Malware Analysis Report

2024-09-22 14:26

Sample ID 240530-megalseb2x
Target 83e42e3941efad8abf8744840544bc98_JaffaCakes118
SHA256 201651213648a1fa414f541f8621e617c640182f6a445aab2ffe63c04284240d
Tags
cerber discovery ransomware
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral5

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral6

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

201651213648a1fa414f541f8621e617c640182f6a445aab2ffe63c04284240d

Threat Level: Known bad

The file 83e42e3941efad8abf8744840544bc98_JaffaCakes118 was found to be: Known bad.

Malicious Activity Summary

cerber discovery ransomware

Cerber

Contacts a large (593) amount of remote hosts

Contacts a large (583) amount of remote hosts

Blocklisted process makes network request

Loads dropped DLL

Checks computer location settings

Deletes itself

Drops startup file

Sets desktop wallpaper using registry

Suspicious use of SetThreadContext

Drops file in Program Files directory

Drops file in Windows directory

Unsigned PE

Program crash

Enumerates physical storage devices

NSIS installer

Runs ping.exe

Suspicious use of AdjustPrivilegeToken

Suspicious use of FindShellTrayWindow

Modifies registry class

Modifies Internet Explorer settings

Kills process with taskkill

Suspicious behavior: EnumeratesProcesses

Suspicious use of WriteProcessMemory

MITRE ATT&CK Matrix V13

Analysis: static1

Detonation Overview

Reported

2024-05-30 10:22

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

NSIS installer

installer
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Analysis: behavioral3

Detonation Overview

Submitted

2024-05-30 10:22

Reported

2024-05-30 10:25

Platform

win7-20240508-en

Max time kernel

119s

Max time network

124s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

Signatures

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2092 -s 224

Network

N/A

Files

N/A

Analysis: behavioral4

Detonation Overview

Submitted

2024-05-30 10:22

Reported

2024-05-30 10:25

Platform

win10v2004-20240226-en

Max time kernel

141s

Max time network

151s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

Signatures

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\rundll32.exe

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3696 wrote to memory of 4352 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3696 wrote to memory of 4352 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3696 wrote to memory of 4352 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4352 -ip 4352

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4352 -s 612

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3928 --field-trial-handle=3088,i,14310325015283915034,7660943942870463106,262144 --variations-seed-version /prefetch:8

Network

Country Destination Domain Proto
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
US 8.8.8.8:53 249.197.17.2.in-addr.arpa udp
US 8.8.8.8:53 20.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 196.249.167.52.in-addr.arpa udp
US 13.107.253.67:443 tcp
US 8.8.8.8:53 206.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 26.165.165.52.in-addr.arpa udp
US 8.8.8.8:53 154.239.44.20.in-addr.arpa udp
US 8.8.8.8:53 104.219.191.52.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 13.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 88.65.42.20.in-addr.arpa udp

Files

N/A

Analysis: behavioral5

Detonation Overview

Submitted

2024-05-30 10:22

Reported

2024-05-30 10:25

Platform

win7-20240508-en

Max time kernel

122s

Max time network

123s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\psychopaths.dll,#1

Signatures

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2056 wrote to memory of 2132 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2056 wrote to memory of 2132 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2056 wrote to memory of 2132 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2056 wrote to memory of 2132 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2056 wrote to memory of 2132 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2056 wrote to memory of 2132 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2056 wrote to memory of 2132 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\psychopaths.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\psychopaths.dll,#1

Network

N/A

Files

N/A

Analysis: behavioral6

Detonation Overview

Submitted

2024-05-30 10:22

Reported

2024-05-30 10:25

Platform

win10v2004-20240508-en

Max time kernel

149s

Max time network

151s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\psychopaths.dll,#1

Signatures

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\rundll32.exe

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1468 wrote to memory of 1544 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1468 wrote to memory of 1544 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 1468 wrote to memory of 1544 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\psychopaths.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\psychopaths.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 1544 -ip 1544

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1544 -s 568

Network

Country Destination Domain Proto
US 8.8.8.8:53 28.118.140.52.in-addr.arpa udp
US 8.8.8.8:53 0.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
BE 2.17.196.83:443 www.bing.com tcp
US 8.8.8.8:53 83.196.17.2.in-addr.arpa udp
US 8.8.8.8:53 209.205.72.20.in-addr.arpa udp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 133.211.185.52.in-addr.arpa udp
US 8.8.8.8:53 50.23.12.20.in-addr.arpa udp
US 8.8.8.8:53 206.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 35.15.31.184.in-addr.arpa udp
US 8.8.8.8:53 43.58.199.20.in-addr.arpa udp
US 8.8.8.8:53 23.173.189.20.in-addr.arpa udp

Files

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-30 10:22

Reported

2024-05-30 10:25

Platform

win7-20240221-en

Max time kernel

120s

Max time network

142s

Command Line

"C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe"

Signatures

Cerber

ransomware cerber

Blocklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

Contacts a large (583) amount of remote hosts

discovery

Deletes itself

Description Indicator Process Target
N/A N/A C:\Windows\system32\cmd.exe N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\tmp5679.bmp" C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A

Enumerates physical storage devices

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\taskkill.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SysWOW64\mshta.exe N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\system32\PING.EXE N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\DllHost.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1248 wrote to memory of 2620 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe
PID 1248 wrote to memory of 2620 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe
PID 1248 wrote to memory of 2620 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe
PID 1248 wrote to memory of 2620 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe
PID 1248 wrote to memory of 2620 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe
PID 1248 wrote to memory of 2620 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe
PID 1248 wrote to memory of 2620 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe
PID 1248 wrote to memory of 2620 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe
PID 1248 wrote to memory of 2620 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe
PID 2620 wrote to memory of 2876 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 2620 wrote to memory of 2876 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 2620 wrote to memory of 2876 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 2620 wrote to memory of 2876 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 2620 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 2620 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 2620 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 2620 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 1632 wrote to memory of 1712 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 1632 wrote to memory of 1712 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 1632 wrote to memory of 1712 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 1632 wrote to memory of 1088 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE
PID 1632 wrote to memory of 1088 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE
PID 1632 wrote to memory of 1088 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe"

C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe"

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_C31K8X_README_.hta"

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\SysWOW64\DllHost.exe /Processid:{76D0CB12-7604-4048-B83C-1005C7DDC503}

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\SysWOW64\DllHost.exe /Processid:{3F6B5E16-092A-41ED-930B-0B4125D91D4E}

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im "83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe"

C:\Windows\system32\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
US 15.44.20.0:6892 udp
US 15.44.20.1:6892 udp
US 15.44.20.2:6892 udp
US 15.44.20.3:6892 udp
US 15.44.20.4:6892 udp
US 15.44.20.5:6892 udp
US 15.44.20.6:6892 udp
US 15.44.20.7:6892 udp
US 15.44.20.8:6892 udp
US 15.44.20.9:6892 udp
US 15.44.20.10:6892 udp
US 15.44.20.11:6892 udp
US 15.44.20.12:6892 udp
US 15.44.20.13:6892 udp
US 15.44.20.14:6892 udp
US 15.44.20.15:6892 udp
US 15.44.20.16:6892 udp
US 15.44.20.17:6892 udp
US 15.44.20.18:6892 udp
US 15.44.20.19:6892 udp
US 15.44.20.20:6892 udp
US 15.44.20.21:6892 udp
US 15.44.20.22:6892 udp
US 15.44.20.23:6892 udp
US 15.44.20.24:6892 udp
US 15.44.20.25:6892 udp
US 15.44.20.26:6892 udp
US 15.44.20.27:6892 udp
US 15.44.20.28:6892 udp
US 15.44.20.29:6892 udp
US 15.44.20.30:6892 udp
US 15.44.20.31:6892 udp
US 16.43.12.0:6892 udp
US 16.43.12.1:6892 udp
US 16.43.12.2:6892 udp
US 16.43.12.3:6892 udp
US 16.43.12.4:6892 udp
US 16.43.12.5:6892 udp
US 16.43.12.6:6892 udp
US 16.43.12.7:6892 udp
US 16.43.12.8:6892 udp
US 16.43.12.9:6892 udp
US 16.43.12.10:6892 udp
US 16.43.12.11:6892 udp
US 16.43.12.12:6892 udp
US 16.43.12.13:6892 udp
US 16.43.12.14:6892 udp
US 16.43.12.15:6892 udp
US 16.43.12.16:6892 udp
US 16.43.12.17:6892 udp
US 16.43.12.18:6892 udp
US 16.43.12.19:6892 udp
US 16.43.12.20:6892 udp
US 16.43.12.21:6892 udp
US 16.43.12.22:6892 udp
US 16.43.12.23:6892 udp
US 16.43.12.24:6892 udp
US 16.43.12.25:6892 udp
US 16.43.12.26:6892 udp
US 16.43.12.27:6892 udp
US 16.43.12.28:6892 udp
US 16.43.12.29:6892 udp
US 16.43.12.30:6892 udp
US 16.43.12.31:6892 udp
AT 91.239.24.0:6892 udp
AT 91.239.24.1:6892 udp
AT 91.239.24.2:6892 udp
AT 91.239.24.3:6892 udp
AT 91.239.24.4:6892 udp
AT 91.239.24.5:6892 udp
AT 91.239.24.6:6892 udp
AT 91.239.24.7:6892 udp
AT 91.239.24.8:6892 udp
AT 91.239.24.9:6892 udp
AT 91.239.24.10:6892 udp
AT 91.239.24.11:6892 udp
AT 91.239.24.12:6892 udp
AT 91.239.24.13:6892 udp
AT 91.239.24.14:6892 udp
AT 91.239.24.15:6892 udp
AT 91.239.24.16:6892 udp
AT 91.239.24.17:6892 udp
AT 91.239.24.18:6892 udp
AT 91.239.24.19:6892 udp
AT 91.239.24.20:6892 udp
AT 91.239.24.21:6892 udp
AT 91.239.24.22:6892 udp
AT 91.239.24.23:6892 udp
AT 91.239.24.24:6892 udp
AT 91.239.24.25:6892 udp
AT 91.239.24.26:6892 udp
AT 91.239.24.27:6892 udp
AT 91.239.24.28:6892 udp
AT 91.239.24.29:6892 udp
AT 91.239.24.30:6892 udp
AT 91.239.24.31:6892 udp
AT 91.239.24.32:6892 udp
AT 91.239.24.33:6892 udp
AT 91.239.24.34:6892 udp
AT 91.239.24.35:6892 udp
AT 91.239.24.36:6892 udp
AT 91.239.24.37:6892 udp
AT 91.239.24.38:6892 udp
AT 91.239.24.39:6892 udp
AT 91.239.24.40:6892 udp
AT 91.239.24.41:6892 udp
AT 91.239.24.42:6892 udp
AT 91.239.24.43:6892 udp
AT 91.239.24.44:6892 udp
AT 91.239.24.45:6892 udp
AT 91.239.24.46:6892 udp
AT 91.239.24.47:6892 udp
AT 91.239.24.48:6892 udp
AT 91.239.24.49:6892 udp
AT 91.239.24.50:6892 udp
AT 91.239.24.51:6892 udp
AT 91.239.24.52:6892 udp
AT 91.239.24.53:6892 udp
AT 91.239.24.54:6892 udp
AT 91.239.24.55:6892 udp
AT 91.239.24.56:6892 udp
AT 91.239.24.57:6892 udp
AT 91.239.24.58:6892 udp
AT 91.239.24.59:6892 udp
AT 91.239.24.60:6892 udp
AT 91.239.24.61:6892 udp
AT 91.239.24.62:6892 udp
AT 91.239.24.63:6892 udp
AT 91.239.24.64:6892 udp
AT 91.239.24.65:6892 udp
AT 91.239.24.66:6892 udp
AT 91.239.24.67:6892 udp
AT 91.239.24.68:6892 udp
AT 91.239.24.69:6892 udp
AT 91.239.24.70:6892 udp
AT 91.239.24.71:6892 udp
AT 91.239.24.72:6892 udp
AT 91.239.24.73:6892 udp
AT 91.239.24.74:6892 udp
AT 91.239.24.75:6892 udp
AT 91.239.24.76:6892 udp
AT 91.239.24.77:6892 udp
AT 91.239.24.78:6892 udp
AT 91.239.24.79:6892 udp
AT 91.239.24.80:6892 udp
AT 91.239.24.81:6892 udp
AT 91.239.24.82:6892 udp
AT 91.239.24.83:6892 udp
AT 91.239.24.84:6892 udp
AT 91.239.24.85:6892 udp
AT 91.239.24.86:6892 udp
AT 91.239.24.87:6892 udp
AT 91.239.24.88:6892 udp
AT 91.239.24.89:6892 udp
AT 91.239.24.90:6892 udp
AT 91.239.24.91:6892 udp
AT 91.239.24.92:6892 udp
AT 91.239.24.93:6892 udp
AT 91.239.24.94:6892 udp
AT 91.239.24.95:6892 udp
AT 91.239.24.96:6892 udp
AT 91.239.24.97:6892 udp
AT 91.239.24.98:6892 udp
AT 91.239.24.99:6892 udp
AT 91.239.24.100:6892 udp
AT 91.239.24.101:6892 udp
AT 91.239.24.102:6892 udp
AT 91.239.24.103:6892 udp
AT 91.239.24.104:6892 udp
AT 91.239.24.105:6892 udp
AT 91.239.24.106:6892 udp
AT 91.239.24.107:6892 udp
AT 91.239.24.108:6892 udp
AT 91.239.24.109:6892 udp
AT 91.239.24.110:6892 udp
AT 91.239.24.111:6892 udp
AT 91.239.24.112:6892 udp
AT 91.239.24.113:6892 udp
AT 91.239.24.114:6892 udp
AT 91.239.24.115:6892 udp
AT 91.239.24.116:6892 udp
AT 91.239.24.117:6892 udp
AT 91.239.24.118:6892 udp
AT 91.239.24.119:6892 udp
AT 91.239.24.120:6892 udp
AT 91.239.24.121:6892 udp
AT 91.239.24.122:6892 udp
AT 91.239.24.123:6892 udp
AT 91.239.24.124:6892 udp
AT 91.239.24.125:6892 udp
AT 91.239.24.126:6892 udp
AT 91.239.24.127:6892 udp
AT 91.239.24.128:6892 udp
AT 91.239.24.129:6892 udp
AT 91.239.24.130:6892 udp
AT 91.239.24.131:6892 udp
AT 91.239.24.132:6892 udp
AT 91.239.24.133:6892 udp
AT 91.239.24.134:6892 udp
AT 91.239.24.135:6892 udp
AT 91.239.24.136:6892 udp
AT 91.239.24.137:6892 udp
AT 91.239.24.138:6892 udp
AT 91.239.24.139:6892 udp
AT 91.239.24.140:6892 udp
AT 91.239.24.141:6892 udp
AT 91.239.24.142:6892 udp
AT 91.239.24.143:6892 udp
AT 91.239.24.144:6892 udp
AT 91.239.24.145:6892 udp
AT 91.239.24.146:6892 udp
AT 91.239.24.147:6892 udp
AT 91.239.24.148:6892 udp
AT 91.239.24.149:6892 udp
AT 91.239.24.150:6892 udp
AT 91.239.24.151:6892 udp
AT 91.239.24.152:6892 udp
AT 91.239.24.153:6892 udp
AT 91.239.24.154:6892 udp
AT 91.239.24.155:6892 udp
AT 91.239.24.156:6892 udp
AT 91.239.24.157:6892 udp
AT 91.239.24.158:6892 udp
AT 91.239.24.159:6892 udp
AT 91.239.24.160:6892 udp
AT 91.239.24.161:6892 udp
AT 91.239.24.162:6892 udp
AT 91.239.24.163:6892 udp
AT 91.239.24.164:6892 udp
AT 91.239.24.165:6892 udp
AT 91.239.24.166:6892 udp
AT 91.239.24.167:6892 udp
AT 91.239.24.168:6892 udp
AT 91.239.24.169:6892 udp
AT 91.239.24.170:6892 udp
AT 91.239.24.171:6892 udp
AT 91.239.24.172:6892 udp
AT 91.239.24.173:6892 udp
AT 91.239.24.174:6892 udp
AT 91.239.24.175:6892 udp
AT 91.239.24.176:6892 udp
AT 91.239.24.177:6892 udp
AT 91.239.24.178:6892 udp
AT 91.239.24.179:6892 udp
AT 91.239.24.180:6892 udp
AT 91.239.24.181:6892 udp
AT 91.239.24.182:6892 udp
AT 91.239.24.183:6892 udp
AT 91.239.24.184:6892 udp
AT 91.239.24.185:6892 udp
AT 91.239.24.186:6892 udp
AT 91.239.24.187:6892 udp
AT 91.239.24.188:6892 udp
AT 91.239.24.189:6892 udp
AT 91.239.24.190:6892 udp
AT 91.239.24.191:6892 udp
AT 91.239.24.192:6892 udp
AT 91.239.24.193:6892 udp
AT 91.239.24.194:6892 udp
AT 91.239.24.195:6892 udp
AT 91.239.24.196:6892 udp
AT 91.239.24.197:6892 udp
AT 91.239.24.198:6892 udp
AT 91.239.24.199:6892 udp
AT 91.239.24.200:6892 udp
AT 91.239.24.201:6892 udp
AT 91.239.24.202:6892 udp
AT 91.239.24.203:6892 udp
AT 91.239.24.204:6892 udp
AT 91.239.24.205:6892 udp
AT 91.239.24.206:6892 udp
AT 91.239.24.207:6892 udp
AT 91.239.24.208:6892 udp
AT 91.239.24.209:6892 udp
AT 91.239.24.210:6892 udp
AT 91.239.24.211:6892 udp
AT 91.239.24.212:6892 udp
AT 91.239.24.213:6892 udp
AT 91.239.24.214:6892 udp
AT 91.239.24.215:6892 udp
AT 91.239.24.216:6892 udp
AT 91.239.24.217:6892 udp
AT 91.239.24.218:6892 udp
AT 91.239.24.219:6892 udp
AT 91.239.24.220:6892 udp
AT 91.239.24.221:6892 udp
AT 91.239.24.222:6892 udp
AT 91.239.24.223:6892 udp
AT 91.239.24.224:6892 udp
AT 91.239.24.225:6892 udp
AT 91.239.24.226:6892 udp
AT 91.239.24.227:6892 udp
AT 91.239.24.228:6892 udp
AT 91.239.24.229:6892 udp
AT 91.239.24.230:6892 udp
AT 91.239.24.231:6892 udp
AT 91.239.24.232:6892 udp
AT 91.239.24.233:6892 udp
AT 91.239.24.234:6892 udp
AT 91.239.24.235:6892 udp
AT 91.239.24.236:6892 udp
AT 91.239.24.237:6892 udp
AT 91.239.24.238:6892 udp
AT 91.239.24.239:6892 udp
AT 91.239.24.240:6892 udp
AT 91.239.24.241:6892 udp
AT 91.239.24.242:6892 udp
AT 91.239.24.243:6892 udp
AT 91.239.24.244:6892 udp
AT 91.239.24.245:6892 udp
AT 91.239.24.246:6892 udp
AT 91.239.24.247:6892 udp
AT 91.239.24.248:6892 udp
AT 91.239.24.249:6892 udp
AT 91.239.24.250:6892 udp
AT 91.239.24.251:6892 udp
AT 91.239.24.252:6892 udp
AT 91.239.24.253:6892 udp
AT 91.239.24.254:6892 udp
AT 91.239.24.255:6892 udp
NO 91.239.25.0:6892 udp
NO 91.239.25.1:6892 udp
NO 91.239.25.2:6892 udp
NO 91.239.25.3:6892 udp
NO 91.239.25.4:6892 udp
NO 91.239.25.5:6892 udp
NO 91.239.25.6:6892 udp
NO 91.239.25.7:6892 udp
NO 91.239.25.8:6892 udp
NO 91.239.25.9:6892 udp
NO 91.239.25.10:6892 udp
NO 91.239.25.11:6892 udp
NO 91.239.25.12:6892 udp
NO 91.239.25.13:6892 udp
NO 91.239.25.14:6892 udp
NO 91.239.25.15:6892 udp
NO 91.239.25.16:6892 udp
NO 91.239.25.17:6892 udp
NO 91.239.25.18:6892 udp
NO 91.239.25.19:6892 udp
NO 91.239.25.20:6892 udp
NO 91.239.25.21:6892 udp
NO 91.239.25.22:6892 udp
NO 91.239.25.23:6892 udp
NO 91.239.25.24:6892 udp
NO 91.239.25.25:6892 udp
NO 91.239.25.26:6892 udp
NO 91.239.25.27:6892 udp
NO 91.239.25.28:6892 udp
NO 91.239.25.29:6892 udp
NO 91.239.25.30:6892 udp
NO 91.239.25.31:6892 udp
NO 91.239.25.32:6892 udp
NO 91.239.25.33:6892 udp
NO 91.239.25.34:6892 udp
NO 91.239.25.35:6892 udp
NO 91.239.25.36:6892 udp
NO 91.239.25.37:6892 udp
NO 91.239.25.38:6892 udp
NO 91.239.25.39:6892 udp
NO 91.239.25.40:6892 udp
NO 91.239.25.41:6892 udp
NO 91.239.25.42:6892 udp
NO 91.239.25.43:6892 udp
NO 91.239.25.44:6892 udp
NO 91.239.25.45:6892 udp
NO 91.239.25.46:6892 udp
NO 91.239.25.47:6892 udp
NO 91.239.25.48:6892 udp
NO 91.239.25.49:6892 udp
NO 91.239.25.50:6892 udp
NO 91.239.25.51:6892 udp
NO 91.239.25.52:6892 udp
NO 91.239.25.53:6892 udp
NO 91.239.25.54:6892 udp
NO 91.239.25.55:6892 udp
NO 91.239.25.56:6892 udp
NO 91.239.25.57:6892 udp
NO 91.239.25.58:6892 udp
NO 91.239.25.59:6892 udp
NO 91.239.25.60:6892 udp
NO 91.239.25.61:6892 udp
NO 91.239.25.62:6892 udp
NO 91.239.25.63:6892 udp
NO 91.239.25.64:6892 udp
NO 91.239.25.65:6892 udp
NO 91.239.25.66:6892 udp
NO 91.239.25.67:6892 udp
NO 91.239.25.68:6892 udp
NO 91.239.25.69:6892 udp
NO 91.239.25.70:6892 udp
NO 91.239.25.71:6892 udp
NO 91.239.25.72:6892 udp
NO 91.239.25.73:6892 udp
NO 91.239.25.74:6892 udp
NO 91.239.25.75:6892 udp
NO 91.239.25.76:6892 udp
NO 91.239.25.77:6892 udp
NO 91.239.25.78:6892 udp
NO 91.239.25.79:6892 udp
NO 91.239.25.80:6892 udp
NO 91.239.25.81:6892 udp
NO 91.239.25.82:6892 udp
NO 91.239.25.83:6892 udp
NO 91.239.25.84:6892 udp
NO 91.239.25.85:6892 udp
NO 91.239.25.86:6892 udp
NO 91.239.25.87:6892 udp
NO 91.239.25.88:6892 udp
NO 91.239.25.89:6892 udp
NO 91.239.25.90:6892 udp
NO 91.239.25.91:6892 udp
NO 91.239.25.92:6892 udp
NO 91.239.25.93:6892 udp
NO 91.239.25.94:6892 udp
NO 91.239.25.95:6892 udp
NO 91.239.25.96:6892 udp
NO 91.239.25.97:6892 udp
NO 91.239.25.98:6892 udp
NO 91.239.25.99:6892 udp
NO 91.239.25.100:6892 udp
NO 91.239.25.101:6892 udp
NO 91.239.25.102:6892 udp
NO 91.239.25.103:6892 udp
NO 91.239.25.104:6892 udp
NO 91.239.25.105:6892 udp
NO 91.239.25.106:6892 udp
NO 91.239.25.107:6892 udp
NO 91.239.25.108:6892 udp
NO 91.239.25.109:6892 udp
NO 91.239.25.110:6892 udp
NO 91.239.25.111:6892 udp
NO 91.239.25.112:6892 udp
NO 91.239.25.113:6892 udp
NO 91.239.25.114:6892 udp
NO 91.239.25.115:6892 udp
NO 91.239.25.116:6892 udp
NO 91.239.25.117:6892 udp
NO 91.239.25.118:6892 udp
NO 91.239.25.119:6892 udp
NO 91.239.25.120:6892 udp
NO 91.239.25.121:6892 udp
NO 91.239.25.122:6892 udp
NO 91.239.25.123:6892 udp
NO 91.239.25.124:6892 udp
NO 91.239.25.125:6892 udp
NO 91.239.25.126:6892 udp
NO 91.239.25.127:6892 udp
NO 91.239.25.128:6892 udp
NO 91.239.25.129:6892 udp
NO 91.239.25.130:6892 udp
NO 91.239.25.131:6892 udp
NO 91.239.25.132:6892 udp
NO 91.239.25.133:6892 udp
NO 91.239.25.134:6892 udp
NO 91.239.25.135:6892 udp
NO 91.239.25.136:6892 udp
NO 91.239.25.137:6892 udp
NO 91.239.25.138:6892 udp
NO 91.239.25.139:6892 udp
NO 91.239.25.140:6892 udp
NO 91.239.25.141:6892 udp
NO 91.239.25.142:6892 udp
NO 91.239.25.143:6892 udp
NO 91.239.25.144:6892 udp
NO 91.239.25.145:6892 udp
NO 91.239.25.146:6892 udp
NO 91.239.25.147:6892 udp
NO 91.239.25.148:6892 udp
NO 91.239.25.149:6892 udp
NO 91.239.25.150:6892 udp
NO 91.239.25.151:6892 udp
NO 91.239.25.152:6892 udp
NO 91.239.25.153:6892 udp
NO 91.239.25.154:6892 udp
NO 91.239.25.155:6892 udp
NO 91.239.25.156:6892 udp
NO 91.239.25.157:6892 udp
NO 91.239.25.158:6892 udp
NO 91.239.25.159:6892 udp
NO 91.239.25.160:6892 udp
NO 91.239.25.161:6892 udp
NO 91.239.25.162:6892 udp
NO 91.239.25.163:6892 udp
NO 91.239.25.164:6892 udp
NO 91.239.25.165:6892 udp
NO 91.239.25.166:6892 udp
NO 91.239.25.167:6892 udp
NO 91.239.25.168:6892 udp
NO 91.239.25.169:6892 udp
NO 91.239.25.170:6892 udp
NO 91.239.25.171:6892 udp
NO 91.239.25.172:6892 udp
NO 91.239.25.173:6892 udp
NO 91.239.25.174:6892 udp
NO 91.239.25.175:6892 udp
NO 91.239.25.176:6892 udp
NO 91.239.25.177:6892 udp
NO 91.239.25.178:6892 udp
NO 91.239.25.179:6892 udp
NO 91.239.25.180:6892 udp
NO 91.239.25.181:6892 udp
NO 91.239.25.182:6892 udp
NO 91.239.25.183:6892 udp
NO 91.239.25.184:6892 udp
NO 91.239.25.185:6892 udp
NO 91.239.25.186:6892 udp
NO 91.239.25.187:6892 udp
NO 91.239.25.188:6892 udp
NO 91.239.25.189:6892 udp
NO 91.239.25.190:6892 udp
NO 91.239.25.191:6892 udp
NO 91.239.25.192:6892 udp
NO 91.239.25.193:6892 udp
NO 91.239.25.194:6892 udp
NO 91.239.25.195:6892 udp
NO 91.239.25.196:6892 udp
NO 91.239.25.197:6892 udp
NO 91.239.25.198:6892 udp
NO 91.239.25.199:6892 udp
NO 91.239.25.200:6892 udp
NO 91.239.25.201:6892 udp
NO 91.239.25.202:6892 udp
NO 91.239.25.203:6892 udp
NO 91.239.25.204:6892 udp
NO 91.239.25.205:6892 udp
NO 91.239.25.206:6892 udp
NO 91.239.25.207:6892 udp
NO 91.239.25.208:6892 udp
NO 91.239.25.209:6892 udp
NO 91.239.25.210:6892 udp
NO 91.239.25.211:6892 udp
NO 91.239.25.212:6892 udp
NO 91.239.25.213:6892 udp
NO 91.239.25.214:6892 udp
NO 91.239.25.215:6892 udp
NO 91.239.25.216:6892 udp
NO 91.239.25.217:6892 udp
NO 91.239.25.218:6892 udp
NO 91.239.25.219:6892 udp
NO 91.239.25.220:6892 udp
NO 91.239.25.221:6892 udp
NO 91.239.25.222:6892 udp
NO 91.239.25.223:6892 udp
NO 91.239.25.224:6892 udp
NO 91.239.25.225:6892 udp
NO 91.239.25.226:6892 udp
NO 91.239.25.227:6892 udp
NO 91.239.25.228:6892 udp
NO 91.239.25.229:6892 udp
NO 91.239.25.230:6892 udp
NO 91.239.25.231:6892 udp
NO 91.239.25.232:6892 udp
NO 91.239.25.233:6892 udp
NO 91.239.25.234:6892 udp
NO 91.239.25.235:6892 udp
NO 91.239.25.236:6892 udp
NO 91.239.25.237:6892 udp
NO 91.239.25.238:6892 udp
NO 91.239.25.239:6892 udp
NO 91.239.25.240:6892 udp
NO 91.239.25.241:6892 udp
NO 91.239.25.242:6892 udp
NO 91.239.25.243:6892 udp
NO 91.239.25.244:6892 udp
NO 91.239.25.245:6892 udp
NO 91.239.25.246:6892 udp
NO 91.239.25.247:6892 udp
NO 91.239.25.248:6892 udp
NO 91.239.25.249:6892 udp
NO 91.239.25.250:6892 udp
NO 91.239.25.251:6892 udp
NO 91.239.25.252:6892 udp
NO 91.239.25.253:6892 udp
NO 91.239.25.254:6892 udp
NO 91.239.25.255:6892 udp
US 15.44.20.0:6892 udp
US 15.44.20.1:6892 udp
US 15.44.20.2:6892 udp
US 15.44.20.3:6892 udp
US 15.44.20.4:6892 udp
US 15.44.20.5:6892 udp
US 15.44.20.6:6892 udp
US 15.44.20.7:6892 udp
US 15.44.20.8:6892 udp
US 15.44.20.9:6892 udp
US 15.44.20.10:6892 udp
US 15.44.20.11:6892 udp
US 15.44.20.12:6892 udp
US 15.44.20.13:6892 udp
US 15.44.20.14:6892 udp
US 15.44.20.15:6892 udp
US 15.44.20.16:6892 udp
US 15.44.20.17:6892 udp
US 15.44.20.18:6892 udp
US 15.44.20.19:6892 udp
US 15.44.20.20:6892 udp
US 15.44.20.21:6892 udp
US 15.44.20.22:6892 udp
US 15.44.20.23:6892 udp
US 15.44.20.24:6892 udp
US 15.44.20.25:6892 udp
US 15.44.20.26:6892 udp
US 15.44.20.27:6892 udp
US 15.44.20.28:6892 udp
US 15.44.20.29:6892 udp
US 15.44.20.30:6892 udp
US 15.44.20.31:6892 udp
US 16.43.12.0:6892 udp
US 16.43.12.1:6892 udp
US 16.43.12.2:6892 udp
US 16.43.12.3:6892 udp
US 16.43.12.4:6892 udp
US 16.43.12.5:6892 udp
US 16.43.12.6:6892 udp
US 16.43.12.7:6892 udp
US 16.43.12.8:6892 udp
US 16.43.12.9:6892 udp
US 16.43.12.10:6892 udp
US 16.43.12.11:6892 udp
US 16.43.12.12:6892 udp
US 16.43.12.13:6892 udp
US 16.43.12.14:6892 udp
US 16.43.12.15:6892 udp
US 16.43.12.16:6892 udp
US 16.43.12.17:6892 udp
US 16.43.12.18:6892 udp
US 16.43.12.19:6892 udp
US 16.43.12.20:6892 udp
US 16.43.12.21:6892 udp
US 16.43.12.22:6892 udp
US 16.43.12.23:6892 udp
US 16.43.12.24:6892 udp
US 16.43.12.25:6892 udp
US 16.43.12.26:6892 udp
US 16.43.12.27:6892 udp
US 16.43.12.28:6892 udp
US 16.43.12.29:6892 udp
US 16.43.12.30:6892 udp
US 16.43.12.31:6892 udp
AT 91.239.24.0:6892 udp
AT 91.239.24.1:6892 udp
AT 91.239.24.2:6892 udp
AT 91.239.24.3:6892 udp
AT 91.239.24.4:6892 udp
AT 91.239.24.5:6892 udp
AT 91.239.24.6:6892 udp
AT 91.239.24.7:6892 udp
AT 91.239.24.8:6892 udp
AT 91.239.24.9:6892 udp
AT 91.239.24.10:6892 udp
AT 91.239.24.11:6892 udp
AT 91.239.24.12:6892 udp
AT 91.239.24.13:6892 udp
AT 91.239.24.14:6892 udp
AT 91.239.24.15:6892 udp
AT 91.239.24.16:6892 udp
AT 91.239.24.17:6892 udp
AT 91.239.24.18:6892 udp
AT 91.239.24.19:6892 udp
AT 91.239.24.20:6892 udp
AT 91.239.24.21:6892 udp
AT 91.239.24.22:6892 udp
AT 91.239.24.23:6892 udp
AT 91.239.24.24:6892 udp
AT 91.239.24.25:6892 udp
AT 91.239.24.26:6892 udp
AT 91.239.24.27:6892 udp
AT 91.239.24.28:6892 udp
AT 91.239.24.29:6892 udp
AT 91.239.24.30:6892 udp
AT 91.239.24.31:6892 udp
AT 91.239.24.32:6892 udp
AT 91.239.24.33:6892 udp
AT 91.239.24.34:6892 udp
AT 91.239.24.35:6892 udp
AT 91.239.24.36:6892 udp
AT 91.239.24.37:6892 udp
AT 91.239.24.38:6892 udp
AT 91.239.24.39:6892 udp
AT 91.239.24.40:6892 udp
AT 91.239.24.41:6892 udp
AT 91.239.24.42:6892 udp
AT 91.239.24.43:6892 udp
AT 91.239.24.44:6892 udp
AT 91.239.24.45:6892 udp
AT 91.239.24.46:6892 udp
AT 91.239.24.47:6892 udp
AT 91.239.24.48:6892 udp
AT 91.239.24.49:6892 udp
AT 91.239.24.50:6892 udp
AT 91.239.24.51:6892 udp
AT 91.239.24.52:6892 udp
AT 91.239.24.53:6892 udp
AT 91.239.24.54:6892 udp
AT 91.239.24.55:6892 udp
AT 91.239.24.56:6892 udp
AT 91.239.24.57:6892 udp
AT 91.239.24.58:6892 udp
AT 91.239.24.59:6892 udp
AT 91.239.24.60:6892 udp
AT 91.239.24.61:6892 udp
AT 91.239.24.62:6892 udp
AT 91.239.24.63:6892 udp
AT 91.239.24.64:6892 udp
AT 91.239.24.65:6892 udp
AT 91.239.24.66:6892 udp
AT 91.239.24.67:6892 udp
AT 91.239.24.68:6892 udp
AT 91.239.24.69:6892 udp
AT 91.239.24.70:6892 udp
AT 91.239.24.71:6892 udp
AT 91.239.24.72:6892 udp
AT 91.239.24.73:6892 udp
AT 91.239.24.74:6892 udp
AT 91.239.24.75:6892 udp
AT 91.239.24.76:6892 udp
AT 91.239.24.77:6892 udp
AT 91.239.24.78:6892 udp
AT 91.239.24.79:6892 udp
AT 91.239.24.80:6892 udp
AT 91.239.24.81:6892 udp
AT 91.239.24.82:6892 udp
AT 91.239.24.83:6892 udp
AT 91.239.24.84:6892 udp
AT 91.239.24.85:6892 udp
AT 91.239.24.86:6892 udp
AT 91.239.24.87:6892 udp
AT 91.239.24.88:6892 udp
AT 91.239.24.89:6892 udp
AT 91.239.24.90:6892 udp
AT 91.239.24.91:6892 udp
AT 91.239.24.92:6892 udp
AT 91.239.24.93:6892 udp
AT 91.239.24.94:6892 udp
AT 91.239.24.95:6892 udp
AT 91.239.24.96:6892 udp
AT 91.239.24.97:6892 udp
AT 91.239.24.98:6892 udp
AT 91.239.24.99:6892 udp
AT 91.239.24.100:6892 udp
AT 91.239.24.101:6892 udp
AT 91.239.24.102:6892 udp
AT 91.239.24.103:6892 udp
AT 91.239.24.104:6892 udp
AT 91.239.24.105:6892 udp
AT 91.239.24.106:6892 udp
AT 91.239.24.107:6892 udp
AT 91.239.24.108:6892 udp
AT 91.239.24.109:6892 udp
AT 91.239.24.110:6892 udp
AT 91.239.24.111:6892 udp
AT 91.239.24.112:6892 udp
AT 91.239.24.113:6892 udp
AT 91.239.24.114:6892 udp
AT 91.239.24.115:6892 udp
AT 91.239.24.116:6892 udp
AT 91.239.24.117:6892 udp
AT 91.239.24.118:6892 udp
AT 91.239.24.119:6892 udp
AT 91.239.24.120:6892 udp
AT 91.239.24.121:6892 udp
AT 91.239.24.122:6892 udp
AT 91.239.24.123:6892 udp
AT 91.239.24.124:6892 udp
AT 91.239.24.125:6892 udp
AT 91.239.24.126:6892 udp
AT 91.239.24.127:6892 udp
AT 91.239.24.128:6892 udp
AT 91.239.24.129:6892 udp
AT 91.239.24.130:6892 udp
AT 91.239.24.131:6892 udp
AT 91.239.24.132:6892 udp
AT 91.239.24.133:6892 udp
AT 91.239.24.134:6892 udp
AT 91.239.24.135:6892 udp
AT 91.239.24.136:6892 udp
AT 91.239.24.137:6892 udp
AT 91.239.24.138:6892 udp
AT 91.239.24.139:6892 udp
AT 91.239.24.140:6892 udp
AT 91.239.24.141:6892 udp
AT 91.239.24.142:6892 udp
AT 91.239.24.143:6892 udp
AT 91.239.24.144:6892 udp
AT 91.239.24.145:6892 udp
AT 91.239.24.146:6892 udp
AT 91.239.24.147:6892 udp
AT 91.239.24.148:6892 udp
AT 91.239.24.149:6892 udp
AT 91.239.24.150:6892 udp
AT 91.239.24.151:6892 udp
AT 91.239.24.152:6892 udp
AT 91.239.24.153:6892 udp
AT 91.239.24.154:6892 udp
AT 91.239.24.155:6892 udp
AT 91.239.24.156:6892 udp
AT 91.239.24.157:6892 udp
AT 91.239.24.158:6892 udp
AT 91.239.24.159:6892 udp
AT 91.239.24.160:6892 udp
AT 91.239.24.161:6892 udp
AT 91.239.24.162:6892 udp
AT 91.239.24.163:6892 udp
AT 91.239.24.164:6892 udp
AT 91.239.24.165:6892 udp
AT 91.239.24.166:6892 udp
AT 91.239.24.167:6892 udp
AT 91.239.24.168:6892 udp
AT 91.239.24.169:6892 udp
AT 91.239.24.170:6892 udp
AT 91.239.24.171:6892 udp
AT 91.239.24.172:6892 udp
AT 91.239.24.173:6892 udp
AT 91.239.24.174:6892 udp
AT 91.239.24.175:6892 udp
AT 91.239.24.176:6892 udp
AT 91.239.24.177:6892 udp
AT 91.239.24.178:6892 udp
AT 91.239.24.179:6892 udp
AT 91.239.24.180:6892 udp
AT 91.239.24.181:6892 udp
AT 91.239.24.182:6892 udp
AT 91.239.24.183:6892 udp
AT 91.239.24.184:6892 udp
AT 91.239.24.185:6892 udp
AT 91.239.24.186:6892 udp
AT 91.239.24.187:6892 udp
AT 91.239.24.188:6892 udp
AT 91.239.24.189:6892 udp
AT 91.239.24.190:6892 udp
AT 91.239.24.191:6892 udp
AT 91.239.24.192:6892 udp
AT 91.239.24.193:6892 udp
AT 91.239.24.194:6892 udp
AT 91.239.24.195:6892 udp
AT 91.239.24.196:6892 udp
AT 91.239.24.197:6892 udp
AT 91.239.24.198:6892 udp
AT 91.239.24.199:6892 udp
AT 91.239.24.200:6892 udp
AT 91.239.24.201:6892 udp
AT 91.239.24.202:6892 udp
AT 91.239.24.203:6892 udp
AT 91.239.24.204:6892 udp
AT 91.239.24.205:6892 udp
AT 91.239.24.206:6892 udp
AT 91.239.24.207:6892 udp
AT 91.239.24.208:6892 udp
AT 91.239.24.209:6892 udp
AT 91.239.24.210:6892 udp
AT 91.239.24.211:6892 udp
AT 91.239.24.212:6892 udp
AT 91.239.24.213:6892 udp
AT 91.239.24.214:6892 udp
AT 91.239.24.215:6892 udp
AT 91.239.24.216:6892 udp
AT 91.239.24.217:6892 udp
AT 91.239.24.218:6892 udp
AT 91.239.24.219:6892 udp
AT 91.239.24.220:6892 udp
AT 91.239.24.221:6892 udp
AT 91.239.24.222:6892 udp
AT 91.239.24.223:6892 udp
AT 91.239.24.224:6892 udp
AT 91.239.24.225:6892 udp
AT 91.239.24.226:6892 udp
AT 91.239.24.227:6892 udp
AT 91.239.24.228:6892 udp
AT 91.239.24.229:6892 udp
AT 91.239.24.230:6892 udp
AT 91.239.24.231:6892 udp
AT 91.239.24.232:6892 udp
AT 91.239.24.233:6892 udp
AT 91.239.24.234:6892 udp
AT 91.239.24.235:6892 udp
AT 91.239.24.236:6892 udp
AT 91.239.24.237:6892 udp
AT 91.239.24.238:6892 udp
AT 91.239.24.239:6892 udp
AT 91.239.24.240:6892 udp
AT 91.239.24.241:6892 udp
AT 91.239.24.242:6892 udp
AT 91.239.24.243:6892 udp
AT 91.239.24.244:6892 udp
AT 91.239.24.245:6892 udp
AT 91.239.24.246:6892 udp
AT 91.239.24.247:6892 udp
AT 91.239.24.248:6892 udp
AT 91.239.24.249:6892 udp
AT 91.239.24.250:6892 udp
AT 91.239.24.251:6892 udp
AT 91.239.24.252:6892 udp
AT 91.239.24.253:6892 udp
AT 91.239.24.254:6892 udp
AT 91.239.24.255:6892 udp
NO 91.239.25.0:6892 udp
NO 91.239.25.1:6892 udp
NO 91.239.25.2:6892 udp
NO 91.239.25.3:6892 udp
NO 91.239.25.4:6892 udp
NO 91.239.25.5:6892 udp
NO 91.239.25.6:6892 udp
NO 91.239.25.7:6892 udp
NO 91.239.25.8:6892 udp
NO 91.239.25.9:6892 udp
NO 91.239.25.10:6892 udp
NO 91.239.25.11:6892 udp
NO 91.239.25.12:6892 udp
NO 91.239.25.13:6892 udp
NO 91.239.25.14:6892 udp
NO 91.239.25.15:6892 udp
NO 91.239.25.16:6892 udp
NO 91.239.25.17:6892 udp
NO 91.239.25.18:6892 udp
NO 91.239.25.19:6892 udp
NO 91.239.25.20:6892 udp
NO 91.239.25.21:6892 udp
NO 91.239.25.22:6892 udp
NO 91.239.25.23:6892 udp
NO 91.239.25.24:6892 udp
NO 91.239.25.25:6892 udp
NO 91.239.25.26:6892 udp
NO 91.239.25.27:6892 udp
NO 91.239.25.28:6892 udp
NO 91.239.25.29:6892 udp
NO 91.239.25.30:6892 udp
NO 91.239.25.31:6892 udp
NO 91.239.25.32:6892 udp
NO 91.239.25.33:6892 udp
NO 91.239.25.34:6892 udp
NO 91.239.25.35:6892 udp
NO 91.239.25.36:6892 udp
NO 91.239.25.37:6892 udp
NO 91.239.25.38:6892 udp
NO 91.239.25.39:6892 udp
NO 91.239.25.40:6892 udp
NO 91.239.25.41:6892 udp
NO 91.239.25.42:6892 udp
NO 91.239.25.43:6892 udp
NO 91.239.25.44:6892 udp
NO 91.239.25.45:6892 udp
NO 91.239.25.46:6892 udp
NO 91.239.25.47:6892 udp
NO 91.239.25.48:6892 udp
NO 91.239.25.49:6892 udp
NO 91.239.25.50:6892 udp
NO 91.239.25.51:6892 udp
NO 91.239.25.52:6892 udp
NO 91.239.25.53:6892 udp
NO 91.239.25.54:6892 udp
NO 91.239.25.55:6892 udp
NO 91.239.25.56:6892 udp
NO 91.239.25.57:6892 udp
NO 91.239.25.58:6892 udp
NO 91.239.25.59:6892 udp
NO 91.239.25.60:6892 udp
NO 91.239.25.61:6892 udp
NO 91.239.25.62:6892 udp
NO 91.239.25.63:6892 udp
NO 91.239.25.64:6892 udp
NO 91.239.25.65:6892 udp
NO 91.239.25.66:6892 udp
NO 91.239.25.67:6892 udp
NO 91.239.25.68:6892 udp
NO 91.239.25.69:6892 udp
NO 91.239.25.70:6892 udp
NO 91.239.25.71:6892 udp
NO 91.239.25.72:6892 udp
NO 91.239.25.73:6892 udp
NO 91.239.25.74:6892 udp
NO 91.239.25.75:6892 udp
NO 91.239.25.76:6892 udp
NO 91.239.25.77:6892 udp
NO 91.239.25.78:6892 udp
NO 91.239.25.79:6892 udp
NO 91.239.25.80:6892 udp
NO 91.239.25.81:6892 udp
NO 91.239.25.82:6892 udp
NO 91.239.25.83:6892 udp
NO 91.239.25.84:6892 udp
NO 91.239.25.85:6892 udp
NO 91.239.25.86:6892 udp
NO 91.239.25.87:6892 udp
NO 91.239.25.88:6892 udp
NO 91.239.25.89:6892 udp
NO 91.239.25.90:6892 udp
NO 91.239.25.91:6892 udp
NO 91.239.25.92:6892 udp
NO 91.239.25.93:6892 udp
NO 91.239.25.94:6892 udp
NO 91.239.25.95:6892 udp
NO 91.239.25.96:6892 udp
NO 91.239.25.97:6892 udp
NO 91.239.25.98:6892 udp
NO 91.239.25.99:6892 udp
NO 91.239.25.100:6892 udp
NO 91.239.25.101:6892 udp
NO 91.239.25.102:6892 udp
NO 91.239.25.103:6892 udp
NO 91.239.25.104:6892 udp
NO 91.239.25.105:6892 udp
NO 91.239.25.106:6892 udp
NO 91.239.25.107:6892 udp
NO 91.239.25.108:6892 udp
NO 91.239.25.109:6892 udp
NO 91.239.25.110:6892 udp
NO 91.239.25.111:6892 udp
NO 91.239.25.112:6892 udp
NO 91.239.25.113:6892 udp
NO 91.239.25.114:6892 udp
NO 91.239.25.115:6892 udp
NO 91.239.25.116:6892 udp
NO 91.239.25.117:6892 udp
NO 91.239.25.118:6892 udp
NO 91.239.25.119:6892 udp
NO 91.239.25.120:6892 udp
NO 91.239.25.121:6892 udp
NO 91.239.25.122:6892 udp
NO 91.239.25.123:6892 udp
NO 91.239.25.124:6892 udp
NO 91.239.25.125:6892 udp
NO 91.239.25.126:6892 udp
NO 91.239.25.127:6892 udp
NO 91.239.25.128:6892 udp
NO 91.239.25.129:6892 udp
NO 91.239.25.130:6892 udp
NO 91.239.25.131:6892 udp
NO 91.239.25.132:6892 udp
NO 91.239.25.133:6892 udp
NO 91.239.25.134:6892 udp
NO 91.239.25.135:6892 udp
NO 91.239.25.136:6892 udp
NO 91.239.25.137:6892 udp
NO 91.239.25.138:6892 udp
NO 91.239.25.139:6892 udp
NO 91.239.25.140:6892 udp
NO 91.239.25.141:6892 udp
NO 91.239.25.142:6892 udp
NO 91.239.25.143:6892 udp
NO 91.239.25.144:6892 udp
NO 91.239.25.145:6892 udp
NO 91.239.25.146:6892 udp
NO 91.239.25.147:6892 udp
NO 91.239.25.148:6892 udp
NO 91.239.25.149:6892 udp
NO 91.239.25.150:6892 udp
NO 91.239.25.151:6892 udp
NO 91.239.25.152:6892 udp
NO 91.239.25.153:6892 udp
NO 91.239.25.154:6892 udp
NO 91.239.25.155:6892 udp
NO 91.239.25.156:6892 udp
NO 91.239.25.157:6892 udp
NO 91.239.25.158:6892 udp
NO 91.239.25.159:6892 udp
NO 91.239.25.160:6892 udp
NO 91.239.25.161:6892 udp
NO 91.239.25.162:6892 udp
NO 91.239.25.163:6892 udp
NO 91.239.25.164:6892 udp
NO 91.239.25.165:6892 udp
NO 91.239.25.166:6892 udp
NO 91.239.25.167:6892 udp
NO 91.239.25.168:6892 udp
NO 91.239.25.169:6892 udp
NO 91.239.25.170:6892 udp
NO 91.239.25.171:6892 udp
NO 91.239.25.172:6892 udp
NO 91.239.25.173:6892 udp
NO 91.239.25.174:6892 udp
NO 91.239.25.175:6892 udp
NO 91.239.25.176:6892 udp
NO 91.239.25.177:6892 udp
NO 91.239.25.178:6892 udp
NO 91.239.25.179:6892 udp
NO 91.239.25.180:6892 udp
NO 91.239.25.181:6892 udp
NO 91.239.25.182:6892 udp
NO 91.239.25.183:6892 udp
NO 91.239.25.184:6892 udp
NO 91.239.25.185:6892 udp
NO 91.239.25.186:6892 udp
NO 91.239.25.187:6892 udp
NO 91.239.25.188:6892 udp
NO 91.239.25.189:6892 udp
NO 91.239.25.190:6892 udp
NO 91.239.25.191:6892 udp
NO 91.239.25.192:6892 udp
NO 91.239.25.193:6892 udp
NO 91.239.25.194:6892 udp
NO 91.239.25.195:6892 udp
NO 91.239.25.196:6892 udp
NO 91.239.25.197:6892 udp
NO 91.239.25.198:6892 udp
NO 91.239.25.199:6892 udp
NO 91.239.25.200:6892 udp
NO 91.239.25.201:6892 udp
NO 91.239.25.202:6892 udp
NO 91.239.25.203:6892 udp
NO 91.239.25.204:6892 udp
NO 91.239.25.205:6892 udp
NO 91.239.25.206:6892 udp
NO 91.239.25.207:6892 udp
NO 91.239.25.208:6892 udp
NO 91.239.25.209:6892 udp
NO 91.239.25.210:6892 udp
NO 91.239.25.211:6892 udp
NO 91.239.25.212:6892 udp
NO 91.239.25.213:6892 udp
NO 91.239.25.214:6892 udp
NO 91.239.25.215:6892 udp
NO 91.239.25.216:6892 udp
NO 91.239.25.217:6892 udp
NO 91.239.25.218:6892 udp
NO 91.239.25.219:6892 udp
NO 91.239.25.220:6892 udp
NO 91.239.25.221:6892 udp
NO 91.239.25.222:6892 udp
NO 91.239.25.223:6892 udp
NO 91.239.25.224:6892 udp
NO 91.239.25.225:6892 udp
NO 91.239.25.226:6892 udp
NO 91.239.25.227:6892 udp
NO 91.239.25.228:6892 udp
NO 91.239.25.229:6892 udp
NO 91.239.25.230:6892 udp
NO 91.239.25.231:6892 udp
NO 91.239.25.232:6892 udp
NO 91.239.25.233:6892 udp
NO 91.239.25.234:6892 udp
NO 91.239.25.235:6892 udp
NO 91.239.25.236:6892 udp
NO 91.239.25.237:6892 udp
NO 91.239.25.238:6892 udp
NO 91.239.25.239:6892 udp
NO 91.239.25.240:6892 udp
NO 91.239.25.241:6892 udp
NO 91.239.25.242:6892 udp
NO 91.239.25.243:6892 udp
NO 91.239.25.244:6892 udp
NO 91.239.25.245:6892 udp
NO 91.239.25.246:6892 udp
NO 91.239.25.247:6892 udp
NO 91.239.25.248:6892 udp
NO 91.239.25.249:6892 udp
NO 91.239.25.250:6892 udp
NO 91.239.25.251:6892 udp
NO 91.239.25.252:6892 udp
NO 91.239.25.253:6892 udp
NO 91.239.25.254:6892 udp
NO 91.239.25.255:6892 udp
US 8.8.8.8:53 api.blockcypher.com udp
US 104.20.98.10:80 api.blockcypher.com tcp
US 8.8.8.8:53 btc.blockr.io udp
US 8.8.8.8:53 bitaps.com udp
NL 178.128.255.179:443 bitaps.com tcp
US 8.8.8.8:53 chain.so udp
US 104.22.64.108:443 chain.so tcp

Files

\Users\Admin\AppData\Local\Temp\nsdEE0.tmp\System.dll

MD5 883eff06ac96966270731e4e22817e11
SHA1 523c87c98236cbc04430e87ec19b977595092ac8
SHA256 44e5dfd551b38e886214bd6b9c8ee913c4c4d1f085a6575d97c3e892b925da82
SHA512 60333253342476911c84bbc1d9bf8a29f811207787fdd6107dce8d2b6e031669303f28133ffc811971ed7792087fe90fb1faabc0af4e91c298ba51e28109a390

\Users\Admin\AppData\Local\Temp\psychopaths.dll

MD5 27eda239d0c8b8395d6fc316a409e615
SHA1 942f4a7908fef7c3b919bf06ac402d7bc5a49cc6
SHA256 8f79e234c6dc56fec14c11effcb5edffcc980bb734deda92ea61aae014daa047
SHA512 d0b63bdae2ae81c1bc662c1f17265e6ee2ff9705055522311d352cd30599b803c8619c7973baf69d8a4cb819859ac4e023569416b24d3a8af2d532e361e28ea3

memory/1248-11-0x0000000000380000-0x0000000000393000-memory.dmp

memory/1248-13-0x00000000003F0000-0x00000000003F1000-memory.dmp

memory/2620-14-0x0000000000400000-0x0000000000436000-memory.dmp

memory/2620-24-0x0000000000400000-0x0000000000436000-memory.dmp

memory/2620-22-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

memory/2620-20-0x0000000000400000-0x0000000000436000-memory.dmp

memory/2620-18-0x0000000000400000-0x0000000000436000-memory.dmp

memory/2620-17-0x0000000000400000-0x0000000000436000-memory.dmp

memory/2620-26-0x0000000000400000-0x0000000000436000-memory.dmp

memory/2620-28-0x0000000000400000-0x0000000000436000-memory.dmp

memory/2620-27-0x0000000000400000-0x0000000000436000-memory.dmp

memory/2620-33-0x0000000000400000-0x0000000000436000-memory.dmp

memory/2620-34-0x0000000000400000-0x0000000000436000-memory.dmp

memory/2620-36-0x0000000000400000-0x0000000000436000-memory.dmp

memory/2620-39-0x0000000000400000-0x0000000000436000-memory.dmp

memory/2620-38-0x0000000000400000-0x0000000000436000-memory.dmp

memory/2620-129-0x0000000000400000-0x0000000000436000-memory.dmp

C:\Users\Admin\Desktop\_C31K8X_README_.hta

MD5 17f5b5e6621c16d6be4469425b54b3a3
SHA1 a68df10d3134a22c516c7f482cc0f3b12ac4cae2
SHA256 62aa3db5b7d60e66711e3158b99a7a814aa4732c973937add45d744a4b378dd6
SHA512 6be02a98de91b9f2606c777ed901eefd3ea26d5fede543e7bf8807635888b762db0ad99e5789dc1766cac98b4e6b15194a4f67ee6579e6658f0c9011697bb6df

memory/2620-144-0x0000000003D10000-0x0000000003D12000-memory.dmp

memory/844-145-0x00000000001F0000-0x00000000001F2000-memory.dmp

C:\Users\Admin\Desktop\_C31K8X_README_.jpg

MD5 c3bc864a9398933e348b42eac5106ed4
SHA1 bda3b03b7a833398b4abf94d758940892fe1d6a8
SHA256 9578c934ba100090f3c78831fda8e4070c620568e6b5fa13cf9f2cf7f1a6f80c
SHA512 5289da661ccbaa3106e0460c44bcdc64bec9fb9a65d380460f0ed720d03626e2516f0a8dd35e6558dbc6a5e54b662730d2bb0ec449b0441bdf48630cbdce9300

memory/2620-173-0x0000000000400000-0x0000000000436000-memory.dmp

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

MD5 49aebf8cbd62d92ac215b2923fb1b9f5
SHA1 1723be06719828dda65ad804298d0431f6aff976
SHA256 b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512 bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

C:\Users\Admin\AppData\Local\Temp\Tar6DD7.tmp

MD5 4ea6026cf93ec6338144661bf1202cd1
SHA1 a1dec9044f750ad887935a01430bf49322fbdcb7
SHA256 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA512 6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

memory/2620-363-0x0000000000400000-0x0000000000436000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-30 10:22

Reported

2024-05-30 10:25

Platform

win10v2004-20240508-en

Max time kernel

133s

Max time network

149s

Command Line

"C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe"

Signatures

Cerber

ransomware cerber

Contacts a large (593) amount of remote hosts

discovery

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A

Drops startup file

Description Indicator Process Target
File opened for modification \??\c:\users\admin\appdata\roaming\microsoft\word\startup\ C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\tmpB9BB.bmp" C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A

Enumerates physical storage devices

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\taskkill.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\system32\PING.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4264 wrote to memory of 3904 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe
PID 4264 wrote to memory of 3904 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe
PID 4264 wrote to memory of 3904 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe
PID 4264 wrote to memory of 3904 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe
PID 4264 wrote to memory of 3904 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe
PID 4264 wrote to memory of 3904 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe
PID 4264 wrote to memory of 3904 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe
PID 4264 wrote to memory of 3904 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe
PID 4264 wrote to memory of 3904 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe
PID 3904 wrote to memory of 3792 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 3904 wrote to memory of 3792 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 3904 wrote to memory of 3792 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 3904 wrote to memory of 4244 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 3904 wrote to memory of 4244 N/A C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 4244 wrote to memory of 1608 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 4244 wrote to memory of 1608 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 4244 wrote to memory of 5112 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE
PID 4244 wrote to memory of 5112 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe"

C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe"

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_M6R1_README_.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x528 0x51c

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im "83e42e3941efad8abf8744840544bc98_JaffaCakes118.exe"

C:\Windows\system32\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
US 8.8.8.8:53 183.142.211.20.in-addr.arpa udp
US 8.8.8.8:53 249.197.17.2.in-addr.arpa udp
US 8.8.8.8:53 23.159.190.20.in-addr.arpa udp
BE 2.17.196.152:443 www.bing.com tcp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 152.196.17.2.in-addr.arpa udp
US 8.8.8.8:53 154.239.44.20.in-addr.arpa udp
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
US 15.44.20.0:6892 udp
US 15.44.20.1:6892 udp
US 15.44.20.2:6892 udp
US 15.44.20.3:6892 udp
US 15.44.20.4:6892 udp
US 15.44.20.5:6892 udp
US 15.44.20.6:6892 udp
US 15.44.20.7:6892 udp
US 15.44.20.8:6892 udp
US 15.44.20.9:6892 udp
US 15.44.20.10:6892 udp
US 15.44.20.11:6892 udp
US 15.44.20.12:6892 udp
US 15.44.20.13:6892 udp
US 15.44.20.14:6892 udp
US 15.44.20.15:6892 udp
US 15.44.20.16:6892 udp
US 15.44.20.17:6892 udp
US 15.44.20.18:6892 udp
US 15.44.20.19:6892 udp
US 15.44.20.20:6892 udp
US 15.44.20.21:6892 udp
US 15.44.20.22:6892 udp
US 15.44.20.23:6892 udp
US 15.44.20.24:6892 udp
US 15.44.20.25:6892 udp
US 15.44.20.26:6892 udp
US 15.44.20.27:6892 udp
US 15.44.20.28:6892 udp
US 15.44.20.29:6892 udp
US 15.44.20.30:6892 udp
US 15.44.20.31:6892 udp
US 16.43.12.0:6892 udp
US 16.43.12.1:6892 udp
US 16.43.12.2:6892 udp
US 16.43.12.3:6892 udp
US 16.43.12.4:6892 udp
US 16.43.12.5:6892 udp
US 16.43.12.6:6892 udp
US 16.43.12.7:6892 udp
US 16.43.12.8:6892 udp
US 16.43.12.9:6892 udp
US 16.43.12.10:6892 udp
US 16.43.12.11:6892 udp
US 16.43.12.12:6892 udp
US 16.43.12.13:6892 udp
US 16.43.12.14:6892 udp
US 16.43.12.15:6892 udp
US 16.43.12.16:6892 udp
US 16.43.12.17:6892 udp
US 16.43.12.18:6892 udp
US 16.43.12.19:6892 udp
US 16.43.12.20:6892 udp
US 16.43.12.21:6892 udp
US 16.43.12.22:6892 udp
US 16.43.12.23:6892 udp
US 16.43.12.24:6892 udp
US 16.43.12.25:6892 udp
US 16.43.12.26:6892 udp
US 16.43.12.27:6892 udp
US 16.43.12.28:6892 udp
US 16.43.12.29:6892 udp
US 16.43.12.30:6892 udp
US 16.43.12.31:6892 udp
AT 91.239.24.0:6892 udp
AT 91.239.24.1:6892 udp
AT 91.239.24.2:6892 udp
AT 91.239.24.3:6892 udp
AT 91.239.24.4:6892 udp
AT 91.239.24.5:6892 udp
AT 91.239.24.6:6892 udp
AT 91.239.24.7:6892 udp
AT 91.239.24.8:6892 udp
AT 91.239.24.9:6892 udp
AT 91.239.24.10:6892 udp
AT 91.239.24.11:6892 udp
AT 91.239.24.12:6892 udp
AT 91.239.24.13:6892 udp
AT 91.239.24.14:6892 udp
AT 91.239.24.15:6892 udp
AT 91.239.24.16:6892 udp
AT 91.239.24.17:6892 udp
AT 91.239.24.18:6892 udp
AT 91.239.24.19:6892 udp
AT 91.239.24.20:6892 udp
AT 91.239.24.21:6892 udp
AT 91.239.24.22:6892 udp
AT 91.239.24.23:6892 udp
AT 91.239.24.24:6892 udp
AT 91.239.24.25:6892 udp
AT 91.239.24.26:6892 udp
AT 91.239.24.27:6892 udp
AT 91.239.24.28:6892 udp
AT 91.239.24.29:6892 udp
AT 91.239.24.30:6892 udp
AT 91.239.24.31:6892 udp
AT 91.239.24.32:6892 udp
AT 91.239.24.33:6892 udp
AT 91.239.24.34:6892 udp
AT 91.239.24.35:6892 udp
AT 91.239.24.36:6892 udp
AT 91.239.24.37:6892 udp
AT 91.239.24.38:6892 udp
AT 91.239.24.39:6892 udp
AT 91.239.24.40:6892 udp
AT 91.239.24.41:6892 udp
AT 91.239.24.42:6892 udp
AT 91.239.24.43:6892 udp
AT 91.239.24.44:6892 udp
AT 91.239.24.45:6892 udp
AT 91.239.24.46:6892 udp
AT 91.239.24.47:6892 udp
AT 91.239.24.48:6892 udp
AT 91.239.24.49:6892 udp
AT 91.239.24.50:6892 udp
AT 91.239.24.51:6892 udp
AT 91.239.24.52:6892 udp
AT 91.239.24.53:6892 udp
AT 91.239.24.54:6892 udp
AT 91.239.24.55:6892 udp
AT 91.239.24.56:6892 udp
AT 91.239.24.57:6892 udp
AT 91.239.24.58:6892 udp
AT 91.239.24.59:6892 udp
AT 91.239.24.60:6892 udp
AT 91.239.24.61:6892 udp
AT 91.239.24.62:6892 udp
AT 91.239.24.63:6892 udp
AT 91.239.24.64:6892 udp
AT 91.239.24.65:6892 udp
AT 91.239.24.66:6892 udp
AT 91.239.24.67:6892 udp
AT 91.239.24.68:6892 udp
AT 91.239.24.69:6892 udp
AT 91.239.24.70:6892 udp
AT 91.239.24.71:6892 udp
AT 91.239.24.72:6892 udp
AT 91.239.24.73:6892 udp
AT 91.239.24.74:6892 udp
AT 91.239.24.75:6892 udp
AT 91.239.24.76:6892 udp
AT 91.239.24.77:6892 udp
AT 91.239.24.78:6892 udp
AT 91.239.24.79:6892 udp
AT 91.239.24.80:6892 udp
AT 91.239.24.81:6892 udp
AT 91.239.24.82:6892 udp
AT 91.239.24.83:6892 udp
AT 91.239.24.84:6892 udp
AT 91.239.24.85:6892 udp
AT 91.239.24.86:6892 udp
AT 91.239.24.87:6892 udp
AT 91.239.24.88:6892 udp
AT 91.239.24.89:6892 udp
AT 91.239.24.90:6892 udp
AT 91.239.24.91:6892 udp
AT 91.239.24.92:6892 udp
AT 91.239.24.93:6892 udp
AT 91.239.24.94:6892 udp
AT 91.239.24.95:6892 udp
AT 91.239.24.96:6892 udp
AT 91.239.24.97:6892 udp
AT 91.239.24.98:6892 udp
AT 91.239.24.99:6892 udp
AT 91.239.24.100:6892 udp
AT 91.239.24.101:6892 udp
AT 91.239.24.102:6892 udp
AT 91.239.24.103:6892 udp
AT 91.239.24.104:6892 udp
AT 91.239.24.105:6892 udp
AT 91.239.24.106:6892 udp
AT 91.239.24.107:6892 udp
AT 91.239.24.108:6892 udp
AT 91.239.24.109:6892 udp
AT 91.239.24.110:6892 udp
AT 91.239.24.111:6892 udp
AT 91.239.24.112:6892 udp
AT 91.239.24.113:6892 udp
AT 91.239.24.114:6892 udp
AT 91.239.24.115:6892 udp
AT 91.239.24.116:6892 udp
AT 91.239.24.117:6892 udp
AT 91.239.24.118:6892 udp
AT 91.239.24.119:6892 udp
AT 91.239.24.120:6892 udp
AT 91.239.24.121:6892 udp
AT 91.239.24.122:6892 udp
AT 91.239.24.123:6892 udp
AT 91.239.24.124:6892 udp
AT 91.239.24.125:6892 udp
AT 91.239.24.126:6892 udp
AT 91.239.24.127:6892 udp
AT 91.239.24.128:6892 udp
AT 91.239.24.129:6892 udp
AT 91.239.24.130:6892 udp
AT 91.239.24.131:6892 udp
AT 91.239.24.132:6892 udp
AT 91.239.24.133:6892 udp
AT 91.239.24.134:6892 udp
AT 91.239.24.135:6892 udp
AT 91.239.24.136:6892 udp
AT 91.239.24.137:6892 udp
AT 91.239.24.138:6892 udp
AT 91.239.24.139:6892 udp
AT 91.239.24.140:6892 udp
AT 91.239.24.141:6892 udp
AT 91.239.24.142:6892 udp
AT 91.239.24.143:6892 udp
AT 91.239.24.144:6892 udp
AT 91.239.24.145:6892 udp
AT 91.239.24.146:6892 udp
AT 91.239.24.147:6892 udp
AT 91.239.24.148:6892 udp
AT 91.239.24.149:6892 udp
AT 91.239.24.150:6892 udp
AT 91.239.24.151:6892 udp
AT 91.239.24.152:6892 udp
AT 91.239.24.153:6892 udp
AT 91.239.24.154:6892 udp
AT 91.239.24.155:6892 udp
AT 91.239.24.156:6892 udp
AT 91.239.24.157:6892 udp
AT 91.239.24.158:6892 udp
AT 91.239.24.159:6892 udp
AT 91.239.24.160:6892 udp
AT 91.239.24.161:6892 udp
AT 91.239.24.162:6892 udp
AT 91.239.24.163:6892 udp
AT 91.239.24.164:6892 udp
AT 91.239.24.165:6892 udp
AT 91.239.24.166:6892 udp
AT 91.239.24.167:6892 udp
AT 91.239.24.168:6892 udp
AT 91.239.24.169:6892 udp
AT 91.239.24.170:6892 udp
AT 91.239.24.171:6892 udp
AT 91.239.24.172:6892 udp
AT 91.239.24.173:6892 udp
AT 91.239.24.174:6892 udp
AT 91.239.24.175:6892 udp
AT 91.239.24.176:6892 udp
AT 91.239.24.177:6892 udp
AT 91.239.24.178:6892 udp
AT 91.239.24.179:6892 udp
AT 91.239.24.180:6892 udp
AT 91.239.24.181:6892 udp
AT 91.239.24.182:6892 udp
AT 91.239.24.183:6892 udp
AT 91.239.24.184:6892 udp
AT 91.239.24.185:6892 udp
AT 91.239.24.186:6892 udp
AT 91.239.24.187:6892 udp
AT 91.239.24.188:6892 udp
AT 91.239.24.189:6892 udp
AT 91.239.24.190:6892 udp
AT 91.239.24.191:6892 udp
AT 91.239.24.192:6892 udp
AT 91.239.24.193:6892 udp
AT 91.239.24.194:6892 udp
AT 91.239.24.195:6892 udp
AT 91.239.24.196:6892 udp
AT 91.239.24.197:6892 udp
AT 91.239.24.198:6892 udp
AT 91.239.24.199:6892 udp
AT 91.239.24.200:6892 udp
AT 91.239.24.201:6892 udp
AT 91.239.24.202:6892 udp
AT 91.239.24.203:6892 udp
AT 91.239.24.204:6892 udp
AT 91.239.24.205:6892 udp
AT 91.239.24.206:6892 udp
AT 91.239.24.207:6892 udp
AT 91.239.24.208:6892 udp
AT 91.239.24.209:6892 udp
AT 91.239.24.210:6892 udp
AT 91.239.24.211:6892 udp
AT 91.239.24.212:6892 udp
AT 91.239.24.213:6892 udp
AT 91.239.24.214:6892 udp
AT 91.239.24.215:6892 udp
AT 91.239.24.216:6892 udp
AT 91.239.24.217:6892 udp
AT 91.239.24.218:6892 udp
AT 91.239.24.219:6892 udp
AT 91.239.24.220:6892 udp
AT 91.239.24.221:6892 udp
AT 91.239.24.222:6892 udp
AT 91.239.24.223:6892 udp
AT 91.239.24.224:6892 udp
AT 91.239.24.225:6892 udp
AT 91.239.24.226:6892 udp
AT 91.239.24.227:6892 udp
AT 91.239.24.228:6892 udp
AT 91.239.24.229:6892 udp
AT 91.239.24.230:6892 udp
AT 91.239.24.231:6892 udp
AT 91.239.24.232:6892 udp
AT 91.239.24.233:6892 udp
AT 91.239.24.234:6892 udp
AT 91.239.24.235:6892 udp
AT 91.239.24.236:6892 udp
AT 91.239.24.237:6892 udp
AT 91.239.24.238:6892 udp
AT 91.239.24.239:6892 udp
AT 91.239.24.240:6892 udp
AT 91.239.24.241:6892 udp
AT 91.239.24.242:6892 udp
AT 91.239.24.243:6892 udp
AT 91.239.24.244:6892 udp
AT 91.239.24.245:6892 udp
AT 91.239.24.246:6892 udp
AT 91.239.24.247:6892 udp
AT 91.239.24.248:6892 udp
AT 91.239.24.249:6892 udp
AT 91.239.24.250:6892 udp
AT 91.239.24.251:6892 udp
AT 91.239.24.252:6892 udp
AT 91.239.24.253:6892 udp
AT 91.239.24.254:6892 udp
US 8.8.8.8:53 0.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 1.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 2.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 3.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 4.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 6.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 7.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 8.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 9.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 10.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 12.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 11.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 13.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 14.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 15.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 16.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 17.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 18.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 19.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 20.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 21.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 22.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 23.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 24.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 25.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 26.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 27.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 28.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 29.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 30.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 31.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 0.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 1.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 2.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 3.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 4.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 5.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 6.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 7.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 9.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 10.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 11.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 12.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 13.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 14.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 15.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 16.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 5.20.44.15.in-addr.arpa udp
US 8.8.8.8:53 17.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 8.12.43.16.in-addr.arpa udp
AT 91.239.24.255:6892 udp
NO 91.239.25.0:6892 udp
NO 91.239.25.1:6892 udp
NO 91.239.25.2:6892 udp
NO 91.239.25.3:6892 udp
NO 91.239.25.4:6892 udp
NO 91.239.25.5:6892 udp
NO 91.239.25.6:6892 udp
NO 91.239.25.7:6892 udp
NO 91.239.25.8:6892 udp
NO 91.239.25.9:6892 udp
NO 91.239.25.10:6892 udp
NO 91.239.25.11:6892 udp
NO 91.239.25.12:6892 udp
NO 91.239.25.13:6892 udp
NO 91.239.25.14:6892 udp
NO 91.239.25.15:6892 udp
NO 91.239.25.16:6892 udp
NO 91.239.25.17:6892 udp
NO 91.239.25.18:6892 udp
NO 91.239.25.19:6892 udp
NO 91.239.25.20:6892 udp
NO 91.239.25.21:6892 udp
NO 91.239.25.22:6892 udp
NO 91.239.25.23:6892 udp
NO 91.239.25.24:6892 udp
NO 91.239.25.25:6892 udp
NO 91.239.25.26:6892 udp
NO 91.239.25.27:6892 udp
NO 91.239.25.28:6892 udp
NO 91.239.25.29:6892 udp
NO 91.239.25.30:6892 udp
NO 91.239.25.31:6892 udp
NO 91.239.25.32:6892 udp
NO 91.239.25.33:6892 udp
NO 91.239.25.34:6892 udp
NO 91.239.25.35:6892 udp
NO 91.239.25.36:6892 udp
NO 91.239.25.37:6892 udp
NO 91.239.25.38:6892 udp
NO 91.239.25.39:6892 udp
NO 91.239.25.40:6892 udp
NO 91.239.25.41:6892 udp
NO 91.239.25.42:6892 udp
NO 91.239.25.43:6892 udp
NO 91.239.25.44:6892 udp
NO 91.239.25.45:6892 udp
NO 91.239.25.46:6892 udp
NO 91.239.25.47:6892 udp
NO 91.239.25.48:6892 udp
NO 91.239.25.49:6892 udp
NO 91.239.25.50:6892 udp
NO 91.239.25.51:6892 udp
NO 91.239.25.52:6892 udp
NO 91.239.25.53:6892 udp
NO 91.239.25.54:6892 udp
NO 91.239.25.55:6892 udp
NO 91.239.25.56:6892 udp
NO 91.239.25.57:6892 udp
NO 91.239.25.58:6892 udp
NO 91.239.25.59:6892 udp
NO 91.239.25.60:6892 udp
NO 91.239.25.61:6892 udp
NO 91.239.25.62:6892 udp
NO 91.239.25.63:6892 udp
NO 91.239.25.64:6892 udp
NO 91.239.25.65:6892 udp
NO 91.239.25.66:6892 udp
NO 91.239.25.67:6892 udp
NO 91.239.25.68:6892 udp
NO 91.239.25.69:6892 udp
NO 91.239.25.70:6892 udp
NO 91.239.25.71:6892 udp
NO 91.239.25.72:6892 udp
NO 91.239.25.73:6892 udp
NO 91.239.25.74:6892 udp
NO 91.239.25.75:6892 udp
NO 91.239.25.76:6892 udp
NO 91.239.25.77:6892 udp
NO 91.239.25.78:6892 udp
NO 91.239.25.79:6892 udp
NO 91.239.25.80:6892 udp
NO 91.239.25.81:6892 udp
NO 91.239.25.82:6892 udp
NO 91.239.25.83:6892 udp
NO 91.239.25.84:6892 udp
NO 91.239.25.85:6892 udp
NO 91.239.25.86:6892 udp
NO 91.239.25.87:6892 udp
NO 91.239.25.88:6892 udp
NO 91.239.25.89:6892 udp
NO 91.239.25.90:6892 udp
NO 91.239.25.91:6892 udp
NO 91.239.25.92:6892 udp
NO 91.239.25.93:6892 udp
NO 91.239.25.94:6892 udp
NO 91.239.25.95:6892 udp
NO 91.239.25.96:6892 udp
NO 91.239.25.97:6892 udp
NO 91.239.25.98:6892 udp
NO 91.239.25.99:6892 udp
NO 91.239.25.100:6892 udp
NO 91.239.25.101:6892 udp
NO 91.239.25.102:6892 udp
NO 91.239.25.103:6892 udp
NO 91.239.25.104:6892 udp
NO 91.239.25.105:6892 udp
NO 91.239.25.106:6892 udp
NO 91.239.25.107:6892 udp
NO 91.239.25.108:6892 udp
NO 91.239.25.109:6892 udp
NO 91.239.25.110:6892 udp
NO 91.239.25.111:6892 udp
NO 91.239.25.112:6892 udp
NO 91.239.25.113:6892 udp
NO 91.239.25.114:6892 udp
NO 91.239.25.115:6892 udp
NO 91.239.25.116:6892 udp
NO 91.239.25.117:6892 udp
NO 91.239.25.118:6892 udp
NO 91.239.25.119:6892 udp
NO 91.239.25.120:6892 udp
NO 91.239.25.121:6892 udp
NO 91.239.25.122:6892 udp
NO 91.239.25.123:6892 udp
NO 91.239.25.124:6892 udp
NO 91.239.25.125:6892 udp
NO 91.239.25.126:6892 udp
NO 91.239.25.127:6892 udp
NO 91.239.25.128:6892 udp
NO 91.239.25.129:6892 udp
NO 91.239.25.130:6892 udp
NO 91.239.25.131:6892 udp
NO 91.239.25.132:6892 udp
NO 91.239.25.133:6892 udp
NO 91.239.25.134:6892 udp
NO 91.239.25.135:6892 udp
NO 91.239.25.136:6892 udp
NO 91.239.25.137:6892 udp
NO 91.239.25.138:6892 udp
NO 91.239.25.139:6892 udp
NO 91.239.25.140:6892 udp
NO 91.239.25.141:6892 udp
NO 91.239.25.142:6892 udp
NO 91.239.25.143:6892 udp
NO 91.239.25.144:6892 udp
NO 91.239.25.145:6892 udp
NO 91.239.25.146:6892 udp
NO 91.239.25.147:6892 udp
NO 91.239.25.148:6892 udp
NO 91.239.25.149:6892 udp
NO 91.239.25.150:6892 udp
NO 91.239.25.151:6892 udp
NO 91.239.25.152:6892 udp
NO 91.239.25.153:6892 udp
NO 91.239.25.154:6892 udp
NO 91.239.25.155:6892 udp
NO 91.239.25.156:6892 udp
NO 91.239.25.157:6892 udp
NO 91.239.25.158:6892 udp
NO 91.239.25.159:6892 udp
NO 91.239.25.160:6892 udp
NO 91.239.25.161:6892 udp
NO 91.239.25.162:6892 udp
NO 91.239.25.163:6892 udp
NO 91.239.25.164:6892 udp
NO 91.239.25.165:6892 udp
NO 91.239.25.166:6892 udp
NO 91.239.25.167:6892 udp
NO 91.239.25.168:6892 udp
NO 91.239.25.169:6892 udp
NO 91.239.25.170:6892 udp
NO 91.239.25.171:6892 udp
NO 91.239.25.172:6892 udp
NO 91.239.25.173:6892 udp
NO 91.239.25.174:6892 udp
NO 91.239.25.175:6892 udp
NO 91.239.25.176:6892 udp
NO 91.239.25.177:6892 udp
NO 91.239.25.178:6892 udp
NO 91.239.25.179:6892 udp
NO 91.239.25.180:6892 udp
NO 91.239.25.181:6892 udp
NO 91.239.25.182:6892 udp
NO 91.239.25.183:6892 udp
NO 91.239.25.184:6892 udp
NO 91.239.25.185:6892 udp
NO 91.239.25.186:6892 udp
NO 91.239.25.187:6892 udp
NO 91.239.25.188:6892 udp
NO 91.239.25.189:6892 udp
NO 91.239.25.190:6892 udp
NO 91.239.25.191:6892 udp
NO 91.239.25.192:6892 udp
NO 91.239.25.193:6892 udp
NO 91.239.25.194:6892 udp
NO 91.239.25.195:6892 udp
NO 91.239.25.196:6892 udp
NO 91.239.25.197:6892 udp
NO 91.239.25.198:6892 udp
NO 91.239.25.199:6892 udp
NO 91.239.25.200:6892 udp
NO 91.239.25.201:6892 udp
NO 91.239.25.202:6892 udp
NO 91.239.25.203:6892 udp
NO 91.239.25.204:6892 udp
NO 91.239.25.205:6892 udp
NO 91.239.25.206:6892 udp
NO 91.239.25.207:6892 udp
NO 91.239.25.208:6892 udp
NO 91.239.25.209:6892 udp
NO 91.239.25.210:6892 udp
NO 91.239.25.211:6892 udp
NO 91.239.25.212:6892 udp
NO 91.239.25.213:6892 udp
NO 91.239.25.214:6892 udp
NO 91.239.25.215:6892 udp
NO 91.239.25.216:6892 udp
NO 91.239.25.217:6892 udp
NO 91.239.25.218:6892 udp
NO 91.239.25.219:6892 udp
NO 91.239.25.220:6892 udp
NO 91.239.25.221:6892 udp
NO 91.239.25.222:6892 udp
NO 91.239.25.223:6892 udp
NO 91.239.25.224:6892 udp
NO 91.239.25.225:6892 udp
NO 91.239.25.226:6892 udp
NO 91.239.25.227:6892 udp
NO 91.239.25.228:6892 udp
NO 91.239.25.229:6892 udp
NO 91.239.25.230:6892 udp
NO 91.239.25.231:6892 udp
NO 91.239.25.232:6892 udp
NO 91.239.25.233:6892 udp
NO 91.239.25.234:6892 udp
NO 91.239.25.235:6892 udp
NO 91.239.25.236:6892 udp
NO 91.239.25.237:6892 udp
NO 91.239.25.238:6892 udp
NO 91.239.25.239:6892 udp
NO 91.239.25.240:6892 udp
NO 91.239.25.241:6892 udp
NO 91.239.25.242:6892 udp
NO 91.239.25.243:6892 udp
NO 91.239.25.244:6892 udp
NO 91.239.25.245:6892 udp
NO 91.239.25.246:6892 udp
NO 91.239.25.247:6892 udp
NO 91.239.25.248:6892 udp
NO 91.239.25.249:6892 udp
NO 91.239.25.250:6892 udp
NO 91.239.25.251:6892 udp
NO 91.239.25.252:6892 udp
NO 91.239.25.253:6892 udp
NO 91.239.25.254:6892 udp
US 8.8.8.8:53 19.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 20.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 18.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 21.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 22.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 23.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 24.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 25.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 26.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 27.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 28.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 29.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 30.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 31.12.43.16.in-addr.arpa udp
US 8.8.8.8:53 0.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 2.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 1.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 3.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 5.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 4.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 6.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 7.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 8.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 9.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 10.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 11.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 12.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 14.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 13.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 15.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 16.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 17.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 19.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 18.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 20.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 21.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 23.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 22.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 25.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 24.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 26.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 27.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 29.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 28.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 30.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 31.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 32.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 34.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 35.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 36.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 37.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 38.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 39.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 40.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 42.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 41.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 43.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 44.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 45.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 46.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 47.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 48.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 49.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 50.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 51.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 52.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 53.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 54.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 55.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 56.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 57.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 58.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 59.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 60.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 61.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 62.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 63.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 64.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 65.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 66.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 67.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 68.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 69.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 70.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 71.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 72.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 73.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 74.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 75.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 76.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 77.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 78.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 79.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 80.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 81.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 82.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 83.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 84.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 85.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 86.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 87.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 88.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 89.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 90.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 91.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 92.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 93.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 94.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 95.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 96.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 97.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 98.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 99.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 100.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 101.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 102.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 103.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 104.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 105.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 106.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 107.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 108.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 109.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 110.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 111.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 112.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 113.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 114.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 115.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 116.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 118.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 117.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 119.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 120.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 121.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 122.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 123.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 124.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 125.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 127.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 126.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 128.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 129.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 130.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 131.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 132.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 133.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 134.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 135.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 136.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 137.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 138.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 139.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 140.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 141.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 142.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 143.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 144.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 145.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 146.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 147.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 148.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 149.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 150.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 151.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 153.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 152.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 154.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 155.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 156.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 157.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 158.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 159.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 160.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 161.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 162.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 163.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 164.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 165.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 166.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 167.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 168.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 170.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 169.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 171.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 172.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 173.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 174.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 176.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 177.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 178.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 175.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 179.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 180.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 181.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 182.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 183.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 184.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 185.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 186.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 187.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 188.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 189.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 190.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 191.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 192.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 193.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 194.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 195.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 196.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 198.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 197.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 199.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 200.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 202.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 201.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 203.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 204.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 205.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 206.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 207.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 209.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 208.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 210.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 211.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 212.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 213.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 214.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 215.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 216.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 217.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 218.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 219.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 220.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 222.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 221.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 223.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 224.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 226.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 225.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 228.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 227.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 229.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 230.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 231.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 232.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 233.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 234.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 235.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 236.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 237.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 238.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 239.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 240.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 241.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 242.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 243.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 244.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 245.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 246.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 248.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 249.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 250.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 251.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 252.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 253.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 254.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 255.24.239.91.in-addr.arpa udp
US 8.8.8.8:53 0.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 1.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 2.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 3.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 4.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 5.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 6.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 7.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 8.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 9.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 10.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 11.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 12.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 13.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 14.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 15.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 16.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 17.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 18.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 19.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 20.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 21.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 22.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 23.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 24.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 25.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 26.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 27.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 28.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 29.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 30.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 32.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 31.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 34.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 33.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 35.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 36.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 37.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 38.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 39.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 40.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 41.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 42.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 43.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 44.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 45.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 46.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 47.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 48.25.239.91.in-addr.arpa udp
NO 91.239.25.255:6892 udp
US 8.8.8.8:53 49.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 50.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 51.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 52.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 53.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 54.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 55.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 56.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 57.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 58.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 59.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 60.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 61.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 62.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 63.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 64.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 65.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 66.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 67.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 68.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 70.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 69.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 71.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 72.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 73.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 74.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 75.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 76.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 77.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 78.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 79.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 80.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 81.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 82.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 83.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 84.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 85.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 86.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 88.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 87.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 89.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 91.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 92.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 93.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 94.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 95.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 96.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 97.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 98.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 99.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 100.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 101.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 102.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 103.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 104.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 105.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 106.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 107.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 108.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 109.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 110.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 111.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 112.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 113.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 114.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 115.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 116.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 117.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 118.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 119.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 120.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 121.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 123.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 122.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 124.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 125.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 126.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 127.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 128.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 129.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 130.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 131.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 132.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 133.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 134.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 135.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 136.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 137.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 138.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 139.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 140.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 141.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 142.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 143.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 144.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 145.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 146.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 147.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 148.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 149.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 150.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 151.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 152.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 153.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 154.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 155.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 156.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 157.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 158.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 159.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 160.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 161.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 162.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 163.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 164.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 165.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 166.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 167.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 168.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 169.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 170.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 171.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 172.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 173.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 174.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 175.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 176.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 177.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 178.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 179.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 180.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 181.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 182.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 183.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 185.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 186.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 187.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 188.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 190.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 193.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 194.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 195.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 196.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 197.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 198.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 199.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 200.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 201.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 202.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 203.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 204.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 205.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 206.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 207.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 208.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 209.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 210.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 211.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 212.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 214.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 215.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 216.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 217.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 218.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 219.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 220.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 221.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 222.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 223.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 224.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 225.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 226.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 227.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 228.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 229.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 231.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 232.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 233.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 234.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 235.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 237.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 238.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 239.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 240.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 241.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 242.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 243.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 244.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 245.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 246.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 247.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 248.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 249.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 250.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 251.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 252.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 253.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 254.25.239.91.in-addr.arpa udp
US 8.8.8.8:53 255.25.239.91.in-addr.arpa udp
US 15.44.20.0:6892 udp
US 15.44.20.1:6892 udp
US 15.44.20.2:6892 udp
US 15.44.20.3:6892 udp
US 15.44.20.4:6892 udp
US 15.44.20.5:6892 udp
US 15.44.20.6:6892 udp
US 15.44.20.7:6892 udp
US 15.44.20.8:6892 udp
US 15.44.20.9:6892 udp
US 15.44.20.10:6892 udp
US 15.44.20.11:6892 udp
US 15.44.20.12:6892 udp
US 15.44.20.13:6892 udp
US 15.44.20.14:6892 udp
US 15.44.20.15:6892 udp
US 15.44.20.16:6892 udp
US 15.44.20.17:6892 udp
US 15.44.20.18:6892 udp
US 15.44.20.19:6892 udp
US 15.44.20.20:6892 udp
US 15.44.20.21:6892 udp
US 15.44.20.22:6892 udp
US 15.44.20.23:6892 udp
US 15.44.20.24:6892 udp
US 15.44.20.25:6892 udp
US 15.44.20.26:6892 udp
US 15.44.20.27:6892 udp
US 15.44.20.28:6892 udp
US 15.44.20.29:6892 udp
US 15.44.20.30:6892 udp
US 15.44.20.31:6892 udp
US 16.43.12.0:6892 udp
US 16.43.12.1:6892 udp
US 16.43.12.2:6892 udp
US 16.43.12.3:6892 udp
US 16.43.12.4:6892 udp
US 16.43.12.5:6892 udp
US 16.43.12.6:6892 udp
US 16.43.12.7:6892 udp
US 16.43.12.8:6892 udp
US 16.43.12.9:6892 udp
US 16.43.12.10:6892 udp
US 16.43.12.11:6892 udp
US 16.43.12.12:6892 udp
US 16.43.12.13:6892 udp
US 16.43.12.14:6892 udp
US 16.43.12.15:6892 udp
US 16.43.12.16:6892 udp
US 16.43.12.17:6892 udp
US 16.43.12.18:6892 udp
US 16.43.12.19:6892 udp
US 16.43.12.20:6892 udp
US 16.43.12.21:6892 udp
US 16.43.12.22:6892 udp
US 16.43.12.23:6892 udp
US 16.43.12.24:6892 udp
US 16.43.12.25:6892 udp
US 16.43.12.26:6892 udp
US 16.43.12.27:6892 udp
US 16.43.12.28:6892 udp
US 16.43.12.29:6892 udp
US 16.43.12.30:6892 udp
US 16.43.12.31:6892 udp
AT 91.239.24.0:6892 udp
AT 91.239.24.1:6892 udp
AT 91.239.24.2:6892 udp
AT 91.239.24.3:6892 udp
AT 91.239.24.4:6892 udp
AT 91.239.24.5:6892 udp
AT 91.239.24.6:6892 udp
AT 91.239.24.7:6892 udp
AT 91.239.24.8:6892 udp
AT 91.239.24.9:6892 udp
AT 91.239.24.10:6892 udp
AT 91.239.24.11:6892 udp
AT 91.239.24.12:6892 udp
AT 91.239.24.13:6892 udp
AT 91.239.24.14:6892 udp
AT 91.239.24.15:6892 udp
AT 91.239.24.16:6892 udp
AT 91.239.24.17:6892 udp
AT 91.239.24.18:6892 udp
AT 91.239.24.19:6892 udp
AT 91.239.24.20:6892 udp
AT 91.239.24.21:6892 udp
AT 91.239.24.22:6892 udp
AT 91.239.24.23:6892 udp
AT 91.239.24.24:6892 udp
AT 91.239.24.25:6892 udp
AT 91.239.24.26:6892 udp
AT 91.239.24.27:6892 udp
AT 91.239.24.28:6892 udp
AT 91.239.24.29:6892 udp
AT 91.239.24.30:6892 udp
AT 91.239.24.31:6892 udp
AT 91.239.24.32:6892 udp
AT 91.239.24.33:6892 udp
AT 91.239.24.34:6892 udp
AT 91.239.24.35:6892 udp
AT 91.239.24.36:6892 udp
AT 91.239.24.37:6892 udp
AT 91.239.24.38:6892 udp
AT 91.239.24.39:6892 udp
AT 91.239.24.40:6892 udp
AT 91.239.24.41:6892 udp
AT 91.239.24.42:6892 udp
AT 91.239.24.43:6892 udp
AT 91.239.24.44:6892 udp
AT 91.239.24.45:6892 udp
AT 91.239.24.46:6892 udp
AT 91.239.24.47:6892 udp
AT 91.239.24.48:6892 udp
AT 91.239.24.49:6892 udp
AT 91.239.24.50:6892 udp
AT 91.239.24.51:6892 udp
AT 91.239.24.52:6892 udp
AT 91.239.24.53:6892 udp
AT 91.239.24.54:6892 udp
AT 91.239.24.55:6892 udp
AT 91.239.24.56:6892 udp
AT 91.239.24.57:6892 udp
AT 91.239.24.58:6892 udp
AT 91.239.24.59:6892 udp
AT 91.239.24.60:6892 udp
AT 91.239.24.61:6892 udp
AT 91.239.24.62:6892 udp
AT 91.239.24.63:6892 udp
AT 91.239.24.64:6892 udp
AT 91.239.24.65:6892 udp
AT 91.239.24.66:6892 udp
AT 91.239.24.67:6892 udp
AT 91.239.24.68:6892 udp
AT 91.239.24.69:6892 udp
AT 91.239.24.70:6892 udp
AT 91.239.24.71:6892 udp
AT 91.239.24.72:6892 udp
AT 91.239.24.73:6892 udp
AT 91.239.24.74:6892 udp
AT 91.239.24.75:6892 udp
AT 91.239.24.76:6892 udp
AT 91.239.24.77:6892 udp
AT 91.239.24.78:6892 udp
AT 91.239.24.79:6892 udp
AT 91.239.24.80:6892 udp
AT 91.239.24.81:6892 udp
AT 91.239.24.82:6892 udp
AT 91.239.24.83:6892 udp
AT 91.239.24.84:6892 udp
AT 91.239.24.85:6892 udp
AT 91.239.24.86:6892 udp
AT 91.239.24.87:6892 udp
AT 91.239.24.88:6892 udp
AT 91.239.24.89:6892 udp
AT 91.239.24.90:6892 udp
AT 91.239.24.91:6892 udp
AT 91.239.24.92:6892 udp
AT 91.239.24.93:6892 udp
AT 91.239.24.94:6892 udp
AT 91.239.24.95:6892 udp
AT 91.239.24.96:6892 udp
AT 91.239.24.97:6892 udp
AT 91.239.24.98:6892 udp
AT 91.239.24.99:6892 udp
AT 91.239.24.100:6892 udp
AT 91.239.24.101:6892 udp
AT 91.239.24.102:6892 udp
AT 91.239.24.103:6892 udp
AT 91.239.24.104:6892 udp
AT 91.239.24.105:6892 udp
AT 91.239.24.106:6892 udp
AT 91.239.24.107:6892 udp
AT 91.239.24.108:6892 udp
AT 91.239.24.109:6892 udp
AT 91.239.24.110:6892 udp
AT 91.239.24.111:6892 udp
AT 91.239.24.112:6892 udp
AT 91.239.24.113:6892 udp
AT 91.239.24.114:6892 udp
AT 91.239.24.115:6892 udp
AT 91.239.24.116:6892 udp
AT 91.239.24.117:6892 udp
AT 91.239.24.118:6892 udp
AT 91.239.24.119:6892 udp
AT 91.239.24.120:6892 udp
AT 91.239.24.121:6892 udp
AT 91.239.24.122:6892 udp
AT 91.239.24.123:6892 udp
AT 91.239.24.124:6892 udp
AT 91.239.24.125:6892 udp
AT 91.239.24.126:6892 udp
AT 91.239.24.127:6892 udp
AT 91.239.24.128:6892 udp
AT 91.239.24.129:6892 udp
AT 91.239.24.130:6892 udp
AT 91.239.24.131:6892 udp
AT 91.239.24.132:6892 udp
AT 91.239.24.133:6892 udp
AT 91.239.24.134:6892 udp
AT 91.239.24.135:6892 udp
AT 91.239.24.136:6892 udp
AT 91.239.24.137:6892 udp
AT 91.239.24.138:6892 udp
AT 91.239.24.139:6892 udp
AT 91.239.24.140:6892 udp
AT 91.239.24.141:6892 udp
AT 91.239.24.142:6892 udp
AT 91.239.24.143:6892 udp
AT 91.239.24.144:6892 udp
AT 91.239.24.145:6892 udp
AT 91.239.24.146:6892 udp
AT 91.239.24.147:6892 udp
AT 91.239.24.148:6892 udp
AT 91.239.24.149:6892 udp
AT 91.239.24.150:6892 udp
AT 91.239.24.151:6892 udp
AT 91.239.24.152:6892 udp
AT 91.239.24.153:6892 udp
AT 91.239.24.154:6892 udp
AT 91.239.24.155:6892 udp
AT 91.239.24.156:6892 udp
AT 91.239.24.157:6892 udp
AT 91.239.24.158:6892 udp
AT 91.239.24.159:6892 udp
AT 91.239.24.160:6892 udp
AT 91.239.24.161:6892 udp
AT 91.239.24.162:6892 udp
AT 91.239.24.163:6892 udp
AT 91.239.24.164:6892 udp
AT 91.239.24.165:6892 udp
AT 91.239.24.166:6892 udp
AT 91.239.24.167:6892 udp
AT 91.239.24.168:6892 udp
AT 91.239.24.169:6892 udp
AT 91.239.24.170:6892 udp
AT 91.239.24.171:6892 udp
AT 91.239.24.172:6892 udp
AT 91.239.24.173:6892 udp
AT 91.239.24.174:6892 udp
AT 91.239.24.175:6892 udp
AT 91.239.24.176:6892 udp
AT 91.239.24.177:6892 udp
AT 91.239.24.178:6892 udp
AT 91.239.24.179:6892 udp
AT 91.239.24.180:6892 udp
AT 91.239.24.181:6892 udp
AT 91.239.24.182:6892 udp
AT 91.239.24.183:6892 udp
AT 91.239.24.184:6892 udp
AT 91.239.24.185:6892 udp
AT 91.239.24.186:6892 udp
AT 91.239.24.187:6892 udp
AT 91.239.24.188:6892 udp
AT 91.239.24.189:6892 udp
AT 91.239.24.190:6892 udp
AT 91.239.24.191:6892 udp
AT 91.239.24.192:6892 udp
AT 91.239.24.193:6892 udp
AT 91.239.24.194:6892 udp
AT 91.239.24.195:6892 udp
AT 91.239.24.196:6892 udp
AT 91.239.24.197:6892 udp
AT 91.239.24.198:6892 udp
AT 91.239.24.199:6892 udp
AT 91.239.24.200:6892 udp
AT 91.239.24.201:6892 udp
AT 91.239.24.202:6892 udp
AT 91.239.24.203:6892 udp
AT 91.239.24.204:6892 udp
AT 91.239.24.205:6892 udp
AT 91.239.24.206:6892 udp
AT 91.239.24.207:6892 udp
AT 91.239.24.208:6892 udp
AT 91.239.24.209:6892 udp
AT 91.239.24.210:6892 udp
AT 91.239.24.211:6892 udp
AT 91.239.24.212:6892 udp
AT 91.239.24.213:6892 udp
AT 91.239.24.214:6892 udp
AT 91.239.24.215:6892 udp
AT 91.239.24.216:6892 udp
AT 91.239.24.217:6892 udp
AT 91.239.24.218:6892 udp
AT 91.239.24.219:6892 udp
AT 91.239.24.220:6892 udp
AT 91.239.24.221:6892 udp
AT 91.239.24.222:6892 udp
AT 91.239.24.223:6892 udp
AT 91.239.24.224:6892 udp
AT 91.239.24.225:6892 udp
AT 91.239.24.226:6892 udp
AT 91.239.24.227:6892 udp
AT 91.239.24.228:6892 udp
AT 91.239.24.229:6892 udp
AT 91.239.24.230:6892 udp
AT 91.239.24.231:6892 udp
AT 91.239.24.232:6892 udp
AT 91.239.24.233:6892 udp
AT 91.239.24.234:6892 udp
AT 91.239.24.235:6892 udp
AT 91.239.24.236:6892 udp
AT 91.239.24.237:6892 udp
AT 91.239.24.238:6892 udp
AT 91.239.24.239:6892 udp
AT 91.239.24.240:6892 udp
AT 91.239.24.241:6892 udp
AT 91.239.24.242:6892 udp
AT 91.239.24.243:6892 udp
AT 91.239.24.244:6892 udp
AT 91.239.24.245:6892 udp
AT 91.239.24.246:6892 udp
AT 91.239.24.247:6892 udp
AT 91.239.24.248:6892 udp
AT 91.239.24.249:6892 udp
AT 91.239.24.250:6892 udp
AT 91.239.24.251:6892 udp
AT 91.239.24.252:6892 udp
AT 91.239.24.253:6892 udp
AT 91.239.24.254:6892 udp
US 8.8.8.8:53 86.23.85.13.in-addr.arpa udp
AT 91.239.24.255:6892 udp
NO 91.239.25.0:6892 udp
NO 91.239.25.1:6892 udp
NO 91.239.25.2:6892 udp
NO 91.239.25.3:6892 udp
NO 91.239.25.4:6892 udp
NO 91.239.25.5:6892 udp
NO 91.239.25.6:6892 udp
NO 91.239.25.7:6892 udp
NO 91.239.25.8:6892 udp
NO 91.239.25.9:6892 udp
NO 91.239.25.10:6892 udp
NO 91.239.25.11:6892 udp
NO 91.239.25.12:6892 udp
NO 91.239.25.13:6892 udp
NO 91.239.25.14:6892 udp
NO 91.239.25.15:6892 udp
NO 91.239.25.16:6892 udp
NO 91.239.25.17:6892 udp
NO 91.239.25.18:6892 udp
NO 91.239.25.19:6892 udp
NO 91.239.25.20:6892 udp
NO 91.239.25.21:6892 udp
NO 91.239.25.22:6892 udp
NO 91.239.25.23:6892 udp
NO 91.239.25.24:6892 udp
NO 91.239.25.25:6892 udp
NO 91.239.25.26:6892 udp
NO 91.239.25.27:6892 udp
NO 91.239.25.28:6892 udp
NO 91.239.25.29:6892 udp
NO 91.239.25.30:6892 udp
NO 91.239.25.31:6892 udp
NO 91.239.25.32:6892 udp
NO 91.239.25.33:6892 udp
NO 91.239.25.34:6892 udp
NO 91.239.25.35:6892 udp
NO 91.239.25.36:6892 udp
NO 91.239.25.37:6892 udp
NO 91.239.25.38:6892 udp
NO 91.239.25.39:6892 udp
NO 91.239.25.40:6892 udp
NO 91.239.25.41:6892 udp
NO 91.239.25.42:6892 udp
NO 91.239.25.43:6892 udp
NO 91.239.25.44:6892 udp
NO 91.239.25.45:6892 udp
NO 91.239.25.46:6892 udp
NO 91.239.25.47:6892 udp
NO 91.239.25.48:6892 udp
NO 91.239.25.49:6892 udp
NO 91.239.25.50:6892 udp
NO 91.239.25.51:6892 udp
NO 91.239.25.52:6892 udp
NO 91.239.25.53:6892 udp
NO 91.239.25.54:6892 udp
NO 91.239.25.55:6892 udp
NO 91.239.25.56:6892 udp
NO 91.239.25.57:6892 udp
NO 91.239.25.58:6892 udp
NO 91.239.25.59:6892 udp
NO 91.239.25.60:6892 udp
NO 91.239.25.61:6892 udp
NO 91.239.25.62:6892 udp
NO 91.239.25.63:6892 udp
NO 91.239.25.64:6892 udp
NO 91.239.25.65:6892 udp
NO 91.239.25.66:6892 udp
NO 91.239.25.67:6892 udp
NO 91.239.25.68:6892 udp
NO 91.239.25.69:6892 udp
NO 91.239.25.70:6892 udp
NO 91.239.25.71:6892 udp
NO 91.239.25.72:6892 udp
NO 91.239.25.73:6892 udp
NO 91.239.25.74:6892 udp
NO 91.239.25.75:6892 udp
NO 91.239.25.76:6892 udp
NO 91.239.25.77:6892 udp
NO 91.239.25.78:6892 udp
NO 91.239.25.79:6892 udp
NO 91.239.25.80:6892 udp
NO 91.239.25.81:6892 udp
NO 91.239.25.82:6892 udp
NO 91.239.25.83:6892 udp
NO 91.239.25.84:6892 udp
NO 91.239.25.85:6892 udp
NO 91.239.25.86:6892 udp
NO 91.239.25.87:6892 udp
NO 91.239.25.88:6892 udp
NO 91.239.25.89:6892 udp
NO 91.239.25.90:6892 udp
NO 91.239.25.91:6892 udp
NO 91.239.25.92:6892 udp
NO 91.239.25.93:6892 udp
NO 91.239.25.94:6892 udp
NO 91.239.25.95:6892 udp
NO 91.239.25.96:6892 udp
NO 91.239.25.97:6892 udp
NO 91.239.25.98:6892 udp
NO 91.239.25.99:6892 udp
NO 91.239.25.100:6892 udp
NO 91.239.25.101:6892 udp
NO 91.239.25.102:6892 udp
NO 91.239.25.103:6892 udp
NO 91.239.25.104:6892 udp
NO 91.239.25.105:6892 udp
NO 91.239.25.106:6892 udp
NO 91.239.25.107:6892 udp
NO 91.239.25.108:6892 udp
NO 91.239.25.109:6892 udp
NO 91.239.25.110:6892 udp
NO 91.239.25.111:6892 udp
NO 91.239.25.112:6892 udp
NO 91.239.25.113:6892 udp
NO 91.239.25.114:6892 udp
NO 91.239.25.115:6892 udp
NO 91.239.25.116:6892 udp
NO 91.239.25.117:6892 udp
NO 91.239.25.118:6892 udp
NO 91.239.25.119:6892 udp
NO 91.239.25.120:6892 udp
NO 91.239.25.121:6892 udp
NO 91.239.25.122:6892 udp
NO 91.239.25.123:6892 udp
NO 91.239.25.124:6892 udp
NO 91.239.25.125:6892 udp
NO 91.239.25.126:6892 udp
NO 91.239.25.127:6892 udp
NO 91.239.25.128:6892 udp
NO 91.239.25.129:6892 udp
NO 91.239.25.130:6892 udp
NO 91.239.25.131:6892 udp
NO 91.239.25.132:6892 udp
NO 91.239.25.133:6892 udp
NO 91.239.25.134:6892 udp
NO 91.239.25.135:6892 udp
NO 91.239.25.136:6892 udp
NO 91.239.25.137:6892 udp
NO 91.239.25.138:6892 udp
NO 91.239.25.139:6892 udp
NO 91.239.25.140:6892 udp
NO 91.239.25.141:6892 udp
NO 91.239.25.142:6892 udp
NO 91.239.25.143:6892 udp
NO 91.239.25.144:6892 udp
NO 91.239.25.145:6892 udp
NO 91.239.25.146:6892 udp
NO 91.239.25.147:6892 udp
NO 91.239.25.148:6892 udp
NO 91.239.25.149:6892 udp
NO 91.239.25.150:6892 udp
NO 91.239.25.151:6892 udp
NO 91.239.25.152:6892 udp
NO 91.239.25.153:6892 udp
NO 91.239.25.154:6892 udp
NO 91.239.25.155:6892 udp
NO 91.239.25.156:6892 udp
NO 91.239.25.157:6892 udp
NO 91.239.25.158:6892 udp
NO 91.239.25.159:6892 udp
NO 91.239.25.160:6892 udp
NO 91.239.25.161:6892 udp
NO 91.239.25.162:6892 udp
NO 91.239.25.163:6892 udp
NO 91.239.25.164:6892 udp
NO 91.239.25.165:6892 udp
NO 91.239.25.166:6892 udp
NO 91.239.25.167:6892 udp
NO 91.239.25.168:6892 udp
NO 91.239.25.169:6892 udp
NO 91.239.25.170:6892 udp
NO 91.239.25.171:6892 udp
NO 91.239.25.172:6892 udp
NO 91.239.25.173:6892 udp
NO 91.239.25.174:6892 udp
NO 91.239.25.175:6892 udp
NO 91.239.25.176:6892 udp
NO 91.239.25.177:6892 udp
NO 91.239.25.178:6892 udp
NO 91.239.25.179:6892 udp
NO 91.239.25.180:6892 udp
NO 91.239.25.181:6892 udp
NO 91.239.25.182:6892 udp
NO 91.239.25.183:6892 udp
NO 91.239.25.184:6892 udp
NO 91.239.25.185:6892 udp
NO 91.239.25.186:6892 udp
NO 91.239.25.187:6892 udp
NO 91.239.25.188:6892 udp
NO 91.239.25.189:6892 udp
NO 91.239.25.190:6892 udp
NO 91.239.25.191:6892 udp
NO 91.239.25.192:6892 udp
NO 91.239.25.193:6892 udp
NO 91.239.25.194:6892 udp
NO 91.239.25.195:6892 udp
NO 91.239.25.196:6892 udp
NO 91.239.25.197:6892 udp
NO 91.239.25.198:6892 udp
NO 91.239.25.199:6892 udp
NO 91.239.25.200:6892 udp
NO 91.239.25.201:6892 udp
NO 91.239.25.202:6892 udp
NO 91.239.25.203:6892 udp
NO 91.239.25.204:6892 udp
NO 91.239.25.205:6892 udp
NO 91.239.25.206:6892 udp
NO 91.239.25.207:6892 udp
NO 91.239.25.208:6892 udp
NO 91.239.25.209:6892 udp
NO 91.239.25.210:6892 udp
NO 91.239.25.211:6892 udp
NO 91.239.25.212:6892 udp
NO 91.239.25.213:6892 udp
NO 91.239.25.214:6892 udp
NO 91.239.25.215:6892 udp
NO 91.239.25.216:6892 udp
NO 91.239.25.217:6892 udp
NO 91.239.25.218:6892 udp
NO 91.239.25.219:6892 udp
NO 91.239.25.220:6892 udp
NO 91.239.25.221:6892 udp
NO 91.239.25.222:6892 udp
NO 91.239.25.223:6892 udp
NO 91.239.25.224:6892 udp
NO 91.239.25.225:6892 udp
NO 91.239.25.226:6892 udp
NO 91.239.25.227:6892 udp
NO 91.239.25.228:6892 udp
NO 91.239.25.229:6892 udp
NO 91.239.25.230:6892 udp
NO 91.239.25.231:6892 udp
NO 91.239.25.232:6892 udp
NO 91.239.25.233:6892 udp
NO 91.239.25.234:6892 udp
NO 91.239.25.235:6892 udp
NO 91.239.25.236:6892 udp
NO 91.239.25.237:6892 udp
NO 91.239.25.238:6892 udp
NO 91.239.25.239:6892 udp
NO 91.239.25.240:6892 udp
NO 91.239.25.241:6892 udp
NO 91.239.25.242:6892 udp
NO 91.239.25.243:6892 udp
NO 91.239.25.244:6892 udp
NO 91.239.25.245:6892 udp
NO 91.239.25.246:6892 udp
NO 91.239.25.247:6892 udp
NO 91.239.25.248:6892 udp
NO 91.239.25.249:6892 udp
NO 91.239.25.250:6892 udp
NO 91.239.25.251:6892 udp
NO 91.239.25.252:6892 udp
NO 91.239.25.253:6892 udp
NO 91.239.25.254:6892 udp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
NO 91.239.25.255:6892 udp
US 8.8.8.8:53 35.15.31.184.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 43.58.199.20.in-addr.arpa udp
US 8.8.8.8:53 13.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp

Files

C:\Users\Admin\AppData\Local\Temp\nsz4528.tmp\System.dll

MD5 883eff06ac96966270731e4e22817e11
SHA1 523c87c98236cbc04430e87ec19b977595092ac8
SHA256 44e5dfd551b38e886214bd6b9c8ee913c4c4d1f085a6575d97c3e892b925da82
SHA512 60333253342476911c84bbc1d9bf8a29f811207787fdd6107dce8d2b6e031669303f28133ffc811971ed7792087fe90fb1faabc0af4e91c298ba51e28109a390

memory/4264-13-0x0000000002140000-0x0000000002153000-memory.dmp

memory/4264-16-0x0000000002160000-0x0000000002161000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\psychopaths.dll

MD5 27eda239d0c8b8395d6fc316a409e615
SHA1 942f4a7908fef7c3b919bf06ac402d7bc5a49cc6
SHA256 8f79e234c6dc56fec14c11effcb5edffcc980bb734deda92ea61aae014daa047
SHA512 d0b63bdae2ae81c1bc662c1f17265e6ee2ff9705055522311d352cd30599b803c8619c7973baf69d8a4cb819859ac4e023569416b24d3a8af2d532e361e28ea3

memory/3904-17-0x0000000000400000-0x0000000000436000-memory.dmp

memory/3904-19-0x0000000000400000-0x0000000000436000-memory.dmp

memory/3904-20-0x0000000000400000-0x0000000000436000-memory.dmp

memory/3904-21-0x0000000000400000-0x0000000000436000-memory.dmp

memory/3904-26-0x0000000000400000-0x0000000000436000-memory.dmp

memory/3904-27-0x0000000000400000-0x0000000000436000-memory.dmp

memory/3904-28-0x0000000000400000-0x0000000000436000-memory.dmp

memory/3904-30-0x0000000000400000-0x0000000000436000-memory.dmp

memory/3904-33-0x0000000000400000-0x0000000000436000-memory.dmp

memory/3904-32-0x0000000000400000-0x0000000000436000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\_TU1IRH_README_.jpg

MD5 308f2c2704d497ac5ec494bd6f99f01b
SHA1 a3e7e9bba02a64e4fa60dba8379b6fd200d08711
SHA256 97ac3d38912baf469e377d5152533e4b4ac6af1fb593a9543b47fbe933c0b666
SHA512 add9a26a409561b998edbfccfd82592dca4cfa796774b23817b93d03afee00b8bef52f438c24ad0ab5091ebc314ac8bca2ca33a08927a6a6c6b69d1f86c6cf3f

C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\_TU1IRH_README_.hta

MD5 be9c8fef72fd5d5afc8a228c53d43dd1
SHA1 7a038d97c3999fdaa6a0376730bc19a53e2e82c3
SHA256 f40bfc29420ec2e8c9c6886df87e63cf51fb0c3fb4739bc7f4136692fa8030ea
SHA512 6a0756dbdd018c2c92947a9528c6b929356989e20635df3ad9e6ec0c32799aa809d4a64328cd65c9d6c9285ae7dbb49df85e56f2bb2d3cd6868fa75c58035e30

memory/3904-412-0x0000000000400000-0x0000000000436000-memory.dmp

memory/3904-416-0x0000000000400000-0x0000000000436000-memory.dmp

memory/3904-438-0x0000000000400000-0x0000000000436000-memory.dmp

memory/3904-441-0x0000000000400000-0x0000000000436000-memory.dmp

memory/3904-443-0x0000000000400000-0x0000000000436000-memory.dmp