Analysis Overview
SHA256
8e0253a08faf294eb4752c77cdb107f886be1d3374ccff6236f8924e56508a5c
Threat Level: Known bad
The file files/dom-0.html was found to be: Known bad.
Malicious Activity Summary
Wannacry
Cerber
Contacts a large (1116) amount of remote hosts
Modifies Windows Firewall
Drops startup file
Loads dropped DLL
Modifies file permissions
Executes dropped EXE
Legitimate hosting services abused for malware hosting/C2
Enumerates connected drives
File and Directory Permissions Modification: Windows File and Directory Permissions Modification
Adds Run key to start application
Drops file in System32 directory
Sets desktop wallpaper using registry
Drops file in Program Files directory
Drops file in Windows directory
Event Triggered Execution: Netsh Helper DLL
Event Triggered Execution: Accessibility Features
Enumerates physical storage devices
Suspicious behavior: EnumeratesProcesses
Suspicious use of SendNotifyMessage
Views/modifies file attributes
Suspicious behavior: GetForegroundWindowSpam
NTFS ADS
Suspicious use of AdjustPrivilegeToken
Modifies registry class
Opens file in notepad (likely ransom note)
Suspicious use of SetWindowsHookEx
Kills process with taskkill
Modifies data under HKEY_USERS
Enumerates system info in registry
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Modifies registry key
Runs ping.exe
Suspicious use of FindShellTrayWindow
Suspicious use of WriteProcessMemory
Suspicious behavior: LoadsDriver
MITRE ATT&CK Matrix V13
Analysis: static1
Detonation Overview
Reported
2024-06-24 15:05
Signatures
Analysis: behavioral1
Detonation Overview
Submitted
2024-06-24 15:05
Reported
2024-06-24 15:18
Platform
win11-20240611-en
Max time kernel
758s
Max time network
725s
Command Line
Signatures
Cerber
Wannacry
Contacts a large (1116) amount of remote hosts
Modifies Windows Firewall
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\netsh.exe | N/A |
| N/A | N/A | C:\Windows\SysWOW64\netsh.exe | N/A |
Drops startup file
| Description | Indicator | Process | Target |
| File opened for modification | \??\c:\users\admin\appdata\roaming\microsoft\word\startup\ | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\~SDF2B2.tmp | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe | N/A |
| File opened for modification | C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\~SDF2B9.tmp | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe | N/A |
Executes dropped EXE
Loads dropped DLL
| Description | Indicator | Process | Target |
| N/A | N/A | C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe | N/A |
| N/A | N/A | C:\Windows\syswow64\MsiExec.exe | N/A |
| N/A | N/A | C:\Windows\syswow64\MsiExec.exe | N/A |
| N/A | N/A | C:\Windows\syswow64\MsiExec.exe | N/A |
| N/A | N/A | C:\Windows\syswow64\MsiExec.exe | N/A |
| N/A | N/A | C:\Windows\syswow64\MsiExec.exe | N/A |
| N/A | N/A | C:\Windows\syswow64\MsiExec.exe | N/A |
| N/A | N/A | C:\Windows\syswow64\MsiExec.exe | N/A |
| N/A | N/A | C:\Windows\syswow64\MsiExec.exe | N/A |
Modifies file permissions
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\icacls.exe | N/A |
Adds Run key to start application
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\vzjdxkijlvlgfga147 = "\"C:\\Users\\Admin\\Downloads\\Ransomware-Samples-main\\Ransomware-Samples-main\\WannaCry\\Ransomware.WannaCry\\tasksche.exe\"" | C:\Windows\SysWOW64\reg.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\{63880b41-04fc-4f9b-92c4-4455c255eb8c} = "\"C:\\ProgramData\\Package Cache\\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\\windowsdesktop-runtime-8.0.2-win-x64.exe\" /burn.runonce" | C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe | N/A |
Enumerates connected drives
| Description | Indicator | Process | Target |
| File opened (read-only) | \??\P: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\Y: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\A: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\H: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\M: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\Q: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\T: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\Z: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\G: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\K: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\O: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\R: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\S: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\W: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\X: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\B: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\L: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\J: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\N: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\U: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\V: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\E: | C:\Windows\system32\msiexec.exe | N/A |
| File opened (read-only) | \??\I: | C:\Windows\system32\msiexec.exe | N/A |
File and Directory Permissions Modification: Windows File and Directory Permissions Modification
Legitimate hosting services abused for malware hosting/C2
| Description | Indicator | Process | Target |
| N/A | raw.githubusercontent.com | N/A | N/A |
| N/A | raw.githubusercontent.com | N/A | N/A |
Drops file in System32 directory
Sets desktop wallpaper using registry
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\USER\S-1-5-21-423582142-4191893794-1888535462-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@[email protected]" | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected] | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-423582142-4191893794-1888535462-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@[email protected]" | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-423582142-4191893794-1888535462-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\tmpEA66.bmp" | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
Drops file in Program Files directory
| Description | Indicator | Process | Target |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.IO.FileSystem.AccessControl.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.IO.FileSystem.DriveInfo.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\cs\System.Windows.Forms.Primitives.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hant\PresentationFramework.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\PresentationCore.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pt-BR\System.Windows.Input.Manipulations.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\tr\UIAutomationClientSideProviders.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.NameResolution.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Security.Cryptography.Encoding.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\DirectWriteForwarder.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.Http.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.ServicePoint.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\es\UIAutomationClient.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\tr\System.Xaml.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\tr\UIAutomationProvider.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Core.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Diagnostics.PerformanceCounter.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Security.Permissions.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.IO.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.IO.UnmanagedMemoryStream.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Reflection.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | \??\c:\program files (x86)\bitcoin | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\cs\Microsoft.VisualBasic.Forms.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\cs\System.Windows.Input.Manipulations.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\fr\UIAutomationClientSideProviders.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pl\WindowsBase.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.AppContext.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Security.Cryptography.Cng.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\PresentationFramework.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hant\System.Xaml.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\fr\UIAutomationClient.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\fr\PresentationFramework.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pl\System.Windows.Forms.Design.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\tr\ReachFramework.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Data.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.WebSockets.Client.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\cs\PresentationUI.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Runtime.Serialization.Formatters.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Xml.Linq.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\PresentationFramework.AeroLite.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\tr\WindowsFormsIntegration.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\Microsoft.NETCore.App.runtimeconfig.json | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Text.RegularExpressions.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pt-BR\System.Windows.Forms.Design.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\es\UIAutomationClientSideProviders.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Text.Encodings.Web.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ReachFramework.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\it\PresentationFramework.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pt-BR\Microsoft.VisualBasic.Forms.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\tr\PresentationCore.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Threading.Overlapped.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Xml.XmlSerializer.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | \??\c:\program files (x86)\ | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\fr\System.Windows.Forms.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pt-BR\PresentationCore.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\de\WindowsBase.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\it\WindowsBase.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Web.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\de\UIAutomationProvider.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.ComponentModel.Annotations.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pl\PresentationFramework.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pl\PresentationCore.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pl\UIAutomationTypes.resources.dll | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Buffers.dll | C:\Windows\system32\msiexec.exe | N/A |
Drops file in Windows directory
| Description | Indicator | Process | Target |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\onenote | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\local\thunderbird | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | C:\Windows\Installer\MSI65D2.tmp | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\onenote | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\local\office | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File created | C:\Windows\Installer\inprogressinstallinfo.ipi | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\roaming\thunderbird | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\roaming\the bat! | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\ | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\excel | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\roaming\word | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\onenote | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\outlook | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\word | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\local\outlook | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File created | C:\Windows\SystemTemp\~DFBB286E69A11792D6.TMP | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\office | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\outlook | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\roaming\office | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\thunderbird | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\excel | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\powerpoint | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\local\onenote | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\roaming\steam | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\local\excel | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\powerpoint | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\the bat! | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\local\the bat! | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | C:\Windows\Installer\MSI536A.tmp | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\excel | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\roaming\outlook | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File created | C:\Windows\SystemTemp\~DF65FB9EA2881720F4.TMP | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\bitcoin | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft sql server | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\excel | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\excel | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\onenote | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | C:\Windows\Installer\MSI6CE8.tmp | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\outlook | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\powerpoint | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\powerpoint | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File created | C:\Windows\SystemTemp\~DF23545CF291A60558.TMP | C:\Windows\system32\msiexec.exe | N/A |
| File created | C:\Windows\SystemTemp\~DF135461F47E2F80A1.TMP | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\microsoft sql server | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\microsoft sql server | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft sql server | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log | C:\Windows\system32\msiexec.exe | N/A |
| File created | C:\Windows\SystemTemp\~DFC2C520C5E7AE1392.TMP | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\local\bitcoin | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\onenote | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | C:\Windows\Installer\ | C:\Windows\system32\msiexec.exe | N/A |
| File created | C:\Windows\SystemTemp\~DFD482F4F9339D3933.TMP | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Windows\Installer\MSI557E.tmp | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Windows\Installer\MSI5F14.tmp | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\office | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\word | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File created | C:\Windows\SystemTemp\~DF67BF357668FF6FD6.TMP | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Windows\Installer\MSI600F.tmp | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | C:\Windows\Installer\MSI638E.tmp | C:\Windows\system32\msiexec.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\roaming\bitcoin | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\local\office | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\steam | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\local\thunderbird | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| File opened for modification | \??\c:\windows\serviceprofiles\localservice\appdata\local\word | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
Enumerates physical storage devices
Event Triggered Execution: Accessibility Features
Event Triggered Execution: Netsh Helper DLL
| Description | Indicator | Process | Target |
| Key queried | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh | C:\Windows\SysWOW64\netsh.exe | N/A |
| Key value enumerated | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh | C:\Windows\SysWOW64\netsh.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh | C:\Windows\SysWOW64\netsh.exe | N/A |
| Key queried | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh | C:\Windows\SysWOW64\netsh.exe | N/A |
| Key value enumerated | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh | C:\Windows\SysWOW64\netsh.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh | C:\Windows\SysWOW64\netsh.exe | N/A |
Enumerates system info in registry
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
Kills process with taskkill
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\taskkill.exe | N/A |
Modifies data under HKEY_USERS
| Description | Indicator | Process | Target |
| Key deleted | \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\2C | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\2D | C:\Windows\system32\msiexec.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2e | C:\Windows\system32\msiexec.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key deleted | \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\2A\52C64B7E | C:\Windows\system32\msiexec.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2c | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\2B | C:\Windows\system32\msiexec.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2d | C:\Windows\system32\msiexec.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133637151809941736" | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key deleted | \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a | C:\Windows\system32\msiexec.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2b | C:\Windows\system32\msiexec.exe | N/A |
Modifies registry class
| Description | Indicator | Process | Target |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\63337BB296F4141479799EDBF63E89A0\SourceList\Media | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\63337BB296F4141479799EDBF63E89A0\SourceList | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Dotnet_CLI_SharedHost_8.0_x64 | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Dotnet_CLI_HostFxr_64.8.8795_x64\Dependents | C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\70BF2CCB0FC824541BC016CBFE40FA2F\SourceList\Net | C:\Windows\system32\msiexec.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-423582142-4191893794-1888535462-1000_Classes\Local Settings | C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9DF1F64D8EF250D42BCA10C1326BB942 | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\CLASSES\INSTALLER\DEPENDENCIES\DOTNET_CLI_SHAREDHOST_8.0_X64\DEPENDENTS\{63880B41-04FC-4F9B-92C4-4455C255EB8C} | C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\D881F2EC0135A4B72CA89D27FD72F577 | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\70BF2CCB0FC824541BC016CBFE40FA2F\SourceList | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\18237B7CA0BADAD40AF9C5034D6097CA\SourceList\Net | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\9DD61CBBEAD5AD449609DDF0061A46BC | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9DF1F64D8EF250D42BCA10C1326BB942\SourceList\Media | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\windowsdesktop_runtime_64.8.8806_x64 | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\63337BB296F4141479799EDBF63E89A0 | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\70BF2CCB0FC824541BC016CBFE40FA2F | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\dotnet_runtime_64.8.8795_x64\Dependents | C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\18237B7CA0BADAD40AF9C5034D6097CA\SourceList\Media | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\CLASSES\INSTALLER\DEPENDENCIES\{63880B41-04FC-4F9B-92C4-4455C255EB8C}\DEPENDENTS\{63880B41-04FC-4F9B-92C4-4455C255EB8C} | C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\Dependents | C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9DF1F64D8EF250D42BCA10C1326BB942\SourceList\Net | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Dotnet_CLI_HostFxr_64.8.8795_x64 | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\CLASSES\INSTALLER\DEPENDENCIES\WINDOWSDESKTOP_RUNTIME_64.8.8806_X64\DEPENDENTS\{63880B41-04FC-4F9B-92C4-4455C255EB8C} | C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\9DF1F64D8EF250D42BCA10C1326BB942 | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\EC4D2DC6E5F594446E1328CE265CCE74 | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\CLASSES\INSTALLER\DEPENDENCIES\DOTNET_CLI_HOSTFXR_64.8.8795_X64\DEPENDENTS\{63880B41-04FC-4F9B-92C4-4455C255EB8C} | C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\{63880b41-04fc-4f9b-92c4-4455c255eb8c} | C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\63337BB296F4141479799EDBF63E89A0\SourceList\Net | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\63337BB296F4141479799EDBF63E89A0 | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\70BF2CCB0FC824541BC016CBFE40FA2F\SourceList\Media | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\70BF2CCB0FC824541BC016CBFE40FA2F | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\CLASSES\INSTALLER\DEPENDENCIES\DOTNET_RUNTIME_64.8.8795_X64\DEPENDENTS\{63880B41-04FC-4F9B-92C4-4455C255EB8C} | C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-423582142-4191893794-1888535462-1000_Classes\Local Settings | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\9DF1F64D8EF250D42BCA10C1326BB942\SourceList | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Dotnet_CLI_SharedHost_8.0_x64\Dependents | C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\windowsdesktop_runtime_64.8.8806_x64\Dependents | C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\dotnet_runtime_64.8.8795_x64 | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\18237B7CA0BADAD40AF9C5034D6097CA | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\F5968DD9DAA5B3567CFF6E791844C78F | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\18237B7CA0BADAD40AF9C5034D6097CA\SourceList | C:\Windows\system32\msiexec.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\18237B7CA0BADAD40AF9C5034D6097CA | C:\Windows\system32\msiexec.exe | N/A |
Modifies registry key
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\reg.exe | N/A |
NTFS ADS
| Description | Indicator | Process | Target |
| File opened for modification | C:\Users\Admin\Downloads\Ransomware-Samples-main.zip:Zone.Identifier | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
Opens file in notepad (likely ransom note)
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\NOTEPAD.EXE | N/A |
Runs ping.exe
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\PING.EXE | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Windows\system32\msiexec.exe | N/A |
| N/A | N/A | C:\Windows\system32\msiexec.exe | N/A |
| N/A | N/A | C:\Windows\system32\msiexec.exe | N/A |
| N/A | N/A | C:\Windows\system32\msiexec.exe | N/A |
| N/A | N/A | C:\Windows\system32\msiexec.exe | N/A |
| N/A | N/A | C:\Windows\system32\msiexec.exe | N/A |
| N/A | N/A | C:\Windows\system32\msiexec.exe | N/A |
| N/A | N/A | C:\Windows\system32\msiexec.exe | N/A |
Suspicious behavior: GetForegroundWindowSpam
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\system32\OpenWith.exe | N/A |
| N/A | N/A | C:\Windows\System32\osk.exe | N/A |
Suspicious behavior: LoadsDriver
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
Suspicious use of AdjustPrivilegeToken
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
Suspicious use of SetWindowsHookEx
Suspicious use of WriteProcessMemory
Views/modifies file attributes
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\attrib.exe | N/A |
| N/A | N/A | C:\Windows\SysWOW64\attrib.exe | N/A |
Processes
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\files\dom-0.html
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffb3677ab58,0x7ffb3677ab68,0x7ffb3677ab78
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1512 --field-trial-handle=1800,i,17852656529092429418,7675578253035656922,131072 /prefetch:2
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1800,i,17852656529092429418,7675578253035656922,131072 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2144 --field-trial-handle=1800,i,17852656529092429418,7675578253035656922,131072 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3000 --field-trial-handle=1800,i,17852656529092429418,7675578253035656922,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3008 --field-trial-handle=1800,i,17852656529092429418,7675578253035656922,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4340 --field-trial-handle=1800,i,17852656529092429418,7675578253035656922,131072 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4488 --field-trial-handle=1800,i,17852656529092429418,7675578253035656922,131072 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4540 --field-trial-handle=1800,i,17852656529092429418,7675578253035656922,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=1784 --field-trial-handle=1800,i,17852656529092429418,7675578253035656922,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4768 --field-trial-handle=1800,i,17852656529092429418,7675578253035656922,131072 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4740 --field-trial-handle=1800,i,17852656529092429418,7675578253035656922,131072 /prefetch:8
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Mamba\Ransomware.Mamba\131.exe
"C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Mamba\Ransomware.Mamba\131.exe"
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Mamba\Ransomware.Mamba\131.exe
"C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Mamba\Ransomware.Mamba\131.exe"
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Mamba\Ransomware.Mamba\131.exe
"C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Mamba\Ransomware.Mamba\131.exe"
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Mamba\Ransomware.Mamba\131.exe
"C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Mamba\Ransomware.Mamba\131.exe"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4792 --field-trial-handle=1800,i,17852656529092429418,7675578253035656922,131072 /prefetch:2
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe
"C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\Cerber\Ransomware.Cerber\cerber.exe"
C:\Windows\SysWOW64\netsh.exe
C:\Windows\system32\netsh.exe advfirewall set allprofiles state on
C:\Windows\SysWOW64\netsh.exe
C:\Windows\system32\netsh.exe advfirewall reset
C:\Windows\SysWOW64\mshta.exe
"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___8R4QIO_.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
C:\Windows\SysWOW64\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___ATOMBWN_.txt
C:\Windows\SysWOW64\cmd.exe
"C:\Windows\system32\cmd.exe"
C:\Windows\SysWOW64\taskkill.exe
taskkill /f /im "cerber.exe"
C:\Windows\SysWOW64\PING.EXE
ping -n 1 127.0.0.1
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe
"C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe"
C:\Windows\SysWOW64\attrib.exe
attrib +h .
C:\Windows\SysWOW64\icacls.exe
icacls . /grant Everyone:F /T /C /Q
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\taskdl.exe
taskdl.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c 120121719241807.bat
C:\Windows\SysWOW64\attrib.exe
attrib +h +s F:\$RECYCLE
C:\Windows\SysWOW64\cscript.exe
cscript.exe //nologo m.vbs
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
"C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]"
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Windows\SysWOW64\cmd.exe
cmd.exe /c start /b @[email protected] vs
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\taskdl.exe
taskdl.exe
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\taskse.exe
taskse.exe C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Windows\SysWOW64\cmd.exe
cmd.exe /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "vzjdxkijlvlgfga147" /t REG_SZ /d "\"C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\tasksche.exe\"" /f
C:\Windows\SysWOW64\reg.exe
reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "vzjdxkijlvlgfga147" /t REG_SZ /d "\"C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\tasksche.exe\"" /f
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\taskdl.exe
taskdl.exe
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\taskse.exe
taskse.exe C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\taskse.exe
taskse.exe C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\taskdl.exe
taskdl.exe
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
"C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]"
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
"C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]"
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k DevicesFlow -s DevicesFlowUserSvc
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Windows\System32\ATBroker.exe
C:\Windows\System32\ATBroker.exe /start osk
C:\Windows\System32\osk.exe
"C:\Windows\System32\osk.exe"
C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004F0 0x00000000000004E8
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
C:\Windows\system32\SystemSettingsAdminFlows.exe
"C:\Windows\system32\SystemSettingsAdminFlows.exe" SetCamSystemGlobal userNotificationListener 0
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Windows\system32\SystemSettingsAdminFlows.exe
"C:\Windows\system32\SystemSettingsAdminFlows.exe" SetCamSystemGlobal broadFileSystemAccess 0
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
C:\Windows\system32\SystemSettingsAdminFlows.exe
"C:\Windows\system32\SystemSettingsAdminFlows.exe" SetCamSystemGlobal downloadsFolder 0
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
C:\Windows\system32\SystemSettingsAdminFlows.exe
"C:\Windows\system32\SystemSettingsAdminFlows.exe" SetCamSystemGlobal documentsLibrary 0
C:\Windows\SysWOW64\werfault.exe
werfault.exe /h /shared Global\f92c0754344840618996c75aab2257a1 /t 2172 /p 2988
C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe
"C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe" /uninstall
C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe
"C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe" -burn.filehandle.attached=576 -burn.filehandle.self=592 /uninstall
C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe
"C:\ProgramData\Package Cache\{63880b41-04fc-4f9b-92c4-4455c255eb8c}\windowsdesktop-runtime-8.0.2-win-x64.exe" -q -burn.elevated BurnPipe.{1843560C-DEA5-427B-B789-DC66DD91932D} {99156D74-AA88-4BDE-AA5F-A6EB0EC9638B} 2976
C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
C:\Windows\syswow64\MsiExec.exe
C:\Windows\syswow64\MsiExec.exe -Embedding 8BC7D2357B6F4510FC16D7C65B19C0B7
C:\Windows\syswow64\MsiExec.exe
C:\Windows\syswow64\MsiExec.exe -Embedding 197E607F581B813834A925F41F925511
C:\Windows\syswow64\MsiExec.exe
C:\Windows\syswow64\MsiExec.exe -Embedding 61313677F5A5DC5116BE3CF70A951BDF
C:\Windows\syswow64\MsiExec.exe
C:\Windows\syswow64\MsiExec.exe -Embedding AAB305C70FF215708B49592E43E1E32D
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 10.169.217.172.in-addr.arpa | udp |
| N/A | 224.0.0.251:5353 | udp | |
| GB | 142.250.187.196:443 | www.google.com | udp |
| GB | 142.250.187.196:443 | www.google.com | tcp |
| GB | 142.250.179.238:443 | play.google.com | udp |
| GB | 142.250.179.238:443 | play.google.com | tcp |
| GB | 142.250.187.238:443 | consent.google.com | tcp |
| GB | 20.26.156.215:443 | github.com | tcp |
| GB | 20.26.156.215:443 | github.com | tcp |
| US | 185.199.108.154:443 | github.githubassets.com | tcp |
| US | 185.199.108.154:443 | github.githubassets.com | tcp |
| US | 185.199.108.154:443 | github.githubassets.com | tcp |
| US | 185.199.108.154:443 | github.githubassets.com | tcp |
| US | 185.199.108.154:443 | github.githubassets.com | tcp |
| US | 185.199.108.154:443 | github.githubassets.com | tcp |
| US | 185.199.108.133:443 | raw.githubusercontent.com | tcp |
| US | 8.8.8.8:53 | 215.156.26.20.in-addr.arpa | udp |
| US | 185.199.108.154:443 | github.githubassets.com | tcp |
| US | 185.199.108.133:443 | raw.githubusercontent.com | tcp |
| GB | 216.58.201.106:443 | content-autofill.googleapis.com | tcp |
| US | 8.8.8.8:53 | collector.github.com | udp |
| US | 140.82.114.22:443 | collector.github.com | tcp |
| US | 185.199.108.154:443 | github.githubassets.com | tcp |
| US | 140.82.114.22:443 | collector.github.com | tcp |
| GB | 20.26.156.210:443 | api.github.com | tcp |
| GB | 216.58.201.106:443 | content-autofill.googleapis.com | udp |
| GB | 20.26.156.216:443 | codeload.github.com | tcp |
| GB | 172.217.169.67:443 | beacons.gcp.gvt2.com | tcp |
| FR | 178.33.158.0:6893 | udp | |
| FR | 178.33.158.1:6893 | udp | |
| FR | 178.33.158.2:6893 | udp | |
| FR | 178.33.158.3:6893 | udp | |
| FR | 178.33.158.4:6893 | udp | |
| FR | 178.33.158.5:6893 | udp | |
| FR | 178.33.158.6:6893 | udp | |
| FR | 178.33.158.7:6893 | udp | |
| FR | 178.33.158.8:6893 | udp | |
| FR | 178.33.158.9:6893 | udp | |
| FR | 178.33.158.10:6893 | udp | |
| FR | 178.33.158.11:6893 | udp | |
| FR | 178.33.158.12:6893 | udp | |
| FR | 178.33.158.13:6893 | udp | |
| FR | 178.33.158.14:6893 | udp | |
| FR | 178.33.158.15:6893 | udp | |
| FR | 178.33.158.16:6893 | udp | |
| FR | 178.33.158.17:6893 | udp | |
| FR | 178.33.158.18:6893 | udp | |
| FR | 178.33.158.19:6893 | udp | |
| FR | 178.33.158.20:6893 | udp | |
| FR | 178.33.158.21:6893 | udp | |
| FR | 178.33.158.22:6893 | udp | |
| FR | 178.33.158.23:6893 | udp | |
| FR | 178.33.158.24:6893 | udp | |
| FR | 178.33.158.25:6893 | udp | |
| FR | 178.33.158.26:6893 | udp | |
| FR | 178.33.158.27:6893 | udp | |
| FR | 178.33.158.28:6893 | udp | |
| FR | 178.33.158.29:6893 | udp | |
| FR | 178.33.158.30:6893 | udp | |
| FR | 178.33.158.31:6893 | udp | |
| FR | 178.33.159.0:6893 | udp | |
| FR | 178.33.159.1:6893 | udp | |
| FR | 178.33.159.2:6893 | udp | |
| FR | 178.33.159.3:6893 | udp | |
| FR | 178.33.159.4:6893 | udp | |
| FR | 178.33.159.5:6893 | udp | |
| FR | 178.33.159.6:6893 | udp | |
| FR | 178.33.159.7:6893 | udp | |
| FR | 178.33.159.8:6893 | udp | |
| FR | 178.33.159.9:6893 | udp | |
| FR | 178.33.159.10:6893 | udp | |
| FR | 178.33.159.11:6893 | udp | |
| FR | 178.33.159.12:6893 | udp | |
| FR | 178.33.159.13:6893 | udp | |
| FR | 178.33.159.14:6893 | udp | |
| FR | 178.33.159.15:6893 | udp | |
| FR | 178.33.159.16:6893 | udp | |
| FR | 178.33.159.17:6893 | udp | |
| FR | 178.33.159.18:6893 | udp | |
| FR | 178.33.159.19:6893 | udp | |
| FR | 178.33.159.20:6893 | udp | |
| FR | 178.33.159.21:6893 | udp | |
| FR | 178.33.159.22:6893 | udp | |
| FR | 178.33.159.23:6893 | udp | |
| FR | 178.33.159.24:6893 | udp | |
| FR | 178.33.159.25:6893 | udp | |
| FR | 178.33.159.26:6893 | udp | |
| FR | 178.33.159.27:6893 | udp | |
| FR | 178.33.159.28:6893 | udp | |
| FR | 178.33.159.29:6893 | udp | |
| FR | 178.33.159.30:6893 | udp | |
| FR | 178.33.159.31:6893 | udp | |
| FR | 178.33.160.0:6893 | udp | |
| FR | 178.33.160.1:6893 | udp | |
| FR | 178.33.160.2:6893 | udp | |
| FR | 178.33.160.3:6893 | udp | |
| FR | 178.33.160.4:6893 | udp | |
| FR | 178.33.160.5:6893 | udp | |
| FR | 178.33.160.6:6893 | udp | |
| FR | 178.33.160.7:6893 | udp | |
| FR | 178.33.160.8:6893 | udp | |
| FR | 178.33.160.9:6893 | udp | |
| FR | 178.33.160.10:6893 | udp | |
| FR | 178.33.160.11:6893 | udp | |
| FR | 178.33.160.12:6893 | udp | |
| FR | 178.33.160.13:6893 | udp | |
| FR | 178.33.160.14:6893 | udp | |
| FR | 178.33.160.15:6893 | udp | |
| FR | 178.33.160.16:6893 | udp | |
| FR | 178.33.160.17:6893 | udp | |
| FR | 178.33.160.18:6893 | udp | |
| FR | 178.33.160.19:6893 | udp | |
| FR | 178.33.160.20:6893 | udp | |
| FR | 178.33.160.21:6893 | udp | |
| FR | 178.33.160.22:6893 | udp | |
| FR | 178.33.160.23:6893 | udp | |
| FR | 178.33.160.24:6893 | udp | |
| FR | 178.33.160.25:6893 | udp | |
| FR | 178.33.160.26:6893 | udp | |
| FR | 178.33.160.27:6893 | udp | |
| FR | 178.33.160.28:6893 | udp | |
| FR | 178.33.160.29:6893 | udp | |
| FR | 178.33.160.30:6893 | udp | |
| FR | 178.33.160.31:6893 | udp | |
| FR | 178.33.160.32:6893 | udp | |
| FR | 178.33.160.33:6893 | udp | |
| FR | 178.33.160.34:6893 | udp | |
| FR | 178.33.160.35:6893 | udp | |
| FR | 178.33.160.36:6893 | udp | |
| FR | 178.33.160.37:6893 | udp | |
| FR | 178.33.160.38:6893 | udp | |
| FR | 178.33.160.39:6893 | udp | |
| FR | 178.33.160.40:6893 | udp | |
| FR | 178.33.160.41:6893 | udp | |
| FR | 178.33.160.42:6893 | udp | |
| FR | 178.33.160.43:6893 | udp | |
| FR | 178.33.160.44:6893 | udp | |
| FR | 178.33.160.45:6893 | udp | |
| FR | 178.33.160.46:6893 | udp | |
| FR | 178.33.160.47:6893 | udp | |
| FR | 178.33.160.48:6893 | udp | |
| FR | 178.33.160.49:6893 | udp | |
| FR | 178.33.160.50:6893 | udp | |
| FR | 178.33.160.51:6893 | udp | |
| FR | 178.33.160.52:6893 | udp | |
| FR | 178.33.160.53:6893 | udp | |
| FR | 178.33.160.54:6893 | udp | |
| FR | 178.33.160.55:6893 | udp | |
| FR | 178.33.160.56:6893 | udp | |
| FR | 178.33.160.57:6893 | udp | |
| FR | 178.33.160.58:6893 | udp | |
| FR | 178.33.160.59:6893 | udp | |
| FR | 178.33.160.60:6893 | udp | |
| FR | 178.33.160.61:6893 | udp | |
| FR | 178.33.160.62:6893 | udp | |
| FR | 178.33.160.63:6893 | udp | |
| FR | 178.33.160.64:6893 | udp | |
| FR | 178.33.160.65:6893 | udp | |
| FR | 178.33.160.66:6893 | udp | |
| FR | 178.33.160.67:6893 | udp | |
| FR | 178.33.160.68:6893 | udp | |
| FR | 178.33.160.69:6893 | udp | |
| FR | 178.33.160.70:6893 | udp | |
| FR | 178.33.160.71:6893 | udp | |
| FR | 178.33.160.72:6893 | udp | |
| FR | 178.33.160.73:6893 | udp | |
| FR | 178.33.160.74:6893 | udp | |
| FR | 178.33.160.75:6893 | udp | |
| FR | 178.33.160.76:6893 | udp | |
| FR | 178.33.160.77:6893 | udp | |
| FR | 178.33.160.78:6893 | udp | |
| FR | 178.33.160.79:6893 | udp | |
| FR | 178.33.160.80:6893 | udp | |
| FR | 178.33.160.81:6893 | udp | |
| FR | 178.33.160.82:6893 | udp | |
| FR | 178.33.160.83:6893 | udp | |
| FR | 178.33.160.84:6893 | udp | |
| FR | 178.33.160.85:6893 | udp | |
| FR | 178.33.160.86:6893 | udp | |
| FR | 178.33.160.87:6893 | udp | |
| FR | 178.33.160.88:6893 | udp | |
| FR | 178.33.160.89:6893 | udp | |
| FR | 178.33.160.90:6893 | udp | |
| FR | 178.33.160.91:6893 | udp | |
| FR | 178.33.160.92:6893 | udp | |
| FR | 178.33.160.93:6893 | udp | |
| FR | 178.33.160.94:6893 | udp | |
| FR | 178.33.160.95:6893 | udp | |
| FR | 178.33.160.96:6893 | udp | |
| FR | 178.33.160.97:6893 | udp | |
| FR | 178.33.160.98:6893 | udp | |
| FR | 178.33.160.99:6893 | udp | |
| FR | 178.33.160.100:6893 | udp | |
| FR | 178.33.160.101:6893 | udp | |
| FR | 178.33.160.102:6893 | udp | |
| FR | 178.33.160.103:6893 | udp | |
| FR | 178.33.160.104:6893 | udp | |
| FR | 178.33.160.105:6893 | udp | |
| FR | 178.33.160.106:6893 | udp | |
| FR | 178.33.160.107:6893 | udp | |
| FR | 178.33.160.108:6893 | udp | |
| FR | 178.33.160.109:6893 | udp | |
| FR | 178.33.160.110:6893 | udp | |
| FR | 178.33.160.111:6893 | udp | |
| FR | 178.33.160.112:6893 | udp | |
| FR | 178.33.160.113:6893 | udp | |
| FR | 178.33.160.114:6893 | udp | |
| FR | 178.33.160.115:6893 | udp | |
| FR | 178.33.160.116:6893 | udp | |
| FR | 178.33.160.117:6893 | udp | |
| FR | 178.33.160.118:6893 | udp | |
| FR | 178.33.160.119:6893 | udp | |
| FR | 178.33.160.120:6893 | udp | |
| FR | 178.33.160.121:6893 | udp | |
| FR | 178.33.160.122:6893 | udp | |
| FR | 178.33.160.123:6893 | udp | |
| FR | 178.33.160.124:6893 | udp | |
| FR | 178.33.160.125:6893 | udp | |
| FR | 178.33.160.126:6893 | udp | |
| FR | 178.33.160.127:6893 | udp | |
| FR | 178.33.160.128:6893 | udp | |
| FR | 178.33.160.129:6893 | udp | |
| FR | 178.33.160.130:6893 | udp | |
| FR | 178.33.160.131:6893 | udp | |
| FR | 178.33.160.132:6893 | udp | |
| FR | 178.33.160.133:6893 | udp | |
| FR | 178.33.160.134:6893 | udp | |
| FR | 178.33.160.135:6893 | udp | |
| FR | 178.33.160.136:6893 | udp | |
| FR | 178.33.160.137:6893 | udp | |
| FR | 178.33.160.138:6893 | udp | |
| FR | 178.33.160.139:6893 | udp | |
| FR | 178.33.160.140:6893 | udp | |
| FR | 178.33.160.141:6893 | udp | |
| FR | 178.33.160.142:6893 | udp | |
| FR | 178.33.160.143:6893 | udp | |
| FR | 178.33.160.144:6893 | udp | |
| FR | 178.33.160.145:6893 | udp | |
| FR | 178.33.160.146:6893 | udp | |
| FR | 178.33.160.147:6893 | udp | |
| FR | 178.33.160.148:6893 | udp | |
| FR | 178.33.160.149:6893 | udp | |
| FR | 178.33.160.150:6893 | udp | |
| FR | 178.33.160.151:6893 | udp | |
| FR | 178.33.160.152:6893 | udp | |
| FR | 178.33.160.153:6893 | udp | |
| FR | 178.33.160.154:6893 | udp | |
| FR | 178.33.160.155:6893 | udp | |
| FR | 178.33.160.156:6893 | udp | |
| FR | 178.33.160.157:6893 | udp | |
| FR | 178.33.160.158:6893 | udp | |
| FR | 178.33.160.159:6893 | udp | |
| FR | 178.33.160.160:6893 | udp | |
| FR | 178.33.160.161:6893 | udp | |
| FR | 178.33.160.162:6893 | udp | |
| FR | 178.33.160.163:6893 | udp | |
| FR | 178.33.160.164:6893 | udp | |
| FR | 178.33.160.165:6893 | udp | |
| FR | 178.33.160.166:6893 | udp | |
| FR | 178.33.160.167:6893 | udp | |
| FR | 178.33.160.168:6893 | udp | |
| FR | 178.33.160.169:6893 | udp | |
| FR | 178.33.160.170:6893 | udp | |
| FR | 178.33.160.171:6893 | udp | |
| FR | 178.33.160.172:6893 | udp | |
| FR | 178.33.160.173:6893 | udp | |
| FR | 178.33.160.174:6893 | udp | |
| FR | 178.33.160.175:6893 | udp | |
| FR | 178.33.160.176:6893 | udp | |
| FR | 178.33.160.177:6893 | udp | |
| FR | 178.33.160.178:6893 | udp | |
| FR | 178.33.160.179:6893 | udp | |
| FR | 178.33.160.180:6893 | udp | |
| FR | 178.33.160.181:6893 | udp | |
| FR | 178.33.160.182:6893 | udp | |
| FR | 178.33.160.183:6893 | udp | |
| FR | 178.33.160.184:6893 | udp | |
| FR | 178.33.160.185:6893 | udp | |
| FR | 178.33.160.186:6893 | udp | |
| FR | 178.33.160.187:6893 | udp | |
| FR | 178.33.160.188:6893 | udp | |
| FR | 178.33.160.189:6893 | udp | |
| FR | 178.33.160.190:6893 | udp | |
| FR | 178.33.160.191:6893 | udp | |
| FR | 178.33.160.192:6893 | udp | |
| FR | 178.33.160.193:6893 | udp | |
| FR | 178.33.160.194:6893 | udp | |
| FR | 178.33.160.195:6893 | udp | |
| FR | 178.33.160.196:6893 | udp | |
| FR | 178.33.160.197:6893 | udp | |
| FR | 178.33.160.198:6893 | udp | |
| FR | 178.33.160.199:6893 | udp | |
| FR | 178.33.160.200:6893 | udp | |
| FR | 178.33.160.201:6893 | udp | |
| FR | 178.33.160.202:6893 | udp | |
| FR | 178.33.160.203:6893 | udp | |
| FR | 178.33.160.204:6893 | udp | |
| FR | 178.33.160.205:6893 | udp | |
| FR | 178.33.160.206:6893 | udp | |
| FR | 178.33.160.207:6893 | udp | |
| FR | 178.33.160.208:6893 | udp | |
| FR | 178.33.160.209:6893 | udp | |
| FR | 178.33.160.210:6893 | udp | |
| FR | 178.33.160.211:6893 | udp | |
| FR | 178.33.160.212:6893 | udp | |
| FR | 178.33.160.213:6893 | udp | |
| FR | 178.33.160.214:6893 | udp | |
| FR | 178.33.160.215:6893 | udp | |
| FR | 178.33.160.216:6893 | udp | |
| FR | 178.33.160.217:6893 | udp | |
| FR | 178.33.160.218:6893 | udp | |
| FR | 178.33.160.219:6893 | udp | |
| FR | 178.33.160.220:6893 | udp | |
| FR | 178.33.160.221:6893 | udp | |
| FR | 178.33.160.222:6893 | udp | |
| FR | 178.33.160.223:6893 | udp | |
| FR | 178.33.160.224:6893 | udp | |
| FR | 178.33.160.225:6893 | udp | |
| FR | 178.33.160.226:6893 | udp | |
| FR | 178.33.160.227:6893 | udp | |
| FR | 178.33.160.228:6893 | udp | |
| FR | 178.33.160.229:6893 | udp | |
| FR | 178.33.160.230:6893 | udp | |
| FR | 178.33.160.231:6893 | udp | |
| FR | 178.33.160.232:6893 | udp | |
| FR | 178.33.160.233:6893 | udp | |
| FR | 178.33.160.234:6893 | udp | |
| FR | 178.33.160.235:6893 | udp | |
| FR | 178.33.160.236:6893 | udp | |
| FR | 178.33.160.237:6893 | udp | |
| FR | 178.33.160.238:6893 | udp | |
| FR | 178.33.160.239:6893 | udp | |
| FR | 178.33.160.240:6893 | udp | |
| FR | 178.33.160.241:6893 | udp | |
| FR | 178.33.160.242:6893 | udp | |
| FR | 178.33.160.243:6893 | udp | |
| FR | 178.33.160.244:6893 | udp | |
| FR | 178.33.160.245:6893 | udp | |
| FR | 178.33.160.246:6893 | udp | |
| FR | 178.33.160.247:6893 | udp | |
| FR | 178.33.160.248:6893 | udp | |
| FR | 178.33.160.249:6893 | udp | |
| FR | 178.33.160.250:6893 | udp | |
| FR | 178.33.160.251:6893 | udp | |
| FR | 178.33.160.252:6893 | udp | |
| FR | 178.33.160.253:6893 | udp | |
| FR | 178.33.160.254:6893 | udp | |
| US | 8.8.8.8:53 | 5.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 4.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 6.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 7.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 9.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 10.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 8.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 11.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 12.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 13.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 16.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 17.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 18.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 20.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 19.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 21.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 22.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 23.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 24.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 25.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 26.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 27.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 28.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 29.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 30.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 31.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 0.159.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 1.159.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 2.159.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 3.159.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 4.159.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 6.159.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 5.159.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 9.159.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 7.159.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 8.159.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 10.159.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 11.159.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 12.159.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 13.159.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 14.159.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.159.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 16.159.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 17.159.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 14.158.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 35.160.33.178.in-addr.arpa | udp |
| FR | 178.33.160.255:6893 | udp | |
| FR | 178.33.161.0:6893 | udp | |
| FR | 178.33.161.1:6893 | udp | |
| FR | 178.33.161.2:6893 | udp | |
| FR | 178.33.161.3:6893 | udp | |
| FR | 178.33.161.4:6893 | udp | |
| FR | 178.33.161.5:6893 | udp | |
| FR | 178.33.161.6:6893 | udp | |
| FR | 178.33.161.7:6893 | udp | |
| FR | 178.33.161.8:6893 | udp | |
| FR | 178.33.161.9:6893 | udp | |
| FR | 178.33.161.10:6893 | udp | |
| FR | 178.33.161.11:6893 | udp | |
| FR | 178.33.161.12:6893 | udp | |
| FR | 178.33.161.13:6893 | udp | |
| FR | 178.33.161.14:6893 | udp | |
| FR | 178.33.161.15:6893 | udp | |
| FR | 178.33.161.16:6893 | udp | |
| FR | 178.33.161.17:6893 | udp | |
| FR | 178.33.161.18:6893 | udp | |
| FR | 178.33.161.19:6893 | udp | |
| FR | 178.33.161.20:6893 | udp | |
| FR | 178.33.161.21:6893 | udp | |
| FR | 178.33.161.22:6893 | udp | |
| FR | 178.33.161.23:6893 | udp | |
| FR | 178.33.161.24:6893 | udp | |
| FR | 178.33.161.25:6893 | udp | |
| FR | 178.33.161.26:6893 | udp | |
| FR | 178.33.161.27:6893 | udp | |
| FR | 178.33.161.28:6893 | udp | |
| FR | 178.33.161.29:6893 | udp | |
| FR | 178.33.161.30:6893 | udp | |
| FR | 178.33.161.31:6893 | udp | |
| FR | 178.33.161.32:6893 | udp | |
| FR | 178.33.161.33:6893 | udp | |
| FR | 178.33.161.34:6893 | udp | |
| FR | 178.33.161.35:6893 | udp | |
| FR | 178.33.161.36:6893 | udp | |
| FR | 178.33.161.37:6893 | udp | |
| FR | 178.33.161.38:6893 | udp | |
| FR | 178.33.161.39:6893 | udp | |
| FR | 178.33.161.40:6893 | udp | |
| FR | 178.33.161.41:6893 | udp | |
| FR | 178.33.161.42:6893 | udp | |
| FR | 178.33.161.43:6893 | udp | |
| FR | 178.33.161.44:6893 | udp | |
| FR | 178.33.161.45:6893 | udp | |
| FR | 178.33.161.46:6893 | udp | |
| FR | 178.33.161.47:6893 | udp | |
| FR | 178.33.161.48:6893 | udp | |
| FR | 178.33.161.49:6893 | udp | |
| FR | 178.33.161.50:6893 | udp | |
| FR | 178.33.161.51:6893 | udp | |
| FR | 178.33.161.52:6893 | udp | |
| FR | 178.33.161.53:6893 | udp | |
| FR | 178.33.161.54:6893 | udp | |
| FR | 178.33.161.55:6893 | udp | |
| FR | 178.33.161.56:6893 | udp | |
| FR | 178.33.161.57:6893 | udp | |
| FR | 178.33.161.58:6893 | udp | |
| FR | 178.33.161.59:6893 | udp | |
| FR | 178.33.161.60:6893 | udp | |
| FR | 178.33.161.61:6893 | udp | |
| FR | 178.33.161.62:6893 | udp | |
| FR | 178.33.161.63:6893 | udp | |
| FR | 178.33.161.64:6893 | udp | |
| FR | 178.33.161.65:6893 | udp | |
| FR | 178.33.161.66:6893 | udp | |
| FR | 178.33.161.67:6893 | udp | |
| FR | 178.33.161.68:6893 | udp | |
| FR | 178.33.161.69:6893 | udp | |
| FR | 178.33.161.70:6893 | udp | |
| FR | 178.33.161.71:6893 | udp | |
| FR | 178.33.161.72:6893 | udp | |
| FR | 178.33.161.73:6893 | udp | |
| FR | 178.33.161.74:6893 | udp | |
| FR | 178.33.161.75:6893 | udp | |
| FR | 178.33.161.76:6893 | udp | |
| FR | 178.33.161.77:6893 | udp | |
| FR | 178.33.161.78:6893 | udp | |
| FR | 178.33.161.79:6893 | udp | |
| FR | 178.33.161.80:6893 | udp | |
| FR | 178.33.161.81:6893 | udp | |
| FR | 178.33.161.82:6893 | udp | |
| FR | 178.33.161.83:6893 | udp | |
| FR | 178.33.161.84:6893 | udp | |
| FR | 178.33.161.85:6893 | udp | |
| FR | 178.33.161.86:6893 | udp | |
| FR | 178.33.161.87:6893 | udp | |
| FR | 178.33.161.88:6893 | udp | |
| FR | 178.33.161.89:6893 | udp | |
| FR | 178.33.161.90:6893 | udp | |
| FR | 178.33.161.91:6893 | udp | |
| FR | 178.33.161.92:6893 | udp | |
| FR | 178.33.161.93:6893 | udp | |
| FR | 178.33.161.94:6893 | udp | |
| FR | 178.33.161.95:6893 | udp | |
| FR | 178.33.161.96:6893 | udp | |
| FR | 178.33.161.97:6893 | udp | |
| FR | 178.33.161.98:6893 | udp | |
| FR | 178.33.161.99:6893 | udp | |
| FR | 178.33.161.100:6893 | udp | |
| FR | 178.33.161.101:6893 | udp | |
| FR | 178.33.161.102:6893 | udp | |
| FR | 178.33.161.103:6893 | udp | |
| FR | 178.33.161.104:6893 | udp | |
| FR | 178.33.161.105:6893 | udp | |
| FR | 178.33.161.106:6893 | udp | |
| FR | 178.33.161.107:6893 | udp | |
| FR | 178.33.161.108:6893 | udp | |
| FR | 178.33.161.109:6893 | udp | |
| FR | 178.33.161.110:6893 | udp | |
| FR | 178.33.161.111:6893 | udp | |
| FR | 178.33.161.112:6893 | udp | |
| FR | 178.33.161.113:6893 | udp | |
| FR | 178.33.161.114:6893 | udp | |
| FR | 178.33.161.115:6893 | udp | |
| FR | 178.33.161.116:6893 | udp | |
| FR | 178.33.161.117:6893 | udp | |
| FR | 178.33.161.118:6893 | udp | |
| FR | 178.33.161.119:6893 | udp | |
| FR | 178.33.161.120:6893 | udp | |
| FR | 178.33.161.121:6893 | udp | |
| FR | 178.33.161.122:6893 | udp | |
| FR | 178.33.161.123:6893 | udp | |
| FR | 178.33.161.124:6893 | udp | |
| FR | 178.33.161.125:6893 | udp | |
| FR | 178.33.161.126:6893 | udp | |
| FR | 178.33.161.127:6893 | udp | |
| FR | 178.33.161.128:6893 | udp | |
| FR | 178.33.161.129:6893 | udp | |
| FR | 178.33.161.130:6893 | udp | |
| FR | 178.33.161.131:6893 | udp | |
| FR | 178.33.161.132:6893 | udp | |
| FR | 178.33.161.133:6893 | udp | |
| FR | 178.33.161.134:6893 | udp | |
| FR | 178.33.161.135:6893 | udp | |
| FR | 178.33.161.136:6893 | udp | |
| FR | 178.33.161.137:6893 | udp | |
| FR | 178.33.161.138:6893 | udp | |
| FR | 178.33.161.139:6893 | udp | |
| FR | 178.33.161.140:6893 | udp | |
| FR | 178.33.161.141:6893 | udp | |
| FR | 178.33.161.142:6893 | udp | |
| FR | 178.33.161.143:6893 | udp | |
| FR | 178.33.161.144:6893 | udp | |
| FR | 178.33.161.145:6893 | udp | |
| FR | 178.33.161.146:6893 | udp | |
| FR | 178.33.161.147:6893 | udp | |
| FR | 178.33.161.148:6893 | udp | |
| FR | 178.33.161.149:6893 | udp | |
| FR | 178.33.161.150:6893 | udp | |
| FR | 178.33.161.151:6893 | udp | |
| FR | 178.33.161.152:6893 | udp | |
| FR | 178.33.161.153:6893 | udp | |
| FR | 178.33.161.154:6893 | udp | |
| FR | 178.33.161.155:6893 | udp | |
| FR | 178.33.161.156:6893 | udp | |
| FR | 178.33.161.157:6893 | udp | |
| FR | 178.33.161.158:6893 | udp | |
| FR | 178.33.161.159:6893 | udp | |
| FR | 178.33.161.160:6893 | udp | |
| FR | 178.33.161.161:6893 | udp | |
| FR | 178.33.161.162:6893 | udp | |
| FR | 178.33.161.163:6893 | udp | |
| FR | 178.33.161.164:6893 | udp | |
| FR | 178.33.161.165:6893 | udp | |
| FR | 178.33.161.166:6893 | udp | |
| FR | 178.33.161.167:6893 | udp | |
| FR | 178.33.161.168:6893 | udp | |
| FR | 178.33.161.169:6893 | udp | |
| FR | 178.33.161.170:6893 | udp | |
| FR | 178.33.161.171:6893 | udp | |
| FR | 178.33.161.172:6893 | udp | |
| FR | 178.33.161.173:6893 | udp | |
| FR | 178.33.161.174:6893 | udp | |
| FR | 178.33.161.175:6893 | udp | |
| FR | 178.33.161.176:6893 | udp | |
| FR | 178.33.161.177:6893 | udp | |
| FR | 178.33.161.178:6893 | udp | |
| FR | 178.33.161.179:6893 | udp | |
| FR | 178.33.161.180:6893 | udp | |
| FR | 178.33.161.181:6893 | udp | |
| FR | 178.33.161.182:6893 | udp | |
| FR | 178.33.161.183:6893 | udp | |
| FR | 178.33.161.184:6893 | udp | |
| FR | 178.33.161.185:6893 | udp | |
| FR | 178.33.161.186:6893 | udp | |
| FR | 178.33.161.187:6893 | udp | |
| FR | 178.33.161.188:6893 | udp | |
| FR | 178.33.161.189:6893 | udp | |
| FR | 178.33.161.190:6893 | udp | |
| FR | 178.33.161.191:6893 | udp | |
| FR | 178.33.161.192:6893 | udp | |
| FR | 178.33.161.193:6893 | udp | |
| FR | 178.33.161.194:6893 | udp | |
| FR | 178.33.161.195:6893 | udp | |
| FR | 178.33.161.196:6893 | udp | |
| FR | 178.33.161.197:6893 | udp | |
| FR | 178.33.161.198:6893 | udp | |
| FR | 178.33.161.199:6893 | udp | |
| FR | 178.33.161.200:6893 | udp | |
| FR | 178.33.161.201:6893 | udp | |
| FR | 178.33.161.202:6893 | udp | |
| FR | 178.33.161.203:6893 | udp | |
| FR | 178.33.161.204:6893 | udp | |
| FR | 178.33.161.205:6893 | udp | |
| FR | 178.33.161.206:6893 | udp | |
| FR | 178.33.161.207:6893 | udp | |
| FR | 178.33.161.208:6893 | udp | |
| FR | 178.33.161.209:6893 | udp | |
| FR | 178.33.161.210:6893 | udp | |
| FR | 178.33.161.211:6893 | udp | |
| FR | 178.33.161.212:6893 | udp | |
| FR | 178.33.161.213:6893 | udp | |
| FR | 178.33.161.214:6893 | udp | |
| FR | 178.33.161.215:6893 | udp | |
| FR | 178.33.161.216:6893 | udp | |
| FR | 178.33.161.217:6893 | udp | |
| FR | 178.33.161.218:6893 | udp | |
| FR | 178.33.161.219:6893 | udp | |
| FR | 178.33.161.220:6893 | udp | |
| FR | 178.33.161.221:6893 | udp | |
| FR | 178.33.161.222:6893 | udp | |
| FR | 178.33.161.223:6893 | udp | |
| FR | 178.33.161.224:6893 | udp | |
| FR | 178.33.161.225:6893 | udp | |
| FR | 178.33.161.226:6893 | udp | |
| FR | 178.33.161.227:6893 | udp | |
| FR | 178.33.161.228:6893 | udp | |
| FR | 178.33.161.229:6893 | udp | |
| FR | 178.33.161.230:6893 | udp | |
| FR | 178.33.161.231:6893 | udp | |
| FR | 178.33.161.232:6893 | udp | |
| FR | 178.33.161.233:6893 | udp | |
| FR | 178.33.161.234:6893 | udp | |
| FR | 178.33.161.235:6893 | udp | |
| FR | 178.33.161.236:6893 | udp | |
| FR | 178.33.161.237:6893 | udp | |
| FR | 178.33.161.238:6893 | udp | |
| FR | 178.33.161.239:6893 | udp | |
| FR | 178.33.161.240:6893 | udp | |
| FR | 178.33.161.241:6893 | udp | |
| FR | 178.33.161.242:6893 | udp | |
| FR | 178.33.161.243:6893 | udp | |
| FR | 178.33.161.244:6893 | udp | |
| FR | 178.33.161.245:6893 | udp | |
| FR | 178.33.161.246:6893 | udp | |
| FR | 178.33.161.247:6893 | udp | |
| FR | 178.33.161.248:6893 | udp | |
| FR | 178.33.161.249:6893 | udp | |
| FR | 178.33.161.250:6893 | udp | |
| FR | 178.33.161.251:6893 | udp | |
| FR | 178.33.161.252:6893 | udp | |
| FR | 178.33.161.253:6893 | udp | |
| FR | 178.33.161.254:6893 | udp | |
| US | 8.8.8.8:53 | 10.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 9.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 11.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 12.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 13.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 16.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 17.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 18.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 19.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 20.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 21.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 23.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 22.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 25.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 26.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 24.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 27.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 28.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 29.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 30.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 31.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 32.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 33.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 34.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 35.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 36.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 37.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 38.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 39.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 40.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 41.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 42.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 14.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 104.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 105.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 106.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 107.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 108.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 109.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 110.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 111.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 113.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 112.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 114.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 115.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 116.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 118.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 117.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 119.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 120.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 122.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 139.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 138.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 140.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 142.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 147.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 149.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 153.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 175.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 176.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 180.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 184.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 185.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 201.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 202.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 203.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 204.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 205.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 206.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 208.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 209.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 211.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 217.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 218.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 237.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 239.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 240.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 241.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 242.161.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 246.161.33.178.in-addr.arpa | udp |
| FR | 178.33.161.255:6893 | udp | |
| FR | 178.33.162.0:6893 | udp | |
| FR | 178.33.162.1:6893 | udp | |
| FR | 178.33.162.2:6893 | udp | |
| FR | 178.33.162.3:6893 | udp | |
| FR | 178.33.162.4:6893 | udp | |
| FR | 178.33.162.5:6893 | udp | |
| FR | 178.33.162.6:6893 | udp | |
| FR | 178.33.162.7:6893 | udp | |
| FR | 178.33.162.8:6893 | udp | |
| FR | 178.33.162.9:6893 | udp | |
| FR | 178.33.162.10:6893 | udp | |
| FR | 178.33.162.11:6893 | udp | |
| FR | 178.33.162.12:6893 | udp | |
| FR | 178.33.162.13:6893 | udp | |
| FR | 178.33.162.14:6893 | udp | |
| FR | 178.33.162.15:6893 | udp | |
| FR | 178.33.162.16:6893 | udp | |
| FR | 178.33.162.17:6893 | udp | |
| FR | 178.33.162.18:6893 | udp | |
| FR | 178.33.162.19:6893 | udp | |
| FR | 178.33.162.20:6893 | udp | |
| FR | 178.33.162.21:6893 | udp | |
| FR | 178.33.162.22:6893 | udp | |
| FR | 178.33.162.23:6893 | udp | |
| FR | 178.33.162.24:6893 | udp | |
| FR | 178.33.162.25:6893 | udp | |
| FR | 178.33.162.26:6893 | udp | |
| FR | 178.33.162.27:6893 | udp | |
| FR | 178.33.162.28:6893 | udp | |
| FR | 178.33.162.29:6893 | udp | |
| FR | 178.33.162.30:6893 | udp | |
| FR | 178.33.162.31:6893 | udp | |
| FR | 178.33.162.32:6893 | udp | |
| FR | 178.33.162.33:6893 | udp | |
| FR | 178.33.162.34:6893 | udp | |
| FR | 178.33.162.35:6893 | udp | |
| FR | 178.33.162.36:6893 | udp | |
| FR | 178.33.162.37:6893 | udp | |
| FR | 178.33.162.38:6893 | udp | |
| FR | 178.33.162.39:6893 | udp | |
| FR | 178.33.162.40:6893 | udp | |
| FR | 178.33.162.41:6893 | udp | |
| FR | 178.33.162.42:6893 | udp | |
| FR | 178.33.162.43:6893 | udp | |
| FR | 178.33.162.44:6893 | udp | |
| FR | 178.33.162.45:6893 | udp | |
| FR | 178.33.162.46:6893 | udp | |
| FR | 178.33.162.47:6893 | udp | |
| FR | 178.33.162.48:6893 | udp | |
| FR | 178.33.162.49:6893 | udp | |
| FR | 178.33.162.50:6893 | udp | |
| FR | 178.33.162.51:6893 | udp | |
| FR | 178.33.162.52:6893 | udp | |
| FR | 178.33.162.53:6893 | udp | |
| FR | 178.33.162.54:6893 | udp | |
| FR | 178.33.162.55:6893 | udp | |
| FR | 178.33.162.56:6893 | udp | |
| FR | 178.33.162.57:6893 | udp | |
| FR | 178.33.162.58:6893 | udp | |
| FR | 178.33.162.59:6893 | udp | |
| FR | 178.33.162.60:6893 | udp | |
| FR | 178.33.162.61:6893 | udp | |
| FR | 178.33.162.62:6893 | udp | |
| FR | 178.33.162.63:6893 | udp | |
| FR | 178.33.162.64:6893 | udp | |
| FR | 178.33.162.65:6893 | udp | |
| FR | 178.33.162.66:6893 | udp | |
| FR | 178.33.162.67:6893 | udp | |
| FR | 178.33.162.68:6893 | udp | |
| FR | 178.33.162.69:6893 | udp | |
| FR | 178.33.162.70:6893 | udp | |
| FR | 178.33.162.71:6893 | udp | |
| FR | 178.33.162.72:6893 | udp | |
| FR | 178.33.162.73:6893 | udp | |
| FR | 178.33.162.74:6893 | udp | |
| FR | 178.33.162.75:6893 | udp | |
| FR | 178.33.162.76:6893 | udp | |
| FR | 178.33.162.77:6893 | udp | |
| FR | 178.33.162.78:6893 | udp | |
| FR | 178.33.162.79:6893 | udp | |
| FR | 178.33.162.80:6893 | udp | |
| FR | 178.33.162.81:6893 | udp | |
| FR | 178.33.162.82:6893 | udp | |
| FR | 178.33.162.83:6893 | udp | |
| FR | 178.33.162.84:6893 | udp | |
| FR | 178.33.162.85:6893 | udp | |
| FR | 178.33.162.86:6893 | udp | |
| FR | 178.33.162.87:6893 | udp | |
| FR | 178.33.162.88:6893 | udp | |
| FR | 178.33.162.89:6893 | udp | |
| FR | 178.33.162.90:6893 | udp | |
| FR | 178.33.162.91:6893 | udp | |
| FR | 178.33.162.92:6893 | udp | |
| FR | 178.33.162.93:6893 | udp | |
| FR | 178.33.162.94:6893 | udp | |
| FR | 178.33.162.95:6893 | udp | |
| FR | 178.33.162.96:6893 | udp | |
| FR | 178.33.162.97:6893 | udp | |
| FR | 178.33.162.98:6893 | udp | |
| FR | 178.33.162.99:6893 | udp | |
| FR | 178.33.162.100:6893 | udp | |
| FR | 178.33.162.101:6893 | udp | |
| FR | 178.33.162.102:6893 | udp | |
| FR | 178.33.162.103:6893 | udp | |
| FR | 178.33.162.104:6893 | udp | |
| FR | 178.33.162.105:6893 | udp | |
| FR | 178.33.162.106:6893 | udp | |
| FR | 178.33.162.107:6893 | udp | |
| FR | 178.33.162.108:6893 | udp | |
| FR | 178.33.162.109:6893 | udp | |
| FR | 178.33.162.110:6893 | udp | |
| FR | 178.33.162.111:6893 | udp | |
| FR | 178.33.162.112:6893 | udp | |
| FR | 178.33.162.113:6893 | udp | |
| FR | 178.33.162.114:6893 | udp | |
| FR | 178.33.162.115:6893 | udp | |
| FR | 178.33.162.116:6893 | udp | |
| FR | 178.33.162.117:6893 | udp | |
| FR | 178.33.162.118:6893 | udp | |
| FR | 178.33.162.119:6893 | udp | |
| FR | 178.33.162.120:6893 | udp | |
| FR | 178.33.162.121:6893 | udp | |
| FR | 178.33.162.122:6893 | udp | |
| FR | 178.33.162.123:6893 | udp | |
| FR | 178.33.162.124:6893 | udp | |
| FR | 178.33.162.125:6893 | udp | |
| FR | 178.33.162.126:6893 | udp | |
| FR | 178.33.162.127:6893 | udp | |
| FR | 178.33.162.128:6893 | udp | |
| FR | 178.33.162.129:6893 | udp | |
| FR | 178.33.162.130:6893 | udp | |
| FR | 178.33.162.131:6893 | udp | |
| FR | 178.33.162.132:6893 | udp | |
| FR | 178.33.162.133:6893 | udp | |
| FR | 178.33.162.134:6893 | udp | |
| FR | 178.33.162.135:6893 | udp | |
| FR | 178.33.162.136:6893 | udp | |
| FR | 178.33.162.137:6893 | udp | |
| FR | 178.33.162.138:6893 | udp | |
| FR | 178.33.162.139:6893 | udp | |
| FR | 178.33.162.140:6893 | udp | |
| FR | 178.33.162.141:6893 | udp | |
| FR | 178.33.162.142:6893 | udp | |
| FR | 178.33.162.143:6893 | udp | |
| FR | 178.33.162.144:6893 | udp | |
| FR | 178.33.162.145:6893 | udp | |
| FR | 178.33.162.146:6893 | udp | |
| FR | 178.33.162.147:6893 | udp | |
| FR | 178.33.162.148:6893 | udp | |
| FR | 178.33.162.149:6893 | udp | |
| FR | 178.33.162.150:6893 | udp | |
| FR | 178.33.162.151:6893 | udp | |
| FR | 178.33.162.152:6893 | udp | |
| FR | 178.33.162.153:6893 | udp | |
| FR | 178.33.162.154:6893 | udp | |
| FR | 178.33.162.155:6893 | udp | |
| FR | 178.33.162.156:6893 | udp | |
| FR | 178.33.162.157:6893 | udp | |
| FR | 178.33.162.158:6893 | udp | |
| FR | 178.33.162.159:6893 | udp | |
| FR | 178.33.162.160:6893 | udp | |
| FR | 178.33.162.161:6893 | udp | |
| FR | 178.33.162.162:6893 | udp | |
| FR | 178.33.162.163:6893 | udp | |
| FR | 178.33.162.164:6893 | udp | |
| FR | 178.33.162.165:6893 | udp | |
| FR | 178.33.162.166:6893 | udp | |
| FR | 178.33.162.167:6893 | udp | |
| FR | 178.33.162.168:6893 | udp | |
| FR | 178.33.162.169:6893 | udp | |
| FR | 178.33.162.170:6893 | udp | |
| FR | 178.33.162.171:6893 | udp | |
| FR | 178.33.162.172:6893 | udp | |
| FR | 178.33.162.173:6893 | udp | |
| FR | 178.33.162.174:6893 | udp | |
| FR | 178.33.162.175:6893 | udp | |
| FR | 178.33.162.176:6893 | udp | |
| FR | 178.33.162.177:6893 | udp | |
| FR | 178.33.162.178:6893 | udp | |
| FR | 178.33.162.179:6893 | udp | |
| FR | 178.33.162.180:6893 | udp | |
| FR | 178.33.162.181:6893 | udp | |
| FR | 178.33.162.182:6893 | udp | |
| FR | 178.33.162.183:6893 | udp | |
| FR | 178.33.162.184:6893 | udp | |
| FR | 178.33.162.185:6893 | udp | |
| FR | 178.33.162.186:6893 | udp | |
| FR | 178.33.162.187:6893 | udp | |
| FR | 178.33.162.188:6893 | udp | |
| FR | 178.33.162.189:6893 | udp | |
| FR | 178.33.162.190:6893 | udp | |
| FR | 178.33.162.191:6893 | udp | |
| FR | 178.33.162.192:6893 | udp | |
| FR | 178.33.162.193:6893 | udp | |
| FR | 178.33.162.194:6893 | udp | |
| FR | 178.33.162.195:6893 | udp | |
| FR | 178.33.162.196:6893 | udp | |
| FR | 178.33.162.197:6893 | udp | |
| FR | 178.33.162.198:6893 | udp | |
| FR | 178.33.162.199:6893 | udp | |
| FR | 178.33.162.200:6893 | udp | |
| FR | 178.33.162.201:6893 | udp | |
| FR | 178.33.162.202:6893 | udp | |
| FR | 178.33.162.203:6893 | udp | |
| FR | 178.33.162.204:6893 | udp | |
| FR | 178.33.162.205:6893 | udp | |
| FR | 178.33.162.206:6893 | udp | |
| FR | 178.33.162.207:6893 | udp | |
| FR | 178.33.162.208:6893 | udp | |
| FR | 178.33.162.209:6893 | udp | |
| FR | 178.33.162.210:6893 | udp | |
| FR | 178.33.162.211:6893 | udp | |
| FR | 178.33.162.212:6893 | udp | |
| FR | 178.33.162.213:6893 | udp | |
| FR | 178.33.162.214:6893 | udp | |
| FR | 178.33.162.215:6893 | udp | |
| FR | 178.33.162.216:6893 | udp | |
| FR | 178.33.162.217:6893 | udp | |
| FR | 178.33.162.218:6893 | udp | |
| FR | 178.33.162.219:6893 | udp | |
| FR | 178.33.162.220:6893 | udp | |
| FR | 178.33.162.221:6893 | udp | |
| FR | 178.33.162.222:6893 | udp | |
| FR | 178.33.162.223:6893 | udp | |
| FR | 178.33.162.224:6893 | udp | |
| FR | 178.33.162.225:6893 | udp | |
| FR | 178.33.162.226:6893 | udp | |
| FR | 178.33.162.227:6893 | udp | |
| FR | 178.33.162.228:6893 | udp | |
| FR | 178.33.162.229:6893 | udp | |
| FR | 178.33.162.230:6893 | udp | |
| FR | 178.33.162.231:6893 | udp | |
| FR | 178.33.162.232:6893 | udp | |
| FR | 178.33.162.233:6893 | udp | |
| FR | 178.33.162.234:6893 | udp | |
| FR | 178.33.162.235:6893 | udp | |
| FR | 178.33.162.236:6893 | udp | |
| FR | 178.33.162.237:6893 | udp | |
| FR | 178.33.162.238:6893 | udp | |
| FR | 178.33.162.239:6893 | udp | |
| FR | 178.33.162.240:6893 | udp | |
| FR | 178.33.162.241:6893 | udp | |
| FR | 178.33.162.242:6893 | udp | |
| FR | 178.33.162.243:6893 | udp | |
| FR | 178.33.162.244:6893 | udp | |
| FR | 178.33.162.245:6893 | udp | |
| FR | 178.33.162.246:6893 | udp | |
| FR | 178.33.162.247:6893 | udp | |
| FR | 178.33.162.248:6893 | udp | |
| FR | 178.33.162.249:6893 | udp | |
| FR | 178.33.162.250:6893 | udp | |
| FR | 178.33.162.251:6893 | udp | |
| FR | 178.33.162.252:6893 | udp | |
| FR | 178.33.162.253:6893 | udp | |
| FR | 178.33.162.254:6893 | udp | |
| US | 8.8.8.8:53 | 9.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 10.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 11.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 12.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 13.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 14.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 16.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 17.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 18.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 19.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 20.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 21.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 22.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 23.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 24.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 25.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 26.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 27.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 28.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 29.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 30.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 31.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 32.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 33.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 34.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 35.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 36.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 37.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 38.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 39.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 40.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 41.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 42.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 43.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 44.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 45.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 46.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 47.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 48.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 59.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 60.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 62.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 64.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 65.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 66.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 67.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 68.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 69.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 70.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 72.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 74.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 76.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 85.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 86.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 87.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 90.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 92.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 102.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 103.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 109.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 114.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 146.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 147.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 148.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 149.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 186.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 187.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 188.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 189.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 190.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 192.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 193.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 194.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 195.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 197.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 232.162.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 247.162.33.178.in-addr.arpa | udp |
| FR | 178.33.162.255:6893 | udp | |
| FR | 178.33.163.0:6893 | udp | |
| FR | 178.33.163.1:6893 | udp | |
| FR | 178.33.163.2:6893 | udp | |
| FR | 178.33.163.3:6893 | udp | |
| FR | 178.33.163.4:6893 | udp | |
| FR | 178.33.163.5:6893 | udp | |
| FR | 178.33.163.6:6893 | udp | |
| FR | 178.33.163.7:6893 | udp | |
| FR | 178.33.163.8:6893 | udp | |
| FR | 178.33.163.9:6893 | udp | |
| FR | 178.33.163.10:6893 | udp | |
| FR | 178.33.163.11:6893 | udp | |
| FR | 178.33.163.12:6893 | udp | |
| FR | 178.33.163.13:6893 | udp | |
| FR | 178.33.163.14:6893 | udp | |
| FR | 178.33.163.15:6893 | udp | |
| FR | 178.33.163.16:6893 | udp | |
| FR | 178.33.163.17:6893 | udp | |
| FR | 178.33.163.18:6893 | udp | |
| FR | 178.33.163.19:6893 | udp | |
| FR | 178.33.163.20:6893 | udp | |
| FR | 178.33.163.21:6893 | udp | |
| FR | 178.33.163.22:6893 | udp | |
| FR | 178.33.163.23:6893 | udp | |
| FR | 178.33.163.24:6893 | udp | |
| FR | 178.33.163.25:6893 | udp | |
| FR | 178.33.163.26:6893 | udp | |
| FR | 178.33.163.27:6893 | udp | |
| FR | 178.33.163.28:6893 | udp | |
| FR | 178.33.163.29:6893 | udp | |
| FR | 178.33.163.30:6893 | udp | |
| FR | 178.33.163.31:6893 | udp | |
| FR | 178.33.163.32:6893 | udp | |
| FR | 178.33.163.33:6893 | udp | |
| FR | 178.33.163.34:6893 | udp | |
| FR | 178.33.163.35:6893 | udp | |
| FR | 178.33.163.36:6893 | udp | |
| FR | 178.33.163.37:6893 | udp | |
| FR | 178.33.163.38:6893 | udp | |
| FR | 178.33.163.39:6893 | udp | |
| FR | 178.33.163.40:6893 | udp | |
| FR | 178.33.163.41:6893 | udp | |
| FR | 178.33.163.42:6893 | udp | |
| FR | 178.33.163.43:6893 | udp | |
| FR | 178.33.163.44:6893 | udp | |
| FR | 178.33.163.45:6893 | udp | |
| FR | 178.33.163.46:6893 | udp | |
| FR | 178.33.163.47:6893 | udp | |
| FR | 178.33.163.48:6893 | udp | |
| FR | 178.33.163.49:6893 | udp | |
| FR | 178.33.163.50:6893 | udp | |
| FR | 178.33.163.51:6893 | udp | |
| FR | 178.33.163.52:6893 | udp | |
| FR | 178.33.163.53:6893 | udp | |
| FR | 178.33.163.54:6893 | udp | |
| FR | 178.33.163.55:6893 | udp | |
| FR | 178.33.163.56:6893 | udp | |
| FR | 178.33.163.57:6893 | udp | |
| FR | 178.33.163.58:6893 | udp | |
| FR | 178.33.163.59:6893 | udp | |
| FR | 178.33.163.60:6893 | udp | |
| FR | 178.33.163.61:6893 | udp | |
| FR | 178.33.163.62:6893 | udp | |
| FR | 178.33.163.63:6893 | udp | |
| FR | 178.33.163.64:6893 | udp | |
| FR | 178.33.163.65:6893 | udp | |
| FR | 178.33.163.66:6893 | udp | |
| FR | 178.33.163.67:6893 | udp | |
| FR | 178.33.163.68:6893 | udp | |
| FR | 178.33.163.69:6893 | udp | |
| FR | 178.33.163.70:6893 | udp | |
| FR | 178.33.163.71:6893 | udp | |
| FR | 178.33.163.72:6893 | udp | |
| FR | 178.33.163.73:6893 | udp | |
| FR | 178.33.163.74:6893 | udp | |
| FR | 178.33.163.75:6893 | udp | |
| FR | 178.33.163.76:6893 | udp | |
| FR | 178.33.163.77:6893 | udp | |
| FR | 178.33.163.78:6893 | udp | |
| FR | 178.33.163.79:6893 | udp | |
| FR | 178.33.163.80:6893 | udp | |
| FR | 178.33.163.81:6893 | udp | |
| FR | 178.33.163.82:6893 | udp | |
| FR | 178.33.163.83:6893 | udp | |
| FR | 178.33.163.84:6893 | udp | |
| FR | 178.33.163.85:6893 | udp | |
| FR | 178.33.163.86:6893 | udp | |
| FR | 178.33.163.87:6893 | udp | |
| FR | 178.33.163.88:6893 | udp | |
| FR | 178.33.163.89:6893 | udp | |
| FR | 178.33.163.90:6893 | udp | |
| FR | 178.33.163.91:6893 | udp | |
| FR | 178.33.163.92:6893 | udp | |
| FR | 178.33.163.93:6893 | udp | |
| FR | 178.33.163.94:6893 | udp | |
| FR | 178.33.163.95:6893 | udp | |
| FR | 178.33.163.96:6893 | udp | |
| FR | 178.33.163.97:6893 | udp | |
| FR | 178.33.163.98:6893 | udp | |
| FR | 178.33.163.99:6893 | udp | |
| FR | 178.33.163.100:6893 | udp | |
| FR | 178.33.163.101:6893 | udp | |
| FR | 178.33.163.102:6893 | udp | |
| FR | 178.33.163.103:6893 | udp | |
| FR | 178.33.163.104:6893 | udp | |
| FR | 178.33.163.105:6893 | udp | |
| FR | 178.33.163.106:6893 | udp | |
| FR | 178.33.163.107:6893 | udp | |
| FR | 178.33.163.108:6893 | udp | |
| FR | 178.33.163.109:6893 | udp | |
| FR | 178.33.163.110:6893 | udp | |
| FR | 178.33.163.111:6893 | udp | |
| FR | 178.33.163.112:6893 | udp | |
| FR | 178.33.163.113:6893 | udp | |
| FR | 178.33.163.114:6893 | udp | |
| FR | 178.33.163.115:6893 | udp | |
| FR | 178.33.163.116:6893 | udp | |
| FR | 178.33.163.117:6893 | udp | |
| FR | 178.33.163.118:6893 | udp | |
| FR | 178.33.163.119:6893 | udp | |
| FR | 178.33.163.120:6893 | udp | |
| FR | 178.33.163.121:6893 | udp | |
| FR | 178.33.163.122:6893 | udp | |
| FR | 178.33.163.123:6893 | udp | |
| FR | 178.33.163.124:6893 | udp | |
| FR | 178.33.163.125:6893 | udp | |
| FR | 178.33.163.126:6893 | udp | |
| FR | 178.33.163.127:6893 | udp | |
| FR | 178.33.163.128:6893 | udp | |
| FR | 178.33.163.129:6893 | udp | |
| FR | 178.33.163.130:6893 | udp | |
| FR | 178.33.163.131:6893 | udp | |
| FR | 178.33.163.132:6893 | udp | |
| FR | 178.33.163.133:6893 | udp | |
| FR | 178.33.163.134:6893 | udp | |
| FR | 178.33.163.135:6893 | udp | |
| FR | 178.33.163.136:6893 | udp | |
| FR | 178.33.163.137:6893 | udp | |
| FR | 178.33.163.138:6893 | udp | |
| FR | 178.33.163.139:6893 | udp | |
| FR | 178.33.163.140:6893 | udp | |
| FR | 178.33.163.141:6893 | udp | |
| FR | 178.33.163.142:6893 | udp | |
| FR | 178.33.163.143:6893 | udp | |
| FR | 178.33.163.144:6893 | udp | |
| FR | 178.33.163.145:6893 | udp | |
| FR | 178.33.163.146:6893 | udp | |
| FR | 178.33.163.147:6893 | udp | |
| FR | 178.33.163.148:6893 | udp | |
| FR | 178.33.163.149:6893 | udp | |
| FR | 178.33.163.150:6893 | udp | |
| FR | 178.33.163.151:6893 | udp | |
| FR | 178.33.163.152:6893 | udp | |
| FR | 178.33.163.153:6893 | udp | |
| FR | 178.33.163.154:6893 | udp | |
| FR | 178.33.163.155:6893 | udp | |
| FR | 178.33.163.156:6893 | udp | |
| FR | 178.33.163.157:6893 | udp | |
| FR | 178.33.163.158:6893 | udp | |
| FR | 178.33.163.159:6893 | udp | |
| FR | 178.33.163.160:6893 | udp | |
| FR | 178.33.163.161:6893 | udp | |
| FR | 178.33.163.162:6893 | udp | |
| FR | 178.33.163.163:6893 | udp | |
| FR | 178.33.163.164:6893 | udp | |
| FR | 178.33.163.165:6893 | udp | |
| FR | 178.33.163.166:6893 | udp | |
| FR | 178.33.163.167:6893 | udp | |
| FR | 178.33.163.168:6893 | udp | |
| FR | 178.33.163.169:6893 | udp | |
| FR | 178.33.163.170:6893 | udp | |
| FR | 178.33.163.171:6893 | udp | |
| FR | 178.33.163.172:6893 | udp | |
| FR | 178.33.163.173:6893 | udp | |
| FR | 178.33.163.174:6893 | udp | |
| FR | 178.33.163.175:6893 | udp | |
| FR | 178.33.163.176:6893 | udp | |
| FR | 178.33.163.177:6893 | udp | |
| FR | 178.33.163.178:6893 | udp | |
| FR | 178.33.163.179:6893 | udp | |
| FR | 178.33.163.180:6893 | udp | |
| FR | 178.33.163.181:6893 | udp | |
| FR | 178.33.163.182:6893 | udp | |
| FR | 178.33.163.183:6893 | udp | |
| FR | 178.33.163.184:6893 | udp | |
| FR | 178.33.163.185:6893 | udp | |
| FR | 178.33.163.186:6893 | udp | |
| FR | 178.33.163.187:6893 | udp | |
| FR | 178.33.163.188:6893 | udp | |
| FR | 178.33.163.189:6893 | udp | |
| FR | 178.33.163.190:6893 | udp | |
| FR | 178.33.163.191:6893 | udp | |
| FR | 178.33.163.192:6893 | udp | |
| FR | 178.33.163.193:6893 | udp | |
| FR | 178.33.163.194:6893 | udp | |
| FR | 178.33.163.195:6893 | udp | |
| FR | 178.33.163.196:6893 | udp | |
| FR | 178.33.163.197:6893 | udp | |
| FR | 178.33.163.198:6893 | udp | |
| FR | 178.33.163.199:6893 | udp | |
| FR | 178.33.163.200:6893 | udp | |
| FR | 178.33.163.201:6893 | udp | |
| FR | 178.33.163.202:6893 | udp | |
| FR | 178.33.163.203:6893 | udp | |
| FR | 178.33.163.204:6893 | udp | |
| FR | 178.33.163.205:6893 | udp | |
| FR | 178.33.163.206:6893 | udp | |
| FR | 178.33.163.207:6893 | udp | |
| FR | 178.33.163.208:6893 | udp | |
| FR | 178.33.163.209:6893 | udp | |
| FR | 178.33.163.210:6893 | udp | |
| FR | 178.33.163.211:6893 | udp | |
| FR | 178.33.163.212:6893 | udp | |
| FR | 178.33.163.213:6893 | udp | |
| FR | 178.33.163.214:6893 | udp | |
| FR | 178.33.163.215:6893 | udp | |
| FR | 178.33.163.216:6893 | udp | |
| FR | 178.33.163.217:6893 | udp | |
| FR | 178.33.163.218:6893 | udp | |
| FR | 178.33.163.219:6893 | udp | |
| FR | 178.33.163.220:6893 | udp | |
| FR | 178.33.163.221:6893 | udp | |
| FR | 178.33.163.222:6893 | udp | |
| FR | 178.33.163.223:6893 | udp | |
| FR | 178.33.163.224:6893 | udp | |
| FR | 178.33.163.225:6893 | udp | |
| FR | 178.33.163.226:6893 | udp | |
| FR | 178.33.163.227:6893 | udp | |
| FR | 178.33.163.228:6893 | udp | |
| FR | 178.33.163.229:6893 | udp | |
| FR | 178.33.163.230:6893 | udp | |
| FR | 178.33.163.231:6893 | udp | |
| FR | 178.33.163.232:6893 | udp | |
| FR | 178.33.163.233:6893 | udp | |
| FR | 178.33.163.234:6893 | udp | |
| FR | 178.33.163.235:6893 | udp | |
| FR | 178.33.163.236:6893 | udp | |
| FR | 178.33.163.237:6893 | udp | |
| FR | 178.33.163.238:6893 | udp | |
| FR | 178.33.163.239:6893 | udp | |
| FR | 178.33.163.240:6893 | udp | |
| FR | 178.33.163.241:6893 | udp | |
| FR | 178.33.163.242:6893 | udp | |
| FR | 178.33.163.243:6893 | udp | |
| FR | 178.33.163.244:6893 | udp | |
| FR | 178.33.163.245:6893 | udp | |
| FR | 178.33.163.246:6893 | udp | |
| FR | 178.33.163.247:6893 | udp | |
| FR | 178.33.163.248:6893 | udp | |
| FR | 178.33.163.249:6893 | udp | |
| FR | 178.33.163.250:6893 | udp | |
| FR | 178.33.163.251:6893 | udp | |
| FR | 178.33.163.252:6893 | udp | |
| FR | 178.33.163.253:6893 | udp | |
| FR | 178.33.163.254:6893 | udp | |
| US | 8.8.8.8:53 | 10.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 9.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 11.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 12.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 27.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 28.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 29.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 30.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 31.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 33.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 16.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 14.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 17.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 19.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 21.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 20.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 23.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 24.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 26.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 25.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 32.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 36.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 35.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 34.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 37.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 38.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 39.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 41.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 13.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 40.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 18.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 22.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 42.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 43.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 44.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 45.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 46.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 48.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 47.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 90.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 91.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 92.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 93.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 94.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 96.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 97.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 112.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 113.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 114.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 115.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 117.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 118.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 121.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 124.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 125.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 128.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 131.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 134.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 140.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 147.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 149.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 150.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 151.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 152.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 153.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 157.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 159.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 158.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 160.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 161.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 163.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 162.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 188.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 189.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 190.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 192.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 191.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 193.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 222.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 223.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 224.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 226.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 239.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 240.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 241.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 242.163.33.178.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 243.163.33.178.in-addr.arpa | udp |
| FR | 178.33.163.255:6893 | udp | |
| FR | 178.33.158.0:6893 | udp | |
| FR | 178.33.158.1:6893 | udp | |
| FR | 178.33.158.2:6893 | udp | |
| FR | 178.33.158.3:6893 | udp | |
| FR | 178.33.158.4:6893 | udp | |
| FR | 178.33.158.5:6893 | udp | |
| FR | 178.33.158.6:6893 | udp | |
| FR | 178.33.158.7:6893 | udp | |
| FR | 178.33.158.8:6893 | udp | |
| FR | 178.33.158.9:6893 | udp | |
| FR | 178.33.158.10:6893 | udp | |
| FR | 178.33.158.11:6893 | udp | |
| FR | 178.33.158.12:6893 | udp | |
| FR | 178.33.158.13:6893 | udp | |
| FR | 178.33.158.14:6893 | udp | |
| FR | 178.33.158.15:6893 | udp | |
| FR | 178.33.158.16:6893 | udp | |
| FR | 178.33.158.17:6893 | udp | |
| FR | 178.33.158.18:6893 | udp | |
| FR | 178.33.158.19:6893 | udp | |
| FR | 178.33.158.20:6893 | udp | |
| FR | 178.33.158.21:6893 | udp | |
| FR | 178.33.158.22:6893 | udp | |
| FR | 178.33.158.23:6893 | udp | |
| FR | 178.33.158.24:6893 | udp | |
| FR | 178.33.158.25:6893 | udp | |
| FR | 178.33.158.26:6893 | udp | |
| FR | 178.33.158.27:6893 | udp | |
| FR | 178.33.158.28:6893 | udp | |
| FR | 178.33.158.29:6893 | udp | |
| FR | 178.33.158.30:6893 | udp | |
| FR | 178.33.158.31:6893 | udp | |
| FR | 178.33.159.0:6893 | udp | |
| FR | 178.33.159.1:6893 | udp | |
| FR | 178.33.159.2:6893 | udp | |
| FR | 178.33.159.3:6893 | udp | |
| FR | 178.33.159.4:6893 | udp | |
| FR | 178.33.159.5:6893 | udp | |
| FR | 178.33.159.6:6893 | udp | |
| FR | 178.33.159.7:6893 | udp | |
| FR | 178.33.159.8:6893 | udp | |
| FR | 178.33.159.9:6893 | udp | |
| FR | 178.33.159.10:6893 | udp | |
| FR | 178.33.159.11:6893 | udp | |
| FR | 178.33.159.12:6893 | udp | |
| FR | 178.33.159.13:6893 | udp | |
| FR | 178.33.159.14:6893 | udp | |
| FR | 178.33.159.15:6893 | udp | |
| FR | 178.33.159.16:6893 | udp | |
| FR | 178.33.159.17:6893 | udp | |
| FR | 178.33.159.18:6893 | udp | |
| FR | 178.33.159.19:6893 | udp | |
| FR | 178.33.159.20:6893 | udp | |
| FR | 178.33.159.21:6893 | udp | |
| FR | 178.33.159.22:6893 | udp | |
| FR | 178.33.159.23:6893 | udp | |
| FR | 178.33.159.24:6893 | udp | |
| FR | 178.33.159.25:6893 | udp | |
| FR | 178.33.159.26:6893 | udp | |
| FR | 178.33.159.27:6893 | udp | |
| FR | 178.33.159.28:6893 | udp | |
| FR | 178.33.159.29:6893 | udp | |
| FR | 178.33.159.30:6893 | udp | |
| FR | 178.33.159.31:6893 | udp | |
| FR | 178.33.160.0:6893 | udp | |
| FR | 178.33.160.1:6893 | udp | |
| FR | 178.33.160.2:6893 | udp | |
| FR | 178.33.160.3:6893 | udp | |
| FR | 178.33.160.4:6893 | udp | |
| FR | 178.33.160.5:6893 | udp | |
| FR | 178.33.160.6:6893 | udp | |
| FR | 178.33.160.7:6893 | udp | |
| FR | 178.33.160.8:6893 | udp | |
| FR | 178.33.160.9:6893 | udp | |
| FR | 178.33.160.10:6893 | udp | |
| FR | 178.33.160.11:6893 | udp | |
| FR | 178.33.160.12:6893 | udp | |
| FR | 178.33.160.13:6893 | udp | |
| FR | 178.33.160.14:6893 | udp | |
| FR | 178.33.160.15:6893 | udp | |
| FR | 178.33.160.16:6893 | udp | |
| FR | 178.33.160.17:6893 | udp | |
| FR | 178.33.160.18:6893 | udp | |
| FR | 178.33.160.19:6893 | udp | |
| FR | 178.33.160.20:6893 | udp | |
| FR | 178.33.160.21:6893 | udp | |
| FR | 178.33.160.22:6893 | udp | |
| FR | 178.33.160.23:6893 | udp | |
| FR | 178.33.160.24:6893 | udp | |
| FR | 178.33.160.25:6893 | udp | |
| FR | 178.33.160.26:6893 | udp | |
| FR | 178.33.160.27:6893 | udp | |
| FR | 178.33.160.28:6893 | udp | |
| FR | 178.33.160.29:6893 | udp | |
| FR | 178.33.160.30:6893 | udp | |
| FR | 178.33.160.31:6893 | udp | |
| FR | 178.33.160.32:6893 | udp | |
| FR | 178.33.160.33:6893 | udp | |
| FR | 178.33.160.34:6893 | udp | |
| FR | 178.33.160.35:6893 | udp | |
| FR | 178.33.160.36:6893 | udp | |
| FR | 178.33.160.37:6893 | udp | |
| FR | 178.33.160.38:6893 | udp | |
| FR | 178.33.160.39:6893 | udp | |
| FR | 178.33.160.40:6893 | udp | |
| FR | 178.33.160.41:6893 | udp | |
| FR | 178.33.160.42:6893 | udp | |
| FR | 178.33.160.43:6893 | udp | |
| FR | 178.33.160.44:6893 | udp | |
| FR | 178.33.160.45:6893 | udp | |
| FR | 178.33.160.46:6893 | udp | |
| FR | 178.33.160.47:6893 | udp | |
| FR | 178.33.160.48:6893 | udp | |
| FR | 178.33.160.49:6893 | udp | |
| FR | 178.33.160.50:6893 | udp | |
| FR | 178.33.160.51:6893 | udp | |
| FR | 178.33.160.52:6893 | udp | |
| FR | 178.33.160.53:6893 | udp | |
| FR | 178.33.160.54:6893 | udp | |
| FR | 178.33.160.55:6893 | udp | |
| FR | 178.33.160.56:6893 | udp | |
| FR | 178.33.160.57:6893 | udp | |
| FR | 178.33.160.58:6893 | udp | |
| FR | 178.33.160.59:6893 | udp | |
| FR | 178.33.160.60:6893 | udp | |
| FR | 178.33.160.61:6893 | udp | |
| FR | 178.33.160.62:6893 | udp | |
| FR | 178.33.160.63:6893 | udp | |
| FR | 178.33.160.64:6893 | udp | |
| FR | 178.33.160.65:6893 | udp | |
| FR | 178.33.160.66:6893 | udp | |
| FR | 178.33.160.67:6893 | udp | |
| FR | 178.33.160.68:6893 | udp | |
| FR | 178.33.160.69:6893 | udp | |
| FR | 178.33.160.70:6893 | udp | |
| FR | 178.33.160.71:6893 | udp | |
| FR | 178.33.160.72:6893 | udp | |
| FR | 178.33.160.73:6893 | udp | |
| FR | 178.33.160.74:6893 | udp | |
| FR | 178.33.160.75:6893 | udp | |
| FR | 178.33.160.76:6893 | udp | |
| FR | 178.33.160.77:6893 | udp | |
| FR | 178.33.160.78:6893 | udp | |
| FR | 178.33.160.79:6893 | udp | |
| FR | 178.33.160.80:6893 | udp | |
| FR | 178.33.160.81:6893 | udp | |
| FR | 178.33.160.82:6893 | udp | |
| FR | 178.33.160.83:6893 | udp | |
| FR | 178.33.160.84:6893 | udp | |
| FR | 178.33.160.85:6893 | udp | |
| FR | 178.33.160.86:6893 | udp | |
| FR | 178.33.160.87:6893 | udp | |
| FR | 178.33.160.88:6893 | udp | |
| FR | 178.33.160.89:6893 | udp | |
| FR | 178.33.160.90:6893 | udp | |
| FR | 178.33.160.91:6893 | udp | |
| FR | 178.33.160.92:6893 | udp | |
| FR | 178.33.160.93:6893 | udp | |
| FR | 178.33.160.94:6893 | udp | |
| FR | 178.33.160.95:6893 | udp | |
| FR | 178.33.160.96:6893 | udp | |
| FR | 178.33.160.97:6893 | udp | |
| FR | 178.33.160.98:6893 | udp | |
| FR | 178.33.160.99:6893 | udp | |
| FR | 178.33.160.100:6893 | udp | |
| FR | 178.33.160.101:6893 | udp | |
| FR | 178.33.160.102:6893 | udp | |
| FR | 178.33.160.103:6893 | udp | |
| FR | 178.33.160.104:6893 | udp | |
| FR | 178.33.160.105:6893 | udp | |
| FR | 178.33.160.106:6893 | udp | |
| FR | 178.33.160.107:6893 | udp | |
| FR | 178.33.160.108:6893 | udp | |
| FR | 178.33.160.109:6893 | udp | |
| FR | 178.33.160.110:6893 | udp | |
| FR | 178.33.160.111:6893 | udp | |
| FR | 178.33.160.112:6893 | udp | |
| FR | 178.33.160.113:6893 | udp | |
| FR | 178.33.160.114:6893 | udp | |
| FR | 178.33.160.115:6893 | udp | |
| FR | 178.33.160.116:6893 | udp | |
| FR | 178.33.160.117:6893 | udp | |
| FR | 178.33.160.118:6893 | udp | |
| FR | 178.33.160.119:6893 | udp | |
| FR | 178.33.160.120:6893 | udp | |
| FR | 178.33.160.121:6893 | udp | |
| FR | 178.33.160.122:6893 | udp | |
| FR | 178.33.160.123:6893 | udp | |
| FR | 178.33.160.124:6893 | udp | |
| FR | 178.33.160.125:6893 | udp | |
| FR | 178.33.160.126:6893 | udp | |
| FR | 178.33.160.127:6893 | udp | |
| FR | 178.33.160.128:6893 | udp | |
| FR | 178.33.160.129:6893 | udp | |
| FR | 178.33.160.130:6893 | udp | |
| FR | 178.33.160.131:6893 | udp | |
| FR | 178.33.160.132:6893 | udp | |
| FR | 178.33.160.133:6893 | udp | |
| FR | 178.33.160.134:6893 | udp | |
| FR | 178.33.160.135:6893 | udp | |
| FR | 178.33.160.136:6893 | udp | |
| FR | 178.33.160.137:6893 | udp | |
| FR | 178.33.160.138:6893 | udp | |
| FR | 178.33.160.139:6893 | udp | |
| FR | 178.33.160.140:6893 | udp | |
| FR | 178.33.160.141:6893 | udp | |
| FR | 178.33.160.142:6893 | udp | |
| FR | 178.33.160.143:6893 | udp | |
| FR | 178.33.160.144:6893 | udp | |
| FR | 178.33.160.145:6893 | udp | |
| FR | 178.33.160.146:6893 | udp | |
| FR | 178.33.160.147:6893 | udp | |
| FR | 178.33.160.148:6893 | udp | |
| FR | 178.33.160.149:6893 | udp | |
| FR | 178.33.160.150:6893 | udp | |
| FR | 178.33.160.151:6893 | udp | |
| FR | 178.33.160.152:6893 | udp | |
| FR | 178.33.160.153:6893 | udp | |
| FR | 178.33.160.154:6893 | udp | |
| FR | 178.33.160.155:6893 | udp | |
| FR | 178.33.160.156:6893 | udp | |
| FR | 178.33.160.157:6893 | udp | |
| FR | 178.33.160.158:6893 | udp | |
| FR | 178.33.160.159:6893 | udp | |
| FR | 178.33.160.160:6893 | udp | |
| FR | 178.33.160.161:6893 | udp | |
| FR | 178.33.160.162:6893 | udp | |
| FR | 178.33.160.163:6893 | udp | |
| FR | 178.33.160.164:6893 | udp | |
| FR | 178.33.160.165:6893 | udp | |
| FR | 178.33.160.166:6893 | udp | |
| FR | 178.33.160.167:6893 | udp | |
| FR | 178.33.160.168:6893 | udp | |
| FR | 178.33.160.169:6893 | udp | |
| FR | 178.33.160.170:6893 | udp | |
| FR | 178.33.160.171:6893 | udp | |
| FR | 178.33.160.172:6893 | udp | |
| FR | 178.33.160.173:6893 | udp | |
| FR | 178.33.160.174:6893 | udp | |
| FR | 178.33.160.175:6893 | udp | |
| FR | 178.33.160.176:6893 | udp | |
| FR | 178.33.160.177:6893 | udp | |
| FR | 178.33.160.178:6893 | udp | |
| FR | 178.33.160.179:6893 | udp | |
| FR | 178.33.160.180:6893 | udp | |
| FR | 178.33.160.181:6893 | udp | |
| FR | 178.33.160.182:6893 | udp | |
| FR | 178.33.160.183:6893 | udp | |
| FR | 178.33.160.184:6893 | udp | |
| FR | 178.33.160.185:6893 | udp | |
| FR | 178.33.160.186:6893 | udp | |
| FR | 178.33.160.187:6893 | udp | |
| FR | 178.33.160.188:6893 | udp | |
| FR | 178.33.160.189:6893 | udp | |
| FR | 178.33.160.190:6893 | udp | |
| FR | 178.33.160.191:6893 | udp | |
| FR | 178.33.160.192:6893 | udp | |
| FR | 178.33.160.193:6893 | udp | |
| FR | 178.33.160.194:6893 | udp | |
| FR | 178.33.160.195:6893 | udp | |
| FR | 178.33.160.196:6893 | udp | |
| FR | 178.33.160.197:6893 | udp | |
| FR | 178.33.160.198:6893 | udp | |
| FR | 178.33.160.199:6893 | udp | |
| FR | 178.33.160.200:6893 | udp | |
| FR | 178.33.160.201:6893 | udp | |
| FR | 178.33.160.202:6893 | udp | |
| FR | 178.33.160.203:6893 | udp | |
| FR | 178.33.160.204:6893 | udp | |
| FR | 178.33.160.205:6893 | udp | |
| FR | 178.33.160.206:6893 | udp | |
| FR | 178.33.160.207:6893 | udp | |
| FR | 178.33.160.208:6893 | udp | |
| FR | 178.33.160.209:6893 | udp | |
| FR | 178.33.160.210:6893 | udp | |
| FR | 178.33.160.211:6893 | udp | |
| FR | 178.33.160.212:6893 | udp | |
| FR | 178.33.160.213:6893 | udp | |
| FR | 178.33.160.214:6893 | udp | |
| FR | 178.33.160.215:6893 | udp | |
| FR | 178.33.160.216:6893 | udp | |
| FR | 178.33.160.217:6893 | udp | |
| FR | 178.33.160.218:6893 | udp | |
| FR | 178.33.160.219:6893 | udp | |
| FR | 178.33.160.220:6893 | udp | |
| FR | 178.33.160.221:6893 | udp | |
| FR | 178.33.160.222:6893 | udp | |
| FR | 178.33.160.223:6893 | udp | |
| FR | 178.33.160.224:6893 | udp | |
| FR | 178.33.160.225:6893 | udp | |
| FR | 178.33.160.226:6893 | udp | |
| FR | 178.33.160.227:6893 | udp | |
| FR | 178.33.160.228:6893 | udp | |
| FR | 178.33.160.229:6893 | udp | |
| FR | 178.33.160.230:6893 | udp | |
| FR | 178.33.160.231:6893 | udp | |
| FR | 178.33.160.232:6893 | udp | |
| FR | 178.33.160.233:6893 | udp | |
| FR | 178.33.160.234:6893 | udp | |
| FR | 178.33.160.235:6893 | udp | |
| FR | 178.33.160.236:6893 | udp | |
| FR | 178.33.160.237:6893 | udp | |
| FR | 178.33.160.238:6893 | udp | |
| FR | 178.33.160.239:6893 | udp | |
| FR | 178.33.160.240:6893 | udp | |
| FR | 178.33.160.241:6893 | udp | |
| FR | 178.33.160.242:6893 | udp | |
| FR | 178.33.160.243:6893 | udp | |
| FR | 178.33.160.244:6893 | udp | |
| FR | 178.33.160.245:6893 | udp | |
| FR | 178.33.160.246:6893 | udp | |
| FR | 178.33.160.247:6893 | udp | |
| FR | 178.33.160.248:6893 | udp | |
| FR | 178.33.160.249:6893 | udp | |
| FR | 178.33.160.250:6893 | udp | |
| FR | 178.33.160.251:6893 | udp | |
| FR | 178.33.160.252:6893 | udp | |
| FR | 178.33.160.253:6893 | udp | |
| FR | 178.33.160.254:6893 | udp | |
| FR | 178.33.160.255:6893 | udp | |
| FR | 178.33.161.0:6893 | udp | |
| FR | 178.33.161.1:6893 | udp | |
| FR | 178.33.161.2:6893 | udp | |
| FR | 178.33.161.3:6893 | udp | |
| FR | 178.33.161.4:6893 | udp | |
| FR | 178.33.161.5:6893 | udp | |
| FR | 178.33.161.6:6893 | udp | |
| FR | 178.33.161.7:6893 | udp | |
| FR | 178.33.161.8:6893 | udp | |
| FR | 178.33.161.9:6893 | udp | |
| FR | 178.33.161.10:6893 | udp | |
| FR | 178.33.161.11:6893 | udp | |
| FR | 178.33.161.12:6893 | udp | |
| FR | 178.33.161.13:6893 | udp | |
| FR | 178.33.161.14:6893 | udp | |
| FR | 178.33.161.15:6893 | udp | |
| FR | 178.33.161.16:6893 | udp | |
| FR | 178.33.161.17:6893 | udp | |
| FR | 178.33.161.18:6893 | udp | |
| FR | 178.33.161.19:6893 | udp | |
| FR | 178.33.161.20:6893 | udp | |
| FR | 178.33.161.21:6893 | udp | |
| FR | 178.33.161.22:6893 | udp | |
| FR | 178.33.161.23:6893 | udp | |
| FR | 178.33.161.24:6893 | udp | |
| FR | 178.33.161.25:6893 | udp | |
| FR | 178.33.161.26:6893 | udp | |
| FR | 178.33.161.27:6893 | udp | |
| FR | 178.33.161.28:6893 | udp | |
| FR | 178.33.161.29:6893 | udp | |
| FR | 178.33.161.30:6893 | udp | |
| FR | 178.33.161.31:6893 | udp | |
| FR | 178.33.161.32:6893 | udp | |
| FR | 178.33.161.33:6893 | udp | |
| FR | 178.33.161.34:6893 | udp | |
| FR | 178.33.161.35:6893 | udp | |
| FR | 178.33.161.36:6893 | udp | |
| FR | 178.33.161.37:6893 | udp | |
| FR | 178.33.161.38:6893 | udp | |
| FR | 178.33.161.39:6893 | udp | |
| FR | 178.33.161.40:6893 | udp | |
| FR | 178.33.161.41:6893 | udp | |
| FR | 178.33.161.42:6893 | udp | |
| FR | 178.33.161.43:6893 | udp | |
| FR | 178.33.161.44:6893 | udp | |
| FR | 178.33.161.45:6893 | udp | |
| FR | 178.33.161.46:6893 | udp | |
| FR | 178.33.161.47:6893 | udp | |
| FR | 178.33.161.48:6893 | udp | |
| FR | 178.33.161.49:6893 | udp | |
| FR | 178.33.161.50:6893 | udp | |
| FR | 178.33.161.51:6893 | udp | |
| FR | 178.33.161.52:6893 | udp | |
| FR | 178.33.161.53:6893 | udp | |
| FR | 178.33.161.54:6893 | udp | |
| FR | 178.33.161.55:6893 | udp | |
| FR | 178.33.161.56:6893 | udp | |
| FR | 178.33.161.57:6893 | udp | |
| FR | 178.33.161.58:6893 | udp | |
| FR | 178.33.161.59:6893 | udp | |
| FR | 178.33.161.60:6893 | udp | |
| FR | 178.33.161.61:6893 | udp | |
| FR | 178.33.161.62:6893 | udp | |
| FR | 178.33.161.63:6893 | udp | |
| FR | 178.33.161.64:6893 | udp | |
| FR | 178.33.161.65:6893 | udp | |
| FR | 178.33.161.66:6893 | udp | |
| FR | 178.33.161.67:6893 | udp | |
| FR | 178.33.161.68:6893 | udp | |
| FR | 178.33.161.69:6893 | udp | |
| FR | 178.33.161.70:6893 | udp | |
| FR | 178.33.161.71:6893 | udp | |
| FR | 178.33.161.72:6893 | udp | |
| FR | 178.33.161.73:6893 | udp | |
| FR | 178.33.161.74:6893 | udp | |
| FR | 178.33.161.75:6893 | udp | |
| FR | 178.33.161.76:6893 | udp | |
| FR | 178.33.161.77:6893 | udp | |
| FR | 178.33.161.78:6893 | udp | |
| FR | 178.33.161.79:6893 | udp | |
| FR | 178.33.161.80:6893 | udp | |
| FR | 178.33.161.81:6893 | udp | |
| FR | 178.33.161.82:6893 | udp | |
| FR | 178.33.161.83:6893 | udp | |
| FR | 178.33.161.84:6893 | udp | |
| FR | 178.33.161.85:6893 | udp | |
| FR | 178.33.161.86:6893 | udp | |
| FR | 178.33.161.87:6893 | udp | |
| FR | 178.33.161.88:6893 | udp | |
| FR | 178.33.161.89:6893 | udp | |
| FR | 178.33.161.90:6893 | udp | |
| FR | 178.33.161.91:6893 | udp | |
| FR | 178.33.161.92:6893 | udp | |
| FR | 178.33.161.93:6893 | udp | |
| FR | 178.33.161.94:6893 | udp | |
| FR | 178.33.161.95:6893 | udp | |
| FR | 178.33.161.96:6893 | udp | |
| FR | 178.33.161.97:6893 | udp | |
| FR | 178.33.161.98:6893 | udp | |
| FR | 178.33.161.99:6893 | udp | |
| FR | 178.33.161.100:6893 | udp | |
| FR | 178.33.161.101:6893 | udp | |
| FR | 178.33.161.102:6893 | udp | |
| FR | 178.33.161.103:6893 | udp | |
| FR | 178.33.161.104:6893 | udp | |
| FR | 178.33.161.105:6893 | udp | |
| FR | 178.33.161.106:6893 | udp | |
| FR | 178.33.161.107:6893 | udp | |
| FR | 178.33.161.108:6893 | udp | |
| FR | 178.33.161.109:6893 | udp | |
| FR | 178.33.161.110:6893 | udp | |
| FR | 178.33.161.111:6893 | udp | |
| FR | 178.33.161.112:6893 | udp | |
| FR | 178.33.161.113:6893 | udp | |
| FR | 178.33.161.114:6893 | udp | |
| FR | 178.33.161.115:6893 | udp | |
| FR | 178.33.161.116:6893 | udp | |
| FR | 178.33.161.117:6893 | udp | |
| FR | 178.33.161.118:6893 | udp | |
| FR | 178.33.161.119:6893 | udp | |
| FR | 178.33.161.120:6893 | udp | |
| FR | 178.33.161.121:6893 | udp | |
| FR | 178.33.161.122:6893 | udp | |
| FR | 178.33.161.123:6893 | udp | |
| FR | 178.33.161.124:6893 | udp | |
| FR | 178.33.161.125:6893 | udp | |
| FR | 178.33.161.126:6893 | udp | |
| FR | 178.33.161.127:6893 | udp | |
| FR | 178.33.161.128:6893 | udp | |
| FR | 178.33.161.129:6893 | udp | |
| FR | 178.33.161.130:6893 | udp | |
| FR | 178.33.161.131:6893 | udp | |
| FR | 178.33.161.132:6893 | udp | |
| FR | 178.33.161.133:6893 | udp | |
| FR | 178.33.161.134:6893 | udp | |
| FR | 178.33.161.135:6893 | udp | |
| FR | 178.33.161.136:6893 | udp | |
| FR | 178.33.161.137:6893 | udp | |
| FR | 178.33.161.138:6893 | udp | |
| FR | 178.33.161.139:6893 | udp | |
| FR | 178.33.161.140:6893 | udp | |
| FR | 178.33.161.141:6893 | udp | |
| FR | 178.33.161.142:6893 | udp | |
| FR | 178.33.161.143:6893 | udp | |
| FR | 178.33.161.144:6893 | udp | |
| FR | 178.33.161.145:6893 | udp | |
| FR | 178.33.161.146:6893 | udp | |
| FR | 178.33.161.147:6893 | udp | |
| FR | 178.33.161.148:6893 | udp | |
| FR | 178.33.161.149:6893 | udp | |
| FR | 178.33.161.150:6893 | udp | |
| FR | 178.33.161.151:6893 | udp | |
| FR | 178.33.161.152:6893 | udp | |
| FR | 178.33.161.153:6893 | udp | |
| FR | 178.33.161.154:6893 | udp | |
| FR | 178.33.161.155:6893 | udp | |
| FR | 178.33.161.156:6893 | udp | |
| FR | 178.33.161.157:6893 | udp | |
| FR | 178.33.161.158:6893 | udp | |
| FR | 178.33.161.159:6893 | udp | |
| FR | 178.33.161.160:6893 | udp | |
| FR | 178.33.161.161:6893 | udp | |
| FR | 178.33.161.162:6893 | udp | |
| FR | 178.33.161.163:6893 | udp | |
| FR | 178.33.161.164:6893 | udp | |
| FR | 178.33.161.165:6893 | udp | |
| FR | 178.33.161.166:6893 | udp | |
| FR | 178.33.161.167:6893 | udp | |
| FR | 178.33.161.168:6893 | udp | |
| FR | 178.33.161.169:6893 | udp | |
| FR | 178.33.161.170:6893 | udp | |
| FR | 178.33.161.171:6893 | udp | |
| FR | 178.33.161.172:6893 | udp | |
| FR | 178.33.161.173:6893 | udp | |
| FR | 178.33.161.174:6893 | udp | |
| FR | 178.33.161.175:6893 | udp | |
| FR | 178.33.161.176:6893 | udp | |
| FR | 178.33.161.177:6893 | udp | |
| FR | 178.33.161.178:6893 | udp | |
| FR | 178.33.161.179:6893 | udp | |
| FR | 178.33.161.180:6893 | udp | |
| FR | 178.33.161.181:6893 | udp | |
| FR | 178.33.161.182:6893 | udp | |
| FR | 178.33.161.183:6893 | udp | |
| FR | 178.33.161.184:6893 | udp | |
| FR | 178.33.161.185:6893 | udp | |
| FR | 178.33.161.186:6893 | udp | |
| FR | 178.33.161.187:6893 | udp | |
| FR | 178.33.161.188:6893 | udp | |
| FR | 178.33.161.189:6893 | udp | |
| FR | 178.33.161.190:6893 | udp | |
| FR | 178.33.161.191:6893 | udp | |
| FR | 178.33.161.192:6893 | udp | |
| FR | 178.33.161.193:6893 | udp | |
| FR | 178.33.161.194:6893 | udp | |
| FR | 178.33.161.195:6893 | udp | |
| FR | 178.33.161.196:6893 | udp | |
| FR | 178.33.161.197:6893 | udp | |
| FR | 178.33.161.198:6893 | udp | |
| FR | 178.33.161.199:6893 | udp | |
| FR | 178.33.161.200:6893 | udp | |
| FR | 178.33.161.201:6893 | udp | |
| FR | 178.33.161.202:6893 | udp | |
| FR | 178.33.161.203:6893 | udp | |
| FR | 178.33.161.204:6893 | udp | |
| FR | 178.33.161.205:6893 | udp | |
| FR | 178.33.161.206:6893 | udp | |
| FR | 178.33.161.207:6893 | udp | |
| FR | 178.33.161.208:6893 | udp | |
| FR | 178.33.161.209:6893 | udp | |
| FR | 178.33.161.210:6893 | udp | |
| FR | 178.33.161.211:6893 | udp | |
| FR | 178.33.161.212:6893 | udp | |
| FR | 178.33.161.213:6893 | udp | |
| FR | 178.33.161.214:6893 | udp | |
| FR | 178.33.161.215:6893 | udp | |
| FR | 178.33.161.216:6893 | udp | |
| FR | 178.33.161.217:6893 | udp | |
| FR | 178.33.161.218:6893 | udp | |
| FR | 178.33.161.219:6893 | udp | |
| FR | 178.33.161.220:6893 | udp | |
| FR | 178.33.161.221:6893 | udp | |
| FR | 178.33.161.222:6893 | udp | |
| FR | 178.33.161.223:6893 | udp | |
| FR | 178.33.161.224:6893 | udp | |
| FR | 178.33.161.225:6893 | udp | |
| FR | 178.33.161.226:6893 | udp | |
| FR | 178.33.161.227:6893 | udp | |
| FR | 178.33.161.228:6893 | udp | |
| FR | 178.33.161.229:6893 | udp | |
| FR | 178.33.161.230:6893 | udp | |
| FR | 178.33.161.231:6893 | udp | |
| FR | 178.33.161.232:6893 | udp | |
| FR | 178.33.161.233:6893 | udp | |
| FR | 178.33.161.234:6893 | udp | |
| FR | 178.33.161.235:6893 | udp | |
| FR | 178.33.161.236:6893 | udp | |
| FR | 178.33.161.237:6893 | udp | |
| FR | 178.33.161.238:6893 | udp | |
| FR | 178.33.161.239:6893 | udp | |
| FR | 178.33.161.240:6893 | udp | |
| FR | 178.33.161.241:6893 | udp | |
| FR | 178.33.161.242:6893 | udp | |
| FR | 178.33.161.243:6893 | udp | |
| FR | 178.33.161.244:6893 | udp | |
| FR | 178.33.161.245:6893 | udp | |
| FR | 178.33.161.246:6893 | udp | |
| FR | 178.33.161.247:6893 | udp | |
| FR | 178.33.161.248:6893 | udp | |
| FR | 178.33.161.249:6893 | udp | |
| FR | 178.33.161.250:6893 | udp | |
| FR | 178.33.161.251:6893 | udp | |
| FR | 178.33.161.252:6893 | udp | |
| FR | 178.33.161.253:6893 | udp | |
| FR | 178.33.161.254:6893 | udp | |
| FR | 178.33.161.255:6893 | udp | |
| FR | 178.33.162.0:6893 | udp | |
| FR | 178.33.162.1:6893 | udp | |
| FR | 178.33.162.2:6893 | udp | |
| FR | 178.33.162.3:6893 | udp | |
| FR | 178.33.162.4:6893 | udp | |
| FR | 178.33.162.5:6893 | udp | |
| FR | 178.33.162.6:6893 | udp | |
| FR | 178.33.162.7:6893 | udp | |
| FR | 178.33.162.8:6893 | udp | |
| FR | 178.33.162.9:6893 | udp | |
| FR | 178.33.162.10:6893 | udp | |
| FR | 178.33.162.11:6893 | udp | |
| FR | 178.33.162.12:6893 | udp | |
| FR | 178.33.162.13:6893 | udp | |
| FR | 178.33.162.14:6893 | udp | |
| FR | 178.33.162.15:6893 | udp | |
| FR | 178.33.162.16:6893 | udp | |
| FR | 178.33.162.17:6893 | udp | |
| FR | 178.33.162.18:6893 | udp | |
| FR | 178.33.162.19:6893 | udp | |
| FR | 178.33.162.20:6893 | udp | |
| FR | 178.33.162.21:6893 | udp | |
| FR | 178.33.162.22:6893 | udp | |
| FR | 178.33.162.23:6893 | udp | |
| FR | 178.33.162.24:6893 | udp | |
| FR | 178.33.162.25:6893 | udp | |
| FR | 178.33.162.26:6893 | udp | |
| FR | 178.33.162.27:6893 | udp | |
| FR | 178.33.162.28:6893 | udp | |
| FR | 178.33.162.29:6893 | udp | |
| FR | 178.33.162.30:6893 | udp | |
| FR | 178.33.162.31:6893 | udp | |
| FR | 178.33.162.32:6893 | udp | |
| FR | 178.33.162.33:6893 | udp | |
| FR | 178.33.162.34:6893 | udp | |
| FR | 178.33.162.35:6893 | udp | |
| FR | 178.33.162.36:6893 | udp | |
| FR | 178.33.162.37:6893 | udp | |
| FR | 178.33.162.38:6893 | udp | |
| FR | 178.33.162.39:6893 | udp | |
| FR | 178.33.162.40:6893 | udp | |
| FR | 178.33.162.41:6893 | udp | |
| FR | 178.33.162.42:6893 | udp | |
| FR | 178.33.162.43:6893 | udp | |
| FR | 178.33.162.44:6893 | udp | |
| FR | 178.33.162.45:6893 | udp | |
| FR | 178.33.162.46:6893 | udp | |
| FR | 178.33.162.47:6893 | udp | |
| FR | 178.33.162.48:6893 | udp | |
| FR | 178.33.162.49:6893 | udp | |
| FR | 178.33.162.50:6893 | udp | |
| FR | 178.33.162.51:6893 | udp | |
| FR | 178.33.162.52:6893 | udp | |
| FR | 178.33.162.53:6893 | udp | |
| FR | 178.33.162.54:6893 | udp | |
| FR | 178.33.162.55:6893 | udp | |
| FR | 178.33.162.56:6893 | udp | |
| FR | 178.33.162.57:6893 | udp | |
| FR | 178.33.162.58:6893 | udp | |
| FR | 178.33.162.59:6893 | udp | |
| FR | 178.33.162.60:6893 | udp | |
| FR | 178.33.162.61:6893 | udp | |
| FR | 178.33.162.62:6893 | udp | |
| FR | 178.33.162.63:6893 | udp | |
| FR | 178.33.162.64:6893 | udp | |
| FR | 178.33.162.65:6893 | udp | |
| FR | 178.33.162.66:6893 | udp | |
| FR | 178.33.162.67:6893 | udp | |
| FR | 178.33.162.68:6893 | udp | |
| FR | 178.33.162.69:6893 | udp | |
| FR | 178.33.162.70:6893 | udp | |
| FR | 178.33.162.71:6893 | udp | |
| FR | 178.33.162.72:6893 | udp | |
| FR | 178.33.162.73:6893 | udp | |
| FR | 178.33.162.74:6893 | udp | |
| FR | 178.33.162.75:6893 | udp | |
| FR | 178.33.162.76:6893 | udp | |
| FR | 178.33.162.77:6893 | udp | |
| FR | 178.33.162.78:6893 | udp | |
| FR | 178.33.162.79:6893 | udp | |
| FR | 178.33.162.80:6893 | udp | |
| FR | 178.33.162.81:6893 | udp | |
| FR | 178.33.162.82:6893 | udp | |
| FR | 178.33.162.83:6893 | udp | |
| FR | 178.33.162.84:6893 | udp | |
| FR | 178.33.162.85:6893 | udp | |
| FR | 178.33.162.86:6893 | udp | |
| FR | 178.33.162.87:6893 | udp | |
| FR | 178.33.162.88:6893 | udp | |
| FR | 178.33.162.89:6893 | udp | |
| FR | 178.33.162.90:6893 | udp | |
| FR | 178.33.162.91:6893 | udp | |
| FR | 178.33.162.92:6893 | udp | |
| FR | 178.33.162.93:6893 | udp | |
| FR | 178.33.162.94:6893 | udp | |
| FR | 178.33.162.95:6893 | udp | |
| FR | 178.33.162.96:6893 | udp | |
| FR | 178.33.162.97:6893 | udp | |
| FR | 178.33.162.98:6893 | udp | |
| FR | 178.33.162.99:6893 | udp | |
| FR | 178.33.162.100:6893 | udp | |
| FR | 178.33.162.101:6893 | udp | |
| FR | 178.33.162.102:6893 | udp | |
| FR | 178.33.162.103:6893 | udp | |
| FR | 178.33.162.104:6893 | udp | |
| FR | 178.33.162.105:6893 | udp | |
| FR | 178.33.162.106:6893 | udp | |
| FR | 178.33.162.107:6893 | udp | |
| FR | 178.33.162.108:6893 | udp | |
| FR | 178.33.162.109:6893 | udp | |
| FR | 178.33.162.110:6893 | udp | |
| FR | 178.33.162.111:6893 | udp | |
| FR | 178.33.162.112:6893 | udp | |
| FR | 178.33.162.113:6893 | udp | |
| FR | 178.33.162.114:6893 | udp | |
| FR | 178.33.162.115:6893 | udp | |
| FR | 178.33.162.116:6893 | udp | |
| FR | 178.33.162.117:6893 | udp | |
| FR | 178.33.162.118:6893 | udp | |
| FR | 178.33.162.119:6893 | udp | |
| FR | 178.33.162.120:6893 | udp | |
| FR | 178.33.162.121:6893 | udp | |
| FR | 178.33.162.122:6893 | udp | |
| FR | 178.33.162.123:6893 | udp | |
| FR | 178.33.162.124:6893 | udp | |
| FR | 178.33.162.125:6893 | udp | |
| FR | 178.33.162.126:6893 | udp | |
| FR | 178.33.162.127:6893 | udp | |
| FR | 178.33.162.128:6893 | udp | |
| FR | 178.33.162.129:6893 | udp | |
| FR | 178.33.162.130:6893 | udp | |
| FR | 178.33.162.131:6893 | udp | |
| FR | 178.33.162.132:6893 | udp | |
| FR | 178.33.162.133:6893 | udp | |
| FR | 178.33.162.134:6893 | udp | |
| FR | 178.33.162.135:6893 | udp | |
| FR | 178.33.162.136:6893 | udp | |
| FR | 178.33.162.137:6893 | udp | |
| FR | 178.33.162.138:6893 | udp | |
| FR | 178.33.162.139:6893 | udp | |
| FR | 178.33.162.140:6893 | udp | |
| FR | 178.33.162.141:6893 | udp | |
| FR | 178.33.162.142:6893 | udp | |
| FR | 178.33.162.143:6893 | udp | |
| FR | 178.33.162.144:6893 | udp | |
| FR | 178.33.162.145:6893 | udp | |
| FR | 178.33.162.146:6893 | udp | |
| FR | 178.33.162.147:6893 | udp | |
| FR | 178.33.162.148:6893 | udp | |
| FR | 178.33.162.149:6893 | udp | |
| FR | 178.33.162.150:6893 | udp | |
| FR | 178.33.162.151:6893 | udp | |
| FR | 178.33.162.152:6893 | udp | |
| FR | 178.33.162.153:6893 | udp | |
| FR | 178.33.162.154:6893 | udp | |
| FR | 178.33.162.155:6893 | udp | |
| FR | 178.33.162.156:6893 | udp | |
| FR | 178.33.162.157:6893 | udp | |
| FR | 178.33.162.158:6893 | udp | |
| FR | 178.33.162.159:6893 | udp | |
| FR | 178.33.162.160:6893 | udp | |
| FR | 178.33.162.161:6893 | udp | |
| FR | 178.33.162.162:6893 | udp | |
| FR | 178.33.162.163:6893 | udp | |
| FR | 178.33.162.164:6893 | udp | |
| FR | 178.33.162.165:6893 | udp | |
| FR | 178.33.162.166:6893 | udp | |
| FR | 178.33.162.167:6893 | udp | |
| FR | 178.33.162.168:6893 | udp | |
| FR | 178.33.162.169:6893 | udp | |
| FR | 178.33.162.170:6893 | udp | |
| FR | 178.33.162.171:6893 | udp | |
| FR | 178.33.162.172:6893 | udp | |
| FR | 178.33.162.173:6893 | udp | |
| FR | 178.33.162.174:6893 | udp | |
| FR | 178.33.162.175:6893 | udp | |
| FR | 178.33.162.176:6893 | udp | |
| FR | 178.33.162.177:6893 | udp | |
| FR | 178.33.162.178:6893 | udp | |
| FR | 178.33.162.179:6893 | udp | |
| FR | 178.33.162.180:6893 | udp | |
| FR | 178.33.162.181:6893 | udp | |
| FR | 178.33.162.182:6893 | udp | |
| FR | 178.33.162.183:6893 | udp | |
| FR | 178.33.162.184:6893 | udp | |
| FR | 178.33.162.185:6893 | udp | |
| FR | 178.33.162.186:6893 | udp | |
| FR | 178.33.162.187:6893 | udp | |
| FR | 178.33.162.188:6893 | udp | |
| FR | 178.33.162.189:6893 | udp | |
| FR | 178.33.162.190:6893 | udp | |
| FR | 178.33.162.191:6893 | udp | |
| FR | 178.33.162.192:6893 | udp | |
| FR | 178.33.162.193:6893 | udp | |
| FR | 178.33.162.194:6893 | udp | |
| FR | 178.33.162.195:6893 | udp | |
| FR | 178.33.162.196:6893 | udp | |
| FR | 178.33.162.197:6893 | udp | |
| FR | 178.33.162.198:6893 | udp | |
| FR | 178.33.162.199:6893 | udp | |
| FR | 178.33.162.200:6893 | udp | |
| FR | 178.33.162.201:6893 | udp | |
| FR | 178.33.162.202:6893 | udp | |
| FR | 178.33.162.203:6893 | udp | |
| FR | 178.33.162.204:6893 | udp | |
| FR | 178.33.162.205:6893 | udp | |
| FR | 178.33.162.206:6893 | udp | |
| FR | 178.33.162.207:6893 | udp | |
| FR | 178.33.162.208:6893 | udp | |
| FR | 178.33.162.209:6893 | udp | |
| FR | 178.33.162.210:6893 | udp | |
| FR | 178.33.162.211:6893 | udp | |
| FR | 178.33.162.212:6893 | udp | |
| FR | 178.33.162.213:6893 | udp | |
| FR | 178.33.162.214:6893 | udp | |
| FR | 178.33.162.215:6893 | udp | |
| FR | 178.33.162.216:6893 | udp | |
| FR | 178.33.162.217:6893 | udp | |
| FR | 178.33.162.218:6893 | udp | |
| FR | 178.33.162.219:6893 | udp | |
| FR | 178.33.162.220:6893 | udp | |
| FR | 178.33.162.221:6893 | udp | |
| FR | 178.33.162.222:6893 | udp | |
| FR | 178.33.162.223:6893 | udp | |
| FR | 178.33.162.224:6893 | udp | |
| FR | 178.33.162.225:6893 | udp | |
| FR | 178.33.162.226:6893 | udp | |
| FR | 178.33.162.227:6893 | udp | |
| FR | 178.33.162.228:6893 | udp | |
| FR | 178.33.162.229:6893 | udp | |
| FR | 178.33.162.230:6893 | udp | |
| FR | 178.33.162.231:6893 | udp | |
| FR | 178.33.162.232:6893 | udp | |
| FR | 178.33.162.233:6893 | udp | |
| FR | 178.33.162.234:6893 | udp | |
| FR | 178.33.162.235:6893 | udp | |
| FR | 178.33.162.236:6893 | udp | |
| FR | 178.33.162.237:6893 | udp | |
| FR | 178.33.162.238:6893 | udp | |
| FR | 178.33.162.239:6893 | udp | |
| FR | 178.33.162.240:6893 | udp | |
| FR | 178.33.162.241:6893 | udp | |
| FR | 178.33.162.242:6893 | udp | |
| FR | 178.33.162.243:6893 | udp | |
| FR | 178.33.162.244:6893 | udp | |
| FR | 178.33.162.245:6893 | udp | |
| FR | 178.33.162.246:6893 | udp | |
| FR | 178.33.162.247:6893 | udp | |
| FR | 178.33.162.248:6893 | udp | |
| FR | 178.33.162.249:6893 | udp | |
| FR | 178.33.162.250:6893 | udp | |
| FR | 178.33.162.251:6893 | udp | |
| FR | 178.33.162.252:6893 | udp | |
| FR | 178.33.162.253:6893 | udp | |
| FR | 178.33.162.254:6893 | udp | |
| FR | 178.33.162.255:6893 | udp | |
| FR | 178.33.163.0:6893 | udp | |
| FR | 178.33.163.1:6893 | udp | |
| FR | 178.33.163.2:6893 | udp | |
| FR | 178.33.163.3:6893 | udp | |
| FR | 178.33.163.4:6893 | udp | |
| FR | 178.33.163.5:6893 | udp | |
| FR | 178.33.163.6:6893 | udp | |
| FR | 178.33.163.7:6893 | udp | |
| FR | 178.33.163.8:6893 | udp | |
| FR | 178.33.163.9:6893 | udp | |
| FR | 178.33.163.10:6893 | udp | |
| FR | 178.33.163.11:6893 | udp | |
| FR | 178.33.163.12:6893 | udp | |
| FR | 178.33.163.13:6893 | udp | |
| FR | 178.33.163.14:6893 | udp | |
| FR | 178.33.163.15:6893 | udp | |
| FR | 178.33.163.16:6893 | udp | |
| FR | 178.33.163.17:6893 | udp | |
| FR | 178.33.163.18:6893 | udp | |
| FR | 178.33.163.19:6893 | udp | |
| FR | 178.33.163.20:6893 | udp | |
| FR | 178.33.163.21:6893 | udp | |
| FR | 178.33.163.22:6893 | udp | |
| FR | 178.33.163.23:6893 | udp | |
| FR | 178.33.163.24:6893 | udp | |
| FR | 178.33.163.25:6893 | udp | |
| FR | 178.33.163.26:6893 | udp | |
| FR | 178.33.163.27:6893 | udp | |
| FR | 178.33.163.28:6893 | udp | |
| FR | 178.33.163.29:6893 | udp | |
| FR | 178.33.163.30:6893 | udp | |
| FR | 178.33.163.31:6893 | udp | |
| FR | 178.33.163.32:6893 | udp | |
| FR | 178.33.163.33:6893 | udp | |
| FR | 178.33.163.34:6893 | udp | |
| FR | 178.33.163.35:6893 | udp | |
| FR | 178.33.163.36:6893 | udp | |
| FR | 178.33.163.37:6893 | udp | |
| FR | 178.33.163.38:6893 | udp | |
| FR | 178.33.163.39:6893 | udp | |
| FR | 178.33.163.40:6893 | udp | |
| FR | 178.33.163.41:6893 | udp | |
| FR | 178.33.163.42:6893 | udp | |
| FR | 178.33.163.43:6893 | udp | |
| FR | 178.33.163.44:6893 | udp | |
| FR | 178.33.163.45:6893 | udp | |
| FR | 178.33.163.46:6893 | udp | |
| FR | 178.33.163.47:6893 | udp | |
| FR | 178.33.163.48:6893 | udp | |
| FR | 178.33.163.49:6893 | udp | |
| FR | 178.33.163.50:6893 | udp | |
| FR | 178.33.163.51:6893 | udp | |
| FR | 178.33.163.52:6893 | udp | |
| FR | 178.33.163.53:6893 | udp | |
| FR | 178.33.163.54:6893 | udp | |
| FR | 178.33.163.55:6893 | udp | |
| FR | 178.33.163.56:6893 | udp | |
| FR | 178.33.163.57:6893 | udp | |
| FR | 178.33.163.58:6893 | udp | |
| FR | 178.33.163.59:6893 | udp | |
| FR | 178.33.163.60:6893 | udp | |
| FR | 178.33.163.61:6893 | udp | |
| FR | 178.33.163.62:6893 | udp | |
| FR | 178.33.163.63:6893 | udp | |
| FR | 178.33.163.64:6893 | udp | |
| FR | 178.33.163.65:6893 | udp | |
| FR | 178.33.163.66:6893 | udp | |
| FR | 178.33.163.67:6893 | udp | |
| FR | 178.33.163.68:6893 | udp | |
| FR | 178.33.163.69:6893 | udp | |
| FR | 178.33.163.70:6893 | udp | |
| FR | 178.33.163.71:6893 | udp | |
| FR | 178.33.163.72:6893 | udp | |
| FR | 178.33.163.73:6893 | udp | |
| FR | 178.33.163.74:6893 | udp | |
| FR | 178.33.163.75:6893 | udp | |
| FR | 178.33.163.76:6893 | udp | |
| FR | 178.33.163.77:6893 | udp | |
| FR | 178.33.163.78:6893 | udp | |
| FR | 178.33.163.79:6893 | udp | |
| FR | 178.33.163.80:6893 | udp | |
| FR | 178.33.163.81:6893 | udp | |
| FR | 178.33.163.82:6893 | udp | |
| FR | 178.33.163.83:6893 | udp | |
| FR | 178.33.163.84:6893 | udp | |
| FR | 178.33.163.85:6893 | udp | |
| FR | 178.33.163.86:6893 | udp | |
| FR | 178.33.163.87:6893 | udp | |
| FR | 178.33.163.88:6893 | udp | |
| FR | 178.33.163.89:6893 | udp | |
| FR | 178.33.163.90:6893 | udp | |
| FR | 178.33.163.91:6893 | udp | |
| FR | 178.33.163.92:6893 | udp | |
| FR | 178.33.163.93:6893 | udp | |
| FR | 178.33.163.94:6893 | udp | |
| FR | 178.33.163.95:6893 | udp | |
| FR | 178.33.163.96:6893 | udp | |
| FR | 178.33.163.97:6893 | udp | |
| FR | 178.33.163.98:6893 | udp | |
| FR | 178.33.163.99:6893 | udp | |
| FR | 178.33.163.100:6893 | udp | |
| FR | 178.33.163.101:6893 | udp | |
| FR | 178.33.163.102:6893 | udp | |
| FR | 178.33.163.103:6893 | udp | |
| FR | 178.33.163.104:6893 | udp | |
| FR | 178.33.163.105:6893 | udp | |
| FR | 178.33.163.106:6893 | udp | |
| FR | 178.33.163.107:6893 | udp | |
| FR | 178.33.163.108:6893 | udp | |
| FR | 178.33.163.109:6893 | udp | |
| FR | 178.33.163.110:6893 | udp | |
| FR | 178.33.163.111:6893 | udp | |
| FR | 178.33.163.112:6893 | udp | |
| FR | 178.33.163.113:6893 | udp | |
| FR | 178.33.163.114:6893 | udp | |
| FR | 178.33.163.115:6893 | udp | |
| FR | 178.33.163.116:6893 | udp | |
| FR | 178.33.163.117:6893 | udp | |
| FR | 178.33.163.118:6893 | udp | |
| FR | 178.33.163.119:6893 | udp | |
| FR | 178.33.163.120:6893 | udp | |
| FR | 178.33.163.121:6893 | udp | |
| FR | 178.33.163.122:6893 | udp | |
| FR | 178.33.163.123:6893 | udp | |
| FR | 178.33.163.124:6893 | udp | |
| FR | 178.33.163.125:6893 | udp | |
| FR | 178.33.163.126:6893 | udp | |
| FR | 178.33.163.127:6893 | udp | |
| FR | 178.33.163.128:6893 | udp | |
| FR | 178.33.163.129:6893 | udp | |
| FR | 178.33.163.130:6893 | udp | |
| FR | 178.33.163.131:6893 | udp | |
| FR | 178.33.163.132:6893 | udp | |
| FR | 178.33.163.133:6893 | udp | |
| FR | 178.33.163.134:6893 | udp | |
| FR | 178.33.163.135:6893 | udp | |
| FR | 178.33.163.136:6893 | udp | |
| FR | 178.33.163.137:6893 | udp | |
| FR | 178.33.163.138:6893 | udp | |
| FR | 178.33.163.139:6893 | udp | |
| FR | 178.33.163.140:6893 | udp | |
| FR | 178.33.163.141:6893 | udp | |
| FR | 178.33.163.142:6893 | udp | |
| FR | 178.33.163.143:6893 | udp | |
| FR | 178.33.163.144:6893 | udp | |
| FR | 178.33.163.145:6893 | udp | |
| FR | 178.33.163.146:6893 | udp | |
| FR | 178.33.163.147:6893 | udp | |
| FR | 178.33.163.148:6893 | udp | |
| FR | 178.33.163.149:6893 | udp | |
| FR | 178.33.163.150:6893 | udp | |
| FR | 178.33.163.151:6893 | udp | |
| FR | 178.33.163.152:6893 | udp | |
| FR | 178.33.163.153:6893 | udp | |
| FR | 178.33.163.154:6893 | udp | |
| FR | 178.33.163.155:6893 | udp | |
| FR | 178.33.163.156:6893 | udp | |
| FR | 178.33.163.157:6893 | udp | |
| FR | 178.33.163.158:6893 | udp | |
| FR | 178.33.163.159:6893 | udp | |
| FR | 178.33.163.160:6893 | udp | |
| FR | 178.33.163.161:6893 | udp | |
| FR | 178.33.163.162:6893 | udp | |
| FR | 178.33.163.163:6893 | udp | |
| FR | 178.33.163.164:6893 | udp | |
| FR | 178.33.163.165:6893 | udp | |
| FR | 178.33.163.166:6893 | udp | |
| FR | 178.33.163.167:6893 | udp | |
| FR | 178.33.163.168:6893 | udp | |
| FR | 178.33.163.169:6893 | udp | |
| FR | 178.33.163.170:6893 | udp | |
| FR | 178.33.163.171:6893 | udp | |
| FR | 178.33.163.172:6893 | udp | |
| FR | 178.33.163.173:6893 | udp | |
| FR | 178.33.163.174:6893 | udp | |
| FR | 178.33.163.175:6893 | udp | |
| FR | 178.33.163.176:6893 | udp | |
| FR | 178.33.163.177:6893 | udp | |
| FR | 178.33.163.178:6893 | udp | |
| FR | 178.33.163.179:6893 | udp | |
| FR | 178.33.163.180:6893 | udp | |
| FR | 178.33.163.181:6893 | udp | |
| FR | 178.33.163.182:6893 | udp | |
| FR | 178.33.163.183:6893 | udp | |
| FR | 178.33.163.184:6893 | udp | |
| FR | 178.33.163.185:6893 | udp | |
| FR | 178.33.163.186:6893 | udp | |
| FR | 178.33.163.187:6893 | udp | |
| FR | 178.33.163.188:6893 | udp | |
| FR | 178.33.163.189:6893 | udp | |
| FR | 178.33.163.190:6893 | udp | |
| FR | 178.33.163.191:6893 | udp | |
| FR | 178.33.163.192:6893 | udp | |
| FR | 178.33.163.193:6893 | udp | |
| FR | 178.33.163.194:6893 | udp | |
| FR | 178.33.163.195:6893 | udp | |
| FR | 178.33.163.196:6893 | udp | |
| FR | 178.33.163.197:6893 | udp | |
| FR | 178.33.163.198:6893 | udp | |
| FR | 178.33.163.199:6893 | udp | |
| FR | 178.33.163.200:6893 | udp | |
| FR | 178.33.163.201:6893 | udp | |
| FR | 178.33.163.202:6893 | udp | |
| FR | 178.33.163.203:6893 | udp | |
| FR | 178.33.163.204:6893 | udp | |
| FR | 178.33.163.205:6893 | udp | |
| FR | 178.33.163.206:6893 | udp | |
| FR | 178.33.163.207:6893 | udp | |
| FR | 178.33.163.208:6893 | udp | |
| FR | 178.33.163.209:6893 | udp | |
| FR | 178.33.163.210:6893 | udp | |
| FR | 178.33.163.211:6893 | udp | |
| FR | 178.33.163.212:6893 | udp | |
| FR | 178.33.163.213:6893 | udp | |
| FR | 178.33.163.214:6893 | udp | |
| FR | 178.33.163.215:6893 | udp | |
| FR | 178.33.163.216:6893 | udp | |
| FR | 178.33.163.217:6893 | udp | |
| FR | 178.33.163.218:6893 | udp | |
| FR | 178.33.163.219:6893 | udp | |
| FR | 178.33.163.220:6893 | udp | |
| FR | 178.33.163.221:6893 | udp | |
| FR | 178.33.163.222:6893 | udp | |
| FR | 178.33.163.223:6893 | udp | |
| FR | 178.33.163.224:6893 | udp | |
| FR | 178.33.163.225:6893 | udp | |
| FR | 178.33.163.226:6893 | udp | |
| FR | 178.33.163.227:6893 | udp | |
| FR | 178.33.163.228:6893 | udp | |
| FR | 178.33.163.229:6893 | udp | |
| FR | 178.33.163.230:6893 | udp | |
| FR | 178.33.163.231:6893 | udp | |
| FR | 178.33.163.232:6893 | udp | |
| FR | 178.33.163.233:6893 | udp | |
| FR | 178.33.163.234:6893 | udp | |
| FR | 178.33.163.235:6893 | udp | |
| FR | 178.33.163.236:6893 | udp | |
| FR | 178.33.163.237:6893 | udp | |
| FR | 178.33.163.238:6893 | udp | |
| FR | 178.33.163.239:6893 | udp | |
| FR | 178.33.163.240:6893 | udp | |
| FR | 178.33.163.241:6893 | udp | |
| FR | 178.33.163.242:6893 | udp | |
| FR | 178.33.163.243:6893 | udp | |
| FR | 178.33.163.244:6893 | udp | |
| FR | 178.33.163.245:6893 | udp | |
| FR | 178.33.163.246:6893 | udp | |
| FR | 178.33.163.247:6893 | udp | |
| FR | 178.33.163.248:6893 | udp | |
| FR | 178.33.163.249:6893 | udp | |
| FR | 178.33.163.250:6893 | udp | |
| FR | 178.33.163.251:6893 | udp | |
| FR | 178.33.163.252:6893 | udp | |
| FR | 178.33.163.253:6893 | udp | |
| FR | 178.33.163.254:6893 | udp | |
| FR | 178.33.163.255:6893 | udp | |
| GB | 20.26.156.210:443 | api.github.com | tcp |
| US | 140.82.112.22:443 | collector.github.com | tcp |
| GB | 20.26.156.210:443 | api.github.com | tcp |
| US | 140.82.112.22:443 | collector.github.com | tcp |
| GB | 172.217.169.67:443 | beacons.gcp.gvt2.com | udp |
| GB | 88.221.135.11:443 | tcp | |
| US | 52.182.143.213:443 | browser.pipe.aria.microsoft.com | tcp |
| NL | 23.62.61.72:443 | www.bing.com | tcp |
| NL | 23.62.61.72:443 | www.bing.com | tcp |
| NL | 23.62.61.72:443 | www.bing.com | tcp |
| NL | 23.62.61.72:443 | www.bing.com | tcp |
| NL | 23.62.61.72:443 | www.bing.com | tcp |
| NL | 23.62.61.72:443 | www.bing.com | tcp |
| BE | 104.68.66.114:443 | cxcs.microsoft.net | tcp |
| NL | 23.62.61.72:443 | www.bing.com | tcp |
| US | 52.182.143.213:443 | browser.pipe.aria.microsoft.com | tcp |
Files
\??\pipe\crashpad_3852_WCCDVNUEQCXZIOVD
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| SHA512 | cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
| MD5 | d751713988987e9331980363e24189ce |
| SHA1 | 97d170e1550eee4afc0af065b78cda302a97674c |
| SHA256 | 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945 |
| SHA512 | b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
| MD5 | 2762a2ed0165525a5a5a70400737ce84 |
| SHA1 | a2dc998869b10944b9a2100bd563e8a8b96b1818 |
| SHA256 | 47424e4a2c239995ba41991c8fc8500abff900f5566737d2a837a63cd9ae18d2 |
| SHA512 | 41c4aacdb6c5aea962529995199be59ead545a8b92945d9e1d080b97c2bcf3925c47a44fe6c9d35043831b05e6f7d97e5bab8aa51274cd640840a1eb96aa1dd9 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | 079c90b6e21fbd9cf794a4db1870261c |
| SHA1 | 8a157da9396e76ccffc3cd54dd156587af4b8be1 |
| SHA256 | 7a40ffd5ba0c5bba48e2c7bec5a321c3bc120b3be88e00819dc8707e115f7ffa |
| SHA512 | d29444afad162b5ed026cc1dc5e36bb2794ff830393738d252384b31f102ca977637649563779532c893c7641b03431bb608b8a45e108a7965cbf791de75f245 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
| MD5 | 23b068d242f1c08af6fb80c2593f127f |
| SHA1 | e309cc33402ea8d5d582157d333f14d82e6fa871 |
| SHA256 | 8b765bf21d1a74cb68af3245f02785a67572ae2f0fd5c8b606843f04c0de2b1e |
| SHA512 | 37542adf1a2d6e7f407ad58327f332ac677f96b4fbb8fc3f27c34414fd83e70e073b6317ca323b202fee35e1f8836cf4a8390fff1e929e35b42082d56e0a3273 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | b84efcf4c4be35e60772c0a815a654d8 |
| SHA1 | ffcc356c1bc6b84315ab55d1c82c147f509155f7 |
| SHA256 | c1dcf389ea2374ca092c7e0ad4dd5ac12de14c6f6da491a84d656a37567cbcac |
| SHA512 | d947efba5128383e14fd07a4be393806b54d266bcaa0be7e69b55b9a1a01673bef510fc17a2e53daa31d0c5cb976d3c510afa92e20d7b0124c0826ceb21291b9 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
| MD5 | 539017225257210bd6bf91ef3d258429 |
| SHA1 | 71a5bcc128e3a355f899dff1f85c47c56da3d91a |
| SHA256 | 612e1c92fe419194d5ffeda438d1fc9aa6e42f9c5edf6ae207c7e6fb5b8da3fc |
| SHA512 | 05f8e476c3311f1efe74a1a96ae6714f0dfa8ba497e46d9d161d907a2d6587f2ba0566c71e93c48218bf696e9887b0495c2ff34095db684c3794936f1e86870e |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | 563c20e24cf4e00880dc99eef6cfdd1f |
| SHA1 | 178b0b2fb205b74bd277369acc5df2ac6a897983 |
| SHA256 | d6f8845b50a371daa25b56ff38f74175961647be13a5a723c1d0d965ba980e71 |
| SHA512 | 33c5739cea24e4b4d5370fb1f89b1d625deafbc30892a08a9cf617cba53b708888195514e6284cfa32d1436c1349161933d6f852f2c5969614dc57f8ccbba847 |
C:\Users\Admin\Downloads\Ransomware-Samples-main.zip.crdownload
| MD5 | e88a0140466c45348c7b482bb3e103df |
| SHA1 | c59741da45f77ed2350c72055c7b3d96afd4bfc1 |
| SHA256 | bab1853454ca6fdd3acd471254101db1b805b601e309a49ec7b4b1fbcfc47ad7 |
| SHA512 | 2dc9682f4fb6ea520acc505bdbe7671ab7251bf9abd25a5275f0c543a6157d7fa5325b9dce6245e035641ab831d646f0e14f6649f9464f5e97431ab1bf7da431 |
C:\Users\Admin\Downloads\Ransomware-Samples-main.zip:Zone.Identifier
| MD5 | fbccf14d504b7b2dbcb5a5bda75bd93b |
| SHA1 | d59fc84cdd5217c6cf74785703655f78da6b582b |
| SHA256 | eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913 |
| SHA512 | aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 4a2e9d13bca9fb3b157692bf7a70ca6e |
| SHA1 | a05ab54819f94bcef573843555f0a0f4b67ca02c |
| SHA256 | aba8d0a709b722d1c609a0129c6b87c75e1dd2531a9c92d3afcd5623dce6d4e3 |
| SHA512 | f0cbb470597202ce6a7cb30e29c19071d16d6b1a2172f786022200477ba66e12a3135b62fac98809c73a449ab5b9d2ef60803bde23e47c6de4e18cbf1f37009a |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | 45f38de08cb30ccf551d4540b20e1d12 |
| SHA1 | b75f83ad0fe5b4fb6f5ad25d39e07ce16d5c7593 |
| SHA256 | 3b6fd7490da54c310d9b2982c4b1c44ae3941eaf023ec9317fdf568c6d65d7f7 |
| SHA512 | bdba776824ce8588b25ecc894a686ac5d4c5a91ade46e1224c7bb2da00d68e806bc64e5ee213fd6d018270c88c4222ec68b3a6877725f9a5f33e666305f6f1f7 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
| MD5 | 101976cbd29a0d810827b618c40d04e1 |
| SHA1 | 249432b266d434c1cca5a0287cb54fe131edcf8c |
| SHA256 | 25668a83972114b1ee9aac1c1146e39871736be9114696b6550c8057c5dc48d4 |
| SHA512 | aced595841006e4a79ee333b2ae42df337e19d0006e123fdca10272822fa488002901462480f5f0512f43ad61317cea6080a644ff4426e74575d2d24d384bca8 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe584aef.TMP
| MD5 | 104bfac2dc6074e9319e346cb5b7d7e1 |
| SHA1 | 7bb85d585295afa40922ad8e5e19b3620abee3f8 |
| SHA256 | be8661ec31f93f6584e7dbd3276ebeb8ea919e24bd0cdb6295a4e8a5fdfb75f8 |
| SHA512 | 111f83168b6bdbc2e51c25ba9f8385728cb04a60a49627edd24e7ce3a7f2b74427de2d75ee95445dcc295e0e4a4a9818c5b8b046db94a0984143d31b31f7ac5f |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
| MD5 | dbc3ce4d91a52e345892a97dd224c458 |
| SHA1 | 78fa7a2db9e73604de89cca3adf309f865d1ff5d |
| SHA256 | f5462afb2ebc99bca6d1bdbc9d2b74e76a2987b506ac7857dbbefa995fd005dc |
| SHA512 | c985f23c0f3ccfb8983d19f682beea7a656d6a57dbb0f5a18b7e6290b68bf7c82f82684d6da80f79d4e4f740a56291b6917de2e0d5d305d3cb1b11cf70a3df74 |
memory/1084-306-0x0000000000400000-0x0000000000435000-memory.dmp
memory/1084-310-0x0000000000400000-0x0000000000435000-memory.dmp
C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\_R_E_A_D___T_H_I_S___97XI3M_.txt
| MD5 | 941bc474d068cd2898097bc2d526ab17 |
| SHA1 | f02266ca696e4c55f316b6e531d450d743279c44 |
| SHA256 | c685e05dd0ac91601ff29b0ad4fec9b2287a2037d9209bceba7ef5001567fad3 |
| SHA512 | aa5b6f85e5c1833f353c222ab2beee7f4c0cea628db8a45023ed9f88bd6e431c32aaf2892a9db2d4550a24f59a0b1c6e7f5560044bd64a9293ceb713768cc30a |
C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\_R_E_A_D___T_H_I_S___2HSZG2_.hta
| MD5 | 29f2fb63160277de1f11cfd4f408fb60 |
| SHA1 | e477f336fa04c22a231bf35f6a20e556aabaf553 |
| SHA256 | 3eadf8dc047d98056dda2c5d9de28d449835d252cf2eea1a92482c679b85a405 |
| SHA512 | 758c651f7e670d47d23c9e562424db5898c5d10040ffa909f022d7092b8c37cd3443dc01c4d57d62cba1a5b465bd66e3611346d650e5d96bd0c294058343f827 |
memory/1084-698-0x0000000000400000-0x0000000000435000-memory.dmp
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
| MD5 | f93037536dc5e6d8b7790ca89e04cef5 |
| SHA1 | 9ffab9249aa607c15fe22a518c8986715d2dbdaf |
| SHA256 | b3eec4a93428754ccf2d731f106d39364a23d73008708c71894880507e57573b |
| SHA512 | 14dd0b5c93a7e50e4fc70f6597ce026fc1982d3acacb15802201f610f8590c1ebf3f897af7e53f28ee5e821be4fd296ab7075d4a88d876ce7800cc322514bd8d |
memory/1084-726-0x0000000000400000-0x0000000000435000-memory.dmp
memory/1084-727-0x0000000000440000-0x0000000000451000-memory.dmp
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
| MD5 | 45b76b35a759dc9e2e67da333d640140 |
| SHA1 | 14aa7f09b83c394262f0a86b27256c64dedd1f5b |
| SHA256 | 74e88d8b61cc517837f8e171b0c33943d555ecbc3c0c3b0bb9a72a3aec19411d |
| SHA512 | aaf62e56c3a0e7524202de8d4087dfad5a413cabffe372ac0fc09c35d323e8f63b0c63c85eb1a4e53db9c3feedbc233903c1ae17baee9d00925ee31700cf93c3 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_finnish.wnry
| MD5 | 35c2f97eea8819b1caebd23fee732d8f |
| SHA1 | e354d1cc43d6a39d9732adea5d3b0f57284255d2 |
| SHA256 | 1adfee058b98206cb4fbe1a46d3ed62a11e1dee2c7ff521c1eef7c706e6a700e |
| SHA512 | 908149a6f5238fcccd86f7c374986d486590a0991ef5243f0cd9e63cc8e208158a9a812665233b09c3a478233d30f21e3d355b94f36b83644795556f147345bf |
memory/3572-777-0x0000000010000000-0x0000000010010000-memory.dmp
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\u.wnry
| MD5 | 7bf2b57f2a205768755c07f238fb32cc |
| SHA1 | 45356a9dd616ed7161a3b9192e2f318d0ab5ad10 |
| SHA256 | b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25 |
| SHA512 | 91a39e919296cb5c6eccba710b780519d90035175aa460ec6dbe631324e5e5753bd8d87f395b5481bcd7e1ad623b31a34382d81faae06bef60ec28b49c3122a9 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\taskse.exe
| MD5 | 8495400f199ac77853c53b5a3f278f3e |
| SHA1 | be5d6279874da315e3080b06083757aad9b32c23 |
| SHA256 | 2ca2d550e603d74dedda03156023135b38da3630cb014e3d00b1263358c5f00d |
| SHA512 | 0669c524a295a049fa4629b26f89788b2a74e1840bcdc50e093a0bd40830dd1279c9597937301c0072db6ece70adee4ace67c3c8a4fb2db6deafd8f1e887abe4 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\taskdl.exe
| MD5 | 4fef5e34143e646dbf9907c4374276f5 |
| SHA1 | 47a9ad4125b6bd7c55e4e7da251e23f089407b8f |
| SHA256 | 4a468603fdcb7a2eb5770705898cf9ef37aade532a7964642ecd705a74794b79 |
| SHA512 | 4550dd1787deb353ebd28363dd2cdccca861f6a5d9358120fa6aa23baa478b2a9eb43cef5e3f6426f708a0753491710ac05483fac4a046c26bec4234122434d5 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\t.wnry
| MD5 | 5dcaac857e695a65f5c3ef1441a73a8f |
| SHA1 | 7b10aaeee05e7a1efb43d9f837e9356ad55c07dd |
| SHA256 | 97ebce49b14c46bebc9ec2448d00e1e397123b256e2be9eba5140688e7bc0ae6 |
| SHA512 | 06eb5e49d19b71a99770d1b11a5bb64a54bf3352f36e39a153469e54205075c203b08128dc2317259db206ab5323bdd93aaa252a066f57fb5c52ff28deedb5e2 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\s.wnry
| MD5 | ad4c9de7c8c40813f200ba1c2fa33083 |
| SHA1 | d1af27518d455d432b62d73c6a1497d032f6120e |
| SHA256 | e18fdd912dfe5b45776e68d578c3af3547886cf1353d7086c8bee037436dff4b |
| SHA512 | 115733d08e5f1a514808a20b070db7ff453fd149865f49c04365a8c6502fa1e5c3a31da3e21f688ab040f583cf1224a544aea9708ffab21405dde1c57f98e617 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\r.wnry
| MD5 | 3e0020fc529b1c2a061016dd2469ba96 |
| SHA1 | c3a91c22b63f6fe709e7c29cafb29a2ee83e6ade |
| SHA256 | 402751fa49e0cb68fe052cb3db87b05e71c1d950984d339940cf6b29409f2a7c |
| SHA512 | 5ca3c134201ed39d96d72911c0498bae6f98701513fd7f1dc8512819b673f0ea580510fa94ed9413ccc73da18b39903772a7cbfa3478176181cee68c896e14cf |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_vietnamese.wnry
| MD5 | 8419be28a0dcec3f55823620922b00fa |
| SHA1 | 2e4791f9cdfca8abf345d606f313d22b36c46b92 |
| SHA256 | 1f21838b244c80f8bed6f6977aa8a557b419cf22ba35b1fd4bf0f98989c5bdf8 |
| SHA512 | 8fca77e54480aea3c0c7a705263ed8fb83c58974f5f0f62f12cc97c8e0506ba2cdb59b70e59e9a6c44dd7cde6adeeec35b494d31a6a146ff5ba7006136ab9386 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_turkish.wnry
| MD5 | 531ba6b1a5460fc9446946f91cc8c94b |
| SHA1 | cc56978681bd546fd82d87926b5d9905c92a5803 |
| SHA256 | 6db650836d64350bbde2ab324407b8e474fc041098c41ecac6fd77d632a36415 |
| SHA512 | ef25c3cf4343df85954114f59933c7cc8107266c8bcac3b5ea7718eb74dbee8ca8a02da39057e6ef26b64f1dfccd720dd3bf473f5ae340ba56941e87d6b796c9 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_swedish.wnry
| MD5 | c7a19984eb9f37198652eaf2fd1ee25c |
| SHA1 | 06eafed025cf8c4d76966bf382ab0c5e1bd6a0ae |
| SHA256 | 146f61db72297c9c0facffd560487f8d6a2846ecec92ecc7db19c8d618dbc3a4 |
| SHA512 | 43dd159f9c2eac147cbff1dda83f6a83dd0c59d2d7acac35ba8b407a04ec9a1110a6a8737535d060d100ede1cb75078cf742c383948c9d4037ef459d150f6020 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_spanish.wnry
| MD5 | 8d61648d34cba8ae9d1e2a219019add1 |
| SHA1 | 2091e42fc17a0cc2f235650f7aad87abf8ba22c2 |
| SHA256 | 72f20024b2f69b45a1391f0a6474e9f6349625ce329f5444aec7401fe31f8de1 |
| SHA512 | 68489c33ba89edfe2e3aebaacf8ef848d2ea88dcbef9609c258662605e02d12cfa4ffdc1d266fc5878488e296d2848b2cb0bbd45f1e86ef959bab6162d284079 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_slovak.wnry
| MD5 | c911aba4ab1da6c28cf86338ab2ab6cc |
| SHA1 | fee0fd58b8efe76077620d8abc7500dbfef7c5b0 |
| SHA256 | e64178e339c8e10eac17a236a67b892d0447eb67b1dcd149763dad6fd9f72729 |
| SHA512 | 3491ed285a091a123a1a6d61aafbb8d5621ccc9e045a237a2f9c2cf6049e7420eb96ef30fdcea856b50454436e2ec468770f8d585752d73fafd676c4ef5e800a |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_russian.wnry
| MD5 | 452615db2336d60af7e2057481e4cab5 |
| SHA1 | 442e31f6556b3d7de6eb85fbac3d2957b7f5eac6 |
| SHA256 | 02932052fafe97e6acaaf9f391738a3a826f5434b1a013abbfa7a6c1ade1e078 |
| SHA512 | 7613dc329abe7a3f32164c9a6b660f209a84b774ab9c008bf6503c76255b30ea9a743a6dc49a8de8df0bcb9aea5a33f7408ba27848d9562583ff51991910911f |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_romanian.wnry
| MD5 | 313e0ececd24f4fa1504118a11bc7986 |
| SHA1 | e1b9ae804c7fb1d27f39db18dc0647bb04e75e9d |
| SHA256 | 70c0f32ed379ae899e5ac975e20bbbacd295cf7cd50c36174d2602420c770ac1 |
| SHA512 | c7500363c61baf8b77fce796d750f8f5e6886ff0a10f81c3240ea3ad4e5f101b597490dea8ab6bd9193457d35d8fd579fce1b88a1c8d85ebe96c66d909630730 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_portuguese.wnry
| MD5 | fa948f7d8dfb21ceddd6794f2d56b44f |
| SHA1 | ca915fbe020caa88dd776d89632d7866f660fc7a |
| SHA256 | bd9f4b3aedf4f81f37ec0a028aabcb0e9a900e6b4de04e9271c8db81432e2a66 |
| SHA512 | 0d211bfb0ae953081dca00cd07f8c908c174fd6c47a8001fadc614203f0e55d9fbb7fa9b87c735d57101341ab36af443918ee00737ed4c19ace0a2b85497f41a |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_polish.wnry
| MD5 | e79d7f2833a9c2e2553c7fe04a1b63f4 |
| SHA1 | 3d9f56d2381b8fe16042aa7c4feb1b33f2baebff |
| SHA256 | 519ad66009a6c127400c6c09e079903223bd82ecc18ad71b8e5cd79f5f9c053e |
| SHA512 | e0159c753491cac7606a7250f332e87bc6b14876bc7a1cf5625fa56ab4f09c485f7b231dd52e4ff0f5f3c29862afb1124c0efd0741613eb97a83cbe2668af5de |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_norwegian.wnry
| MD5 | ff70cc7c00951084175d12128ce02399 |
| SHA1 | 75ad3b1ad4fb14813882d88e952208c648f1fd18 |
| SHA256 | cb5da96b3dfcf4394713623dbf3831b2a0b8be63987f563e1c32edeb74cb6c3a |
| SHA512 | f01df3256d49325e5ec49fd265aa3f176020c8ffec60eb1d828c75a3fa18ff8634e1de824d77dfdd833768acff1f547303104620c70066a2708654a07ef22e19 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_latvian.wnry
| MD5 | c33afb4ecc04ee1bcc6975bea49abe40 |
| SHA1 | fbea4f170507cde02b839527ef50b7ec74b4821f |
| SHA256 | a0356696877f2d94d645ae2df6ce6b370bd5c0d6db3d36def44e714525de0536 |
| SHA512 | 0d435f0836f61a5ff55b78c02fa47b191e5807a79d8a6e991f3115743df2141b3db42ba8bdad9ad259e12f5800828e9e72d7c94a6a5259312a447d669b03ec44 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_korean.wnry
| MD5 | 6735cb43fe44832b061eeb3f5956b099 |
| SHA1 | d636daf64d524f81367ea92fdafa3726c909bee1 |
| SHA256 | 552aa0f82f37c9601114974228d4fc54f7434fe3ae7a276ef1ae98a0f608f1d0 |
| SHA512 | 60272801909dbba21578b22c49f6b0ba8cd0070f116476ff35b3ac8347b987790e4cc0334724244c4b13415a246e77a577230029e4561ae6f04a598c3f536c7e |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_japanese.wnry
| MD5 | b77e1221f7ecd0b5d696cb66cda1609e |
| SHA1 | 51eb7a254a33d05edf188ded653005dc82de8a46 |
| SHA256 | 7e491e7b48d6e34f916624c1cda9f024e86fcbec56acda35e27fa99d530d017e |
| SHA512 | f435fd67954787e6b87460db026759410fbd25b2f6ea758118749c113a50192446861a114358443a129be817020b50f21d27b1ebd3d22c7be62082e8b45223fc |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_italian.wnry
| MD5 | 30a200f78498990095b36f574b6e8690 |
| SHA1 | c4b1b3c087bd12b063e98bca464cd05f3f7b7882 |
| SHA256 | 49f2c739e7d9745c0834dc817a71bf6676ccc24a4c28dcddf8844093aab3df07 |
| SHA512 | c0da2aae82c397f6943a0a7b838f60eeef8f57192c5f498f2ecf05db824cfeb6d6ca830bf3715da7ee400aa8362bd64dc835298f3f0085ae7a744e6e6c690511 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_indonesian.wnry
| MD5 | 3788f91c694dfc48e12417ce93356b0f |
| SHA1 | eb3b87f7f654b604daf3484da9e02ca6c4ea98b7 |
| SHA256 | 23e5e738aad10fb8ef89aa0285269aff728070080158fd3e7792fe9ed47c51f4 |
| SHA512 | b7dd9e6dc7c2d023ff958caf132f0544c76fae3b2d8e49753257676cc541735807b4befdf483bcae94c2dcde3c878c783b4a89dca0fecbc78f5bbf7c356f35cd |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_greek.wnry
| MD5 | fb4e8718fea95bb7479727fde80cb424 |
| SHA1 | 1088c7653cba385fe994e9ae34a6595898f20aeb |
| SHA256 | e13cc9b13aa5074dc45d50379eceb17ee39a0c2531ab617d93800fe236758ca9 |
| SHA512 | 24db377af1569e4e2b2ebccec42564cea95a30f1ff43bcaf25a692f99567e027bcef4aacef008ec5f64ea2eef0c04be88d2b30bcadabb3919b5f45a6633940cb |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_german.wnry
| MD5 | 3d59bbb5553fe03a89f817819540f469 |
| SHA1 | 26781d4b06ff704800b463d0f1fca3afd923a9fe |
| SHA256 | 2adc900fafa9938d85ce53cb793271f37af40cf499bcc454f44975db533f0b61 |
| SHA512 | 95719ae80589f71209bb3cb953276538040e7111b994d757b0a24283aefe27aadbbe9eef3f1f823ce4cabc1090946d4a2a558607ac6cac6faca5971529b34dac |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_french.wnry
| MD5 | 4e57113a6bf6b88fdd32782a4a381274 |
| SHA1 | 0fccbc91f0f94453d91670c6794f71348711061d |
| SHA256 | 9bd38110e6523547aed50617ddc77d0920d408faeed2b7a21ab163fda22177bc |
| SHA512 | 4f1918a12269c654d44e9d394bc209ef0bc32242be8833a2fba437b879125177e149f56f2fb0c302330dec328139b34982c04b3fefb045612b6cc9f83ec85aa9 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_filipino.wnry
| MD5 | 08b9e69b57e4c9b966664f8e1c27ab09 |
| SHA1 | 2da1025bbbfb3cd308070765fc0893a48e5a85fa |
| SHA256 | d8489f8c16318e524b45de8b35d7e2c3cd8ed4821c136f12f5ef3c9fc3321324 |
| SHA512 | 966b5ed68be6b5ccd46e0de1fa868cfe5432d9bf82e1e2f6eb99b2aef3c92f88d96f4f4eec5e16381b9c6db80a68071e7124ca1474d664bdd77e1817ec600cb4 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_english.wnry
| MD5 | fe68c2dc0d2419b38f44d83f2fcf232e |
| SHA1 | 6c6e49949957215aa2f3dfb72207d249adf36283 |
| SHA256 | 26fd072fda6e12f8c2d3292086ef0390785efa2c556e2a88bd4673102af703e5 |
| SHA512 | 941fa0a1f6a5756ed54260994db6158a7ebeb9e18b5c8ca2f6530c579bc4455918df0b38c609f501ca466b3cc067b40e4b861ad6513373b483b36338ae20a810 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_dutch.wnry
| MD5 | 7a8d499407c6a647c03c4471a67eaad7 |
| SHA1 | d573b6ac8e7e04a05cbbd6b7f6a9842f371d343b |
| SHA256 | 2c95bef914da6c50d7bdedec601e589fbb4fda24c4863a7260f4f72bd025799c |
| SHA512 | 608ef3ff0a517fe1e70ff41aeb277821565c5a9bee5103aa5e45c68d4763fce507c2a34d810f4cd242d163181f8341d9a69e93fe32aded6fbc7f544c55743f12 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_danish.wnry
| MD5 | 2c5a3b81d5c4715b7bea01033367fcb5 |
| SHA1 | b548b45da8463e17199daafd34c23591f94e82cd |
| SHA256 | a75bb44284b9db8d702692f84909a7e23f21141866adf3db888042e9109a1cb6 |
| SHA512 | 490c5a892fac801b853c348477b1140755d4c53ca05726ac19d3649af4285c93523393a3667e209c71c80ac06ffd809f62dd69ae65012dcb00445d032f1277b3 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_czech.wnry
| MD5 | 537efeecdfa94cc421e58fd82a58ba9e |
| SHA1 | 3609456e16bc16ba447979f3aa69221290ec17d0 |
| SHA256 | 5afa4753afa048c6d6c39327ce674f27f5f6e5d3f2a060b7a8aed61725481150 |
| SHA512 | e007786ffa09ccd5a24e5c6504c8de444929a2faaafad3712367c05615b7e1b0fbf7fbfff7028ed3f832ce226957390d8bf54308870e9ed597948a838da1137b |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_croatian.wnry
| MD5 | 17194003fa70ce477326ce2f6deeb270 |
| SHA1 | e325988f68d327743926ea317abb9882f347fa73 |
| SHA256 | 3f33734b2d34cce83936ce99c3494cd845f1d2c02d7f6da31d42dfc1ca15a171 |
| SHA512 | dcf4ccf0b352a8b271827b3b8e181f7d6502ca0f8c9dda3dc6e53441bb4ae6e77b49c9c947cc3ede0bf323f09140a0c068a907f3c23ea2a8495d1ad96820051c |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_chinese (traditional).wnry
| MD5 | 2efc3690d67cd073a9406a25005f7cea |
| SHA1 | 52c07f98870eabace6ec370b7eb562751e8067e9 |
| SHA256 | 5c7f6ad1ec4bc2c8e2c9c126633215daba7de731ac8b12be10ca157417c97f3a |
| SHA512 | 0766c58e64d9cda5328e00b86f8482316e944aa2c26523a3c37289e22c34be4b70937033bebdb217f675e40db9fecdce0a0d516f9065a170e28286c2d218487c |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_chinese (simplified).wnry
| MD5 | 0252d45ca21c8e43c9742285c48e91ad |
| SHA1 | 5c14551d2736eef3a1c1970cc492206e531703c1 |
| SHA256 | 845d0e178aeebd6c7e2a2e9697b2bf6cf02028c50c288b3ba88fe2918ea2834a |
| SHA512 | 1bfcf6c0e7c977d777f12bd20ac347630999c4d99bd706b40de7ff8f2f52e02560d68093142cc93722095657807a1480ce3fb6a2e000c488550548c497998755 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\msg\m_bulgarian.wnry
| MD5 | 95673b0f968c0f55b32204361940d184 |
| SHA1 | 81e427d15a1a826b93e91c3d2fa65221c8ca9cff |
| SHA256 | 40b37e7b80cf678d7dd302aaf41b88135ade6ddf44d89bdba19cf171564444bd |
| SHA512 | 7601f1883edbb4150a9dc17084012323b3bfa66f6d19d3d0355cf82b6a1c9dce475d758da18b6d17a8b321bf6fca20915224dbaedcb3f4d16abfaf7a5fc21b92 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\c.wnry
| MD5 | 383a85eab6ecda319bfddd82416fc6c2 |
| SHA1 | 2a9324e1d02c3e41582bf5370043d8afeb02ba6f |
| SHA256 | 079ce1041cbffe18ff62a2b4a33711eda40f680d0b1d3b551db47e39a6390b21 |
| SHA512 | c661e0b3c175d31b365362e52d7b152267a15d59517a4bcc493329be20b23d0e4eb62d1ba80bb96447eeaf91a6901f4b34bf173b4ab6f90d4111ea97c87c1252 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\b.wnry
| MD5 | c17170262312f3be7027bc2ca825bf0c |
| SHA1 | f19eceda82973239a1fdc5826bce7691e5dcb4fb |
| SHA256 | d5e0e8694ddc0548d8e6b87c83d50f4ab85c1debadb106d6a6a794c3e746f4fa |
| SHA512 | c6160fd03ad659c8dd9cf2a83f9fdcd34f2db4f8f27f33c5afd52aced49dfa9ce4909211c221a0479dbbb6e6c985385557c495fc04d3400ff21a0fbbae42ee7c |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
| MD5 | f97d2e6f8d820dbd3b66f21137de4f09 |
| SHA1 | 596799b75b5d60aa9cd45646f68e9c0bd06df252 |
| SHA256 | 0e5ece918132a2b1a190906e74becb8e4ced36eec9f9d1c70f5da72ac4c6b92a |
| SHA512 | efda21d83464a6a32fdeef93152ffd32a648130754fdd3635f7ff61cc1664f7fc050900f0f871b0ddd3a3846222bf62ab5df8eed42610a76be66fff5f7b4c4c0 |
C:\Users\Admin\Documents\_R_E_A_D___T_H_I_S___8GXE_.txt
| MD5 | cb088a915979dc5f1cde633733934667 |
| SHA1 | fced04aad6dbac0a96c541fb48cd9830b4e24868 |
| SHA256 | 73115d86efda887f123f32c92fe09958484638fe79ac2d7290d8643ab3685dc0 |
| SHA512 | e73bf09ad0521561871075caa91db7e405917ba532fdab2dd8eab1765a5d262958c06714bbe3745ee3305719e54abfb5cd77eedf8c1679396bad93a1ede6fbb2 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\120121719241807.bat
| MD5 | b56088614bdb5dd77d2b685383c3ab6b |
| SHA1 | 4d9c8e9b54469f4b6f3afb3d4ea1811f2b6eef9a |
| SHA256 | 10c9c568cb9a20be5d15d1203b12ed7cf85678f22fcf74d98221141846d2c7e3 |
| SHA512 | fb514384fd423551cd9d50081df710e41ed58373315b1ff40bee6fbddfca986945f0c90a8369bd49d7af1e6273fbd3b4e88dae4c523e621d1a8f7bff505164f3 |
C:\Users\Admin\Documents\OneNote Notebooks\_R_E_A_D___T_H_I_S___IDPC34X1_.txt
| MD5 | fe73b1c8a974ccc54a2d60885a689384 |
| SHA1 | b4481027350d9b37b50d23f94f697d5f63982983 |
| SHA256 | a5abaf9fd2b83301db096e34c954aec3ab5490941de0bfeb5a331723c49a2003 |
| SHA512 | 9b8990f878fe7d327557bb9bdab105101326ca01581159c9acb893b6cae4266c5c22b624aef69a29b8d1eac14076afddf347f744066f9d04f34c35d894db00ce |
C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\_R_E_A_D___T_H_I_S___IFWF8VLZ_.txt
| MD5 | aa3f15c244ba32e35b7b606c525c603a |
| SHA1 | dc8c47298c6ab13ad89a08db6a63e983b9fe25ac |
| SHA256 | 6c489ed496acccd4c68bc39c95e805dc63ccfd8cd0cf1e6fa644edf76a50037b |
| SHA512 | 523f5f79b555af1cb66ea8763d9e403331b3093061ac152c65aefbfa200635647df3cea9797195e1a8358bad6b2450c4f320fb3dfb0d004a49ff4a59a20e2ac5 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\m.vbs
| MD5 | a88a125581a81575619ea1f2c6c8457a |
| SHA1 | 11870eb53d107ac739ad66e7e84bc7805508b746 |
| SHA256 | 8533ebdf1658de1c0fca691645547b7b9ba8d12135aec5bf07b1e61045b3ff4d |
| SHA512 | 4937d3c4cd9bccafee728ef5e08e05193191cd9fe6c6044132880fb156a9c97f7715d7169cf1c4d653c71d2a8bb766c5720bf06b59fc3372b7b355810f965ca9 |
C:\Users\Admin\Downloads\Ransomware-Samples-main\Ransomware-Samples-main\WannaCry\Ransomware.WannaCry\@[email protected]
| MD5 | c7f659e154a428bfeca636d3c900e25b |
| SHA1 | 5c4d04ae655f6fc9b61c74fd1d7d3a0a5630fc6e |
| SHA256 | f704bad7b42ea3087060686dede20ad8d7694e90ce8191baa95476f8e2a3abba |
| SHA512 | a566db42130bebc30c734e2e66844041936663987c944e343bc0e8e77af9e79b2e0c5c54b3553183fd5c86e2f99bd50d52a7d0fd8129c099a6a83e8623fafe86 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
| MD5 | cc0d843fd694b70bf485815233c2364e |
| SHA1 | cf695711a243800a31a181373e2a1aee7649c654 |
| SHA256 | f24dbe4b6cb3d735fb38662b7714c3ad8f95b59d8d34b492fc10729966db93a6 |
| SHA512 | 93f36f86159cd382892f3b966734cfe3eb132c0a2f8040bf2d446b1905025cec68caa52040df953deb4941c9d67af453a2e78a0ea9e2c795acd6facc1d67cf03 |
C:\Windows\Temp\{B3E62E1A-4891-4F2B-BFBF-066EADFE23AB}\.ba\bg.png
| MD5 | 9eb0320dfbf2bd541e6a55c01ddc9f20 |
| SHA1 | eb282a66d29594346531b1ff886d455e1dcd6d99 |
| SHA256 | 9095bf7b6baa0107b40a4a6d727215be077133a190f4ca9bd89a176842141e79 |
| SHA512 | 9ada3a1757a493fbb004bd767fab8f77430af69d71479f340b8b8ede904cc94cd733700db593a4a2d2e1184c0081fd0648318d867128e1cb461021314990931d |
C:\Config.Msi\e6253aa.rbs
| MD5 | df0dc3c6c13dd35b930df313c72e7a58 |
| SHA1 | 4ea61074cca09c72092951eab5a20b0771ae83fe |
| SHA256 | 64b565bb194d180bc43c7fc1d1cc425022a514c8489f781cf1b08d82f7a4309f |
| SHA512 | ec519857f66a4e70b1b64fe345a9cf562869ac436e80877a6e89c203abaff8e641e4650c6eccfaf1359fd4074ec79423983774572506add1eb894a574d37607a |
C:\Windows\Installer\MSI600F.tmp
| MD5 | d711da8a6487aea301e05003f327879f |
| SHA1 | 548d3779ed3ab7309328f174bfb18d7768d27747 |
| SHA256 | 3d855b58ce7da9f24f1bef8d0673ba4a97105a7fd88433de7fb4e156b4306283 |
| SHA512 | c6d1c938e8a0acf080dcab1276d78237e342a98772e23ac887b87a346878c376fb0af8364e52a36c5b949005aa3218308bc6193f8b580f622ef39d9955c7c681 |
C:\Config.Msi\e6254c7.rbs
| MD5 | 1927881359ede36560f8b40f23007685 |
| SHA1 | c386095589c11f6499218763440fe3522a38bfb2 |
| SHA256 | ca4d1e20675f6496edf8825a02511b57f358ef7b72e8712f2bf38bb2cc6e451d |
| SHA512 | 92402332559ac964181393e9ddb05bbefe145940dbf948f93343ddb2bc518c392af6fe22907cc1e66ffc1987c21e9372caac715c8e1f5a10e9d6f407ae517990 |
C:\Config.Msi\e6254ca.rbs
| MD5 | 21c5b80d98f90e7aba300ffc04254410 |
| SHA1 | 8142f5294d8a7c0f20ab84a598daab292335542b |
| SHA256 | dd6de7c1ed09f406127a2fc2dc01a9ca57d83d685e2f7de29ab0fb3fe0a2a55d |
| SHA512 | eb151b42a2afd5a6f2bca306b36bce3f34e63875d71179932d9a02ced5b713b76ac843b7a3279142ccaae3d9f9d28207ca24944b04859331a1acad8a0948abdb |
C:\Config.Msi\e6254ce.rbs
| MD5 | da516d72984367e6afc3a65fe284a2ad |
| SHA1 | 17fdfbf22cd86a5df819540d39e2d4bb0d63a4b4 |
| SHA256 | 2d7826daf1228bf75bb698dd35f343854832d07ffa7d6a1cb944070c6afa0bd3 |
| SHA512 | 4e44efacbfda5c7599fad577f95e44ea6763a230cce1d036e5941dad720c59fa88fcfdefe5d70c7160bd438caa01c42402b1e60c5c694980d6382eb23ceeb31b |
memory/5984-2444-0x0000000000A30000-0x0000000000AA6000-memory.dmp
memory/2976-2445-0x0000000000A30000-0x0000000000AA6000-memory.dmp
memory/1108-2446-0x0000000000A30000-0x0000000000AA6000-memory.dmp