Malware Analysis Report

2025-01-02 14:58

Sample ID 241125-brxmkszrey
Target 9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118
SHA256 3a4d9f780c0ba89d1835687f7b8e45d0ff231d1283787ee73c393d4f270e3421
Tags
cerber discovery ransomware
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

3a4d9f780c0ba89d1835687f7b8e45d0ff231d1283787ee73c393d4f270e3421

Threat Level: Known bad

The file 9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118 was found to be: Known bad.

Malicious Activity Summary

cerber discovery ransomware

Cerber family

Cerber

Contacts a large (589) amount of remote hosts

Contacts a large (584) amount of remote hosts

Blocklisted process makes network request

Checks computer location settings

Drops startup file

Deletes itself

Sets desktop wallpaper using registry

Suspicious use of SetThreadContext

Drops file in Program Files directory

Drops file in Windows directory

System Network Configuration Discovery: Internet Connection Discovery

Unsigned PE

System Location Discovery: System Language Discovery

Enumerates physical storage devices

Kills process with taskkill

Modifies Internet Explorer settings

Runs ping.exe

Modifies registry class

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-25 01:23

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-25 01:23

Reported

2024-11-25 01:25

Platform

win7-20240903-en

Max time kernel

117s

Max time network

120s

Command Line

"C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe"

Signatures

Cerber

ransomware cerber

Cerber family

cerber

Blocklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

Contacts a large (584) amount of remote hosts

discovery

Deletes itself

Description Indicator Process Target
N/A N/A C:\Windows\system32\cmd.exe N/A

Drops startup file

Description Indicator Process Target
File opened for modification \??\c:\users\admin\appdata\roaming\microsoft\word\startup\ C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\tmp1989.bmp" C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\DllHost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\mshta.exe N/A

System Network Configuration Discovery: Internet Connection Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Windows\system32\PING.EXE N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\taskkill.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SysWOW64\mshta.exe N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\system32\PING.EXE N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2872 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe
PID 2872 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe
PID 2872 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe
PID 2872 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe
PID 2872 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe
PID 2872 wrote to memory of 1632 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe
PID 1632 wrote to memory of 2132 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 1632 wrote to memory of 2132 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 1632 wrote to memory of 2132 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 1632 wrote to memory of 2132 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 1632 wrote to memory of 2860 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 1632 wrote to memory of 2860 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 1632 wrote to memory of 2860 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 1632 wrote to memory of 2860 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 2860 wrote to memory of 2672 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 2860 wrote to memory of 2672 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 2860 wrote to memory of 2672 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 2860 wrote to memory of 2720 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE
PID 2860 wrote to memory of 2720 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE
PID 2860 wrote to memory of 2720 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe"

C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe"

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\SysWOW64\DllHost.exe /Processid:{3F6B5E16-092A-41ED-930B-0B4125D91D4E}

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\AppData\Local\Temp\_README_MHWDX_.hta"

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im "9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe"

C:\Windows\system32\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
KR 1.11.32.0:6892 udp
KR 1.11.32.1:6892 udp
KR 1.11.32.2:6892 udp
KR 1.11.32.3:6892 udp
KR 1.11.32.4:6892 udp
KR 1.11.32.5:6892 udp
KR 1.11.32.6:6892 udp
KR 1.11.32.7:6892 udp
KR 1.11.32.8:6892 udp
KR 1.11.32.9:6892 udp
KR 1.11.32.10:6892 udp
KR 1.11.32.11:6892 udp
KR 1.11.32.12:6892 udp
KR 1.11.32.13:6892 udp
KR 1.11.32.14:6892 udp
KR 1.11.32.15:6892 udp
KR 1.11.32.16:6892 udp
KR 1.11.32.17:6892 udp
KR 1.11.32.18:6892 udp
KR 1.11.32.19:6892 udp
KR 1.11.32.20:6892 udp
KR 1.11.32.21:6892 udp
KR 1.11.32.22:6892 udp
KR 1.11.32.23:6892 udp
KR 1.11.32.24:6892 udp
KR 1.11.32.25:6892 udp
KR 1.11.32.26:6892 udp
KR 1.11.32.27:6892 udp
KR 1.11.32.28:6892 udp
KR 1.11.32.29:6892 udp
KR 1.11.32.30:6892 udp
KR 1.11.32.31:6892 udp
US 55.15.15.0:6892 udp
US 55.15.15.1:6892 udp
US 55.15.15.2:6892 udp
US 55.15.15.3:6892 udp
US 55.15.15.4:6892 udp
US 55.15.15.5:6892 udp
US 55.15.15.6:6892 udp
US 55.15.15.7:6892 udp
US 55.15.15.8:6892 udp
US 55.15.15.9:6892 udp
US 55.15.15.10:6892 udp
US 55.15.15.11:6892 udp
US 55.15.15.12:6892 udp
US 55.15.15.13:6892 udp
US 55.15.15.14:6892 udp
US 55.15.15.15:6892 udp
US 55.15.15.16:6892 udp
US 55.15.15.17:6892 udp
US 55.15.15.18:6892 udp
US 55.15.15.19:6892 udp
US 55.15.15.20:6892 udp
US 55.15.15.21:6892 udp
US 55.15.15.22:6892 udp
US 55.15.15.23:6892 udp
US 55.15.15.24:6892 udp
US 55.15.15.25:6892 udp
US 55.15.15.26:6892 udp
US 55.15.15.27:6892 udp
US 55.15.15.28:6892 udp
US 55.15.15.29:6892 udp
US 55.15.15.30:6892 udp
US 55.15.15.31:6892 udp
LT 194.165.16.0:6892 udp
LT 194.165.16.1:6892 udp
LT 194.165.16.2:6892 udp
LT 194.165.16.3:6892 udp
LT 194.165.16.4:6892 udp
LT 194.165.16.5:6892 udp
LT 194.165.16.6:6892 udp
LT 194.165.16.7:6892 udp
LT 194.165.16.8:6892 udp
LT 194.165.16.9:6892 udp
LT 194.165.16.10:6892 udp
LT 194.165.16.11:6892 udp
LT 194.165.16.12:6892 udp
LT 194.165.16.13:6892 udp
LT 194.165.16.14:6892 udp
LT 194.165.16.15:6892 udp
LT 194.165.16.16:6892 udp
LT 194.165.16.17:6892 udp
LT 194.165.16.18:6892 udp
LT 194.165.16.19:6892 udp
LT 194.165.16.20:6892 udp
LT 194.165.16.21:6892 udp
LT 194.165.16.22:6892 udp
LT 194.165.16.23:6892 udp
LT 194.165.16.24:6892 udp
LT 194.165.16.25:6892 udp
LT 194.165.16.26:6892 udp
LT 194.165.16.27:6892 udp
LT 194.165.16.28:6892 udp
LT 194.165.16.29:6892 udp
LT 194.165.16.30:6892 udp
LT 194.165.16.31:6892 udp
LT 194.165.16.32:6892 udp
LT 194.165.16.33:6892 udp
LT 194.165.16.34:6892 udp
LT 194.165.16.35:6892 udp
LT 194.165.16.36:6892 udp
LT 194.165.16.37:6892 udp
LT 194.165.16.38:6892 udp
LT 194.165.16.39:6892 udp
LT 194.165.16.40:6892 udp
LT 194.165.16.41:6892 udp
LT 194.165.16.42:6892 udp
LT 194.165.16.43:6892 udp
LT 194.165.16.44:6892 udp
LT 194.165.16.45:6892 udp
LT 194.165.16.46:6892 udp
LT 194.165.16.47:6892 udp
LT 194.165.16.48:6892 udp
LT 194.165.16.49:6892 udp
LT 194.165.16.50:6892 udp
LT 194.165.16.51:6892 udp
LT 194.165.16.52:6892 udp
LT 194.165.16.53:6892 udp
LT 194.165.16.54:6892 udp
LT 194.165.16.55:6892 udp
LT 194.165.16.56:6892 udp
LT 194.165.16.57:6892 udp
LT 194.165.16.58:6892 udp
LT 194.165.16.59:6892 udp
LT 194.165.16.60:6892 udp
LT 194.165.16.61:6892 udp
LT 194.165.16.62:6892 udp
LT 194.165.16.63:6892 udp
LT 194.165.16.64:6892 udp
LT 194.165.16.65:6892 udp
LT 194.165.16.66:6892 udp
LT 194.165.16.67:6892 udp
LT 194.165.16.68:6892 udp
LT 194.165.16.69:6892 udp
LT 194.165.16.70:6892 udp
LT 194.165.16.71:6892 udp
LT 194.165.16.72:6892 udp
LT 194.165.16.73:6892 udp
LT 194.165.16.74:6892 udp
LT 194.165.16.75:6892 udp
LT 194.165.16.76:6892 udp
LT 194.165.16.77:6892 udp
LT 194.165.16.78:6892 udp
LT 194.165.16.79:6892 udp
LT 194.165.16.80:6892 udp
LT 194.165.16.81:6892 udp
LT 194.165.16.82:6892 udp
LT 194.165.16.83:6892 udp
LT 194.165.16.84:6892 udp
LT 194.165.16.85:6892 udp
LT 194.165.16.86:6892 udp
LT 194.165.16.87:6892 udp
LT 194.165.16.88:6892 udp
LT 194.165.16.89:6892 udp
LT 194.165.16.90:6892 udp
LT 194.165.16.91:6892 udp
LT 194.165.16.92:6892 udp
LT 194.165.16.93:6892 udp
LT 194.165.16.94:6892 udp
LT 194.165.16.95:6892 udp
LT 194.165.16.96:6892 udp
LT 194.165.16.97:6892 udp
LT 194.165.16.98:6892 udp
LT 194.165.16.99:6892 udp
LT 194.165.16.100:6892 udp
LT 194.165.16.101:6892 udp
LT 194.165.16.102:6892 udp
LT 194.165.16.103:6892 udp
LT 194.165.16.104:6892 udp
LT 194.165.16.105:6892 udp
LT 194.165.16.106:6892 udp
LT 194.165.16.107:6892 udp
LT 194.165.16.108:6892 udp
LT 194.165.16.109:6892 udp
LT 194.165.16.110:6892 udp
LT 194.165.16.111:6892 udp
LT 194.165.16.112:6892 udp
LT 194.165.16.113:6892 udp
LT 194.165.16.114:6892 udp
LT 194.165.16.115:6892 udp
LT 194.165.16.116:6892 udp
LT 194.165.16.117:6892 udp
LT 194.165.16.118:6892 udp
LT 194.165.16.119:6892 udp
LT 194.165.16.120:6892 udp
LT 194.165.16.121:6892 udp
LT 194.165.16.122:6892 udp
LT 194.165.16.123:6892 udp
LT 194.165.16.124:6892 udp
LT 194.165.16.125:6892 udp
LT 194.165.16.126:6892 udp
LT 194.165.16.127:6892 udp
LT 194.165.16.128:6892 udp
LT 194.165.16.129:6892 udp
LT 194.165.16.130:6892 udp
LT 194.165.16.131:6892 udp
LT 194.165.16.132:6892 udp
LT 194.165.16.133:6892 udp
LT 194.165.16.134:6892 udp
LT 194.165.16.135:6892 udp
LT 194.165.16.136:6892 udp
LT 194.165.16.137:6892 udp
LT 194.165.16.138:6892 udp
LT 194.165.16.139:6892 udp
LT 194.165.16.140:6892 udp
LT 194.165.16.141:6892 udp
LT 194.165.16.142:6892 udp
LT 194.165.16.143:6892 udp
LT 194.165.16.144:6892 udp
LT 194.165.16.145:6892 udp
LT 194.165.16.146:6892 udp
LT 194.165.16.147:6892 udp
LT 194.165.16.148:6892 udp
LT 194.165.16.149:6892 udp
LT 194.165.16.150:6892 udp
LT 194.165.16.151:6892 udp
LT 194.165.16.152:6892 udp
LT 194.165.16.153:6892 udp
LT 194.165.16.154:6892 udp
LT 194.165.16.155:6892 udp
LT 194.165.16.156:6892 udp
LT 194.165.16.157:6892 udp
LT 194.165.16.158:6892 udp
LT 194.165.16.159:6892 udp
LT 194.165.16.160:6892 udp
LT 194.165.16.161:6892 udp
LT 194.165.16.162:6892 udp
LT 194.165.16.163:6892 udp
LT 194.165.16.164:6892 udp
LT 194.165.16.165:6892 udp
LT 194.165.16.166:6892 udp
LT 194.165.16.167:6892 udp
LT 194.165.16.168:6892 udp
LT 194.165.16.169:6892 udp
LT 194.165.16.170:6892 udp
LT 194.165.16.171:6892 udp
LT 194.165.16.172:6892 udp
LT 194.165.16.173:6892 udp
LT 194.165.16.174:6892 udp
LT 194.165.16.175:6892 udp
LT 194.165.16.176:6892 udp
LT 194.165.16.177:6892 udp
LT 194.165.16.178:6892 udp
LT 194.165.16.179:6892 udp
LT 194.165.16.180:6892 udp
LT 194.165.16.181:6892 udp
LT 194.165.16.182:6892 udp
LT 194.165.16.183:6892 udp
LT 194.165.16.184:6892 udp
LT 194.165.16.185:6892 udp
LT 194.165.16.186:6892 udp
LT 194.165.16.187:6892 udp
LT 194.165.16.188:6892 udp
LT 194.165.16.189:6892 udp
LT 194.165.16.190:6892 udp
LT 194.165.16.191:6892 udp
LT 194.165.16.192:6892 udp
LT 194.165.16.193:6892 udp
LT 194.165.16.194:6892 udp
LT 194.165.16.195:6892 udp
LT 194.165.16.196:6892 udp
LT 194.165.16.197:6892 udp
LT 194.165.16.198:6892 udp
LT 194.165.16.199:6892 udp
LT 194.165.16.200:6892 udp
LT 194.165.16.201:6892 udp
LT 194.165.16.202:6892 udp
LT 194.165.16.203:6892 udp
LT 194.165.16.204:6892 udp
LT 194.165.16.205:6892 udp
LT 194.165.16.206:6892 udp
LT 194.165.16.207:6892 udp
LT 194.165.16.208:6892 udp
LT 194.165.16.209:6892 udp
LT 194.165.16.210:6892 udp
LT 194.165.16.211:6892 udp
LT 194.165.16.212:6892 udp
LT 194.165.16.213:6892 udp
LT 194.165.16.214:6892 udp
LT 194.165.16.215:6892 udp
LT 194.165.16.216:6892 udp
LT 194.165.16.217:6892 udp
LT 194.165.16.218:6892 udp
LT 194.165.16.219:6892 udp
LT 194.165.16.220:6892 udp
LT 194.165.16.221:6892 udp
LT 194.165.16.222:6892 udp
LT 194.165.16.223:6892 udp
LT 194.165.16.224:6892 udp
LT 194.165.16.225:6892 udp
LT 194.165.16.226:6892 udp
LT 194.165.16.227:6892 udp
LT 194.165.16.228:6892 udp
LT 194.165.16.229:6892 udp
LT 194.165.16.230:6892 udp
LT 194.165.16.231:6892 udp
LT 194.165.16.232:6892 udp
LT 194.165.16.233:6892 udp
LT 194.165.16.234:6892 udp
LT 194.165.16.235:6892 udp
LT 194.165.16.236:6892 udp
LT 194.165.16.237:6892 udp
LT 194.165.16.238:6892 udp
LT 194.165.16.239:6892 udp
LT 194.165.16.240:6892 udp
LT 194.165.16.241:6892 udp
LT 194.165.16.242:6892 udp
LT 194.165.16.243:6892 udp
LT 194.165.16.244:6892 udp
LT 194.165.16.245:6892 udp
LT 194.165.16.246:6892 udp
LT 194.165.16.247:6892 udp
LT 194.165.16.248:6892 udp
LT 194.165.16.249:6892 udp
LT 194.165.16.250:6892 udp
LT 194.165.16.251:6892 udp
LT 194.165.16.252:6892 udp
LT 194.165.16.253:6892 udp
LT 194.165.16.254:6892 udp
LT 194.165.16.255:6892 udp
LT 194.165.17.0:6892 udp
LT 194.165.17.1:6892 udp
LT 194.165.17.2:6892 udp
LT 194.165.17.3:6892 udp
LT 194.165.17.4:6892 udp
LT 194.165.17.5:6892 udp
LT 194.165.17.6:6892 udp
LT 194.165.17.7:6892 udp
LT 194.165.17.8:6892 udp
LT 194.165.17.9:6892 udp
LT 194.165.17.10:6892 udp
LT 194.165.17.11:6892 udp
LT 194.165.17.12:6892 udp
LT 194.165.17.13:6892 udp
LT 194.165.17.14:6892 udp
LT 194.165.17.15:6892 udp
LT 194.165.17.16:6892 udp
LT 194.165.17.17:6892 udp
LT 194.165.17.18:6892 udp
LT 194.165.17.19:6892 udp
LT 194.165.17.20:6892 udp
LT 194.165.17.21:6892 udp
LT 194.165.17.22:6892 udp
LT 194.165.17.23:6892 udp
LT 194.165.17.24:6892 udp
LT 194.165.17.25:6892 udp
LT 194.165.17.26:6892 udp
LT 194.165.17.27:6892 udp
LT 194.165.17.28:6892 udp
LT 194.165.17.29:6892 udp
LT 194.165.17.30:6892 udp
LT 194.165.17.31:6892 udp
LT 194.165.17.32:6892 udp
LT 194.165.17.33:6892 udp
LT 194.165.17.34:6892 udp
LT 194.165.17.35:6892 udp
LT 194.165.17.36:6892 udp
LT 194.165.17.37:6892 udp
LT 194.165.17.38:6892 udp
LT 194.165.17.39:6892 udp
LT 194.165.17.40:6892 udp
LT 194.165.17.41:6892 udp
LT 194.165.17.42:6892 udp
LT 194.165.17.43:6892 udp
LT 194.165.17.44:6892 udp
LT 194.165.17.45:6892 udp
LT 194.165.17.46:6892 udp
LT 194.165.17.47:6892 udp
LT 194.165.17.48:6892 udp
LT 194.165.17.49:6892 udp
LT 194.165.17.50:6892 udp
LT 194.165.17.51:6892 udp
LT 194.165.17.52:6892 udp
LT 194.165.17.53:6892 udp
LT 194.165.17.54:6892 udp
LT 194.165.17.55:6892 udp
LT 194.165.17.56:6892 udp
LT 194.165.17.57:6892 udp
LT 194.165.17.58:6892 udp
LT 194.165.17.59:6892 udp
LT 194.165.17.60:6892 udp
LT 194.165.17.61:6892 udp
LT 194.165.17.62:6892 udp
LT 194.165.17.63:6892 udp
LT 194.165.17.64:6892 udp
LT 194.165.17.65:6892 udp
LT 194.165.17.66:6892 udp
LT 194.165.17.67:6892 udp
LT 194.165.17.68:6892 udp
LT 194.165.17.69:6892 udp
LT 194.165.17.70:6892 udp
LT 194.165.17.71:6892 udp
LT 194.165.17.72:6892 udp
LT 194.165.17.73:6892 udp
LT 194.165.17.74:6892 udp
LT 194.165.17.75:6892 udp
LT 194.165.17.76:6892 udp
LT 194.165.17.77:6892 udp
LT 194.165.17.78:6892 udp
LT 194.165.17.79:6892 udp
LT 194.165.17.80:6892 udp
LT 194.165.17.81:6892 udp
LT 194.165.17.82:6892 udp
LT 194.165.17.83:6892 udp
LT 194.165.17.84:6892 udp
LT 194.165.17.85:6892 udp
LT 194.165.17.86:6892 udp
LT 194.165.17.87:6892 udp
LT 194.165.17.88:6892 udp
LT 194.165.17.89:6892 udp
LT 194.165.17.90:6892 udp
LT 194.165.17.91:6892 udp
LT 194.165.17.92:6892 udp
LT 194.165.17.93:6892 udp
LT 194.165.17.94:6892 udp
LT 194.165.17.95:6892 udp
LT 194.165.17.96:6892 udp
LT 194.165.17.97:6892 udp
LT 194.165.17.98:6892 udp
LT 194.165.17.99:6892 udp
LT 194.165.17.100:6892 udp
LT 194.165.17.101:6892 udp
LT 194.165.17.102:6892 udp
LT 194.165.17.103:6892 udp
LT 194.165.17.104:6892 udp
LT 194.165.17.105:6892 udp
LT 194.165.17.106:6892 udp
LT 194.165.17.107:6892 udp
LT 194.165.17.108:6892 udp
LT 194.165.17.109:6892 udp
LT 194.165.17.110:6892 udp
LT 194.165.17.111:6892 udp
LT 194.165.17.112:6892 udp
LT 194.165.17.113:6892 udp
LT 194.165.17.114:6892 udp
LT 194.165.17.115:6892 udp
LT 194.165.17.116:6892 udp
LT 194.165.17.117:6892 udp
LT 194.165.17.118:6892 udp
LT 194.165.17.119:6892 udp
LT 194.165.17.120:6892 udp
LT 194.165.17.121:6892 udp
LT 194.165.17.122:6892 udp
LT 194.165.17.123:6892 udp
LT 194.165.17.124:6892 udp
LT 194.165.17.125:6892 udp
LT 194.165.17.126:6892 udp
LT 194.165.17.127:6892 udp
LT 194.165.17.128:6892 udp
LT 194.165.17.129:6892 udp
LT 194.165.17.130:6892 udp
LT 194.165.17.131:6892 udp
LT 194.165.17.132:6892 udp
LT 194.165.17.133:6892 udp
LT 194.165.17.134:6892 udp
LT 194.165.17.135:6892 udp
LT 194.165.17.136:6892 udp
LT 194.165.17.137:6892 udp
LT 194.165.17.138:6892 udp
LT 194.165.17.139:6892 udp
LT 194.165.17.140:6892 udp
LT 194.165.17.141:6892 udp
LT 194.165.17.142:6892 udp
LT 194.165.17.143:6892 udp
LT 194.165.17.144:6892 udp
LT 194.165.17.145:6892 udp
LT 194.165.17.146:6892 udp
LT 194.165.17.147:6892 udp
LT 194.165.17.148:6892 udp
LT 194.165.17.149:6892 udp
LT 194.165.17.150:6892 udp
LT 194.165.17.151:6892 udp
LT 194.165.17.152:6892 udp
LT 194.165.17.153:6892 udp
LT 194.165.17.154:6892 udp
LT 194.165.17.155:6892 udp
LT 194.165.17.156:6892 udp
LT 194.165.17.157:6892 udp
LT 194.165.17.158:6892 udp
LT 194.165.17.159:6892 udp
LT 194.165.17.160:6892 udp
LT 194.165.17.161:6892 udp
LT 194.165.17.162:6892 udp
LT 194.165.17.163:6892 udp
LT 194.165.17.164:6892 udp
LT 194.165.17.165:6892 udp
LT 194.165.17.166:6892 udp
LT 194.165.17.167:6892 udp
LT 194.165.17.168:6892 udp
LT 194.165.17.169:6892 udp
LT 194.165.17.170:6892 udp
LT 194.165.17.171:6892 udp
LT 194.165.17.172:6892 udp
LT 194.165.17.173:6892 udp
LT 194.165.17.174:6892 udp
LT 194.165.17.175:6892 udp
LT 194.165.17.176:6892 udp
LT 194.165.17.177:6892 udp
LT 194.165.17.178:6892 udp
LT 194.165.17.179:6892 udp
LT 194.165.17.180:6892 udp
LT 194.165.17.181:6892 udp
LT 194.165.17.182:6892 udp
LT 194.165.17.183:6892 udp
LT 194.165.17.184:6892 udp
LT 194.165.17.185:6892 udp
LT 194.165.17.186:6892 udp
LT 194.165.17.187:6892 udp
LT 194.165.17.188:6892 udp
LT 194.165.17.189:6892 udp
LT 194.165.17.190:6892 udp
LT 194.165.17.191:6892 udp
LT 194.165.17.192:6892 udp
LT 194.165.17.193:6892 udp
LT 194.165.17.194:6892 udp
LT 194.165.17.195:6892 udp
LT 194.165.17.196:6892 udp
LT 194.165.17.197:6892 udp
LT 194.165.17.198:6892 udp
LT 194.165.17.199:6892 udp
LT 194.165.17.200:6892 udp
LT 194.165.17.201:6892 udp
LT 194.165.17.202:6892 udp
LT 194.165.17.203:6892 udp
LT 194.165.17.204:6892 udp
LT 194.165.17.205:6892 udp
LT 194.165.17.206:6892 udp
LT 194.165.17.207:6892 udp
LT 194.165.17.208:6892 udp
LT 194.165.17.209:6892 udp
LT 194.165.17.210:6892 udp
LT 194.165.17.211:6892 udp
LT 194.165.17.212:6892 udp
LT 194.165.17.213:6892 udp
LT 194.165.17.214:6892 udp
LT 194.165.17.215:6892 udp
LT 194.165.17.216:6892 udp
LT 194.165.17.217:6892 udp
LT 194.165.17.218:6892 udp
LT 194.165.17.219:6892 udp
LT 194.165.17.220:6892 udp
LT 194.165.17.221:6892 udp
LT 194.165.17.222:6892 udp
LT 194.165.17.223:6892 udp
LT 194.165.17.224:6892 udp
LT 194.165.17.225:6892 udp
LT 194.165.17.226:6892 udp
LT 194.165.17.227:6892 udp
LT 194.165.17.228:6892 udp
LT 194.165.17.229:6892 udp
LT 194.165.17.230:6892 udp
LT 194.165.17.231:6892 udp
LT 194.165.17.232:6892 udp
LT 194.165.17.233:6892 udp
LT 194.165.17.234:6892 udp
LT 194.165.17.235:6892 udp
LT 194.165.17.236:6892 udp
LT 194.165.17.237:6892 udp
LT 194.165.17.238:6892 udp
LT 194.165.17.239:6892 udp
LT 194.165.17.240:6892 udp
LT 194.165.17.241:6892 udp
LT 194.165.17.242:6892 udp
LT 194.165.17.243:6892 udp
LT 194.165.17.244:6892 udp
LT 194.165.17.245:6892 udp
LT 194.165.17.246:6892 udp
LT 194.165.17.247:6892 udp
LT 194.165.17.248:6892 udp
LT 194.165.17.249:6892 udp
LT 194.165.17.250:6892 udp
LT 194.165.17.251:6892 udp
LT 194.165.17.252:6892 udp
LT 194.165.17.253:6892 udp
LT 194.165.17.254:6892 udp
LT 194.165.17.255:6892 udp
KR 1.11.32.0:6892 udp
KR 1.11.32.1:6892 udp
KR 1.11.32.2:6892 udp
KR 1.11.32.3:6892 udp
KR 1.11.32.4:6892 udp
KR 1.11.32.5:6892 udp
KR 1.11.32.6:6892 udp
KR 1.11.32.7:6892 udp
KR 1.11.32.8:6892 udp
KR 1.11.32.9:6892 udp
KR 1.11.32.10:6892 udp
KR 1.11.32.11:6892 udp
KR 1.11.32.12:6892 udp
KR 1.11.32.13:6892 udp
KR 1.11.32.14:6892 udp
KR 1.11.32.15:6892 udp
KR 1.11.32.16:6892 udp
KR 1.11.32.17:6892 udp
KR 1.11.32.18:6892 udp
KR 1.11.32.19:6892 udp
KR 1.11.32.20:6892 udp
KR 1.11.32.21:6892 udp
KR 1.11.32.22:6892 udp
KR 1.11.32.23:6892 udp
KR 1.11.32.24:6892 udp
KR 1.11.32.25:6892 udp
KR 1.11.32.26:6892 udp
KR 1.11.32.27:6892 udp
KR 1.11.32.28:6892 udp
KR 1.11.32.29:6892 udp
KR 1.11.32.30:6892 udp
KR 1.11.32.31:6892 udp
US 55.15.15.0:6892 udp
US 55.15.15.1:6892 udp
US 55.15.15.2:6892 udp
US 55.15.15.3:6892 udp
US 55.15.15.4:6892 udp
US 55.15.15.5:6892 udp
US 55.15.15.6:6892 udp
US 55.15.15.7:6892 udp
US 55.15.15.8:6892 udp
US 55.15.15.9:6892 udp
US 55.15.15.10:6892 udp
US 55.15.15.11:6892 udp
US 55.15.15.12:6892 udp
US 55.15.15.13:6892 udp
US 55.15.15.14:6892 udp
US 55.15.15.15:6892 udp
US 55.15.15.16:6892 udp
US 55.15.15.17:6892 udp
US 55.15.15.18:6892 udp
US 55.15.15.19:6892 udp
US 55.15.15.20:6892 udp
US 55.15.15.21:6892 udp
US 55.15.15.22:6892 udp
US 55.15.15.23:6892 udp
US 55.15.15.24:6892 udp
US 55.15.15.25:6892 udp
US 55.15.15.26:6892 udp
US 55.15.15.27:6892 udp
US 55.15.15.28:6892 udp
US 55.15.15.29:6892 udp
US 55.15.15.30:6892 udp
US 55.15.15.31:6892 udp
LT 194.165.16.0:6892 udp
LT 194.165.16.1:6892 udp
LT 194.165.16.2:6892 udp
LT 194.165.16.3:6892 udp
LT 194.165.16.4:6892 udp
LT 194.165.16.5:6892 udp
LT 194.165.16.6:6892 udp
LT 194.165.16.7:6892 udp
LT 194.165.16.8:6892 udp
LT 194.165.16.9:6892 udp
LT 194.165.16.10:6892 udp
LT 194.165.16.11:6892 udp
LT 194.165.16.12:6892 udp
LT 194.165.16.13:6892 udp
LT 194.165.16.14:6892 udp
LT 194.165.16.15:6892 udp
LT 194.165.16.16:6892 udp
LT 194.165.16.17:6892 udp
LT 194.165.16.18:6892 udp
LT 194.165.16.19:6892 udp
LT 194.165.16.20:6892 udp
LT 194.165.16.21:6892 udp
LT 194.165.16.22:6892 udp
LT 194.165.16.23:6892 udp
LT 194.165.16.24:6892 udp
LT 194.165.16.25:6892 udp
LT 194.165.16.26:6892 udp
LT 194.165.16.27:6892 udp
LT 194.165.16.28:6892 udp
LT 194.165.16.29:6892 udp
LT 194.165.16.30:6892 udp
LT 194.165.16.31:6892 udp
LT 194.165.16.32:6892 udp
LT 194.165.16.33:6892 udp
LT 194.165.16.34:6892 udp
LT 194.165.16.35:6892 udp
LT 194.165.16.36:6892 udp
LT 194.165.16.37:6892 udp
LT 194.165.16.38:6892 udp
LT 194.165.16.39:6892 udp
LT 194.165.16.40:6892 udp
LT 194.165.16.41:6892 udp
LT 194.165.16.42:6892 udp
LT 194.165.16.43:6892 udp
LT 194.165.16.44:6892 udp
LT 194.165.16.45:6892 udp
LT 194.165.16.46:6892 udp
LT 194.165.16.47:6892 udp
LT 194.165.16.48:6892 udp
LT 194.165.16.49:6892 udp
LT 194.165.16.50:6892 udp
LT 194.165.16.51:6892 udp
LT 194.165.16.52:6892 udp
LT 194.165.16.53:6892 udp
LT 194.165.16.54:6892 udp
LT 194.165.16.55:6892 udp
LT 194.165.16.56:6892 udp
LT 194.165.16.57:6892 udp
LT 194.165.16.58:6892 udp
LT 194.165.16.59:6892 udp
LT 194.165.16.60:6892 udp
LT 194.165.16.61:6892 udp
LT 194.165.16.62:6892 udp
LT 194.165.16.63:6892 udp
LT 194.165.16.64:6892 udp
LT 194.165.16.65:6892 udp
LT 194.165.16.66:6892 udp
LT 194.165.16.67:6892 udp
LT 194.165.16.68:6892 udp
LT 194.165.16.69:6892 udp
LT 194.165.16.70:6892 udp
LT 194.165.16.71:6892 udp
LT 194.165.16.72:6892 udp
LT 194.165.16.73:6892 udp
LT 194.165.16.74:6892 udp
LT 194.165.16.75:6892 udp
LT 194.165.16.76:6892 udp
LT 194.165.16.77:6892 udp
LT 194.165.16.78:6892 udp
LT 194.165.16.79:6892 udp
LT 194.165.16.80:6892 udp
LT 194.165.16.81:6892 udp
LT 194.165.16.82:6892 udp
LT 194.165.16.83:6892 udp
LT 194.165.16.84:6892 udp
LT 194.165.16.85:6892 udp
LT 194.165.16.86:6892 udp
LT 194.165.16.87:6892 udp
LT 194.165.16.88:6892 udp
LT 194.165.16.89:6892 udp
LT 194.165.16.90:6892 udp
LT 194.165.16.91:6892 udp
LT 194.165.16.92:6892 udp
LT 194.165.16.93:6892 udp
LT 194.165.16.94:6892 udp
LT 194.165.16.95:6892 udp
LT 194.165.16.96:6892 udp
LT 194.165.16.97:6892 udp
LT 194.165.16.98:6892 udp
LT 194.165.16.99:6892 udp
LT 194.165.16.100:6892 udp
LT 194.165.16.101:6892 udp
LT 194.165.16.102:6892 udp
LT 194.165.16.103:6892 udp
LT 194.165.16.104:6892 udp
LT 194.165.16.105:6892 udp
LT 194.165.16.106:6892 udp
LT 194.165.16.107:6892 udp
LT 194.165.16.108:6892 udp
LT 194.165.16.109:6892 udp
LT 194.165.16.110:6892 udp
LT 194.165.16.111:6892 udp
LT 194.165.16.112:6892 udp
LT 194.165.16.113:6892 udp
LT 194.165.16.114:6892 udp
LT 194.165.16.115:6892 udp
LT 194.165.16.116:6892 udp
LT 194.165.16.117:6892 udp
LT 194.165.16.118:6892 udp
LT 194.165.16.119:6892 udp
LT 194.165.16.120:6892 udp
LT 194.165.16.121:6892 udp
LT 194.165.16.122:6892 udp
LT 194.165.16.123:6892 udp
LT 194.165.16.124:6892 udp
LT 194.165.16.125:6892 udp
LT 194.165.16.126:6892 udp
LT 194.165.16.127:6892 udp
LT 194.165.16.128:6892 udp
LT 194.165.16.129:6892 udp
LT 194.165.16.130:6892 udp
LT 194.165.16.131:6892 udp
LT 194.165.16.132:6892 udp
LT 194.165.16.133:6892 udp
LT 194.165.16.134:6892 udp
LT 194.165.16.135:6892 udp
LT 194.165.16.136:6892 udp
LT 194.165.16.137:6892 udp
LT 194.165.16.138:6892 udp
LT 194.165.16.139:6892 udp
LT 194.165.16.140:6892 udp
LT 194.165.16.141:6892 udp
LT 194.165.16.142:6892 udp
LT 194.165.16.143:6892 udp
LT 194.165.16.144:6892 udp
LT 194.165.16.145:6892 udp
LT 194.165.16.146:6892 udp
LT 194.165.16.147:6892 udp
LT 194.165.16.148:6892 udp
LT 194.165.16.149:6892 udp
LT 194.165.16.150:6892 udp
LT 194.165.16.151:6892 udp
LT 194.165.16.152:6892 udp
LT 194.165.16.153:6892 udp
LT 194.165.16.154:6892 udp
LT 194.165.16.155:6892 udp
LT 194.165.16.156:6892 udp
LT 194.165.16.157:6892 udp
LT 194.165.16.158:6892 udp
LT 194.165.16.159:6892 udp
LT 194.165.16.160:6892 udp
LT 194.165.16.161:6892 udp
LT 194.165.16.162:6892 udp
LT 194.165.16.163:6892 udp
LT 194.165.16.164:6892 udp
LT 194.165.16.165:6892 udp
LT 194.165.16.166:6892 udp
LT 194.165.16.167:6892 udp
LT 194.165.16.168:6892 udp
LT 194.165.16.169:6892 udp
LT 194.165.16.170:6892 udp
LT 194.165.16.171:6892 udp
LT 194.165.16.172:6892 udp
LT 194.165.16.173:6892 udp
LT 194.165.16.174:6892 udp
LT 194.165.16.175:6892 udp
LT 194.165.16.176:6892 udp
LT 194.165.16.177:6892 udp
LT 194.165.16.178:6892 udp
LT 194.165.16.179:6892 udp
LT 194.165.16.180:6892 udp
LT 194.165.16.181:6892 udp
LT 194.165.16.182:6892 udp
LT 194.165.16.183:6892 udp
LT 194.165.16.184:6892 udp
LT 194.165.16.185:6892 udp
LT 194.165.16.186:6892 udp
LT 194.165.16.187:6892 udp
LT 194.165.16.188:6892 udp
LT 194.165.16.189:6892 udp
LT 194.165.16.190:6892 udp
LT 194.165.16.191:6892 udp
LT 194.165.16.192:6892 udp
LT 194.165.16.193:6892 udp
LT 194.165.16.194:6892 udp
LT 194.165.16.195:6892 udp
LT 194.165.16.196:6892 udp
LT 194.165.16.197:6892 udp
LT 194.165.16.198:6892 udp
LT 194.165.16.199:6892 udp
LT 194.165.16.200:6892 udp
LT 194.165.16.201:6892 udp
LT 194.165.16.202:6892 udp
LT 194.165.16.203:6892 udp
LT 194.165.16.204:6892 udp
LT 194.165.16.205:6892 udp
LT 194.165.16.206:6892 udp
LT 194.165.16.207:6892 udp
LT 194.165.16.208:6892 udp
LT 194.165.16.209:6892 udp
LT 194.165.16.210:6892 udp
LT 194.165.16.211:6892 udp
LT 194.165.16.212:6892 udp
LT 194.165.16.213:6892 udp
LT 194.165.16.214:6892 udp
LT 194.165.16.215:6892 udp
LT 194.165.16.216:6892 udp
LT 194.165.16.217:6892 udp
LT 194.165.16.218:6892 udp
LT 194.165.16.219:6892 udp
LT 194.165.16.220:6892 udp
LT 194.165.16.221:6892 udp
LT 194.165.16.222:6892 udp
LT 194.165.16.223:6892 udp
LT 194.165.16.224:6892 udp
LT 194.165.16.225:6892 udp
LT 194.165.16.226:6892 udp
LT 194.165.16.227:6892 udp
LT 194.165.16.228:6892 udp
LT 194.165.16.229:6892 udp
LT 194.165.16.230:6892 udp
LT 194.165.16.231:6892 udp
LT 194.165.16.232:6892 udp
LT 194.165.16.233:6892 udp
LT 194.165.16.234:6892 udp
LT 194.165.16.235:6892 udp
LT 194.165.16.236:6892 udp
LT 194.165.16.237:6892 udp
LT 194.165.16.238:6892 udp
LT 194.165.16.239:6892 udp
LT 194.165.16.240:6892 udp
LT 194.165.16.241:6892 udp
LT 194.165.16.242:6892 udp
LT 194.165.16.243:6892 udp
LT 194.165.16.244:6892 udp
LT 194.165.16.245:6892 udp
LT 194.165.16.246:6892 udp
LT 194.165.16.247:6892 udp
LT 194.165.16.248:6892 udp
LT 194.165.16.249:6892 udp
LT 194.165.16.250:6892 udp
LT 194.165.16.251:6892 udp
LT 194.165.16.252:6892 udp
LT 194.165.16.253:6892 udp
LT 194.165.16.254:6892 udp
LT 194.165.16.255:6892 udp
LT 194.165.17.0:6892 udp
LT 194.165.17.1:6892 udp
LT 194.165.17.2:6892 udp
LT 194.165.17.3:6892 udp
LT 194.165.17.4:6892 udp
LT 194.165.17.5:6892 udp
LT 194.165.17.6:6892 udp
LT 194.165.17.7:6892 udp
LT 194.165.17.8:6892 udp
LT 194.165.17.9:6892 udp
LT 194.165.17.10:6892 udp
LT 194.165.17.11:6892 udp
LT 194.165.17.12:6892 udp
LT 194.165.17.13:6892 udp
LT 194.165.17.14:6892 udp
LT 194.165.17.15:6892 udp
LT 194.165.17.16:6892 udp
LT 194.165.17.17:6892 udp
LT 194.165.17.18:6892 udp
LT 194.165.17.19:6892 udp
LT 194.165.17.20:6892 udp
LT 194.165.17.21:6892 udp
LT 194.165.17.22:6892 udp
LT 194.165.17.23:6892 udp
LT 194.165.17.24:6892 udp
LT 194.165.17.25:6892 udp
LT 194.165.17.26:6892 udp
LT 194.165.17.27:6892 udp
LT 194.165.17.28:6892 udp
LT 194.165.17.29:6892 udp
LT 194.165.17.30:6892 udp
LT 194.165.17.31:6892 udp
LT 194.165.17.32:6892 udp
LT 194.165.17.33:6892 udp
LT 194.165.17.34:6892 udp
LT 194.165.17.35:6892 udp
LT 194.165.17.36:6892 udp
LT 194.165.17.37:6892 udp
LT 194.165.17.38:6892 udp
LT 194.165.17.39:6892 udp
LT 194.165.17.40:6892 udp
LT 194.165.17.41:6892 udp
LT 194.165.17.42:6892 udp
LT 194.165.17.43:6892 udp
LT 194.165.17.44:6892 udp
LT 194.165.17.45:6892 udp
LT 194.165.17.46:6892 udp
LT 194.165.17.47:6892 udp
LT 194.165.17.48:6892 udp
LT 194.165.17.49:6892 udp
LT 194.165.17.50:6892 udp
LT 194.165.17.51:6892 udp
LT 194.165.17.52:6892 udp
LT 194.165.17.53:6892 udp
LT 194.165.17.54:6892 udp
LT 194.165.17.55:6892 udp
LT 194.165.17.56:6892 udp
LT 194.165.17.57:6892 udp
LT 194.165.17.58:6892 udp
LT 194.165.17.59:6892 udp
LT 194.165.17.60:6892 udp
LT 194.165.17.61:6892 udp
LT 194.165.17.62:6892 udp
LT 194.165.17.63:6892 udp
LT 194.165.17.64:6892 udp
LT 194.165.17.65:6892 udp
LT 194.165.17.66:6892 udp
LT 194.165.17.67:6892 udp
LT 194.165.17.68:6892 udp
LT 194.165.17.69:6892 udp
LT 194.165.17.70:6892 udp
LT 194.165.17.71:6892 udp
LT 194.165.17.72:6892 udp
LT 194.165.17.73:6892 udp
LT 194.165.17.74:6892 udp
LT 194.165.17.75:6892 udp
LT 194.165.17.76:6892 udp
LT 194.165.17.77:6892 udp
LT 194.165.17.78:6892 udp
LT 194.165.17.79:6892 udp
LT 194.165.17.80:6892 udp
LT 194.165.17.81:6892 udp
LT 194.165.17.82:6892 udp
LT 194.165.17.83:6892 udp
LT 194.165.17.84:6892 udp
LT 194.165.17.85:6892 udp
LT 194.165.17.86:6892 udp
LT 194.165.17.87:6892 udp
LT 194.165.17.88:6892 udp
LT 194.165.17.89:6892 udp
LT 194.165.17.90:6892 udp
LT 194.165.17.91:6892 udp
LT 194.165.17.92:6892 udp
LT 194.165.17.93:6892 udp
LT 194.165.17.94:6892 udp
LT 194.165.17.95:6892 udp
LT 194.165.17.96:6892 udp
LT 194.165.17.97:6892 udp
LT 194.165.17.98:6892 udp
LT 194.165.17.99:6892 udp
LT 194.165.17.100:6892 udp
LT 194.165.17.101:6892 udp
LT 194.165.17.102:6892 udp
LT 194.165.17.103:6892 udp
LT 194.165.17.104:6892 udp
LT 194.165.17.105:6892 udp
LT 194.165.17.106:6892 udp
LT 194.165.17.107:6892 udp
LT 194.165.17.108:6892 udp
LT 194.165.17.109:6892 udp
LT 194.165.17.110:6892 udp
LT 194.165.17.111:6892 udp
LT 194.165.17.112:6892 udp
LT 194.165.17.113:6892 udp
LT 194.165.17.114:6892 udp
LT 194.165.17.115:6892 udp
LT 194.165.17.116:6892 udp
LT 194.165.17.117:6892 udp
LT 194.165.17.118:6892 udp
LT 194.165.17.119:6892 udp
LT 194.165.17.120:6892 udp
LT 194.165.17.121:6892 udp
LT 194.165.17.122:6892 udp
LT 194.165.17.123:6892 udp
LT 194.165.17.124:6892 udp
LT 194.165.17.125:6892 udp
LT 194.165.17.126:6892 udp
LT 194.165.17.127:6892 udp
LT 194.165.17.128:6892 udp
LT 194.165.17.129:6892 udp
LT 194.165.17.130:6892 udp
LT 194.165.17.131:6892 udp
LT 194.165.17.132:6892 udp
LT 194.165.17.133:6892 udp
LT 194.165.17.134:6892 udp
LT 194.165.17.135:6892 udp
LT 194.165.17.136:6892 udp
LT 194.165.17.137:6892 udp
LT 194.165.17.138:6892 udp
LT 194.165.17.139:6892 udp
LT 194.165.17.140:6892 udp
LT 194.165.17.141:6892 udp
LT 194.165.17.142:6892 udp
LT 194.165.17.143:6892 udp
LT 194.165.17.144:6892 udp
LT 194.165.17.145:6892 udp
LT 194.165.17.146:6892 udp
LT 194.165.17.147:6892 udp
LT 194.165.17.148:6892 udp
LT 194.165.17.149:6892 udp
LT 194.165.17.150:6892 udp
LT 194.165.17.151:6892 udp
LT 194.165.17.152:6892 udp
LT 194.165.17.153:6892 udp
LT 194.165.17.154:6892 udp
LT 194.165.17.155:6892 udp
LT 194.165.17.156:6892 udp
LT 194.165.17.157:6892 udp
LT 194.165.17.158:6892 udp
LT 194.165.17.159:6892 udp
LT 194.165.17.160:6892 udp
LT 194.165.17.161:6892 udp
LT 194.165.17.162:6892 udp
LT 194.165.17.163:6892 udp
LT 194.165.17.164:6892 udp
LT 194.165.17.165:6892 udp
LT 194.165.17.166:6892 udp
LT 194.165.17.167:6892 udp
LT 194.165.17.168:6892 udp
LT 194.165.17.169:6892 udp
LT 194.165.17.170:6892 udp
LT 194.165.17.171:6892 udp
LT 194.165.17.172:6892 udp
LT 194.165.17.173:6892 udp
LT 194.165.17.174:6892 udp
LT 194.165.17.175:6892 udp
LT 194.165.17.176:6892 udp
LT 194.165.17.177:6892 udp
LT 194.165.17.178:6892 udp
LT 194.165.17.179:6892 udp
LT 194.165.17.180:6892 udp
LT 194.165.17.181:6892 udp
LT 194.165.17.182:6892 udp
LT 194.165.17.183:6892 udp
LT 194.165.17.184:6892 udp
LT 194.165.17.185:6892 udp
LT 194.165.17.186:6892 udp
LT 194.165.17.187:6892 udp
LT 194.165.17.188:6892 udp
LT 194.165.17.189:6892 udp
LT 194.165.17.190:6892 udp
LT 194.165.17.191:6892 udp
LT 194.165.17.192:6892 udp
LT 194.165.17.193:6892 udp
LT 194.165.17.194:6892 udp
LT 194.165.17.195:6892 udp
LT 194.165.17.196:6892 udp
LT 194.165.17.197:6892 udp
LT 194.165.17.198:6892 udp
LT 194.165.17.199:6892 udp
LT 194.165.17.200:6892 udp
LT 194.165.17.201:6892 udp
LT 194.165.17.202:6892 udp
LT 194.165.17.203:6892 udp
LT 194.165.17.204:6892 udp
LT 194.165.17.205:6892 udp
LT 194.165.17.206:6892 udp
LT 194.165.17.207:6892 udp
LT 194.165.17.208:6892 udp
LT 194.165.17.209:6892 udp
LT 194.165.17.210:6892 udp
LT 194.165.17.211:6892 udp
LT 194.165.17.212:6892 udp
LT 194.165.17.213:6892 udp
LT 194.165.17.214:6892 udp
LT 194.165.17.215:6892 udp
LT 194.165.17.216:6892 udp
LT 194.165.17.217:6892 udp
LT 194.165.17.218:6892 udp
LT 194.165.17.219:6892 udp
LT 194.165.17.220:6892 udp
LT 194.165.17.221:6892 udp
LT 194.165.17.222:6892 udp
LT 194.165.17.223:6892 udp
LT 194.165.17.224:6892 udp
LT 194.165.17.225:6892 udp
LT 194.165.17.226:6892 udp
LT 194.165.17.227:6892 udp
LT 194.165.17.228:6892 udp
LT 194.165.17.229:6892 udp
LT 194.165.17.230:6892 udp
LT 194.165.17.231:6892 udp
LT 194.165.17.232:6892 udp
LT 194.165.17.233:6892 udp
LT 194.165.17.234:6892 udp
LT 194.165.17.235:6892 udp
LT 194.165.17.236:6892 udp
LT 194.165.17.237:6892 udp
LT 194.165.17.238:6892 udp
LT 194.165.17.239:6892 udp
LT 194.165.17.240:6892 udp
LT 194.165.17.241:6892 udp
LT 194.165.17.242:6892 udp
LT 194.165.17.243:6892 udp
LT 194.165.17.244:6892 udp
LT 194.165.17.245:6892 udp
LT 194.165.17.246:6892 udp
LT 194.165.17.247:6892 udp
LT 194.165.17.248:6892 udp
LT 194.165.17.249:6892 udp
LT 194.165.17.250:6892 udp
LT 194.165.17.251:6892 udp
LT 194.165.17.252:6892 udp
LT 194.165.17.253:6892 udp
LT 194.165.17.254:6892 udp
LT 194.165.17.255:6892 udp
US 8.8.8.8:53 btc.blockr.io udp
US 8.8.8.8:53 api.blockcypher.com udp
US 172.67.17.223:80 api.blockcypher.com tcp
US 8.8.8.8:53 chain.so udp
US 104.22.64.108:443 chain.so tcp
US 8.8.8.8:53 c.pki.goog udp
GB 142.250.200.3:80 c.pki.goog tcp
US 8.8.8.8:53 crl.microsoft.com udp
GB 88.221.134.146:80 crl.microsoft.com tcp
US 8.8.8.8:53 www.microsoft.com udp
GB 95.100.245.144:80 www.microsoft.com tcp

Files

memory/1632-4-0x0000000000400000-0x0000000000431000-memory.dmp

memory/1632-2-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

memory/1632-0-0x0000000000400000-0x0000000000431000-memory.dmp

memory/1632-6-0x0000000000400000-0x0000000000431000-memory.dmp

memory/1632-7-0x0000000000400000-0x0000000000431000-memory.dmp

memory/1632-8-0x0000000000400000-0x0000000000431000-memory.dmp

memory/1632-13-0x0000000000400000-0x0000000000431000-memory.dmp

memory/1632-14-0x0000000000400000-0x0000000000431000-memory.dmp

memory/1632-16-0x0000000000400000-0x0000000000431000-memory.dmp

memory/1632-19-0x0000000000400000-0x0000000000431000-memory.dmp

memory/1632-18-0x0000000000400000-0x0000000000431000-memory.dmp

C:\Users\Admin\Pictures\_README_UFE1_.hta

MD5 3c6fb2dc6ac2d1ec5d96ebae792e0dd5
SHA1 17469a6c17cb126cba33beee5d8b6650893f341b
SHA256 77ce33f99110dfb06c2d9df59c27c4754508795cc40de2b3cf509f2f43ba567e
SHA512 0794b0672262dbc61d348cb451d9dcd33bdc99799b1a212503c129335fd5f33bf6bf91281daacddd45cfc9bbe02693fd9183ba21074b6d8b7e07ed623bc7dac5

memory/1632-223-0x0000000000400000-0x0000000000431000-memory.dmp

memory/1632-232-0x0000000000400000-0x0000000000431000-memory.dmp

memory/1632-251-0x0000000000400000-0x0000000000431000-memory.dmp

memory/1632-252-0x0000000000400000-0x0000000000431000-memory.dmp

memory/1632-261-0x0000000000400000-0x0000000000431000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-11-25 01:23

Reported

2024-11-25 01:25

Platform

win10v2004-20241007-en

Max time kernel

93s

Max time network

146s

Command Line

"C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe"

Signatures

Cerber

ransomware cerber

Cerber family

cerber

Contacts a large (589) amount of remote hosts

discovery

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A

Drops startup file

Description Indicator Process Target
File opened for modification \??\c:\users\admin\appdata\roaming\microsoft\word\startup\ C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\tmp5772.bmp" C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification \??\c:\windows\ C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\mshta.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A

System Network Configuration Discovery: Internet Connection Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Windows\system32\PING.EXE N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\taskkill.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\system32\PING.EXE N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1812 wrote to memory of 4564 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe
PID 1812 wrote to memory of 4564 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe
PID 1812 wrote to memory of 4564 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe
PID 1812 wrote to memory of 4564 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe
PID 1812 wrote to memory of 4564 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe
PID 4564 wrote to memory of 2188 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 4564 wrote to memory of 2188 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 4564 wrote to memory of 2188 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 4564 wrote to memory of 1964 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 4564 wrote to memory of 1964 N/A C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 1964 wrote to memory of 2124 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 1964 wrote to memory of 2124 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 1964 wrote to memory of 832 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE
PID 1964 wrote to memory of 832 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE

Processes

C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe"

C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe"

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x348 0x34c

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\AppData\Local\Temp\_README_GXGJZ7_.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im "9860a4d8b34096e1c1954527b8bb6301_JaffaCakes118.exe"

C:\Windows\system32\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
US 8.8.8.8:53 81.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 0.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 28.118.140.52.in-addr.arpa udp
US 8.8.8.8:53 209.205.72.20.in-addr.arpa udp
KR 1.11.32.0:6892 udp
KR 1.11.32.1:6892 udp
KR 1.11.32.2:6892 udp
KR 1.11.32.3:6892 udp
KR 1.11.32.4:6892 udp
KR 1.11.32.5:6892 udp
KR 1.11.32.6:6892 udp
KR 1.11.32.7:6892 udp
KR 1.11.32.8:6892 udp
KR 1.11.32.9:6892 udp
KR 1.11.32.10:6892 udp
KR 1.11.32.11:6892 udp
KR 1.11.32.12:6892 udp
KR 1.11.32.13:6892 udp
KR 1.11.32.14:6892 udp
KR 1.11.32.15:6892 udp
KR 1.11.32.16:6892 udp
KR 1.11.32.17:6892 udp
KR 1.11.32.18:6892 udp
KR 1.11.32.19:6892 udp
KR 1.11.32.20:6892 udp
KR 1.11.32.21:6892 udp
KR 1.11.32.22:6892 udp
KR 1.11.32.23:6892 udp
KR 1.11.32.24:6892 udp
KR 1.11.32.25:6892 udp
KR 1.11.32.26:6892 udp
KR 1.11.32.27:6892 udp
KR 1.11.32.28:6892 udp
KR 1.11.32.29:6892 udp
KR 1.11.32.30:6892 udp
KR 1.11.32.31:6892 udp
US 55.15.15.0:6892 udp
US 55.15.15.1:6892 udp
US 55.15.15.2:6892 udp
US 55.15.15.3:6892 udp
US 55.15.15.4:6892 udp
US 55.15.15.5:6892 udp
US 55.15.15.6:6892 udp
US 55.15.15.7:6892 udp
US 55.15.15.8:6892 udp
US 55.15.15.9:6892 udp
US 55.15.15.10:6892 udp
US 55.15.15.11:6892 udp
US 55.15.15.12:6892 udp
US 55.15.15.13:6892 udp
US 55.15.15.14:6892 udp
US 55.15.15.15:6892 udp
US 55.15.15.16:6892 udp
US 55.15.15.17:6892 udp
US 55.15.15.18:6892 udp
US 55.15.15.19:6892 udp
US 55.15.15.20:6892 udp
US 55.15.15.21:6892 udp
US 55.15.15.22:6892 udp
US 55.15.15.23:6892 udp
US 55.15.15.24:6892 udp
US 55.15.15.25:6892 udp
US 55.15.15.26:6892 udp
US 55.15.15.27:6892 udp
US 55.15.15.28:6892 udp
US 55.15.15.29:6892 udp
US 55.15.15.30:6892 udp
US 55.15.15.31:6892 udp
LT 194.165.16.0:6892 udp
LT 194.165.16.1:6892 udp
LT 194.165.16.2:6892 udp
LT 194.165.16.3:6892 udp
LT 194.165.16.4:6892 udp
LT 194.165.16.5:6892 udp
LT 194.165.16.6:6892 udp
LT 194.165.16.7:6892 udp
LT 194.165.16.8:6892 udp
LT 194.165.16.9:6892 udp
LT 194.165.16.10:6892 udp
LT 194.165.16.11:6892 udp
LT 194.165.16.12:6892 udp
LT 194.165.16.13:6892 udp
LT 194.165.16.14:6892 udp
LT 194.165.16.15:6892 udp
LT 194.165.16.16:6892 udp
LT 194.165.16.17:6892 udp
LT 194.165.16.18:6892 udp
LT 194.165.16.19:6892 udp
LT 194.165.16.20:6892 udp
LT 194.165.16.21:6892 udp
LT 194.165.16.22:6892 udp
LT 194.165.16.23:6892 udp
LT 194.165.16.24:6892 udp
LT 194.165.16.25:6892 udp
LT 194.165.16.26:6892 udp
LT 194.165.16.27:6892 udp
LT 194.165.16.28:6892 udp
LT 194.165.16.29:6892 udp
LT 194.165.16.30:6892 udp
LT 194.165.16.31:6892 udp
LT 194.165.16.32:6892 udp
LT 194.165.16.33:6892 udp
LT 194.165.16.34:6892 udp
LT 194.165.16.35:6892 udp
LT 194.165.16.36:6892 udp
LT 194.165.16.37:6892 udp
LT 194.165.16.38:6892 udp
LT 194.165.16.39:6892 udp
LT 194.165.16.40:6892 udp
LT 194.165.16.41:6892 udp
LT 194.165.16.42:6892 udp
LT 194.165.16.43:6892 udp
LT 194.165.16.44:6892 udp
LT 194.165.16.45:6892 udp
LT 194.165.16.46:6892 udp
LT 194.165.16.47:6892 udp
LT 194.165.16.48:6892 udp
LT 194.165.16.49:6892 udp
LT 194.165.16.50:6892 udp
LT 194.165.16.51:6892 udp
LT 194.165.16.52:6892 udp
LT 194.165.16.53:6892 udp
LT 194.165.16.54:6892 udp
LT 194.165.16.55:6892 udp
LT 194.165.16.56:6892 udp
LT 194.165.16.57:6892 udp
LT 194.165.16.58:6892 udp
LT 194.165.16.59:6892 udp
LT 194.165.16.60:6892 udp
LT 194.165.16.61:6892 udp
LT 194.165.16.62:6892 udp
LT 194.165.16.63:6892 udp
LT 194.165.16.64:6892 udp
LT 194.165.16.65:6892 udp
LT 194.165.16.66:6892 udp
LT 194.165.16.67:6892 udp
LT 194.165.16.68:6892 udp
LT 194.165.16.69:6892 udp
LT 194.165.16.70:6892 udp
LT 194.165.16.71:6892 udp
LT 194.165.16.72:6892 udp
LT 194.165.16.73:6892 udp
LT 194.165.16.74:6892 udp
LT 194.165.16.75:6892 udp
LT 194.165.16.76:6892 udp
LT 194.165.16.77:6892 udp
LT 194.165.16.78:6892 udp
LT 194.165.16.79:6892 udp
LT 194.165.16.80:6892 udp
LT 194.165.16.81:6892 udp
LT 194.165.16.82:6892 udp
LT 194.165.16.83:6892 udp
LT 194.165.16.84:6892 udp
LT 194.165.16.85:6892 udp
LT 194.165.16.86:6892 udp
LT 194.165.16.87:6892 udp
LT 194.165.16.88:6892 udp
LT 194.165.16.89:6892 udp
LT 194.165.16.90:6892 udp
LT 194.165.16.91:6892 udp
LT 194.165.16.92:6892 udp
LT 194.165.16.93:6892 udp
LT 194.165.16.94:6892 udp
LT 194.165.16.95:6892 udp
LT 194.165.16.96:6892 udp
LT 194.165.16.97:6892 udp
LT 194.165.16.98:6892 udp
LT 194.165.16.99:6892 udp
LT 194.165.16.100:6892 udp
LT 194.165.16.101:6892 udp
LT 194.165.16.102:6892 udp
LT 194.165.16.103:6892 udp
LT 194.165.16.104:6892 udp
LT 194.165.16.105:6892 udp
LT 194.165.16.106:6892 udp
LT 194.165.16.107:6892 udp
LT 194.165.16.108:6892 udp
LT 194.165.16.109:6892 udp
LT 194.165.16.110:6892 udp
LT 194.165.16.111:6892 udp
LT 194.165.16.112:6892 udp
LT 194.165.16.113:6892 udp
LT 194.165.16.114:6892 udp
LT 194.165.16.115:6892 udp
LT 194.165.16.116:6892 udp
LT 194.165.16.117:6892 udp
LT 194.165.16.118:6892 udp
LT 194.165.16.119:6892 udp
LT 194.165.16.120:6892 udp
LT 194.165.16.121:6892 udp
LT 194.165.16.122:6892 udp
LT 194.165.16.123:6892 udp
LT 194.165.16.124:6892 udp
LT 194.165.16.125:6892 udp
LT 194.165.16.126:6892 udp
LT 194.165.16.127:6892 udp
LT 194.165.16.128:6892 udp
LT 194.165.16.129:6892 udp
LT 194.165.16.130:6892 udp
LT 194.165.16.131:6892 udp
LT 194.165.16.132:6892 udp
LT 194.165.16.133:6892 udp
LT 194.165.16.134:6892 udp
LT 194.165.16.135:6892 udp
LT 194.165.16.136:6892 udp
LT 194.165.16.137:6892 udp
LT 194.165.16.138:6892 udp
LT 194.165.16.139:6892 udp
LT 194.165.16.140:6892 udp
LT 194.165.16.141:6892 udp
LT 194.165.16.142:6892 udp
LT 194.165.16.143:6892 udp
LT 194.165.16.144:6892 udp
LT 194.165.16.145:6892 udp
LT 194.165.16.146:6892 udp
LT 194.165.16.147:6892 udp
LT 194.165.16.148:6892 udp
LT 194.165.16.149:6892 udp
LT 194.165.16.150:6892 udp
LT 194.165.16.151:6892 udp
LT 194.165.16.152:6892 udp
LT 194.165.16.153:6892 udp
LT 194.165.16.154:6892 udp
LT 194.165.16.155:6892 udp
LT 194.165.16.156:6892 udp
LT 194.165.16.157:6892 udp
LT 194.165.16.158:6892 udp
LT 194.165.16.159:6892 udp
LT 194.165.16.160:6892 udp
LT 194.165.16.161:6892 udp
LT 194.165.16.162:6892 udp
LT 194.165.16.163:6892 udp
LT 194.165.16.164:6892 udp
LT 194.165.16.165:6892 udp
LT 194.165.16.166:6892 udp
LT 194.165.16.167:6892 udp
LT 194.165.16.168:6892 udp
LT 194.165.16.169:6892 udp
LT 194.165.16.170:6892 udp
LT 194.165.16.171:6892 udp
LT 194.165.16.172:6892 udp
LT 194.165.16.173:6892 udp
LT 194.165.16.174:6892 udp
LT 194.165.16.175:6892 udp
LT 194.165.16.176:6892 udp
LT 194.165.16.177:6892 udp
LT 194.165.16.178:6892 udp
LT 194.165.16.179:6892 udp
LT 194.165.16.180:6892 udp
LT 194.165.16.181:6892 udp
LT 194.165.16.182:6892 udp
LT 194.165.16.183:6892 udp
LT 194.165.16.184:6892 udp
LT 194.165.16.185:6892 udp
LT 194.165.16.186:6892 udp
LT 194.165.16.187:6892 udp
LT 194.165.16.188:6892 udp
LT 194.165.16.189:6892 udp
LT 194.165.16.190:6892 udp
LT 194.165.16.191:6892 udp
LT 194.165.16.192:6892 udp
LT 194.165.16.193:6892 udp
LT 194.165.16.194:6892 udp
LT 194.165.16.195:6892 udp
LT 194.165.16.196:6892 udp
LT 194.165.16.197:6892 udp
LT 194.165.16.198:6892 udp
LT 194.165.16.199:6892 udp
LT 194.165.16.200:6892 udp
LT 194.165.16.201:6892 udp
LT 194.165.16.202:6892 udp
LT 194.165.16.203:6892 udp
LT 194.165.16.204:6892 udp
LT 194.165.16.205:6892 udp
LT 194.165.16.206:6892 udp
LT 194.165.16.207:6892 udp
LT 194.165.16.208:6892 udp
LT 194.165.16.209:6892 udp
LT 194.165.16.210:6892 udp
LT 194.165.16.211:6892 udp
LT 194.165.16.212:6892 udp
LT 194.165.16.213:6892 udp
LT 194.165.16.214:6892 udp
LT 194.165.16.215:6892 udp
LT 194.165.16.216:6892 udp
LT 194.165.16.217:6892 udp
LT 194.165.16.218:6892 udp
LT 194.165.16.219:6892 udp
LT 194.165.16.220:6892 udp
LT 194.165.16.221:6892 udp
LT 194.165.16.222:6892 udp
LT 194.165.16.223:6892 udp
LT 194.165.16.224:6892 udp
LT 194.165.16.225:6892 udp
LT 194.165.16.226:6892 udp
LT 194.165.16.227:6892 udp
LT 194.165.16.228:6892 udp
LT 194.165.16.229:6892 udp
LT 194.165.16.230:6892 udp
LT 194.165.16.231:6892 udp
LT 194.165.16.232:6892 udp
LT 194.165.16.233:6892 udp
LT 194.165.16.234:6892 udp
LT 194.165.16.235:6892 udp
LT 194.165.16.236:6892 udp
LT 194.165.16.237:6892 udp
LT 194.165.16.238:6892 udp
LT 194.165.16.239:6892 udp
LT 194.165.16.240:6892 udp
LT 194.165.16.241:6892 udp
LT 194.165.16.242:6892 udp
LT 194.165.16.243:6892 udp
LT 194.165.16.244:6892 udp
LT 194.165.16.245:6892 udp
LT 194.165.16.246:6892 udp
LT 194.165.16.247:6892 udp
LT 194.165.16.248:6892 udp
LT 194.165.16.249:6892 udp
LT 194.165.16.250:6892 udp
LT 194.165.16.251:6892 udp
LT 194.165.16.252:6892 udp
LT 194.165.16.253:6892 udp
LT 194.165.16.254:6892 udp
US 8.8.8.8:53 0.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 1.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 2.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 3.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 4.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 5.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 6.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 8.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 7.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 10.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 9.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 11.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 12.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 13.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 15.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 14.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 16.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 17.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 19.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 18.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 20.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 21.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 22.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 23.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 24.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 25.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 27.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 26.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 28.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 30.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 29.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 0.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 31.32.11.1.in-addr.arpa udp
US 8.8.8.8:53 1.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 3.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 2.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 4.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 5.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 6.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 7.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 8.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 9.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 10.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 11.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 12.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 13.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 15.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 14.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 16.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 17.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 18.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 19.15.15.55.in-addr.arpa udp
LT 194.165.16.255:6892 udp
LT 194.165.17.0:6892 udp
LT 194.165.17.1:6892 udp
LT 194.165.17.2:6892 udp
LT 194.165.17.3:6892 udp
LT 194.165.17.4:6892 udp
US 8.8.8.8:53 20.15.15.55.in-addr.arpa udp
LT 194.165.17.5:6892 udp
LT 194.165.17.6:6892 udp
LT 194.165.17.7:6892 udp
LT 194.165.17.8:6892 udp
LT 194.165.17.9:6892 udp
LT 194.165.17.10:6892 udp
LT 194.165.17.11:6892 udp
LT 194.165.17.12:6892 udp
LT 194.165.17.13:6892 udp
LT 194.165.17.14:6892 udp
LT 194.165.17.15:6892 udp
LT 194.165.17.16:6892 udp
LT 194.165.17.17:6892 udp
LT 194.165.17.18:6892 udp
LT 194.165.17.19:6892 udp
LT 194.165.17.20:6892 udp
LT 194.165.17.21:6892 udp
LT 194.165.17.22:6892 udp
LT 194.165.17.23:6892 udp
LT 194.165.17.24:6892 udp
LT 194.165.17.25:6892 udp
LT 194.165.17.26:6892 udp
LT 194.165.17.27:6892 udp
LT 194.165.17.28:6892 udp
LT 194.165.17.29:6892 udp
LT 194.165.17.30:6892 udp
LT 194.165.17.31:6892 udp
LT 194.165.17.32:6892 udp
LT 194.165.17.33:6892 udp
LT 194.165.17.34:6892 udp
LT 194.165.17.35:6892 udp
LT 194.165.17.36:6892 udp
LT 194.165.17.37:6892 udp
LT 194.165.17.38:6892 udp
LT 194.165.17.39:6892 udp
LT 194.165.17.40:6892 udp
LT 194.165.17.41:6892 udp
LT 194.165.17.42:6892 udp
LT 194.165.17.43:6892 udp
LT 194.165.17.44:6892 udp
LT 194.165.17.45:6892 udp
LT 194.165.17.46:6892 udp
LT 194.165.17.47:6892 udp
LT 194.165.17.48:6892 udp
LT 194.165.17.49:6892 udp
LT 194.165.17.50:6892 udp
LT 194.165.17.51:6892 udp
LT 194.165.17.52:6892 udp
LT 194.165.17.53:6892 udp
LT 194.165.17.54:6892 udp
LT 194.165.17.55:6892 udp
LT 194.165.17.56:6892 udp
LT 194.165.17.57:6892 udp
LT 194.165.17.58:6892 udp
LT 194.165.17.59:6892 udp
LT 194.165.17.60:6892 udp
LT 194.165.17.61:6892 udp
LT 194.165.17.62:6892 udp
LT 194.165.17.63:6892 udp
LT 194.165.17.64:6892 udp
LT 194.165.17.65:6892 udp
LT 194.165.17.66:6892 udp
LT 194.165.17.67:6892 udp
LT 194.165.17.68:6892 udp
LT 194.165.17.69:6892 udp
LT 194.165.17.70:6892 udp
LT 194.165.17.71:6892 udp
LT 194.165.17.72:6892 udp
LT 194.165.17.73:6892 udp
LT 194.165.17.74:6892 udp
LT 194.165.17.75:6892 udp
LT 194.165.17.76:6892 udp
LT 194.165.17.77:6892 udp
LT 194.165.17.78:6892 udp
LT 194.165.17.79:6892 udp
LT 194.165.17.80:6892 udp
LT 194.165.17.81:6892 udp
LT 194.165.17.82:6892 udp
LT 194.165.17.83:6892 udp
LT 194.165.17.84:6892 udp
LT 194.165.17.85:6892 udp
LT 194.165.17.86:6892 udp
LT 194.165.17.87:6892 udp
LT 194.165.17.88:6892 udp
LT 194.165.17.89:6892 udp
LT 194.165.17.90:6892 udp
LT 194.165.17.91:6892 udp
LT 194.165.17.92:6892 udp
LT 194.165.17.93:6892 udp
LT 194.165.17.94:6892 udp
LT 194.165.17.95:6892 udp
LT 194.165.17.96:6892 udp
LT 194.165.17.97:6892 udp
LT 194.165.17.98:6892 udp
LT 194.165.17.99:6892 udp
LT 194.165.17.100:6892 udp
LT 194.165.17.101:6892 udp
LT 194.165.17.102:6892 udp
LT 194.165.17.103:6892 udp
LT 194.165.17.104:6892 udp
LT 194.165.17.105:6892 udp
LT 194.165.17.106:6892 udp
LT 194.165.17.107:6892 udp
LT 194.165.17.108:6892 udp
LT 194.165.17.109:6892 udp
LT 194.165.17.110:6892 udp
LT 194.165.17.111:6892 udp
LT 194.165.17.112:6892 udp
LT 194.165.17.113:6892 udp
LT 194.165.17.114:6892 udp
LT 194.165.17.115:6892 udp
LT 194.165.17.116:6892 udp
LT 194.165.17.117:6892 udp
LT 194.165.17.118:6892 udp
LT 194.165.17.119:6892 udp
LT 194.165.17.120:6892 udp
LT 194.165.17.121:6892 udp
LT 194.165.17.122:6892 udp
LT 194.165.17.123:6892 udp
LT 194.165.17.124:6892 udp
LT 194.165.17.125:6892 udp
LT 194.165.17.126:6892 udp
LT 194.165.17.127:6892 udp
LT 194.165.17.128:6892 udp
LT 194.165.17.129:6892 udp
LT 194.165.17.130:6892 udp
LT 194.165.17.131:6892 udp
LT 194.165.17.132:6892 udp
LT 194.165.17.133:6892 udp
LT 194.165.17.134:6892 udp
LT 194.165.17.135:6892 udp
LT 194.165.17.136:6892 udp
LT 194.165.17.137:6892 udp
LT 194.165.17.138:6892 udp
LT 194.165.17.139:6892 udp
LT 194.165.17.140:6892 udp
LT 194.165.17.141:6892 udp
LT 194.165.17.142:6892 udp
LT 194.165.17.143:6892 udp
LT 194.165.17.144:6892 udp
LT 194.165.17.145:6892 udp
LT 194.165.17.146:6892 udp
LT 194.165.17.147:6892 udp
LT 194.165.17.148:6892 udp
LT 194.165.17.149:6892 udp
LT 194.165.17.150:6892 udp
LT 194.165.17.151:6892 udp
LT 194.165.17.152:6892 udp
LT 194.165.17.153:6892 udp
LT 194.165.17.154:6892 udp
LT 194.165.17.155:6892 udp
LT 194.165.17.156:6892 udp
LT 194.165.17.157:6892 udp
LT 194.165.17.158:6892 udp
LT 194.165.17.159:6892 udp
LT 194.165.17.160:6892 udp
LT 194.165.17.161:6892 udp
LT 194.165.17.162:6892 udp
LT 194.165.17.163:6892 udp
LT 194.165.17.164:6892 udp
LT 194.165.17.165:6892 udp
LT 194.165.17.166:6892 udp
LT 194.165.17.167:6892 udp
LT 194.165.17.168:6892 udp
LT 194.165.17.169:6892 udp
LT 194.165.17.170:6892 udp
LT 194.165.17.171:6892 udp
LT 194.165.17.172:6892 udp
LT 194.165.17.173:6892 udp
LT 194.165.17.174:6892 udp
LT 194.165.17.175:6892 udp
LT 194.165.17.176:6892 udp
LT 194.165.17.177:6892 udp
LT 194.165.17.178:6892 udp
LT 194.165.17.179:6892 udp
LT 194.165.17.180:6892 udp
LT 194.165.17.181:6892 udp
LT 194.165.17.182:6892 udp
LT 194.165.17.183:6892 udp
LT 194.165.17.184:6892 udp
LT 194.165.17.185:6892 udp
LT 194.165.17.186:6892 udp
LT 194.165.17.187:6892 udp
LT 194.165.17.188:6892 udp
LT 194.165.17.189:6892 udp
LT 194.165.17.190:6892 udp
LT 194.165.17.191:6892 udp
LT 194.165.17.192:6892 udp
LT 194.165.17.193:6892 udp
LT 194.165.17.194:6892 udp
LT 194.165.17.195:6892 udp
LT 194.165.17.196:6892 udp
LT 194.165.17.197:6892 udp
LT 194.165.17.198:6892 udp
LT 194.165.17.199:6892 udp
LT 194.165.17.200:6892 udp
LT 194.165.17.201:6892 udp
LT 194.165.17.202:6892 udp
LT 194.165.17.203:6892 udp
LT 194.165.17.204:6892 udp
LT 194.165.17.205:6892 udp
LT 194.165.17.206:6892 udp
LT 194.165.17.207:6892 udp
LT 194.165.17.208:6892 udp
LT 194.165.17.209:6892 udp
LT 194.165.17.210:6892 udp
LT 194.165.17.211:6892 udp
LT 194.165.17.212:6892 udp
LT 194.165.17.213:6892 udp
LT 194.165.17.214:6892 udp
LT 194.165.17.215:6892 udp
LT 194.165.17.216:6892 udp
LT 194.165.17.217:6892 udp
LT 194.165.17.218:6892 udp
LT 194.165.17.219:6892 udp
LT 194.165.17.220:6892 udp
LT 194.165.17.221:6892 udp
LT 194.165.17.222:6892 udp
LT 194.165.17.223:6892 udp
LT 194.165.17.224:6892 udp
LT 194.165.17.225:6892 udp
LT 194.165.17.226:6892 udp
LT 194.165.17.227:6892 udp
LT 194.165.17.228:6892 udp
LT 194.165.17.229:6892 udp
LT 194.165.17.230:6892 udp
LT 194.165.17.231:6892 udp
LT 194.165.17.232:6892 udp
LT 194.165.17.233:6892 udp
LT 194.165.17.234:6892 udp
LT 194.165.17.235:6892 udp
LT 194.165.17.236:6892 udp
LT 194.165.17.237:6892 udp
LT 194.165.17.238:6892 udp
LT 194.165.17.239:6892 udp
LT 194.165.17.240:6892 udp
LT 194.165.17.241:6892 udp
LT 194.165.17.242:6892 udp
LT 194.165.17.243:6892 udp
LT 194.165.17.244:6892 udp
LT 194.165.17.245:6892 udp
LT 194.165.17.246:6892 udp
LT 194.165.17.247:6892 udp
LT 194.165.17.248:6892 udp
LT 194.165.17.249:6892 udp
LT 194.165.17.250:6892 udp
LT 194.165.17.251:6892 udp
LT 194.165.17.252:6892 udp
LT 194.165.17.253:6892 udp
LT 194.165.17.254:6892 udp
US 8.8.8.8:53 21.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 22.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 23.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 24.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 25.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 26.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 27.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 28.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 29.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 30.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 31.15.15.55.in-addr.arpa udp
US 8.8.8.8:53 0.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 2.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 1.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 3.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 4.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 5.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 6.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 7.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 8.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 9.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 10.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 11.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 12.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 13.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 14.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 15.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 16.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 17.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 18.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 19.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 20.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 21.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 22.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 23.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 24.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 25.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 26.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 28.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 27.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 30.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 29.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 32.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 31.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 34.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 33.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 36.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 35.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 37.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 38.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 40.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 39.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 41.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 42.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 43.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 44.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 45.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 46.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 48.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 47.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 49.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 50.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 51.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 52.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 53.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 54.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 55.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 56.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 57.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 58.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 59.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 60.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 61.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 62.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 63.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 64.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 65.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 66.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 67.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 68.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 69.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 70.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 71.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 72.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 73.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 74.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 75.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 76.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 77.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 78.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 79.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 81.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 80.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 83.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 82.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 84.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 85.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 86.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 88.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 87.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 89.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 90.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 91.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 92.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 93.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 94.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 95.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 96.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 97.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 98.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 99.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 100.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 101.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 102.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 103.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 105.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 104.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 106.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 107.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 108.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 109.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 110.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 111.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 112.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 113.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 114.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 115.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 116.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 117.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 118.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 119.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 120.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 121.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 123.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 124.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 125.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 126.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 127.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 128.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 129.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 130.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 131.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 132.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 133.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 134.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 135.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 136.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 138.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 137.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 139.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 140.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 141.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 142.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 143.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 144.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 145.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 146.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 147.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 148.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 149.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 150.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 151.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 152.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 153.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 154.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 156.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 155.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 157.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 158.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 159.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 160.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 161.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 162.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 163.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 164.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 165.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 166.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 167.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 168.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 169.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 170.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 171.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 172.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 173.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 174.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 175.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 176.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 177.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 178.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 179.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 180.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 181.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 182.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 183.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 184.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 185.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 186.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 187.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 188.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 189.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 190.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 191.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 192.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 193.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 194.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 195.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 196.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 197.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 198.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 199.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 200.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 201.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 202.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 203.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 204.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 205.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 206.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 207.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 208.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 209.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 210.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 211.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 212.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 213.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 214.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 215.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 216.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 217.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 218.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 219.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 220.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 222.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 223.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 224.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 225.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 226.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 227.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 228.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 229.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 230.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 232.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 231.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 233.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 234.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 235.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 236.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 237.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 238.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 240.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 239.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 241.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 242.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 244.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 243.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 246.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 245.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 247.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 248.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 249.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 250.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 251.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 252.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 254.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 255.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 0.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 1.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 2.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 3.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 4.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 5.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 6.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 7.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 8.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 9.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 10.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 11.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 12.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 13.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 15.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 16.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 14.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 17.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 18.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 20.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 21.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 22.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 23.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 24.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 25.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 26.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 27.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 28.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 29.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 30.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 31.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 32.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 33.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 34.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 35.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 36.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 38.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 37.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 39.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 40.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 41.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 42.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 43.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 44.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 45.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 47.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 46.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 48.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 49.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 50.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 51.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 52.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 53.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 54.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 55.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 57.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 56.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 58.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 59.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 60.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 61.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 62.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 63.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 64.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 65.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 66.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 67.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 68.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 69.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 70.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 71.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 72.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 73.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 74.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 75.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 76.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 77.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 78.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 79.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 80.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 81.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 82.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 83.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 84.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 85.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 86.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 87.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 89.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 90.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 91.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 92.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 93.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 94.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 95.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 96.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 97.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 98.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 99.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 100.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 101.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 102.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 103.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 104.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 105.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 106.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 107.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 108.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 109.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 111.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 110.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 112.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 113.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 114.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 116.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 115.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 117.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 119.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 118.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 120.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 121.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 122.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 123.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 124.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 125.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 127.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 128.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 129.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 130.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 131.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 132.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 134.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 135.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 136.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 137.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 138.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 140.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 139.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 141.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 142.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 143.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 144.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 145.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 146.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 147.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 148.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 149.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 150.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 151.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 152.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 153.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 154.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 156.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 155.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 157.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 158.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 159.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 160.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 161.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 162.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 163.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 164.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 165.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 166.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 167.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 168.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 169.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 170.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 171.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 172.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 173.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 174.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 175.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 176.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 177.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 179.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 178.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 180.17.165.194.in-addr.arpa udp
LT 194.165.17.255:6892 udp
US 8.8.8.8:53 181.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 182.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 183.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 184.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 185.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 186.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 187.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 188.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 189.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 190.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 191.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 192.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 193.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 194.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 195.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 196.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 197.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 198.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 199.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 200.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 201.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 202.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 203.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 204.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 205.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 206.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 207.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 208.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 209.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 210.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 211.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 213.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 214.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 215.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 216.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 217.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 218.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 219.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 220.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 221.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 222.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 223.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 225.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 226.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 227.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 228.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 229.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 230.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 231.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 232.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 233.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 234.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 235.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 236.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 238.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 239.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 240.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 241.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 242.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 244.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 245.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 246.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 247.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 248.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 249.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 250.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 251.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 252.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 253.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 254.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 255.17.165.194.in-addr.arpa udp
KR 1.11.32.0:6892 udp
KR 1.11.32.1:6892 udp
KR 1.11.32.2:6892 udp
KR 1.11.32.3:6892 udp
KR 1.11.32.4:6892 udp
KR 1.11.32.5:6892 udp
KR 1.11.32.6:6892 udp
KR 1.11.32.7:6892 udp
KR 1.11.32.8:6892 udp
KR 1.11.32.9:6892 udp
KR 1.11.32.10:6892 udp
KR 1.11.32.11:6892 udp
KR 1.11.32.12:6892 udp
KR 1.11.32.13:6892 udp
KR 1.11.32.14:6892 udp
KR 1.11.32.15:6892 udp
KR 1.11.32.16:6892 udp
KR 1.11.32.17:6892 udp
KR 1.11.32.18:6892 udp
KR 1.11.32.19:6892 udp
KR 1.11.32.20:6892 udp
KR 1.11.32.21:6892 udp
KR 1.11.32.22:6892 udp
KR 1.11.32.23:6892 udp
KR 1.11.32.24:6892 udp
KR 1.11.32.25:6892 udp
KR 1.11.32.26:6892 udp
KR 1.11.32.27:6892 udp
KR 1.11.32.28:6892 udp
KR 1.11.32.29:6892 udp
KR 1.11.32.30:6892 udp
KR 1.11.32.31:6892 udp
US 55.15.15.0:6892 udp
US 55.15.15.1:6892 udp
US 55.15.15.2:6892 udp
US 55.15.15.3:6892 udp
US 55.15.15.4:6892 udp
US 55.15.15.5:6892 udp
US 55.15.15.6:6892 udp
US 55.15.15.7:6892 udp
US 55.15.15.8:6892 udp
US 55.15.15.9:6892 udp
US 55.15.15.10:6892 udp
US 55.15.15.11:6892 udp
US 55.15.15.12:6892 udp
US 55.15.15.13:6892 udp
US 55.15.15.14:6892 udp
US 55.15.15.15:6892 udp
US 55.15.15.16:6892 udp
US 55.15.15.17:6892 udp
US 55.15.15.18:6892 udp
US 55.15.15.19:6892 udp
US 55.15.15.20:6892 udp
US 55.15.15.21:6892 udp
US 55.15.15.22:6892 udp
US 55.15.15.23:6892 udp
US 55.15.15.24:6892 udp
US 55.15.15.25:6892 udp
US 55.15.15.26:6892 udp
US 55.15.15.27:6892 udp
US 55.15.15.28:6892 udp
US 55.15.15.29:6892 udp
US 55.15.15.30:6892 udp
US 55.15.15.31:6892 udp
LT 194.165.16.0:6892 udp
LT 194.165.16.1:6892 udp
LT 194.165.16.2:6892 udp
LT 194.165.16.3:6892 udp
LT 194.165.16.4:6892 udp
LT 194.165.16.5:6892 udp
LT 194.165.16.6:6892 udp
LT 194.165.16.7:6892 udp
LT 194.165.16.8:6892 udp
LT 194.165.16.9:6892 udp
LT 194.165.16.10:6892 udp
LT 194.165.16.11:6892 udp
LT 194.165.16.12:6892 udp
LT 194.165.16.13:6892 udp
LT 194.165.16.14:6892 udp
LT 194.165.16.15:6892 udp
LT 194.165.16.16:6892 udp
LT 194.165.16.17:6892 udp
LT 194.165.16.18:6892 udp
LT 194.165.16.19:6892 udp
LT 194.165.16.20:6892 udp
LT 194.165.16.21:6892 udp
LT 194.165.16.22:6892 udp
LT 194.165.16.23:6892 udp
LT 194.165.16.24:6892 udp
LT 194.165.16.25:6892 udp
LT 194.165.16.26:6892 udp
LT 194.165.16.27:6892 udp
LT 194.165.16.28:6892 udp
LT 194.165.16.29:6892 udp
LT 194.165.16.30:6892 udp
LT 194.165.16.31:6892 udp
LT 194.165.16.32:6892 udp
LT 194.165.16.33:6892 udp
LT 194.165.16.34:6892 udp
LT 194.165.16.35:6892 udp
LT 194.165.16.36:6892 udp
LT 194.165.16.37:6892 udp
LT 194.165.16.38:6892 udp
LT 194.165.16.39:6892 udp
LT 194.165.16.40:6892 udp
LT 194.165.16.41:6892 udp
LT 194.165.16.42:6892 udp
LT 194.165.16.43:6892 udp
LT 194.165.16.44:6892 udp
LT 194.165.16.45:6892 udp
LT 194.165.16.46:6892 udp
LT 194.165.16.47:6892 udp
LT 194.165.16.48:6892 udp
LT 194.165.16.49:6892 udp
LT 194.165.16.50:6892 udp
LT 194.165.16.51:6892 udp
LT 194.165.16.52:6892 udp
LT 194.165.16.53:6892 udp
LT 194.165.16.54:6892 udp
LT 194.165.16.55:6892 udp
LT 194.165.16.56:6892 udp
LT 194.165.16.57:6892 udp
LT 194.165.16.58:6892 udp
LT 194.165.16.59:6892 udp
LT 194.165.16.60:6892 udp
LT 194.165.16.61:6892 udp
LT 194.165.16.62:6892 udp
LT 194.165.16.63:6892 udp
LT 194.165.16.64:6892 udp
LT 194.165.16.65:6892 udp
LT 194.165.16.66:6892 udp
LT 194.165.16.67:6892 udp
LT 194.165.16.68:6892 udp
LT 194.165.16.69:6892 udp
LT 194.165.16.70:6892 udp
LT 194.165.16.71:6892 udp
LT 194.165.16.72:6892 udp
LT 194.165.16.73:6892 udp
LT 194.165.16.74:6892 udp
LT 194.165.16.75:6892 udp
LT 194.165.16.76:6892 udp
LT 194.165.16.77:6892 udp
LT 194.165.16.78:6892 udp
LT 194.165.16.79:6892 udp
LT 194.165.16.80:6892 udp
LT 194.165.16.81:6892 udp
LT 194.165.16.82:6892 udp
LT 194.165.16.83:6892 udp
LT 194.165.16.84:6892 udp
LT 194.165.16.85:6892 udp
LT 194.165.16.86:6892 udp
LT 194.165.16.87:6892 udp
LT 194.165.16.88:6892 udp
LT 194.165.16.89:6892 udp
LT 194.165.16.90:6892 udp
LT 194.165.16.91:6892 udp
LT 194.165.16.92:6892 udp
LT 194.165.16.93:6892 udp
LT 194.165.16.94:6892 udp
LT 194.165.16.95:6892 udp
LT 194.165.16.96:6892 udp
LT 194.165.16.97:6892 udp
LT 194.165.16.98:6892 udp
LT 194.165.16.99:6892 udp
LT 194.165.16.100:6892 udp
LT 194.165.16.101:6892 udp
LT 194.165.16.102:6892 udp
LT 194.165.16.103:6892 udp
LT 194.165.16.104:6892 udp
LT 194.165.16.105:6892 udp
LT 194.165.16.106:6892 udp
LT 194.165.16.107:6892 udp
LT 194.165.16.108:6892 udp
LT 194.165.16.109:6892 udp
LT 194.165.16.110:6892 udp
LT 194.165.16.111:6892 udp
LT 194.165.16.112:6892 udp
LT 194.165.16.113:6892 udp
LT 194.165.16.114:6892 udp
LT 194.165.16.115:6892 udp
LT 194.165.16.116:6892 udp
LT 194.165.16.117:6892 udp
LT 194.165.16.118:6892 udp
LT 194.165.16.119:6892 udp
LT 194.165.16.120:6892 udp
LT 194.165.16.121:6892 udp
LT 194.165.16.122:6892 udp
LT 194.165.16.123:6892 udp
LT 194.165.16.124:6892 udp
LT 194.165.16.125:6892 udp
LT 194.165.16.126:6892 udp
LT 194.165.16.127:6892 udp
LT 194.165.16.128:6892 udp
LT 194.165.16.129:6892 udp
LT 194.165.16.130:6892 udp
LT 194.165.16.131:6892 udp
LT 194.165.16.132:6892 udp
LT 194.165.16.133:6892 udp
LT 194.165.16.134:6892 udp
LT 194.165.16.135:6892 udp
LT 194.165.16.136:6892 udp
LT 194.165.16.137:6892 udp
LT 194.165.16.138:6892 udp
LT 194.165.16.139:6892 udp
LT 194.165.16.140:6892 udp
LT 194.165.16.141:6892 udp
LT 194.165.16.142:6892 udp
LT 194.165.16.143:6892 udp
LT 194.165.16.144:6892 udp
LT 194.165.16.145:6892 udp
LT 194.165.16.146:6892 udp
LT 194.165.16.147:6892 udp
LT 194.165.16.148:6892 udp
LT 194.165.16.149:6892 udp
LT 194.165.16.150:6892 udp
LT 194.165.16.151:6892 udp
LT 194.165.16.152:6892 udp
LT 194.165.16.153:6892 udp
LT 194.165.16.154:6892 udp
LT 194.165.16.155:6892 udp
LT 194.165.16.156:6892 udp
LT 194.165.16.157:6892 udp
LT 194.165.16.158:6892 udp
LT 194.165.16.159:6892 udp
LT 194.165.16.160:6892 udp
LT 194.165.16.161:6892 udp
LT 194.165.16.162:6892 udp
LT 194.165.16.163:6892 udp
LT 194.165.16.164:6892 udp
LT 194.165.16.165:6892 udp
LT 194.165.16.166:6892 udp
LT 194.165.16.167:6892 udp
LT 194.165.16.168:6892 udp
LT 194.165.16.169:6892 udp
LT 194.165.16.170:6892 udp
LT 194.165.16.171:6892 udp
LT 194.165.16.172:6892 udp
LT 194.165.16.173:6892 udp
LT 194.165.16.174:6892 udp
LT 194.165.16.175:6892 udp
LT 194.165.16.176:6892 udp
LT 194.165.16.177:6892 udp
LT 194.165.16.178:6892 udp
LT 194.165.16.179:6892 udp
LT 194.165.16.180:6892 udp
LT 194.165.16.181:6892 udp
LT 194.165.16.182:6892 udp
LT 194.165.16.183:6892 udp
LT 194.165.16.184:6892 udp
LT 194.165.16.185:6892 udp
LT 194.165.16.186:6892 udp
LT 194.165.16.187:6892 udp
LT 194.165.16.188:6892 udp
LT 194.165.16.189:6892 udp
LT 194.165.16.190:6892 udp
LT 194.165.16.191:6892 udp
LT 194.165.16.192:6892 udp
LT 194.165.16.193:6892 udp
LT 194.165.16.194:6892 udp
LT 194.165.16.195:6892 udp
LT 194.165.16.196:6892 udp
LT 194.165.16.197:6892 udp
LT 194.165.16.198:6892 udp
LT 194.165.16.199:6892 udp
LT 194.165.16.200:6892 udp
LT 194.165.16.201:6892 udp
LT 194.165.16.202:6892 udp
LT 194.165.16.203:6892 udp
LT 194.165.16.204:6892 udp
LT 194.165.16.205:6892 udp
LT 194.165.16.206:6892 udp
LT 194.165.16.207:6892 udp
LT 194.165.16.208:6892 udp
LT 194.165.16.209:6892 udp
LT 194.165.16.210:6892 udp
LT 194.165.16.211:6892 udp
LT 194.165.16.212:6892 udp
LT 194.165.16.213:6892 udp
LT 194.165.16.214:6892 udp
LT 194.165.16.215:6892 udp
LT 194.165.16.216:6892 udp
LT 194.165.16.217:6892 udp
LT 194.165.16.218:6892 udp
LT 194.165.16.219:6892 udp
LT 194.165.16.220:6892 udp
LT 194.165.16.221:6892 udp
LT 194.165.16.222:6892 udp
LT 194.165.16.223:6892 udp
LT 194.165.16.224:6892 udp
LT 194.165.16.225:6892 udp
LT 194.165.16.226:6892 udp
LT 194.165.16.227:6892 udp
LT 194.165.16.228:6892 udp
LT 194.165.16.229:6892 udp
LT 194.165.16.230:6892 udp
LT 194.165.16.231:6892 udp
LT 194.165.16.232:6892 udp
LT 194.165.16.233:6892 udp
LT 194.165.16.234:6892 udp
LT 194.165.16.235:6892 udp
LT 194.165.16.236:6892 udp
LT 194.165.16.237:6892 udp
LT 194.165.16.238:6892 udp
LT 194.165.16.239:6892 udp
LT 194.165.16.240:6892 udp
LT 194.165.16.241:6892 udp
LT 194.165.16.242:6892 udp
LT 194.165.16.243:6892 udp
LT 194.165.16.244:6892 udp
LT 194.165.16.245:6892 udp
LT 194.165.16.246:6892 udp
LT 194.165.16.247:6892 udp
LT 194.165.16.248:6892 udp
LT 194.165.16.249:6892 udp
LT 194.165.16.250:6892 udp
LT 194.165.16.251:6892 udp
LT 194.165.16.252:6892 udp
LT 194.165.16.253:6892 udp
LT 194.165.16.254:6892 udp
LT 194.165.16.255:6892 udp
LT 194.165.17.0:6892 udp
LT 194.165.17.1:6892 udp
LT 194.165.17.2:6892 udp
LT 194.165.17.3:6892 udp
LT 194.165.17.4:6892 udp
LT 194.165.17.5:6892 udp
LT 194.165.17.6:6892 udp
LT 194.165.17.7:6892 udp
LT 194.165.17.8:6892 udp
LT 194.165.17.9:6892 udp
LT 194.165.17.10:6892 udp
LT 194.165.17.11:6892 udp
LT 194.165.17.12:6892 udp
LT 194.165.17.13:6892 udp
LT 194.165.17.14:6892 udp
LT 194.165.17.15:6892 udp
LT 194.165.17.16:6892 udp
LT 194.165.17.17:6892 udp
LT 194.165.17.18:6892 udp
LT 194.165.17.19:6892 udp
LT 194.165.17.20:6892 udp
LT 194.165.17.21:6892 udp
LT 194.165.17.22:6892 udp
LT 194.165.17.23:6892 udp
LT 194.165.17.24:6892 udp
LT 194.165.17.25:6892 udp
LT 194.165.17.26:6892 udp
LT 194.165.17.27:6892 udp
LT 194.165.17.28:6892 udp
LT 194.165.17.29:6892 udp
LT 194.165.17.30:6892 udp
LT 194.165.17.31:6892 udp
LT 194.165.17.32:6892 udp
LT 194.165.17.33:6892 udp
LT 194.165.17.34:6892 udp
LT 194.165.17.35:6892 udp
LT 194.165.17.36:6892 udp
LT 194.165.17.37:6892 udp
LT 194.165.17.38:6892 udp
LT 194.165.17.39:6892 udp
LT 194.165.17.40:6892 udp
LT 194.165.17.41:6892 udp
LT 194.165.17.42:6892 udp
LT 194.165.17.43:6892 udp
LT 194.165.17.44:6892 udp
LT 194.165.17.45:6892 udp
LT 194.165.17.46:6892 udp
LT 194.165.17.47:6892 udp
LT 194.165.17.48:6892 udp
LT 194.165.17.49:6892 udp
LT 194.165.17.50:6892 udp
LT 194.165.17.51:6892 udp
LT 194.165.17.52:6892 udp
LT 194.165.17.53:6892 udp
LT 194.165.17.54:6892 udp
LT 194.165.17.55:6892 udp
LT 194.165.17.56:6892 udp
LT 194.165.17.57:6892 udp
LT 194.165.17.58:6892 udp
LT 194.165.17.59:6892 udp
LT 194.165.17.60:6892 udp
LT 194.165.17.61:6892 udp
LT 194.165.17.62:6892 udp
LT 194.165.17.63:6892 udp
LT 194.165.17.64:6892 udp
LT 194.165.17.65:6892 udp
LT 194.165.17.66:6892 udp
LT 194.165.17.67:6892 udp
LT 194.165.17.68:6892 udp
LT 194.165.17.69:6892 udp
LT 194.165.17.70:6892 udp
LT 194.165.17.71:6892 udp
LT 194.165.17.72:6892 udp
LT 194.165.17.73:6892 udp
LT 194.165.17.74:6892 udp
LT 194.165.17.75:6892 udp
LT 194.165.17.76:6892 udp
LT 194.165.17.77:6892 udp
LT 194.165.17.78:6892 udp
LT 194.165.17.79:6892 udp
LT 194.165.17.80:6892 udp
LT 194.165.17.81:6892 udp
LT 194.165.17.82:6892 udp
LT 194.165.17.83:6892 udp
LT 194.165.17.84:6892 udp
LT 194.165.17.85:6892 udp
LT 194.165.17.86:6892 udp
LT 194.165.17.87:6892 udp
LT 194.165.17.88:6892 udp
LT 194.165.17.89:6892 udp
LT 194.165.17.90:6892 udp
LT 194.165.17.91:6892 udp
LT 194.165.17.92:6892 udp
LT 194.165.17.93:6892 udp
LT 194.165.17.94:6892 udp
LT 194.165.17.95:6892 udp
LT 194.165.17.96:6892 udp
LT 194.165.17.97:6892 udp
LT 194.165.17.98:6892 udp
LT 194.165.17.99:6892 udp
LT 194.165.17.100:6892 udp
LT 194.165.17.101:6892 udp
LT 194.165.17.102:6892 udp
LT 194.165.17.103:6892 udp
LT 194.165.17.104:6892 udp
LT 194.165.17.105:6892 udp
LT 194.165.17.106:6892 udp
LT 194.165.17.107:6892 udp
LT 194.165.17.108:6892 udp
LT 194.165.17.109:6892 udp
LT 194.165.17.110:6892 udp
LT 194.165.17.111:6892 udp
LT 194.165.17.112:6892 udp
LT 194.165.17.113:6892 udp
LT 194.165.17.114:6892 udp
LT 194.165.17.115:6892 udp
LT 194.165.17.116:6892 udp
LT 194.165.17.117:6892 udp
LT 194.165.17.118:6892 udp
LT 194.165.17.119:6892 udp
LT 194.165.17.120:6892 udp
LT 194.165.17.121:6892 udp
LT 194.165.17.122:6892 udp
LT 194.165.17.123:6892 udp
LT 194.165.17.124:6892 udp
LT 194.165.17.125:6892 udp
LT 194.165.17.126:6892 udp
LT 194.165.17.127:6892 udp
LT 194.165.17.128:6892 udp
LT 194.165.17.129:6892 udp
LT 194.165.17.130:6892 udp
LT 194.165.17.131:6892 udp
LT 194.165.17.132:6892 udp
LT 194.165.17.133:6892 udp
LT 194.165.17.134:6892 udp
LT 194.165.17.135:6892 udp
LT 194.165.17.136:6892 udp
LT 194.165.17.137:6892 udp
LT 194.165.17.138:6892 udp
LT 194.165.17.139:6892 udp
LT 194.165.17.140:6892 udp
LT 194.165.17.141:6892 udp
LT 194.165.17.142:6892 udp
LT 194.165.17.143:6892 udp
LT 194.165.17.144:6892 udp
LT 194.165.17.145:6892 udp
LT 194.165.17.146:6892 udp
LT 194.165.17.147:6892 udp
LT 194.165.17.148:6892 udp
LT 194.165.17.149:6892 udp
LT 194.165.17.150:6892 udp
LT 194.165.17.151:6892 udp
LT 194.165.17.152:6892 udp
LT 194.165.17.153:6892 udp
LT 194.165.17.154:6892 udp
LT 194.165.17.155:6892 udp
LT 194.165.17.156:6892 udp
LT 194.165.17.157:6892 udp
LT 194.165.17.158:6892 udp
LT 194.165.17.159:6892 udp
LT 194.165.17.160:6892 udp
LT 194.165.17.161:6892 udp
LT 194.165.17.162:6892 udp
LT 194.165.17.163:6892 udp
LT 194.165.17.164:6892 udp
LT 194.165.17.165:6892 udp
LT 194.165.17.166:6892 udp
LT 194.165.17.167:6892 udp
LT 194.165.17.168:6892 udp
LT 194.165.17.169:6892 udp
LT 194.165.17.170:6892 udp
LT 194.165.17.171:6892 udp
LT 194.165.17.172:6892 udp
LT 194.165.17.173:6892 udp
LT 194.165.17.174:6892 udp
LT 194.165.17.175:6892 udp
LT 194.165.17.176:6892 udp
LT 194.165.17.177:6892 udp
LT 194.165.17.178:6892 udp
LT 194.165.17.179:6892 udp
LT 194.165.17.180:6892 udp
LT 194.165.17.181:6892 udp
LT 194.165.17.182:6892 udp
LT 194.165.17.183:6892 udp
LT 194.165.17.184:6892 udp
LT 194.165.17.185:6892 udp
LT 194.165.17.186:6892 udp
LT 194.165.17.187:6892 udp
LT 194.165.17.188:6892 udp
LT 194.165.17.189:6892 udp
LT 194.165.17.190:6892 udp
LT 194.165.17.191:6892 udp
LT 194.165.17.192:6892 udp
LT 194.165.17.193:6892 udp
LT 194.165.17.194:6892 udp
LT 194.165.17.195:6892 udp
LT 194.165.17.196:6892 udp
LT 194.165.17.197:6892 udp
LT 194.165.17.198:6892 udp
LT 194.165.17.199:6892 udp
LT 194.165.17.200:6892 udp
LT 194.165.17.201:6892 udp
LT 194.165.17.202:6892 udp
LT 194.165.17.203:6892 udp
LT 194.165.17.204:6892 udp
LT 194.165.17.205:6892 udp
LT 194.165.17.206:6892 udp
LT 194.165.17.207:6892 udp
LT 194.165.17.208:6892 udp
LT 194.165.17.209:6892 udp
LT 194.165.17.210:6892 udp
LT 194.165.17.211:6892 udp
LT 194.165.17.212:6892 udp
LT 194.165.17.213:6892 udp
LT 194.165.17.214:6892 udp
LT 194.165.17.215:6892 udp
LT 194.165.17.216:6892 udp
LT 194.165.17.217:6892 udp
LT 194.165.17.218:6892 udp
LT 194.165.17.219:6892 udp
LT 194.165.17.220:6892 udp
LT 194.165.17.221:6892 udp
LT 194.165.17.222:6892 udp
LT 194.165.17.223:6892 udp
LT 194.165.17.224:6892 udp
LT 194.165.17.225:6892 udp
LT 194.165.17.226:6892 udp
LT 194.165.17.227:6892 udp
LT 194.165.17.228:6892 udp
LT 194.165.17.229:6892 udp
LT 194.165.17.230:6892 udp
LT 194.165.17.231:6892 udp
LT 194.165.17.232:6892 udp
LT 194.165.17.233:6892 udp
LT 194.165.17.234:6892 udp
LT 194.165.17.235:6892 udp
LT 194.165.17.236:6892 udp
LT 194.165.17.237:6892 udp
LT 194.165.17.238:6892 udp
LT 194.165.17.239:6892 udp
LT 194.165.17.240:6892 udp
LT 194.165.17.241:6892 udp
LT 194.165.17.242:6892 udp
LT 194.165.17.243:6892 udp
LT 194.165.17.244:6892 udp
LT 194.165.17.245:6892 udp
LT 194.165.17.246:6892 udp
LT 194.165.17.247:6892 udp
LT 194.165.17.248:6892 udp
LT 194.165.17.249:6892 udp
LT 194.165.17.250:6892 udp
LT 194.165.17.251:6892 udp
LT 194.165.17.252:6892 udp
LT 194.165.17.253:6892 udp
LT 194.165.17.254:6892 udp
LT 194.165.17.255:6892 udp
US 8.8.8.8:53 53.210.109.20.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 82.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 72.209.201.84.in-addr.arpa udp
US 8.8.8.8:53 21.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 107.209.201.84.in-addr.arpa udp

Files

memory/4564-0-0x0000000000400000-0x0000000000431000-memory.dmp

memory/4564-2-0x0000000000400000-0x0000000000431000-memory.dmp

memory/4564-3-0x0000000000400000-0x0000000000431000-memory.dmp

memory/4564-4-0x0000000000400000-0x0000000000431000-memory.dmp

memory/4564-9-0x0000000000400000-0x0000000000431000-memory.dmp

memory/4564-10-0x0000000000400000-0x0000000000431000-memory.dmp

memory/4564-11-0x0000000000400000-0x0000000000431000-memory.dmp

memory/4564-13-0x0000000000400000-0x0000000000431000-memory.dmp

memory/4564-16-0x0000000000400000-0x0000000000431000-memory.dmp

memory/4564-15-0x0000000000400000-0x0000000000431000-memory.dmp

C:\Users\Admin\Music\_README_DSTG1MJ_.hta

MD5 af58a7731a04351dae09251d5eacf783
SHA1 5e955afe0243dcbe81182378a9605b5e998d8bc5
SHA256 5fbdb95d54b89b5e6f1b569771dd74ad58088cb7afd774d2ba0787180b75cfe2
SHA512 4693b21656ee7220383af2711a788bc0bc99a552882e3ab6f4b55988caeddf506c967c2566e3ee884b730831bc2f228bddff317481fbd6a367f95b1ae8a3f16c

memory/4564-540-0x0000000000400000-0x0000000000431000-memory.dmp

memory/4564-557-0x0000000000400000-0x0000000000431000-memory.dmp

memory/4564-563-0x0000000000400000-0x0000000000431000-memory.dmp

memory/4564-568-0x0000000000400000-0x0000000000431000-memory.dmp