.165.18.229:6892 | udp | |
| RU | 194.165.18.230:6892 | udp | |
| RU | 194.165.18.231:6892 | udp | |
| RU | 194.165.18.232:6892 | udp | |
| RU | 194.165.18.233:6892 | udp | |
| RU | 194.165.18.234:6892 | udp | |
| RU | 194.165.18.235:6892 | udp | |
| RU | 194.165.18.236:6892 | udp | |
| RU | 194.165.18.237:6892 | udp | |
| RU | 194.165.18.238:6892 | udp | |
| RU | 194.165.18.239:6892 | udp | |
| RU | 194.165.18.240:6892 | udp | |
| RU | 194.165.18.241:6892 | udp | |
| RU | 194.165.18.242:6892 | udp | |
| RU | 194.165.18.243:6892 | udp | |
| RU | 194.165.18.244:6892 | udp | |
| RU | 194.165.18.245:6892 | udp | |
| RU | 194.165.18.246:6892 | udp | |
| RU | 194.165.18.247:6892 | udp | |
| RU | 194.165.18.248:6892 | udp | |
| RU | 194.165.18.249:6892 | udp | |
| RU | 194.165.18.250:6892 | udp | |
| RU | 194.165.18.251:6892 | udp | |
| RU | 194.165.18.252:6892 | udp | |
| RU | 194.165.18.253:6892 | udp | |
| RU | 194.165.18.254:6892 | udp | |
| RU | 194.165.18.255:6892 | udp | |
| RU | 194.165.19.0:6892 | udp | |
| RU | 194.165.19.1:6892 | udp | |
| RU | 194.165.19.2:6892 | udp | |
| RU | 194.165.19.3:6892 | udp | |
| RU | 194.165.19.4:6892 | udp | |
| RU | 194.165.19.5:6892 | udp | |
| RU | 194.165.19.6:6892 | udp | |
| RU | 194.165.19.7:6892 | udp | |
| RU | 194.165.19.8:6892 | udp | |
| RU | 194.165.19.9:6892 | udp | |
| RU | 194.165.19.10:6892 | udp | |
| RU | 194.165.19.11:6892 | udp | |
| RU | 194.165.19.12:6892 | udp | |
| RU | 194.165.19.13:6892 | udp | |
| RU | 194.165.19.14:6892 | udp | |
| RU | 194.165.19.15:6892 | udp | |
| RU | 194.165.19.16:6892 | udp | |
| RU | 194.165.19.17:6892 | udp | |
| RU | 194.165.19.18:6892 | udp | |
| RU | 194.165.19.19:6892 | udp | |
| RU | 194.165.19.20:6892 | udp | |
| RU | 194.165.19.21:6892 | udp | |
| RU | 194.165.19.22:6892 | udp | |
| RU | 194.165.19.23:6892 | udp | |
| RU | 194.165.19.24:6892 | udp | |
| RU | 194.165.19.25:6892 | udp | |
| RU | 194.165.19.26:6892 | udp | |
| RU | 194.165.19.27:6892 | udp | |
| RU | 194.165.19.28:6892 | udp | |
| RU | 194.165.19.29:6892 | udp | |
| RU | 194.165.19.30:6892 | udp | |
| RU | 194.165.19.31:6892 | udp | |
| RU | 194.165.19.32:6892 | udp | |
| RU | 194.165.19.33:6892 | udp | |
| RU | 194.165.19.34:6892 | udp | |
| RU | 194.165.19.35:6892 | udp | |
| RU | 194.165.19.36:6892 | udp | |
| RU | 194.165.19.37:6892 | udp | |
| RU | 194.165.19.38:6892 | udp | |
| RU | 194.165.19.39:6892 | udp | |
| RU | 194.165.19.40:6892 | udp | |
| RU | 194.165.19.41:6892 | udp | |
| RU | 194.165.19.42:6892 | udp | |
| RU | 194.165.19.43:6892 | udp | |
| RU | 194.165.19.44:6892 | udp | |
| RU | 194.165.19.45:6892 | udp | |
| RU | 194.165.19.46:6892 | udp | |
| RU | 194.165.19.47:6892 | udp | |
| RU | 194.165.19.48:6892 | udp | |
| RU | 194.165.19.49:6892 | udp | |
| RU | 194.165.19.50:6892 | udp | |
| RU | 194.165.19.51:6892 | udp | |
| RU | 194.165.19.52:6892 | udp | |
| RU | 194.165.19.53:6892 | udp | |
| RU | 194.165.19.54:6892 | udp | |
| RU | 194.165.19.55:6892 | udp | |
| RU | 194.165.19.56:6892 | udp | |
| RU | 194.165.19.57:6892 | udp | |
| RU | 194.165.19.58:6892 | udp | |
| RU | 194.165.19.59:6892 | udp | |
| RU | 194.165.19.60:6892 | udp | |
| RU | 194.165.19.61:6892 | udp | |
| RU | 194.165.19.62:6892 | udp | |
| RU | 194.165.19.63:6892 | udp | |
| RU | 194.165.19.64:6892 | udp | |
| RU | 194.165.19.65:6892 | udp | |
| RU | 194.165.19.66:6892 | udp | |
| RU | 194.165.19.67:6892 | udp | |
| RU | 194.165.19.68:6892 | udp | |
| RU | 194.165.19.69:6892 | udp | |
| RU | 194.165.19.70:6892 | udp | |
| RU | 194.165.19.71:6892 | udp | |
| RU | 194.165.19.72:6892 | udp | |
| RU | 194.165.19.73:6892 | udp | |
| RU | 194.165.19.74:6892 | udp | |
| RU | 194.165.19.75:6892 | udp | |
| RU | 194.165.19.76:6892 | udp | |
| RU | 194.165.19.77:6892 | udp | |
| RU | 194.165.19.78:6892 | udp | |
| RU | 194.165.19.79:6892 | udp | |
| RU | 194.165.19.80:6892 | udp | |
| RU | 194.165.19.81:6892 | udp | |
| RU | 194.165.19.82:6892 | udp | |
| RU | 194.165.19.83:6892 | udp | |
| RU | 194.165.19.84:6892 | udp | |
| RU | 194.165.19.85:6892 | udp | |
| RU | 194.165.19.86:6892 | udp | |
| RU | 194.165.19.87:6892 | udp | |
| RU | 194.165.19.88:6892 | udp | |
| RU | 194.165.19.89:6892 | udp | |
| RU | 194.165.19.90:6892 | udp | |
| RU | 194.165.19.91:6892 | udp | |
| RU | 194.165.19.92:6892 | udp | |
| RU | 194.165.19.93:6892 | udp | |
| RU | 194.165.19.94:6892 | udp | |
| RU | 194.165.19.95:6892 | udp | |
| RU | 194.165.19.96:6892 | udp | |
| RU | 194.165.19.97:6892 | udp | |
| RU | 194.165.19.98:6892 | udp | |
| RU | 194.165.19.99:6892 | udp | |
| RU | 194.165.19.100:6892 | udp | |
| RU | 194.165.19.101:6892 | udp | |
| RU | 194.165.19.102:6892 | udp | |
| RU | 194.165.19.103:6892 | udp | |
| RU | 194.165.19.104:6892 | udp | |
| RU | 194.165.19.105:6892 | udp | |
| RU | 194.165.19.106:6892 | udp | |
| RU | 194.165.19.107:6892 | udp | |
| RU | 194.165.19.108:6892 | udp | |
| RU | 194.165.19.109:6892 | udp | |
| RU | 194.165.19.110:6892 | udp | |
| RU | 194.165.19.111:6892 | udp | |
| RU | 194.165.19.112:6892 | udp | |
| RU | 194.165.19.113:6892 | udp | |
| RU | 194.165.19.114:6892 | udp | |
| RU | 194.165.19.115:6892 | udp | |
| RU | 194.165.19.116:6892 | udp | |
| RU | 194.165.19.117:6892 | udp | |
| RU | 194.165.19.118:6892 | udp | |
| RU | 194.165.19.119:6892 | udp | |
| RU | 194.165.19.120:6892 | udp | |
| RU | 194.165.19.121:6892 | udp | |
| RU | 194.165.19.122:6892 | udp | |
| RU | 194.165.19.123:6892 | udp | |
| RU | 194.165.19.124:6892 | udp | |
| RU | 194.165.19.125:6892 | udp | |
| RU | 194.165.19.126:6892 | udp | |
| RU | 194.165.19.127:6892 | udp | |
| RU | 194.165.19.128:6892 | udp | |
| RU | 194.165.19.129:6892 | udp | |
| RU | 194.165.19.130:6892 | udp | |
| RU | 194.165.19.131:6892 | udp | |
| RU | 194.165.19.132:6892 | udp | |
| RU | 194.165.19.133:6892 | udp | |
| RU | 194.165.19.134:6892 | udp | |
| RU | 194.165.19.135:6892 | udp | |
| RU | 194.165.19.136:6892 | udp | |
| RU | 194.165.19.137:6892 | udp | |
| RU | 194.165.19.138:6892 | udp | |
| RU | 194.165.19.139:6892 | udp | |
| RU | 194.165.19.140:6892 | udp | |
| RU | 194.165.19.141:6892 | udp | |
| RU | 194.165.19.142:6892 | udp | |
| RU | 194.165.19.143:6892 | udp | |
| RU | 194.165.19.144:6892 | udp | |
| RU | 194.165.19.145:6892 | udp | |
| RU | 194.165.19.146:6892 | udp | |
| RU | 194.165.19.147:6892 | udp | |
| RU | 194.165.19.148:6892 | udp | |
| RU | 194.165.19.149:6892 | udp | |
| RU | 194.165.19.150:6892 | udp | |
| RU | 194.165.19.151:6892 | udp | |
| RU | 194.165.19.152:6892 | udp | |
| RU | 194.165.19.153:6892 | udp | |
| RU | 194.165.19.154:6892 | udp | |
| RU | 194.165.19.155:6892 | udp | |
| RU | 194.165.19.156:6892 | udp | |
| RU | 194.165.19.157:6892 | udp | |
| RU | 194.165.19.158:6892 | udp | |
| RU | 194.165.19.159:6892 | udp | |
| RU | 194.165.19.160:6892 | udp | |
| RU | 194.165.19.161:6892 | udp | |
| RU | 194.165.19.162:6892 | udp | |
| RU | 194.165.19.163:6892 | udp | |
| RU | 194.165.19.164:6892 | udp | |
| RU | 194.165.19.165:6892 | udp | |
| RU | 194.165.19.166:6892 | udp | |
| RU | 194.165.19.167:6892 | udp | |
| RU | 194.165.19.168:6892 | udp | |
| RU | 194.165.19.169:6892 | udp | |
| RU | 194.165.19.170:6892 | udp | |
| RU | 194.165.19.171:6892 | udp | |
| RU | 194.165.19.172:6892 | udp | |
| RU | 194.165.19.173:6892 | udp | |
| RU | 194.165.19.174:6892 | udp | |
| RU | 194.165.19.175:6892 | udp | |
| RU | 194.165.19.176:6892 | udp | |
| RU | 194.165.19.177:6892 | udp | |
| RU | 194.165.19.178:6892 | udp | |
| RU | 194.165.19.179:6892 | udp | |
| RU | 194.165.19.180:6892 | udp | |
| RU | 194.165.19.181:6892 | udp | |
| RU | 194.165.19.182:6892 | udp | |
| RU | 194.165.19.183:6892 | udp | |
| RU | 194.165.19.184:6892 | udp | |
| RU | 194.165.19.185:6892 | udp | |
| RU | 194.165.19.186:6892 | udp | |
| RU | 194.165.19.187:6892 | udp | |
| RU | 194.165.19.188:6892 | udp | |
| RU | 194.165.19.189:6892 | udp | |
| RU | 194.165.19.190:6892 | udp | |
| RU | 194.165.19.191:6892 | udp | |
| RU | 194.165.19.192:6892 | udp | |
| RU | 194.165.19.193:6892 | udp | |
| RU | 194.165.19.194:6892 | udp | |
| RU | 194.165.19.195:6892 | udp | |
| RU | 194.165.19.196:6892 | udp | |
| RU | 194.165.19.197:6892 | udp | |
| RU | 194.165.19.198:6892 | udp | |
| RU | 194.165.19.199:6892 | udp | |
| RU | 194.165.19.200:6892 | udp | |
| RU | 194.165.19.201:6892 | udp | |
| RU | 194.165.19.202:6892 | udp | |
| RU | 194.165.19.203:6892 | udp | |
| RU | 194.165.19.204:6892 | udp | |
| RU | 194.165.19.205:6892 | udp | |
| RU | 194.165.19.206:6892 | udp | |
| RU | 194.165.19.207:6892 | udp | |
| RU | 194.165.19.208:6892 | udp | |
| RU | 194.165.19.209:6892 | udp | |
| RU | 194.165.19.210:6892 | udp | |
| RU | 194.165.19.211:6892 | udp | |
| RU | 194.165.19.212:6892 | udp | |
| RU | 194.165.19.213:6892 | udp | |
| RU | 194.165.19.214:6892 | udp | |
| RU | 194.165.19.215:6892 | udp | |
| RU | 194.165.19.216:6892 | udp | |
| RU | 194.165.19.217:6892 | udp | |
| RU | 194.165.19.218:6892 | udp | |
| RU | 194.165.19.219:6892 | udp | |
| RU | 194.165.19.220:6892 | udp | |
| RU | 194.165.19.221:6892 | udp | |
| RU | 194.165.19.222:6892 | udp | |
| RU | 194.165.19.223:6892 | udp | |
| RU | 194.165.19.224:6892 | udp | |
| RU | 194.165.19.225:6892 | udp | |
| RU | 194.165.19.226:6892 | udp | |
| RU | 194.165.19.227:6892 | udp | |
| RU | 194.165.19.228:6892 | udp | |
| RU | 194.165.19.229:6892 | udp | |
| RU | 194.165.19.230:6892 | udp | |
| RU | 194.165.19.231:6892 | udp | |
| RU | 194.165.19.232:6892 | udp | |
| RU | 194.165.19.233:6892 | udp | |
| RU | 194.165.19.234:6892 | udp | |
| RU | 194.165.19.235:6892 | udp | |
| RU | 194.165.19.236:6892 | udp | |
| RU | 194.165.19.237:6892 | udp | |
| RU | 194.165.19.238:6892 | udp | |
| RU | 194.165.19.239:6892 | udp | |
| RU | 194.165.19.240:6892 | udp | |
| RU | 194.165.19.241:6892 | udp | |
| RU | 194.165.19.242:6892 | udp | |
| RU | 194.165.19.243:6892 | udp | |
| RU | 194.165.19.244:6892 | udp | |
| RU | 194.165.19.245:6892 | udp | |
| RU | 194.165.19.246:6892 | udp | |
| RU | 194.165.19.247:6892 | udp | |
| RU | 194.165.19.248:6892 | udp | |
| RU | 194.165.19.249:6892 | udp | |
| RU | 194.165.19.250:6892 | udp | |
| RU | 194.165.19.251:6892 | udp | |
| RU | 194.165.19.252:6892 | udp | |
| RU | 194.165.19.253:6892 | udp | |
| RU | 194.165.19.254:6892 | udp | |
| RU | 194.165.19.255:6892 | udp | |
| US | 8.8.8.8:53 | ffoqr3ug7m726zou.gxty7j.top | udp |
| US | 8.8.8.8:53 | btc.blockr.io | udp |
| US | 8.8.8.8:53 | api.blockcypher.com | udp |
| US | 104.20.98.10:80 | api.blockcypher.com | tcp |
| US | 8.8.8.8:53 | chain.so | udp |
| US | 172.67.40.90:443 | chain.so | tcp |
Files
\Users\Admin\AppData\Local\Temp\nsy2379.tmp\System.dll
| MD5 | ca332bb753b0775d5e806e236ddcec55 |
| SHA1 | f35ef76592f20850baef2ebbd3c9a2cfb5ad8d8f |
| SHA256 | df5ae79fa558dc7af244ec6e53939563b966e7dbd8867e114e928678dbd56e5d |
| SHA512 | 2de0956a1ad58ad7086e427e89b819089f2a7f1e4133ed2a0a736adc0614e8588ebe2d97f1b59ab8886d662aeb40e0b4838c6a65fbfc652253e3a45664a03a00 |
memory/1520-14-0x0000000000540000-0x000000000056C000-memory.dmp
memory/2964-16-0x0000000000400000-0x0000000000431000-memory.dmp
memory/1520-19-0x0000000000540000-0x000000000056C000-memory.dmp
memory/2964-20-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-18-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-25-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-26-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-28-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-30-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-29-0x0000000000400000-0x0000000000431000-memory.dmp
C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\README.hta
| MD5 | 14be4d9e7be114e49c4061bd249b67e2 |
| SHA1 | fb61d894c713d1921883bdc4cc932311dc7dc96e |
| SHA256 | a1ae71b82759050804b9160976a6cc8e978afad2db6d86e4a28fe5db1e5406ec |
| SHA512 | d7a9a82956b7cff589d5993658e4dc670e3e36ce833592ddaba9d1a828afc228b66ec5be3cb26e40c51ec13eb5079d638c194e30450f6d9918223735c7de21b1 |
memory/2964-282-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-285-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-288-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-291-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-294-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-297-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-300-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-303-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-306-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-309-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-312-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-315-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-316-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-319-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-322-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-325-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-328-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-335-0x0000000000400000-0x0000000000431000-memory.dmp
memory/2964-347-0x0000000000400000-0x0000000000431000-memory.dmp
Analysis: behavioral4
Detonation Overview
Submitted
2024-05-11 11:51
Reported
2024-05-11 11:53
Platform
win10v2004-20240426-en
Max time kernel
150s
Max time network
151s
Command Line
Signatures
Program crash
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\WerFault.exe | C:\Windows\SysWOW64\rundll32.exe |
Suspicious use of WriteProcessMemory
| Description | Indicator | Process | Target |
| PID 4840 wrote to memory of 4724 | N/A | C:\Windows\system32\rundll32.exe | C:\Windows\SysWOW64\rundll32.exe |
| PID 4840 wrote to memory of 4724 | N/A | C:\Windows\system32\rundll32.exe | C:\Windows\SysWOW64\rundll32.exe |
| PID 4840 wrote to memory of 4724 | N/A | C:\Windows\system32\rundll32.exe | C:\Windows\SysWOW64\rundll32.exe |
Processes
C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4724 -ip 4724
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4724 -s 612
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 8.8.8.8.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 133.211.185.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | g.bing.com | udp |
| US | 204.79.197.237:443 | g.bing.com | tcp |
| US | 8.8.8.8:53 | 77.190.18.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 69.31.126.40.in-addr.arpa | udp |
| NL | 23.62.61.155:443 | www.bing.com | tcp |
| NL | 23.62.61.155:443 | www.bing.com | tcp |
| US | 8.8.8.8:53 | 155.61.62.23.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 237.197.79.204.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 228.249.119.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 26.165.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 206.23.85.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.210.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 26.35.223.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 29.243.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | tse1.mm.bing.net | udp |
| US | 204.79.197.200:443 | tse1.mm.bing.net | tcp |
| US | 204.79.197.200:443 | tse1.mm.bing.net | tcp |
| US | 204.79.197.200:443 | tse1.mm.bing.net | tcp |
| US | 204.79.197.200:443 | tse1.mm.bing.net | tcp |
| US | 8.8.8.8:53 | 200.197.79.204.in-addr.arpa | udp |
| US | 8.8.8.8:53 | udp |
Files
Analysis: behavioral3
Detonation Overview
Submitted
2024-05-11 11:51
Reported
2024-05-11 11:53
Platform
win7-20240508-en
Max time kernel
120s
Max time network
121s
Command Line
Signatures
Program crash
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\WerFault.exe | C:\Windows\SysWOW64\rundll32.exe |
Suspicious use of WriteProcessMemory
Processes
C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2068 -s 224
Network
Files
Analysis: behavioral6
Detonation Overview
Submitted
2024-05-11 11:51
Reported
2024-05-11 11:53
Platform
win10v2004-20240508-en
Max time kernel
125s
Max time network
129s
Command Line
Signatures
Executes dropped EXE
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\~nsu.tmp\Au_.exe | N/A |
Enumerates physical storage devices
Suspicious use of WriteProcessMemory
| Description | Indicator | Process | Target |
| PID 1640 wrote to memory of 3688 | N/A | C:\Users\Admin\AppData\Local\Temp\Uninstall.exe | C:\Users\Admin\AppData\Local\Temp\~nsu.tmp\Au_.exe |
| PID 1640 wrote to memory of 3688 | N/A | C:\Users\Admin\AppData\Local\Temp\Uninstall.exe | C:\Users\Admin\AppData\Local\Temp\~nsu.tmp\Au_.exe |
| PID 1640 wrote to memory of 3688 | N/A | C:\Users\Admin\AppData\Local\Temp\Uninstall.exe | C:\Users\Admin\AppData\Local\Temp\~nsu.tmp\Au_.exe |
Processes
C:\Users\Admin\AppData\Local\Temp\Uninstall.exe
"C:\Users\Admin\AppData\Local\Temp\Uninstall.exe"
C:\Users\Admin\AppData\Local\Temp\~nsu.tmp\Au_.exe
"C:\Users\Admin\AppData\Local\Temp\~nsu.tmp\Au_.exe" _?=C:\Users\Admin\AppData\Local\Temp\
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3596,i,17096020621006928097,15544233752327415349,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:8
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | g.bing.com | udp |
| US | 204.79.197.237:443 | g.bing.com | tcp |
| US | 8.8.8.8:53 | 8.8.8.8.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 68.32.126.40.in-addr.arpa | udp |
| NL | 23.62.61.155:443 | www.bing.com | tcp |
| US | 8.8.8.8:53 | 237.197.79.204.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 79.190.18.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 55.36.223.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 155.61.62.23.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 50.23.12.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 18.31.95.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 28.143.109.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.210.232.199.in-addr.arpa | udp |
Files
C:\Users\Admin\AppData\Local\Temp\~nsu.tmp\Au_.exe
| MD5 | 2a6c7a4130c659029ff5ccedb7f94c2b |
| SHA1 | 17e6f9288fcfdf8810f70a8aba5a939eff3a973c |
| SHA256 | 514b76cfd9050f937c45bfd3c9c9f85c2c7be84e2f275af0c8a781e143cb6c39 |
| SHA512 | 7ed874cb0f3c0a4458e5158b1f11f70ae16ce3fcfd057da9a2f192542267576eef7a22b93909cad0c067e9b0f56dfe1039d97bc01b734f4686f57d65cbc3a2d7 |
Analysis: behavioral7
Detonation Overview
Submitted
2024-05-11 11:51
Reported
2024-05-11 11:53
Platform
win7-20240221-en
Max time kernel
134s
Max time network
128s
Command Line
Signatures
Modifies Internet Explorer settings
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000071c834f68b8ed044a0afda50fbc58a70000000000200000000001066000000010000200000009a4766ad0eba853ab015b3286c16c55e5d7cc7a40c62d77419cba0f5d5600bd6000000000e8000000002000020000000da4bcd68d040ceddc92dd9ee9b384434d0b6d06c465e069aa9dc9f75b67f095820000000c17024235d3170e2ccd047a29953e1946a1b27981eb4b7aa0d9c366328b4f3cc40000000da522077e69f6f70d08863bf5f410b04d75366e78067293fc772e1a5709272adf4f191a2bfb5fb7f3368cdd2245f8a99320b57d0e5df1a00266ba6ed6d159ff6 | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421590139" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 204fb29799a3da01 | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{C309E391-0F8C-11EF-A7F1-FA5112F1BCBF} = "0" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
Suspicious use of FindShellTrayWindow
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
Suspicious use of SetWindowsHookEx
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| N/A | N/A | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| N/A | N/A | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| N/A | N/A | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| N/A | N/A | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
Suspicious use of WriteProcessMemory
| Description | Indicator | Process | Target |
| PID 2364 wrote to memory of 1256 | N/A | C:\Program Files\Internet Explorer\iexplore.exe | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE |
| PID 2364 wrote to memory of 1256 | N/A | C:\Program Files\Internet Explorer\iexplore.exe | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE |
| PID 2364 wrote to memory of 1256 | N/A | C:\Program Files\Internet Explorer\iexplore.exe | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE |
| PID 2364 wrote to memory of 1256 | N/A | C:\Program Files\Internet Explorer\iexplore.exe | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE |
Processes
C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\audio_WhatAbouts.html
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2364 CREDAT:275457 /prefetch:2
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | www.tgm.org | udp |
| CA | 198.72.127.75:80 | www.tgm.org | tcp |
| CA | 198.72.127.75:80 | www.tgm.org | tcp |
| US | 204.79.197.200:443 | ieonline.microsoft.com | tcp |
| US | 204.79.197.200:443 | ieonline.microsoft.com | tcp |
| US | 204.79.197.200:443 | ieonline.microsoft.com | tcp |
Files
C:\Users\Admin\AppData\Local\Temp\Cab26F4.tmp
| MD5 | ac05d27423a85adc1622c714f2cb6184 |
| SHA1 | b0fe2b1abddb97837ea0195be70ab2ff14d43198 |
| SHA256 | c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d |
| SHA512 | 6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
| MD5 | 29f65ba8e88c063813cc50a4ea544e93 |
| SHA1 | 05a7040d5c127e68c25d81cc51271ffb8bef3568 |
| SHA256 | 1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184 |
| SHA512 | e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa |
C:\Users\Admin\AppData\Local\Temp\Tar27E5.tmp
| MD5 | 435a9ac180383f9fa094131b173a2f7b |
| SHA1 | 76944ea657a9db94f9a4bef38f88c46ed4166983 |
| SHA256 | 67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34 |
| SHA512 | 1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 61afa90fb4e988c5172ff3192f7c563a |
| SHA1 | 1e674e84a187a55a01d9a4b5a72fa22f8fb09d28 |
| SHA256 | 5f77ff04bfa7804c1a525ba89a5869bf12eec21cca5998c31f22f09cfae05534 |
| SHA512 | 0d91fd110acff9293579228f7934b28aa9fbdae7c141d1ad4df1ab25eba315c5a083420dcc4abe2e803aff9a093f202b0caf30be6f3483b670c7d037f9d763b2 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 5d37ffaeb0e9651286f3a493a7f08402 |
| SHA1 | 71234e9b025d24046dc247038a365cc7431acd0d |
| SHA256 | 8ec5183736c704c48ddee458f4d21646105636d5db86ef81b5792c94f2afa2d1 |
| SHA512 | 40f52e7e297193c3092696b36e0bd0ff6a38e277785765c74de11eceb6bb1de82bbae37dadf6af999a7e5fb808d6642b0a5488041989609b82bf33a5733f36d0 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 2ea3ef123ee43c6654324694f07d9a9d |
| SHA1 | ecda4ad3cd72cd195ddb4f119d6e863f6917ddc6 |
| SHA256 | 56b7cf7202b2de95f3692e64682057b9e431720eeac5724357ad8fc2e66cc0f6 |
| SHA512 | 58289da6f069582f340ab746b84ebe2ce59e1aa239a8130714ec0957ce4edc72ec7074ce3e5b8091c5dbf956498e141009d9a81707f60a7648f0b3c2f475f13f |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | c4508b013c16e1e405549138512e15b7 |
| SHA1 | e09ec5bbb00e0bd40427cf47d1ea70cc05a08745 |
| SHA256 | 8994296d6d46d7bc58752206c7d8ae0ba4180c9e93d10bb76ebaff1d6aaa47bb |
| SHA512 | e0441f54efa4f406c806236cd822cba199d5f1e65522d712165a151d90d0a233a1f84f2f28c716fafe8270daab221fe11605a318daffc2ba46d3d6c9598933b6 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 06797f6be24974e422fc257b5802b631 |
| SHA1 | d328e69152c6f176b1c49b65d590918553f94ef6 |
| SHA256 | 19309c06f831232fa8efe2c6446f4bf8d01dd39239455e98607e55129b6f05f7 |
| SHA512 | c8efd87c9141c6fd7a3af7898d9b70f11079cce65b8b879d6326e17d598850d9f6529f505cfd651032932e167eb5ff06cf0241d0d7f173b982ccc00f17c4b907 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | ec6c400cb8e9dd6ab1ee19eb24df46fa |
| SHA1 | b2894d890fc937ee451dc8f57575feb7791b5f21 |
| SHA256 | f449cfb12ad7ccc30ab23c814088eabe747a84243c091531df6f4ff73d459aab |
| SHA512 | f5a1cabefe1d8f9385e34b48997d4f4b1284174e901880e19c4bb583bfa7fee0c582fa841a2fd6411c7a1bd94d3a0d54b58148844b77e83d819d2c1fb35a62de |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 7d62577ec7fe8abc010613f32aecbe87 |
| SHA1 | e01c252edf56f870af610ae46edb7411f782f838 |
| SHA256 | bf19fd3c468fa43071ed48dc4364d9244612cfdc67c4c05453ef1eeac7a7f354 |
| SHA512 | 3f7727001d65a2215198470094c55efb7db01e8fc41da41e49870d678dcf1467cde4e6a7a428c4a46b92747211cb285a6ea84bb34af416a2024c54443c022f96 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 50b0cc6ab56eb623edae6b7b7765a65e |
| SHA1 | b45e42c3213acb3b8329e11ca50db62579b60d97 |
| SHA256 | 8a60007a758ff5c46ac8229640cbd3a89961a4c88e74f9ff6c67cae0f89c3f9f |
| SHA512 | 0e4dbf503f4addb18af8fa326c80acdb33d4a0213b768cf4d48204ae1921273e825c2eadffa6b84066d11ec71e4b10dab735bd28d0aea53eaf09af91097e76cb |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | a9df0e9bebd3f300496ab7d9263a640a |
| SHA1 | aef46446b6765ffc518a257007e9d74fbbd4bc89 |
| SHA256 | 03343df78cccfc7f9611606bed09be8a071a4909d7810ae04f82f97cb23a87aa |
| SHA512 | 03251c31e7a95f97eea5fb9e2b42bf458e2b3f7543a32e8cd967a5c916a32956dc028d44e582e54c923b8d8ad7449ee595044ce8980b835db5ab0c4453cdcb93 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 621acbbd078c024202a60366a4f35b34 |
| SHA1 | ada3565deb5c6d0915de8f0216ffac2cfcc75db2 |
| SHA256 | 816e341fad2f2302d76af2bd7b278f457bcdbc66c857f7f19c65376a3e5ba627 |
| SHA512 | 6f1e406cf1d274c1bb0f19af3600a78737e6c7f0337c652f917894f4a90f74d9e34a59248c5a1300ba5410b24e3646a0ce85c847d5f1a63fc15489ba1fb2f04f |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | f6fb68e569e1d0e92118a38fecf4b2f7 |
| SHA1 | d024db9ce3e21fc933faa7af4992a372b87efb23 |
| SHA256 | 4c048826f2bbc6e8a2856faa211c697e6f5426b141ad4519838db58637f0882b |
| SHA512 | 4c80c5d216862610dfee9e4a43008ec043f04e51bb143ab369258ef7ff9041074b647d1dc20657a53718573534cb9def65b0f8ed1cba7b046d4dacf1b9990f24 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 2a18283e9609ad0783235fbc4a86b358 |
| SHA1 | 9c0429b7e944b2b7036826dc43fcae993f5350b5 |
| SHA256 | fe6c1dd63cbdded2fcc71176985c158aeed1650fc123913ff492e9f04e0bdbb9 |
| SHA512 | 4d405853979f3b759ed72eb6e8415cac02aeb4e5cf320bc7deeacdbab2ddd6b72d22fb7e6898ec9e208039c61e49b49971956fc2b12d71dc494b4e9e58e5e828 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 90fae43c106609dd413f038701c73782 |
| SHA1 | 6a19a901fb81a2b58a0fcd9c381151e3649d00c1 |
| SHA256 | 618b8e469511c02b1a61340426e638f98993d56598868e4790c22153d5854cda |
| SHA512 | 96cdb9efe5e3e7eb790f019bfa0c17535b0ab4c31b1228fb01f0dde3fa516b875872409c275755e16557449a1484b1447a5b1e369d1d1c8bfe0aa254d9f1ecf1 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | ad63204c11bbac9d6df9f61f878f120c |
| SHA1 | f3269972194926fef766dfbfabc61f2fe8c0afd4 |
| SHA256 | 3a58717a350eddba399f0546de08149404a83878bc44b06da8a2910d23762ebe |
| SHA512 | 05bc0e9bb5e67f1ff16e6ecb6e62002c694c8a5b370f1faa3794e2912bd9d2afd5d0e0ff4713ec04c13c31f9d4f158246ccbe6182b4eb5bab48bff967969d68a |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 70925f75b981d5ffb1d5c93f096d0939 |
| SHA1 | 3363bd941d68d7dd486528aa810e6c07fdda3f70 |
| SHA256 | b4dc4e83e4d2e979cd07fffa67264c0e15511a54a6241ac2105be673715c1d95 |
| SHA512 | 1753f54fbeef89f48c128a8f82723b1819ba59974ec4effe8d47b29bc66678dd50ba371e09e0f0bf2a9875030158a9edbbc8f694fd36bd4fc20740639da9c272 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 5fcdbd5bfc1205a13755328e3f0b086b |
| SHA1 | 25f7ae1437fc5d31c0f2c96d5c4f9a4bc056cdef |
| SHA256 | d8cd483bf4e0d44d0752ff13d144d0aee3f0e32aadac9cf4029195287200a3a8 |
| SHA512 | 2b3b2b0f1ab0850a854e1d6b986c1d7b1674ce1ecb5b4e329ba3fbc26917795418d96ee8f8dcfaed391fde5df3833f3a09b2e32e6e32724c0f5589b6677493e5 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | fe250a96144caa2ba7bfe103a61c6844 |
| SHA1 | 10e65de8ac8c4c37fcd4b6e3b088f932af6de591 |
| SHA256 | e4e50319e7569b6182506443a02e657439dc87324c09e634fb6df994fd687492 |
| SHA512 | 013373d74de230e0d68b9b83ed984b876b8e799db95e7a10d46f9e271b66eb2ca9e9e3a7452cf1582b7de38dde9b7a79922141e8741a1cf94d9319271ad3ccf1 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 8b8b8d792e942b98d09964863f5be799 |
| SHA1 | 8807686c5ad030f77fdb533a355630146e069044 |
| SHA256 | 8219c3b194919ec0b8b8e6beabca8c162121647204c73e6e4b35d2ada6c192fc |
| SHA512 | 07849a46f323c46ed968434ed9324c2dbb266ab5416ad25459a5a2c56eadd71dc699c1fb42b3966a75f0ae3ee93420f0d8b6cb324d256ca6bbabf026677b774a |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | e29b560388e3e2c7635395b55fe1140f |
| SHA1 | 422e4d428c89efa27016e901a890280dcf0b7294 |
| SHA256 | bd88f7129dc7fcf6a6dc8c5ebc6f2033843188794256ebefbc073283f76315c2 |
| SHA512 | af5de5c3849c1e3f2b0b66cd2ddbc0ef273daeb91ac39fa44eb4f082bf5b059c4514cd77ce9bd4bcad7a29498390ca78347a85c4e8ce06bee18b18473deed37f |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | fb03ff48a07b7aa541f383e9eac1c5d8 |
| SHA1 | 6135bc87e0b9f92cf085344280498ebf04eb612e |
| SHA256 | 432f38b9f98336fec030e386dc789c152d88cb39a8bd7b5f3ea512f528c193cf |
| SHA512 | 2a2126a07abcf8079a7f835889c6963a0b77e0ae8599dae7de96c997485fce6c978767e016529ea54ba6cf42e3779e016996b811b69fe34804867278437d9fd1 |
Analysis: behavioral9
Detonation Overview
Submitted
2024-05-11 11:51
Reported
2024-05-11 11:53
Platform
win7-20240508-en
Max time kernel
120s
Max time network
121s
Command Line
Signatures
Command and Scripting Interpreter: JavaScript
Processes
C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\embed.js
Network
Files
Analysis: behavioral2
Detonation Overview
Submitted
2024-05-11 11:51
Reported
2024-05-11 11:53
Platform
win10v2004-20240508-en
Max time kernel
125s
Max time network
128s
Command Line
Signatures
Loads dropped DLL
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe | N/A |
Enumerates physical storage devices
Program crash
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\WerFault.exe | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe |
Suspicious use of WriteProcessMemory
| Description | Indicator | Process | Target |
| PID 4376 wrote to memory of 2940 | N/A | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe |
| PID 4376 wrote to memory of 2940 | N/A | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe |
| PID 4376 wrote to memory of 2940 | N/A | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe | C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe |
Processes
C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe"
C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\347251943c940494c6e21c268907bbcc_JaffaCakes118.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4376 -ip 4376
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4376 -s 872
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4200,i,10373433614523925616,13586256558317053467,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:8
Network
| Country | Destination | Domain | Proto |
| NL | 23.62.61.99:443 | www.bing.com | tcp |
| US | 8.8.8.8:53 | 69.31.126.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 55.36.223.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 77.190.18.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 99.61.62.23.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 26.165.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 206.23.85.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.210.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 11.227.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 24.173.189.20.in-addr.arpa | udp |
Files
C:\Users\Admin\AppData\Local\Temp\nsgEF33.tmp\System.dll
| MD5 | ca332bb753b0775d5e806e236ddcec55 |
| SHA1 | f35ef76592f20850baef2ebbd3c9a2cfb5ad8d8f |
| SHA256 | df5ae79fa558dc7af244ec6e53939563b966e7dbd8867e114e928678dbd56e5d |
| SHA512 | 2de0956a1ad58ad7086e427e89b819089f2a7f1e4133ed2a0a736adc0614e8588ebe2d97f1b59ab8886d662aeb40e0b4838c6a65fbfc652253e3a45664a03a00 |
memory/4376-13-0x00000000026E0000-0x000000000270C000-memory.dmp
memory/4376-15-0x00000000026E0000-0x000000000270C000-memory.dmp