Malware Analysis Report

2025-01-02 14:54

Sample ID 241125-yefvmazjdk
Target 9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118
SHA256 7e40e603926f665e241174a5f137e67904d0608c507d0d7c4c4bd75af15b1722
Tags
discovery cerber defense_evasion execution impact ransomware spyware stealer
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral5

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral6

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

7e40e603926f665e241174a5f137e67904d0608c507d0d7c4c4bd75af15b1722

Threat Level: Known bad

The file 9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118 was found to be: Known bad.

Malicious Activity Summary

discovery cerber defense_evasion execution impact ransomware spyware stealer

Cerber

Cerber family

Deletes shadow copies

Contacts a large (520) amount of remote hosts

Contacts a large (523) amount of remote hosts

Blocklisted process makes network request

Deletes itself

Reads user/profile data of web browsers

Loads dropped DLL

Checks computer location settings

Suspicious use of SetThreadContext

Sets desktop wallpaper using registry

Drops file in Program Files directory

Unsigned PE

System Network Configuration Discovery: Internet Connection Discovery

Program crash

System Location Discovery: System Language Discovery

Enumerates physical storage devices

NSIS installer

Modifies registry class

Suspicious use of AdjustPrivilegeToken

Runs ping.exe

Suspicious behavior: EnumeratesProcesses

Kills process with taskkill

Suspicious use of SetWindowsHookEx

Modifies Internet Explorer settings

Uses Volume Shadow Copy service COM API

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-25 19:41

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

NSIS installer

installer
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Analysis: behavioral4

Detonation Overview

Submitted

2024-11-25 19:41

Reported

2024-11-25 19:44

Platform

win10v2004-20241007-en

Max time kernel

95s

Max time network

135s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

Signatures

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\rundll32.exe

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3480 wrote to memory of 3700 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3480 wrote to memory of 3700 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 3480 wrote to memory of 3700 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3700 -ip 3700

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3700 -s 612

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 209.205.72.20.in-addr.arpa udp
US 8.8.8.8:53 83.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 17.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 217.106.137.52.in-addr.arpa udp
US 8.8.8.8:53 200.163.202.172.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 8.8.8.8:53 107.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 71.208.201.84.in-addr.arpa udp
US 8.8.8.8:53 30.243.111.52.in-addr.arpa udp

Files

N/A

Analysis: behavioral5

Detonation Overview

Submitted

2024-11-25 19:41

Reported

2024-11-25 19:44

Platform

win7-20240708-en

Max time kernel

117s

Max time network

118s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\lemurs.dll,#1

Signatures

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2624 wrote to memory of 3020 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2624 wrote to memory of 3020 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2624 wrote to memory of 3020 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2624 wrote to memory of 3020 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2624 wrote to memory of 3020 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2624 wrote to memory of 3020 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 2624 wrote to memory of 3020 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\lemurs.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\lemurs.dll,#1

Network

N/A

Files

N/A

Analysis: behavioral6

Detonation Overview

Submitted

2024-11-25 19:41

Reported

2024-11-25 19:44

Platform

win10v2004-20241007-en

Max time kernel

148s

Max time network

151s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\lemurs.dll,#1

Signatures

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\rundll32.exe

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 5116 wrote to memory of 5092 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 5116 wrote to memory of 5092 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe
PID 5116 wrote to memory of 5092 N/A C:\Windows\system32\rundll32.exe C:\Windows\SysWOW64\rundll32.exe

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\lemurs.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\lemurs.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 5092 -ip 5092

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5092 -s 552

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 104.219.191.52.in-addr.arpa udp
US 8.8.8.8:53 240.221.184.93.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 64.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 56.163.245.4.in-addr.arpa udp
US 8.8.8.8:53 241.42.69.40.in-addr.arpa udp
US 8.8.8.8:53 92.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 88.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 19.229.111.52.in-addr.arpa udp

Files

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-25 19:41

Reported

2024-11-25 19:44

Platform

win7-20240903-en

Max time kernel

128s

Max time network

129s

Command Line

"C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe"

Signatures

Cerber

ransomware cerber

Cerber family

cerber

Deletes shadow copies

ransomware defense_evasion impact execution

Blocklisted process makes network request

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

Contacts a large (520) amount of remote hosts

discovery

Deletes itself

Description Indicator Process Target
N/A N/A C:\Windows\system32\cmd.exe N/A

Reads user/profile data of web browsers

spyware stealer

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\tmp7F9B.bmp" C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\ACADEMIC.ONE C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
File created C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\_README_.hta C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\BLANK.ONE C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\BUSINESS.ONE C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\DESIGNER.ONE C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Stationery\PLANNERS.ONE C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\DllHost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\mshta.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A

System Network Configuration Discovery: Internet Connection Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Windows\system32\PING.EXE N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\taskkill.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main C:\Windows\SysWOW64\mshta.exe N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\system32\PING.EXE N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: 34 N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: 35 N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: 34 N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: 35 N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A
N/A N/A C:\Windows\SysWOW64\mshta.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3012 wrote to memory of 2232 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 3012 wrote to memory of 2232 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 3012 wrote to memory of 2232 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 3012 wrote to memory of 2232 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 3012 wrote to memory of 2232 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 3012 wrote to memory of 2232 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 3012 wrote to memory of 2232 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 3012 wrote to memory of 2232 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 3012 wrote to memory of 2232 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 3012 wrote to memory of 2232 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 2232 wrote to memory of 2764 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 2232 wrote to memory of 2764 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 2232 wrote to memory of 2764 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 2232 wrote to memory of 2764 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 2764 wrote to memory of 3016 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\wbem\WMIC.exe
PID 2764 wrote to memory of 3016 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\wbem\WMIC.exe
PID 2764 wrote to memory of 3016 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\wbem\WMIC.exe
PID 2232 wrote to memory of 2348 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 2232 wrote to memory of 2348 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 2232 wrote to memory of 2348 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 2232 wrote to memory of 2348 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 2232 wrote to memory of 1376 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 2232 wrote to memory of 1376 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 2232 wrote to memory of 1376 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 2232 wrote to memory of 1376 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 1376 wrote to memory of 3032 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 1376 wrote to memory of 3032 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 1376 wrote to memory of 3032 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 1376 wrote to memory of 1560 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE
PID 1376 wrote to memory of 1560 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE
PID 1376 wrote to memory of 1560 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe"

C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe"

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\wbem\WMIC.exe

C:\Windows\system32\wbem\wmic.exe shadowcopy delete

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\SysWOW64\DllHost.exe /Processid:{3F6B5E16-092A-41ED-930B-0B4125D91D4E}

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\AppData\Local\Temp\_README_.hta"

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im "9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe"

C:\Windows\system32\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
N/A 192.168.0.0:6892 udp
N/A 192.168.0.1:6892 udp
N/A 192.168.0.2:6892 udp
N/A 192.168.0.3:6892 udp
N/A 192.168.0.4:6892 udp
N/A 192.168.0.5:6892 udp
N/A 192.168.0.6:6892 udp
N/A 192.168.0.7:6892 udp
N/A 192.168.0.8:6892 udp
N/A 192.168.0.9:6892 udp
N/A 192.168.0.10:6892 udp
N/A 192.168.0.11:6892 udp
N/A 192.168.0.12:6892 udp
N/A 192.168.0.13:6892 udp
N/A 192.168.0.14:6892 udp
N/A 192.168.0.15:6892 udp
N/A 192.168.0.16:6892 udp
N/A 192.168.0.17:6892 udp
N/A 192.168.0.18:6892 udp
N/A 192.168.0.19:6892 udp
N/A 192.168.0.20:6892 udp
N/A 192.168.0.21:6892 udp
N/A 192.168.0.22:6892 udp
N/A 192.168.0.23:6892 udp
N/A 192.168.0.24:6892 udp
N/A 192.168.0.25:6892 udp
N/A 192.168.0.26:6892 udp
N/A 192.168.0.27:6892 udp
N/A 192.168.0.28:6892 udp
N/A 192.168.0.29:6892 udp
N/A 192.168.0.30:6892 udp
N/A 192.168.0.31:6892 udp
LT 194.165.16.0:6892 udp
LT 194.165.16.1:6892 udp
LT 194.165.16.2:6892 udp
LT 194.165.16.3:6892 udp
LT 194.165.16.4:6892 udp
LT 194.165.16.5:6892 udp
LT 194.165.16.6:6892 udp
LT 194.165.16.7:6892 udp
LT 194.165.16.8:6892 udp
LT 194.165.16.9:6892 udp
LT 194.165.16.10:6892 udp
LT 194.165.16.11:6892 udp
LT 194.165.16.12:6892 udp
LT 194.165.16.13:6892 udp
LT 194.165.16.14:6892 udp
LT 194.165.16.15:6892 udp
LT 194.165.16.16:6892 udp
LT 194.165.16.17:6892 udp
LT 194.165.16.18:6892 udp
LT 194.165.16.19:6892 udp
LT 194.165.16.20:6892 udp
LT 194.165.16.21:6892 udp
LT 194.165.16.22:6892 udp
LT 194.165.16.23:6892 udp
LT 194.165.16.24:6892 udp
LT 194.165.16.25:6892 udp
LT 194.165.16.26:6892 udp
LT 194.165.16.27:6892 udp
LT 194.165.16.28:6892 udp
LT 194.165.16.29:6892 udp
LT 194.165.16.30:6892 udp
LT 194.165.16.31:6892 udp
LT 194.165.16.32:6892 udp
LT 194.165.16.33:6892 udp
LT 194.165.16.34:6892 udp
LT 194.165.16.35:6892 udp
LT 194.165.16.36:6892 udp
LT 194.165.16.37:6892 udp
LT 194.165.16.38:6892 udp
LT 194.165.16.39:6892 udp
LT 194.165.16.40:6892 udp
LT 194.165.16.41:6892 udp
LT 194.165.16.42:6892 udp
LT 194.165.16.43:6892 udp
LT 194.165.16.44:6892 udp
LT 194.165.16.45:6892 udp
LT 194.165.16.46:6892 udp
LT 194.165.16.47:6892 udp
LT 194.165.16.48:6892 udp
LT 194.165.16.49:6892 udp
LT 194.165.16.50:6892 udp
LT 194.165.16.51:6892 udp
LT 194.165.16.52:6892 udp
LT 194.165.16.53:6892 udp
LT 194.165.16.54:6892 udp
LT 194.165.16.55:6892 udp
LT 194.165.16.56:6892 udp
LT 194.165.16.57:6892 udp
LT 194.165.16.58:6892 udp
LT 194.165.16.59:6892 udp
LT 194.165.16.60:6892 udp
LT 194.165.16.61:6892 udp
LT 194.165.16.62:6892 udp
LT 194.165.16.63:6892 udp
LT 194.165.16.64:6892 udp
LT 194.165.16.65:6892 udp
LT 194.165.16.66:6892 udp
LT 194.165.16.67:6892 udp
LT 194.165.16.68:6892 udp
LT 194.165.16.69:6892 udp
LT 194.165.16.70:6892 udp
LT 194.165.16.71:6892 udp
LT 194.165.16.72:6892 udp
LT 194.165.16.73:6892 udp
LT 194.165.16.74:6892 udp
LT 194.165.16.75:6892 udp
LT 194.165.16.76:6892 udp
LT 194.165.16.77:6892 udp
LT 194.165.16.78:6892 udp
LT 194.165.16.79:6892 udp
LT 194.165.16.80:6892 udp
LT 194.165.16.81:6892 udp
LT 194.165.16.82:6892 udp
LT 194.165.16.83:6892 udp
LT 194.165.16.84:6892 udp
LT 194.165.16.85:6892 udp
LT 194.165.16.86:6892 udp
LT 194.165.16.87:6892 udp
LT 194.165.16.88:6892 udp
LT 194.165.16.89:6892 udp
LT 194.165.16.90:6892 udp
LT 194.165.16.91:6892 udp
LT 194.165.16.92:6892 udp
LT 194.165.16.93:6892 udp
LT 194.165.16.94:6892 udp
LT 194.165.16.95:6892 udp
LT 194.165.16.96:6892 udp
LT 194.165.16.97:6892 udp
LT 194.165.16.98:6892 udp
LT 194.165.16.99:6892 udp
LT 194.165.16.100:6892 udp
LT 194.165.16.101:6892 udp
LT 194.165.16.102:6892 udp
LT 194.165.16.103:6892 udp
LT 194.165.16.104:6892 udp
LT 194.165.16.105:6892 udp
LT 194.165.16.106:6892 udp
LT 194.165.16.107:6892 udp
LT 194.165.16.108:6892 udp
LT 194.165.16.109:6892 udp
LT 194.165.16.110:6892 udp
LT 194.165.16.111:6892 udp
LT 194.165.16.112:6892 udp
LT 194.165.16.113:6892 udp
LT 194.165.16.114:6892 udp
LT 194.165.16.115:6892 udp
LT 194.165.16.116:6892 udp
LT 194.165.16.117:6892 udp
LT 194.165.16.118:6892 udp
LT 194.165.16.119:6892 udp
LT 194.165.16.120:6892 udp
LT 194.165.16.121:6892 udp
LT 194.165.16.122:6892 udp
LT 194.165.16.123:6892 udp
LT 194.165.16.124:6892 udp
LT 194.165.16.125:6892 udp
LT 194.165.16.126:6892 udp
LT 194.165.16.127:6892 udp
LT 194.165.16.128:6892 udp
LT 194.165.16.129:6892 udp
LT 194.165.16.130:6892 udp
LT 194.165.16.131:6892 udp
LT 194.165.16.132:6892 udp
LT 194.165.16.133:6892 udp
LT 194.165.16.134:6892 udp
LT 194.165.16.135:6892 udp
LT 194.165.16.136:6892 udp
LT 194.165.16.137:6892 udp
LT 194.165.16.138:6892 udp
LT 194.165.16.139:6892 udp
LT 194.165.16.140:6892 udp
LT 194.165.16.141:6892 udp
LT 194.165.16.142:6892 udp
LT 194.165.16.143:6892 udp
LT 194.165.16.144:6892 udp
LT 194.165.16.145:6892 udp
LT 194.165.16.146:6892 udp
LT 194.165.16.147:6892 udp
LT 194.165.16.148:6892 udp
LT 194.165.16.149:6892 udp
LT 194.165.16.150:6892 udp
LT 194.165.16.151:6892 udp
LT 194.165.16.152:6892 udp
LT 194.165.16.153:6892 udp
LT 194.165.16.154:6892 udp
LT 194.165.16.155:6892 udp
LT 194.165.16.156:6892 udp
LT 194.165.16.157:6892 udp
LT 194.165.16.158:6892 udp
LT 194.165.16.159:6892 udp
LT 194.165.16.160:6892 udp
LT 194.165.16.161:6892 udp
LT 194.165.16.162:6892 udp
LT 194.165.16.163:6892 udp
LT 194.165.16.164:6892 udp
LT 194.165.16.165:6892 udp
LT 194.165.16.166:6892 udp
LT 194.165.16.167:6892 udp
LT 194.165.16.168:6892 udp
LT 194.165.16.169:6892 udp
LT 194.165.16.170:6892 udp
LT 194.165.16.171:6892 udp
LT 194.165.16.172:6892 udp
LT 194.165.16.173:6892 udp
LT 194.165.16.174:6892 udp
LT 194.165.16.175:6892 udp
LT 194.165.16.176:6892 udp
LT 194.165.16.177:6892 udp
LT 194.165.16.178:6892 udp
LT 194.165.16.179:6892 udp
LT 194.165.16.180:6892 udp
LT 194.165.16.181:6892 udp
LT 194.165.16.182:6892 udp
LT 194.165.16.183:6892 udp
LT 194.165.16.184:6892 udp
LT 194.165.16.185:6892 udp
LT 194.165.16.186:6892 udp
LT 194.165.16.187:6892 udp
LT 194.165.16.188:6892 udp
LT 194.165.16.189:6892 udp
LT 194.165.16.190:6892 udp
LT 194.165.16.191:6892 udp
LT 194.165.16.192:6892 udp
LT 194.165.16.193:6892 udp
LT 194.165.16.194:6892 udp
LT 194.165.16.195:6892 udp
LT 194.165.16.196:6892 udp
LT 194.165.16.197:6892 udp
LT 194.165.16.198:6892 udp
LT 194.165.16.199:6892 udp
LT 194.165.16.200:6892 udp
LT 194.165.16.201:6892 udp
LT 194.165.16.202:6892 udp
LT 194.165.16.203:6892 udp
LT 194.165.16.204:6892 udp
LT 194.165.16.205:6892 udp
LT 194.165.16.206:6892 udp
LT 194.165.16.207:6892 udp
LT 194.165.16.208:6892 udp
LT 194.165.16.209:6892 udp
LT 194.165.16.210:6892 udp
LT 194.165.16.211:6892 udp
LT 194.165.16.212:6892 udp
LT 194.165.16.213:6892 udp
LT 194.165.16.214:6892 udp
LT 194.165.16.215:6892 udp
LT 194.165.16.216:6892 udp
LT 194.165.16.217:6892 udp
LT 194.165.16.218:6892 udp
LT 194.165.16.219:6892 udp
LT 194.165.16.220:6892 udp
LT 194.165.16.221:6892 udp
LT 194.165.16.222:6892 udp
LT 194.165.16.223:6892 udp
LT 194.165.16.224:6892 udp
LT 194.165.16.225:6892 udp
LT 194.165.16.226:6892 udp
LT 194.165.16.227:6892 udp
LT 194.165.16.228:6892 udp
LT 194.165.16.229:6892 udp
LT 194.165.16.230:6892 udp
LT 194.165.16.231:6892 udp
LT 194.165.16.232:6892 udp
LT 194.165.16.233:6892 udp
LT 194.165.16.234:6892 udp
LT 194.165.16.235:6892 udp
LT 194.165.16.236:6892 udp
LT 194.165.16.237:6892 udp
LT 194.165.16.238:6892 udp
LT 194.165.16.239:6892 udp
LT 194.165.16.240:6892 udp
LT 194.165.16.241:6892 udp
LT 194.165.16.242:6892 udp
LT 194.165.16.243:6892 udp
LT 194.165.16.244:6892 udp
LT 194.165.16.245:6892 udp
LT 194.165.16.246:6892 udp
LT 194.165.16.247:6892 udp
LT 194.165.16.248:6892 udp
LT 194.165.16.249:6892 udp
LT 194.165.16.250:6892 udp
LT 194.165.16.251:6892 udp
LT 194.165.16.252:6892 udp
LT 194.165.16.253:6892 udp
LT 194.165.16.254:6892 udp
LT 194.165.16.255:6892 udp
LT 194.165.17.0:6892 udp
LT 194.165.17.1:6892 udp
LT 194.165.17.2:6892 udp
LT 194.165.17.3:6892 udp
LT 194.165.17.4:6892 udp
LT 194.165.17.5:6892 udp
LT 194.165.17.6:6892 udp
LT 194.165.17.7:6892 udp
LT 194.165.17.8:6892 udp
LT 194.165.17.9:6892 udp
LT 194.165.17.10:6892 udp
LT 194.165.17.11:6892 udp
LT 194.165.17.12:6892 udp
LT 194.165.17.13:6892 udp
LT 194.165.17.14:6892 udp
LT 194.165.17.15:6892 udp
LT 194.165.17.16:6892 udp
LT 194.165.17.17:6892 udp
LT 194.165.17.18:6892 udp
LT 194.165.17.19:6892 udp
LT 194.165.17.20:6892 udp
LT 194.165.17.21:6892 udp
LT 194.165.17.22:6892 udp
LT 194.165.17.23:6892 udp
LT 194.165.17.24:6892 udp
LT 194.165.17.25:6892 udp
LT 194.165.17.26:6892 udp
LT 194.165.17.27:6892 udp
LT 194.165.17.28:6892 udp
LT 194.165.17.29:6892 udp
LT 194.165.17.30:6892 udp
LT 194.165.17.31:6892 udp
LT 194.165.17.32:6892 udp
LT 194.165.17.33:6892 udp
LT 194.165.17.34:6892 udp
LT 194.165.17.35:6892 udp
LT 194.165.17.36:6892 udp
LT 194.165.17.37:6892 udp
LT 194.165.17.38:6892 udp
LT 194.165.17.39:6892 udp
LT 194.165.17.40:6892 udp
LT 194.165.17.41:6892 udp
LT 194.165.17.42:6892 udp
LT 194.165.17.43:6892 udp
LT 194.165.17.44:6892 udp
LT 194.165.17.45:6892 udp
LT 194.165.17.46:6892 udp
LT 194.165.17.47:6892 udp
LT 194.165.17.48:6892 udp
LT 194.165.17.49:6892 udp
LT 194.165.17.50:6892 udp
LT 194.165.17.51:6892 udp
LT 194.165.17.52:6892 udp
LT 194.165.17.53:6892 udp
LT 194.165.17.54:6892 udp
LT 194.165.17.55:6892 udp
LT 194.165.17.56:6892 udp
LT 194.165.17.57:6892 udp
LT 194.165.17.58:6892 udp
LT 194.165.17.59:6892 udp
LT 194.165.17.60:6892 udp
LT 194.165.17.61:6892 udp
LT 194.165.17.62:6892 udp
LT 194.165.17.63:6892 udp
LT 194.165.17.64:6892 udp
LT 194.165.17.65:6892 udp
LT 194.165.17.66:6892 udp
LT 194.165.17.67:6892 udp
LT 194.165.17.68:6892 udp
LT 194.165.17.69:6892 udp
LT 194.165.17.70:6892 udp
LT 194.165.17.71:6892 udp
LT 194.165.17.72:6892 udp
LT 194.165.17.73:6892 udp
LT 194.165.17.74:6892 udp
LT 194.165.17.75:6892 udp
LT 194.165.17.76:6892 udp
LT 194.165.17.77:6892 udp
LT 194.165.17.78:6892 udp
LT 194.165.17.79:6892 udp
LT 194.165.17.80:6892 udp
LT 194.165.17.81:6892 udp
LT 194.165.17.82:6892 udp
LT 194.165.17.83:6892 udp
LT 194.165.17.84:6892 udp
LT 194.165.17.85:6892 udp
LT 194.165.17.86:6892 udp
LT 194.165.17.87:6892 udp
LT 194.165.17.88:6892 udp
LT 194.165.17.89:6892 udp
LT 194.165.17.90:6892 udp
LT 194.165.17.91:6892 udp
LT 194.165.17.92:6892 udp
LT 194.165.17.93:6892 udp
LT 194.165.17.94:6892 udp
LT 194.165.17.95:6892 udp
LT 194.165.17.96:6892 udp
LT 194.165.17.97:6892 udp
LT 194.165.17.98:6892 udp
LT 194.165.17.99:6892 udp
LT 194.165.17.100:6892 udp
LT 194.165.17.101:6892 udp
LT 194.165.17.102:6892 udp
LT 194.165.17.103:6892 udp
LT 194.165.17.104:6892 udp
LT 194.165.17.105:6892 udp
LT 194.165.17.106:6892 udp
LT 194.165.17.107:6892 udp
LT 194.165.17.108:6892 udp
LT 194.165.17.109:6892 udp
LT 194.165.17.110:6892 udp
LT 194.165.17.111:6892 udp
LT 194.165.17.112:6892 udp
LT 194.165.17.113:6892 udp
LT 194.165.17.114:6892 udp
LT 194.165.17.115:6892 udp
LT 194.165.17.116:6892 udp
LT 194.165.17.117:6892 udp
LT 194.165.17.118:6892 udp
LT 194.165.17.119:6892 udp
LT 194.165.17.120:6892 udp
LT 194.165.17.121:6892 udp
LT 194.165.17.122:6892 udp
LT 194.165.17.123:6892 udp
LT 194.165.17.124:6892 udp
LT 194.165.17.125:6892 udp
LT 194.165.17.126:6892 udp
LT 194.165.17.127:6892 udp
LT 194.165.17.128:6892 udp
LT 194.165.17.129:6892 udp
LT 194.165.17.130:6892 udp
LT 194.165.17.131:6892 udp
LT 194.165.17.132:6892 udp
LT 194.165.17.133:6892 udp
LT 194.165.17.134:6892 udp
LT 194.165.17.135:6892 udp
LT 194.165.17.136:6892 udp
LT 194.165.17.137:6892 udp
LT 194.165.17.138:6892 udp
LT 194.165.17.139:6892 udp
LT 194.165.17.140:6892 udp
LT 194.165.17.141:6892 udp
LT 194.165.17.142:6892 udp
LT 194.165.17.143:6892 udp
LT 194.165.17.144:6892 udp
LT 194.165.17.145:6892 udp
LT 194.165.17.146:6892 udp
LT 194.165.17.147:6892 udp
LT 194.165.17.148:6892 udp
LT 194.165.17.149:6892 udp
LT 194.165.17.150:6892 udp
LT 194.165.17.151:6892 udp
LT 194.165.17.152:6892 udp
LT 194.165.17.153:6892 udp
LT 194.165.17.154:6892 udp
LT 194.165.17.155:6892 udp
LT 194.165.17.156:6892 udp
LT 194.165.17.157:6892 udp
LT 194.165.17.158:6892 udp
LT 194.165.17.159:6892 udp
LT 194.165.17.160:6892 udp
LT 194.165.17.161:6892 udp
LT 194.165.17.162:6892 udp
LT 194.165.17.163:6892 udp
LT 194.165.17.164:6892 udp
LT 194.165.17.165:6892 udp
LT 194.165.17.166:6892 udp
LT 194.165.17.167:6892 udp
LT 194.165.17.168:6892 udp
LT 194.165.17.169:6892 udp
LT 194.165.17.170:6892 udp
LT 194.165.17.171:6892 udp
LT 194.165.17.172:6892 udp
LT 194.165.17.173:6892 udp
LT 194.165.17.174:6892 udp
LT 194.165.17.175:6892 udp
LT 194.165.17.176:6892 udp
LT 194.165.17.177:6892 udp
LT 194.165.17.178:6892 udp
LT 194.165.17.179:6892 udp
LT 194.165.17.180:6892 udp
LT 194.165.17.181:6892 udp
LT 194.165.17.182:6892 udp
LT 194.165.17.183:6892 udp
LT 194.165.17.184:6892 udp
LT 194.165.17.185:6892 udp
LT 194.165.17.186:6892 udp
LT 194.165.17.187:6892 udp
LT 194.165.17.188:6892 udp
LT 194.165.17.189:6892 udp
LT 194.165.17.190:6892 udp
LT 194.165.17.191:6892 udp
LT 194.165.17.192:6892 udp
LT 194.165.17.193:6892 udp
LT 194.165.17.194:6892 udp
LT 194.165.17.195:6892 udp
LT 194.165.17.196:6892 udp
LT 194.165.17.197:6892 udp
LT 194.165.17.198:6892 udp
LT 194.165.17.199:6892 udp
LT 194.165.17.200:6892 udp
LT 194.165.17.201:6892 udp
LT 194.165.17.202:6892 udp
LT 194.165.17.203:6892 udp
LT 194.165.17.204:6892 udp
LT 194.165.17.205:6892 udp
LT 194.165.17.206:6892 udp
LT 194.165.17.207:6892 udp
LT 194.165.17.208:6892 udp
LT 194.165.17.209:6892 udp
LT 194.165.17.210:6892 udp
LT 194.165.17.211:6892 udp
LT 194.165.17.212:6892 udp
LT 194.165.17.213:6892 udp
LT 194.165.17.214:6892 udp
LT 194.165.17.215:6892 udp
LT 194.165.17.216:6892 udp
LT 194.165.17.217:6892 udp
LT 194.165.17.218:6892 udp
LT 194.165.17.219:6892 udp
LT 194.165.17.220:6892 udp
LT 194.165.17.221:6892 udp
LT 194.165.17.222:6892 udp
LT 194.165.17.223:6892 udp
LT 194.165.17.224:6892 udp
LT 194.165.17.225:6892 udp
LT 194.165.17.226:6892 udp
LT 194.165.17.227:6892 udp
LT 194.165.17.228:6892 udp
LT 194.165.17.229:6892 udp
LT 194.165.17.230:6892 udp
LT 194.165.17.231:6892 udp
LT 194.165.17.232:6892 udp
LT 194.165.17.233:6892 udp
LT 194.165.17.234:6892 udp
LT 194.165.17.235:6892 udp
LT 194.165.17.236:6892 udp
LT 194.165.17.237:6892 udp
LT 194.165.17.238:6892 udp
LT 194.165.17.239:6892 udp
LT 194.165.17.240:6892 udp
LT 194.165.17.241:6892 udp
LT 194.165.17.242:6892 udp
LT 194.165.17.243:6892 udp
LT 194.165.17.244:6892 udp
LT 194.165.17.245:6892 udp
LT 194.165.17.246:6892 udp
LT 194.165.17.247:6892 udp
LT 194.165.17.248:6892 udp
LT 194.165.17.249:6892 udp
LT 194.165.17.250:6892 udp
LT 194.165.17.251:6892 udp
LT 194.165.17.252:6892 udp
LT 194.165.17.253:6892 udp
LT 194.165.17.254:6892 udp
N/A 127.0.0.0:6892 udp
N/A 127.0.0.1:6892 udp
N/A 127.0.0.2:6892 udp
N/A 127.0.0.3:6892 udp
N/A 127.0.0.4:6892 udp
N/A 127.0.0.5:6892 udp
N/A 127.0.0.6:6892 udp
N/A 127.0.0.7:6892 udp
N/A 127.0.0.8:6892 udp
N/A 127.0.0.9:6892 udp
N/A 127.0.0.10:6892 udp
N/A 127.0.0.11:6892 udp
N/A 127.0.0.12:6892 udp
N/A 127.0.0.13:6892 udp
N/A 127.0.0.14:6892 udp
N/A 127.0.0.15:6892 udp
N/A 127.0.0.16:6892 udp
N/A 127.0.0.17:6892 udp
N/A 127.0.0.18:6892 udp
N/A 127.0.0.19:6892 udp
N/A 127.0.0.20:6892 udp
N/A 127.0.0.21:6892 udp
N/A 127.0.0.22:6892 udp
N/A 127.0.0.23:6892 udp
N/A 127.0.0.24:6892 udp
N/A 127.0.0.25:6892 udp
N/A 127.0.0.26:6892 udp
N/A 127.0.0.27:6892 udp
N/A 127.0.0.28:6892 udp
N/A 127.0.0.29:6892 udp
N/A 127.0.0.30:6892 udp
N/A 127.0.0.31:6892 udp
LT 194.165.17.255:6892 udp
N/A 192.168.0.0:6892 udp
N/A 192.168.0.1:6892 udp
N/A 192.168.0.2:6892 udp
N/A 192.168.0.3:6892 udp
N/A 192.168.0.4:6892 udp
N/A 192.168.0.5:6892 udp
N/A 192.168.0.6:6892 udp
N/A 192.168.0.7:6892 udp
N/A 192.168.0.8:6892 udp
N/A 192.168.0.9:6892 udp
N/A 192.168.0.10:6892 udp
N/A 127.0.0.0:6892 udp
N/A 192.168.0.11:6892 udp
N/A 192.168.0.12:6892 udp
N/A 192.168.0.13:6892 udp
N/A 192.168.0.14:6892 udp
N/A 192.168.0.15:6892 udp
N/A 192.168.0.16:6892 udp
N/A 192.168.0.17:6892 udp
N/A 192.168.0.18:6892 udp
N/A 192.168.0.19:6892 udp
N/A 192.168.0.20:6892 udp
N/A 192.168.0.21:6892 udp
N/A 127.0.0.1:6892 udp
N/A 192.168.0.22:6892 udp
N/A 192.168.0.23:6892 udp
N/A 192.168.0.24:6892 udp
N/A 192.168.0.25:6892 udp
N/A 192.168.0.26:6892 udp
N/A 192.168.0.27:6892 udp
N/A 192.168.0.28:6892 udp
N/A 192.168.0.29:6892 udp
N/A 192.168.0.30:6892 udp
N/A 192.168.0.31:6892 udp
LT 194.165.16.0:6892 udp
N/A 127.0.0.2:6892 udp
LT 194.165.16.1:6892 udp
LT 194.165.16.2:6892 udp
LT 194.165.16.3:6892 udp
LT 194.165.16.4:6892 udp
LT 194.165.16.5:6892 udp
LT 194.165.16.6:6892 udp
LT 194.165.16.7:6892 udp
LT 194.165.16.8:6892 udp
LT 194.165.16.9:6892 udp
LT 194.165.16.10:6892 udp
LT 194.165.16.11:6892 udp
LT 194.165.16.12:6892 udp
LT 194.165.16.13:6892 udp
N/A 127.0.0.3:6892 udp
LT 194.165.16.14:6892 udp
LT 194.165.16.15:6892 udp
LT 194.165.16.16:6892 udp
N/A 127.0.0.4:6892 udp
LT 194.165.16.17:6892 udp
LT 194.165.16.18:6892 udp
LT 194.165.16.19:6892 udp
LT 194.165.16.20:6892 udp
LT 194.165.16.21:6892 udp
LT 194.165.16.22:6892 udp
LT 194.165.16.23:6892 udp
N/A 127.0.0.5:6892 udp
LT 194.165.16.24:6892 udp
LT 194.165.16.25:6892 udp
LT 194.165.16.26:6892 udp
LT 194.165.16.27:6892 udp
LT 194.165.16.28:6892 udp
LT 194.165.16.29:6892 udp
LT 194.165.16.30:6892 udp
N/A 127.0.0.6:6892 udp
LT 194.165.16.31:6892 udp
LT 194.165.16.32:6892 udp
LT 194.165.16.33:6892 udp
LT 194.165.16.34:6892 udp
LT 194.165.16.35:6892 udp
LT 194.165.16.36:6892 udp
LT 194.165.16.37:6892 udp
LT 194.165.16.38:6892 udp
LT 194.165.16.39:6892 udp
LT 194.165.16.40:6892 udp
LT 194.165.16.41:6892 udp
LT 194.165.16.42:6892 udp
LT 194.165.16.43:6892 udp
LT 194.165.16.44:6892 udp
N/A 127.0.0.7:6892 udp
LT 194.165.16.45:6892 udp
LT 194.165.16.46:6892 udp
LT 194.165.16.47:6892 udp
LT 194.165.16.48:6892 udp
LT 194.165.16.49:6892 udp
LT 194.165.16.50:6892 udp
LT 194.165.16.51:6892 udp
LT 194.165.16.52:6892 udp
LT 194.165.16.53:6892 udp
LT 194.165.16.54:6892 udp
LT 194.165.16.55:6892 udp
LT 194.165.16.56:6892 udp
LT 194.165.16.57:6892 udp
LT 194.165.16.58:6892 udp
N/A 127.0.0.8:6892 udp
LT 194.165.16.59:6892 udp
LT 194.165.16.60:6892 udp
LT 194.165.16.61:6892 udp
LT 194.165.16.62:6892 udp
LT 194.165.16.63:6892 udp
LT 194.165.16.64:6892 udp
LT 194.165.16.65:6892 udp
LT 194.165.16.66:6892 udp
N/A 127.0.0.9:6892 udp
LT 194.165.16.67:6892 udp
LT 194.165.16.68:6892 udp
LT 194.165.16.69:6892 udp
LT 194.165.16.70:6892 udp
LT 194.165.16.71:6892 udp
LT 194.165.16.72:6892 udp
LT 194.165.16.73:6892 udp
LT 194.165.16.74:6892 udp
N/A 127.0.0.10:6892 udp
LT 194.165.16.75:6892 udp
LT 194.165.16.76:6892 udp
LT 194.165.16.77:6892 udp
LT 194.165.16.78:6892 udp
LT 194.165.16.79:6892 udp
LT 194.165.16.80:6892 udp
LT 194.165.16.81:6892 udp
LT 194.165.16.82:6892 udp
LT 194.165.16.83:6892 udp
LT 194.165.16.84:6892 udp
LT 194.165.16.85:6892 udp
LT 194.165.16.86:6892 udp
LT 194.165.16.87:6892 udp
N/A 127.0.0.11:6892 udp
LT 194.165.16.88:6892 udp
LT 194.165.16.89:6892 udp
LT 194.165.16.90:6892 udp
LT 194.165.16.91:6892 udp
LT 194.165.16.92:6892 udp
LT 194.165.16.93:6892 udp
LT 194.165.16.94:6892 udp
LT 194.165.16.95:6892 udp
LT 194.165.16.96:6892 udp
LT 194.165.16.97:6892 udp
LT 194.165.16.98:6892 udp
LT 194.165.16.99:6892 udp
N/A 127.0.0.12:6892 udp
LT 194.165.16.100:6892 udp
LT 194.165.16.101:6892 udp
LT 194.165.16.102:6892 udp
LT 194.165.16.103:6892 udp
LT 194.165.16.104:6892 udp
LT 194.165.16.105:6892 udp
LT 194.165.16.106:6892 udp
LT 194.165.16.107:6892 udp
LT 194.165.16.108:6892 udp
LT 194.165.16.109:6892 udp
N/A 127.0.0.13:6892 udp
LT 194.165.16.110:6892 udp
LT 194.165.16.111:6892 udp
LT 194.165.16.112:6892 udp
LT 194.165.16.113:6892 udp
LT 194.165.16.114:6892 udp
LT 194.165.16.115:6892 udp
LT 194.165.16.116:6892 udp
N/A 127.0.0.14:6892 udp
LT 194.165.16.117:6892 udp
LT 194.165.16.118:6892 udp
LT 194.165.16.119:6892 udp
LT 194.165.16.120:6892 udp
LT 194.165.16.121:6892 udp
LT 194.165.16.122:6892 udp
LT 194.165.16.123:6892 udp
LT 194.165.16.124:6892 udp
LT 194.165.16.125:6892 udp
LT 194.165.16.126:6892 udp
N/A 127.0.0.15:6892 udp
LT 194.165.16.127:6892 udp
LT 194.165.16.128:6892 udp
LT 194.165.16.129:6892 udp
LT 194.165.16.130:6892 udp
LT 194.165.16.131:6892 udp
LT 194.165.16.132:6892 udp
LT 194.165.16.133:6892 udp
LT 194.165.16.134:6892 udp
LT 194.165.16.135:6892 udp
LT 194.165.16.136:6892 udp
LT 194.165.16.137:6892 udp
LT 194.165.16.138:6892 udp
LT 194.165.16.139:6892 udp
LT 194.165.16.140:6892 udp
LT 194.165.16.141:6892 udp
LT 194.165.16.142:6892 udp
LT 194.165.16.143:6892 udp
N/A 127.0.0.16:6892 udp
LT 194.165.16.144:6892 udp
LT 194.165.16.145:6892 udp
LT 194.165.16.146:6892 udp
LT 194.165.16.147:6892 udp
LT 194.165.16.148:6892 udp
LT 194.165.16.149:6892 udp
LT 194.165.16.150:6892 udp
LT 194.165.16.151:6892 udp
LT 194.165.16.152:6892 udp
LT 194.165.16.153:6892 udp
LT 194.165.16.154:6892 udp
LT 194.165.16.155:6892 udp
LT 194.165.16.156:6892 udp
LT 194.165.16.157:6892 udp
LT 194.165.16.158:6892 udp
N/A 127.0.0.17:6892 udp
LT 194.165.16.159:6892 udp
LT 194.165.16.160:6892 udp
LT 194.165.16.161:6892 udp
LT 194.165.16.162:6892 udp
LT 194.165.16.163:6892 udp
LT 194.165.16.164:6892 udp
LT 194.165.16.165:6892 udp
LT 194.165.16.166:6892 udp
N/A 127.0.0.18:6892 udp
LT 194.165.16.167:6892 udp
LT 194.165.16.168:6892 udp
LT 194.165.16.169:6892 udp
LT 194.165.16.170:6892 udp
LT 194.165.16.171:6892 udp
LT 194.165.16.172:6892 udp
LT 194.165.16.173:6892 udp
LT 194.165.16.174:6892 udp
LT 194.165.16.175:6892 udp
LT 194.165.16.176:6892 udp
N/A 127.0.0.19:6892 udp
LT 194.165.16.177:6892 udp
LT 194.165.16.178:6892 udp
LT 194.165.16.179:6892 udp
LT 194.165.16.180:6892 udp
LT 194.165.16.181:6892 udp
LT 194.165.16.182:6892 udp
LT 194.165.16.183:6892 udp
LT 194.165.16.184:6892 udp
LT 194.165.16.185:6892 udp
LT 194.165.16.186:6892 udp
N/A 127.0.0.20:6892 udp
LT 194.165.16.187:6892 udp
LT 194.165.16.188:6892 udp
LT 194.165.16.189:6892 udp
LT 194.165.16.190:6892 udp
LT 194.165.16.191:6892 udp
LT 194.165.16.192:6892 udp
LT 194.165.16.193:6892 udp
LT 194.165.16.194:6892 udp
LT 194.165.16.195:6892 udp
LT 194.165.16.196:6892 udp
LT 194.165.16.197:6892 udp
LT 194.165.16.198:6892 udp
LT 194.165.16.199:6892 udp
N/A 127.0.0.21:6892 udp
LT 194.165.16.200:6892 udp
LT 194.165.16.201:6892 udp
LT 194.165.16.202:6892 udp
N/A 127.0.0.22:6892 udp
LT 194.165.16.203:6892 udp
LT 194.165.16.204:6892 udp
LT 194.165.16.205:6892 udp
LT 194.165.16.206:6892 udp
LT 194.165.16.207:6892 udp
N/A 127.0.0.23:6892 udp
LT 194.165.16.208:6892 udp
LT 194.165.16.209:6892 udp
LT 194.165.16.210:6892 udp
LT 194.165.16.211:6892 udp
LT 194.165.16.212:6892 udp
LT 194.165.16.213:6892 udp
N/A 127.0.0.24:6892 udp
LT 194.165.16.214:6892 udp
LT 194.165.16.215:6892 udp
LT 194.165.16.216:6892 udp
N/A 127.0.0.25:6892 udp
LT 194.165.16.217:6892 udp
LT 194.165.16.218:6892 udp
LT 194.165.16.219:6892 udp
LT 194.165.16.220:6892 udp
LT 194.165.16.221:6892 udp
LT 194.165.16.222:6892 udp
LT 194.165.16.223:6892 udp
N/A 127.0.0.26:6892 udp
LT 194.165.16.224:6892 udp
LT 194.165.16.225:6892 udp
LT 194.165.16.226:6892 udp
LT 194.165.16.227:6892 udp
LT 194.165.16.228:6892 udp
LT 194.165.16.229:6892 udp
LT 194.165.16.230:6892 udp
LT 194.165.16.231:6892 udp
N/A 127.0.0.27:6892 udp
LT 194.165.16.232:6892 udp
LT 194.165.16.233:6892 udp
LT 194.165.16.234:6892 udp
LT 194.165.16.235:6892 udp
LT 194.165.16.236:6892 udp
LT 194.165.16.237:6892 udp
LT 194.165.16.238:6892 udp
LT 194.165.16.239:6892 udp
LT 194.165.16.240:6892 udp
N/A 127.0.0.28:6892 udp
LT 194.165.16.241:6892 udp
LT 194.165.16.242:6892 udp
LT 194.165.16.243:6892 udp
LT 194.165.16.244:6892 udp
LT 194.165.16.245:6892 udp
LT 194.165.16.246:6892 udp
LT 194.165.16.247:6892 udp
LT 194.165.16.248:6892 udp
LT 194.165.16.249:6892 udp
LT 194.165.16.250:6892 udp
LT 194.165.16.251:6892 udp
LT 194.165.16.252:6892 udp
N/A 127.0.0.29:6892 udp
LT 194.165.16.253:6892 udp
LT 194.165.16.254:6892 udp
N/A 127.0.0.30:6892 udp
N/A 127.0.0.31:6892 udp
LT 194.165.16.255:6892 udp
LT 194.165.17.0:6892 udp
LT 194.165.17.1:6892 udp
LT 194.165.17.2:6892 udp
LT 194.165.17.3:6892 udp
LT 194.165.17.4:6892 udp
LT 194.165.17.5:6892 udp
LT 194.165.17.6:6892 udp
LT 194.165.17.7:6892 udp
LT 194.165.17.8:6892 udp
LT 194.165.17.9:6892 udp
LT 194.165.17.10:6892 udp
LT 194.165.17.11:6892 udp
LT 194.165.17.12:6892 udp
LT 194.165.17.13:6892 udp
LT 194.165.17.14:6892 udp
LT 194.165.17.15:6892 udp
LT 194.165.17.16:6892 udp
LT 194.165.17.17:6892 udp
LT 194.165.17.18:6892 udp
LT 194.165.17.19:6892 udp
LT 194.165.17.20:6892 udp
LT 194.165.17.21:6892 udp
LT 194.165.17.22:6892 udp
LT 194.165.17.23:6892 udp
LT 194.165.17.24:6892 udp
LT 194.165.17.25:6892 udp
LT 194.165.17.26:6892 udp
LT 194.165.17.27:6892 udp
LT 194.165.17.28:6892 udp
LT 194.165.17.29:6892 udp
LT 194.165.17.30:6892 udp
LT 194.165.17.31:6892 udp
LT 194.165.17.32:6892 udp
LT 194.165.17.33:6892 udp
LT 194.165.17.34:6892 udp
LT 194.165.17.35:6892 udp
LT 194.165.17.36:6892 udp
LT 194.165.17.37:6892 udp
LT 194.165.17.38:6892 udp
LT 194.165.17.39:6892 udp
LT 194.165.17.40:6892 udp
LT 194.165.17.41:6892 udp
LT 194.165.17.42:6892 udp
LT 194.165.17.43:6892 udp
LT 194.165.17.44:6892 udp
LT 194.165.17.45:6892 udp
LT 194.165.17.46:6892 udp
LT 194.165.17.47:6892 udp
LT 194.165.17.48:6892 udp
LT 194.165.17.49:6892 udp
LT 194.165.17.50:6892 udp
LT 194.165.17.51:6892 udp
LT 194.165.17.52:6892 udp
LT 194.165.17.53:6892 udp
LT 194.165.17.54:6892 udp
LT 194.165.17.55:6892 udp
LT 194.165.17.56:6892 udp
LT 194.165.17.57:6892 udp
LT 194.165.17.58:6892 udp
LT 194.165.17.59:6892 udp
LT 194.165.17.60:6892 udp
LT 194.165.17.61:6892 udp
LT 194.165.17.62:6892 udp
LT 194.165.17.63:6892 udp
LT 194.165.17.64:6892 udp
LT 194.165.17.65:6892 udp
LT 194.165.17.66:6892 udp
LT 194.165.17.67:6892 udp
LT 194.165.17.68:6892 udp
LT 194.165.17.69:6892 udp
LT 194.165.17.70:6892 udp
LT 194.165.17.71:6892 udp
LT 194.165.17.72:6892 udp
LT 194.165.17.73:6892 udp
LT 194.165.17.74:6892 udp
LT 194.165.17.75:6892 udp
LT 194.165.17.76:6892 udp
LT 194.165.17.77:6892 udp
LT 194.165.17.78:6892 udp
LT 194.165.17.79:6892 udp
LT 194.165.17.80:6892 udp
LT 194.165.17.81:6892 udp
LT 194.165.17.82:6892 udp
LT 194.165.17.83:6892 udp
LT 194.165.17.84:6892 udp
LT 194.165.17.85:6892 udp
LT 194.165.17.86:6892 udp
LT 194.165.17.87:6892 udp
LT 194.165.17.88:6892 udp
LT 194.165.17.89:6892 udp
LT 194.165.17.90:6892 udp
LT 194.165.17.91:6892 udp
LT 194.165.17.92:6892 udp
LT 194.165.17.93:6892 udp
LT 194.165.17.94:6892 udp
LT 194.165.17.95:6892 udp
LT 194.165.17.96:6892 udp
LT 194.165.17.97:6892 udp
LT 194.165.17.98:6892 udp
LT 194.165.17.99:6892 udp
LT 194.165.17.100:6892 udp
LT 194.165.17.101:6892 udp
LT 194.165.17.102:6892 udp
LT 194.165.17.103:6892 udp
LT 194.165.17.104:6892 udp
LT 194.165.17.105:6892 udp
LT 194.165.17.106:6892 udp
LT 194.165.17.107:6892 udp
LT 194.165.17.108:6892 udp
LT 194.165.17.109:6892 udp
LT 194.165.17.110:6892 udp
LT 194.165.17.111:6892 udp
LT 194.165.17.112:6892 udp
LT 194.165.17.113:6892 udp
LT 194.165.17.114:6892 udp
LT 194.165.17.115:6892 udp
LT 194.165.17.116:6892 udp
LT 194.165.17.117:6892 udp
LT 194.165.17.118:6892 udp
LT 194.165.17.119:6892 udp
LT 194.165.17.120:6892 udp
LT 194.165.17.121:6892 udp
LT 194.165.17.122:6892 udp
LT 194.165.17.123:6892 udp
LT 194.165.17.124:6892 udp
LT 194.165.17.125:6892 udp
LT 194.165.17.126:6892 udp
LT 194.165.17.127:6892 udp
LT 194.165.17.128:6892 udp
LT 194.165.17.129:6892 udp
LT 194.165.17.130:6892 udp
LT 194.165.17.131:6892 udp
LT 194.165.17.132:6892 udp
LT 194.165.17.133:6892 udp
LT 194.165.17.134:6892 udp
LT 194.165.17.135:6892 udp
LT 194.165.17.136:6892 udp
LT 194.165.17.137:6892 udp
LT 194.165.17.138:6892 udp
LT 194.165.17.139:6892 udp
LT 194.165.17.140:6892 udp
LT 194.165.17.141:6892 udp
LT 194.165.17.142:6892 udp
LT 194.165.17.143:6892 udp
LT 194.165.17.144:6892 udp
LT 194.165.17.145:6892 udp
LT 194.165.17.146:6892 udp
LT 194.165.17.147:6892 udp
LT 194.165.17.148:6892 udp
LT 194.165.17.149:6892 udp
LT 194.165.17.150:6892 udp
LT 194.165.17.151:6892 udp
LT 194.165.17.152:6892 udp
LT 194.165.17.153:6892 udp
LT 194.165.17.154:6892 udp
LT 194.165.17.155:6892 udp
LT 194.165.17.156:6892 udp
LT 194.165.17.157:6892 udp
LT 194.165.17.158:6892 udp
LT 194.165.17.159:6892 udp
LT 194.165.17.160:6892 udp
LT 194.165.17.161:6892 udp
LT 194.165.17.162:6892 udp
LT 194.165.17.163:6892 udp
LT 194.165.17.164:6892 udp
LT 194.165.17.165:6892 udp
LT 194.165.17.166:6892 udp
LT 194.165.17.167:6892 udp
LT 194.165.17.168:6892 udp
LT 194.165.17.169:6892 udp
LT 194.165.17.170:6892 udp
LT 194.165.17.171:6892 udp
LT 194.165.17.172:6892 udp
LT 194.165.17.173:6892 udp
LT 194.165.17.174:6892 udp
LT 194.165.17.175:6892 udp
LT 194.165.17.176:6892 udp
LT 194.165.17.177:6892 udp
LT 194.165.17.178:6892 udp
LT 194.165.17.179:6892 udp
LT 194.165.17.180:6892 udp
LT 194.165.17.181:6892 udp
LT 194.165.17.182:6892 udp
LT 194.165.17.183:6892 udp
LT 194.165.17.184:6892 udp
LT 194.165.17.185:6892 udp
LT 194.165.17.186:6892 udp
LT 194.165.17.187:6892 udp
LT 194.165.17.188:6892 udp
LT 194.165.17.189:6892 udp
LT 194.165.17.190:6892 udp
LT 194.165.17.191:6892 udp
LT 194.165.17.192:6892 udp
LT 194.165.17.193:6892 udp
LT 194.165.17.194:6892 udp
LT 194.165.17.195:6892 udp
LT 194.165.17.196:6892 udp
LT 194.165.17.197:6892 udp
LT 194.165.17.198:6892 udp
LT 194.165.17.199:6892 udp
LT 194.165.17.200:6892 udp
LT 194.165.17.201:6892 udp
LT 194.165.17.202:6892 udp
LT 194.165.17.203:6892 udp
LT 194.165.17.204:6892 udp
LT 194.165.17.205:6892 udp
LT 194.165.17.206:6892 udp
LT 194.165.17.207:6892 udp
LT 194.165.17.208:6892 udp
LT 194.165.17.209:6892 udp
LT 194.165.17.210:6892 udp
LT 194.165.17.211:6892 udp
LT 194.165.17.212:6892 udp
LT 194.165.17.213:6892 udp
LT 194.165.17.214:6892 udp
LT 194.165.17.215:6892 udp
LT 194.165.17.216:6892 udp
LT 194.165.17.217:6892 udp
LT 194.165.17.218:6892 udp
LT 194.165.17.219:6892 udp
LT 194.165.17.220:6892 udp
LT 194.165.17.221:6892 udp
LT 194.165.17.222:6892 udp
LT 194.165.17.223:6892 udp
LT 194.165.17.224:6892 udp
LT 194.165.17.225:6892 udp
LT 194.165.17.226:6892 udp
LT 194.165.17.227:6892 udp
LT 194.165.17.228:6892 udp
LT 194.165.17.229:6892 udp
LT 194.165.17.230:6892 udp
LT 194.165.17.231:6892 udp
LT 194.165.17.232:6892 udp
LT 194.165.17.233:6892 udp
LT 194.165.17.234:6892 udp
LT 194.165.17.235:6892 udp
LT 194.165.17.236:6892 udp
LT 194.165.17.237:6892 udp
LT 194.165.17.238:6892 udp
LT 194.165.17.239:6892 udp
LT 194.165.17.240:6892 udp
LT 194.165.17.241:6892 udp
LT 194.165.17.242:6892 udp
LT 194.165.17.243:6892 udp
LT 194.165.17.244:6892 udp
LT 194.165.17.245:6892 udp
LT 194.165.17.246:6892 udp
LT 194.165.17.247:6892 udp
LT 194.165.17.248:6892 udp
LT 194.165.17.249:6892 udp
LT 194.165.17.250:6892 udp
LT 194.165.17.251:6892 udp
LT 194.165.17.252:6892 udp
LT 194.165.17.253:6892 udp
LT 194.165.17.254:6892 udp
LT 194.165.17.255:6892 udp
N/A 192.168.0.0:6892 udp
N/A 192.168.0.1:6892 udp
N/A 192.168.0.2:6892 udp
N/A 192.168.0.3:6892 udp
N/A 192.168.0.4:6892 udp
N/A 192.168.0.5:6892 udp
N/A 192.168.0.6:6892 udp
N/A 192.168.0.7:6892 udp
N/A 192.168.0.8:6892 udp
N/A 192.168.0.9:6892 udp
N/A 192.168.0.10:6892 udp
N/A 192.168.0.11:6892 udp
N/A 192.168.0.12:6892 udp
N/A 192.168.0.13:6892 udp
N/A 192.168.0.14:6892 udp
N/A 192.168.0.15:6892 udp
N/A 192.168.0.16:6892 udp
N/A 192.168.0.17:6892 udp
N/A 192.168.0.18:6892 udp
N/A 192.168.0.19:6892 udp
N/A 192.168.0.20:6892 udp
N/A 192.168.0.21:6892 udp
N/A 192.168.0.22:6892 udp
N/A 192.168.0.23:6892 udp
N/A 192.168.0.24:6892 udp
N/A 192.168.0.25:6892 udp
N/A 192.168.0.26:6892 udp
N/A 192.168.0.27:6892 udp
N/A 192.168.0.28:6892 udp
N/A 192.168.0.29:6892 udp
N/A 192.168.0.30:6892 udp
N/A 192.168.0.31:6892 udp
LT 194.165.16.0:6892 udp
LT 194.165.16.1:6892 udp
LT 194.165.16.2:6892 udp
LT 194.165.16.3:6892 udp
LT 194.165.16.4:6892 udp
LT 194.165.16.5:6892 udp
LT 194.165.16.6:6892 udp
LT 194.165.16.7:6892 udp
LT 194.165.16.8:6892 udp
LT 194.165.16.9:6892 udp
LT 194.165.16.10:6892 udp
LT 194.165.16.11:6892 udp
LT 194.165.16.12:6892 udp
LT 194.165.16.13:6892 udp
LT 194.165.16.14:6892 udp
LT 194.165.16.15:6892 udp
LT 194.165.16.16:6892 udp
LT 194.165.16.17:6892 udp
LT 194.165.16.18:6892 udp
LT 194.165.16.19:6892 udp
LT 194.165.16.20:6892 udp
LT 194.165.16.21:6892 udp
LT 194.165.16.22:6892 udp
LT 194.165.16.23:6892 udp
LT 194.165.16.24:6892 udp
LT 194.165.16.25:6892 udp
LT 194.165.16.26:6892 udp
LT 194.165.16.27:6892 udp
LT 194.165.16.28:6892 udp
LT 194.165.16.29:6892 udp
LT 194.165.16.30:6892 udp
LT 194.165.16.31:6892 udp
LT 194.165.16.32:6892 udp
LT 194.165.16.33:6892 udp
LT 194.165.16.34:6892 udp
LT 194.165.16.35:6892 udp
LT 194.165.16.36:6892 udp
LT 194.165.16.37:6892 udp
LT 194.165.16.38:6892 udp
LT 194.165.16.39:6892 udp
LT 194.165.16.40:6892 udp
LT 194.165.16.41:6892 udp
LT 194.165.16.42:6892 udp
LT 194.165.16.43:6892 udp
LT 194.165.16.44:6892 udp
LT 194.165.16.45:6892 udp
LT 194.165.16.46:6892 udp
LT 194.165.16.47:6892 udp
LT 194.165.16.48:6892 udp
LT 194.165.16.49:6892 udp
LT 194.165.16.50:6892 udp
LT 194.165.16.51:6892 udp
LT 194.165.16.52:6892 udp
LT 194.165.16.53:6892 udp
LT 194.165.16.54:6892 udp
LT 194.165.16.55:6892 udp
LT 194.165.16.56:6892 udp
LT 194.165.16.57:6892 udp
LT 194.165.16.58:6892 udp
LT 194.165.16.59:6892 udp
LT 194.165.16.60:6892 udp
LT 194.165.16.61:6892 udp
LT 194.165.16.62:6892 udp
LT 194.165.16.63:6892 udp
LT 194.165.16.64:6892 udp
LT 194.165.16.65:6892 udp
LT 194.165.16.66:6892 udp
LT 194.165.16.67:6892 udp
LT 194.165.16.68:6892 udp
LT 194.165.16.69:6892 udp
LT 194.165.16.70:6892 udp
LT 194.165.16.71:6892 udp
LT 194.165.16.72:6892 udp
LT 194.165.16.73:6892 udp
LT 194.165.16.74:6892 udp
LT 194.165.16.75:6892 udp
LT 194.165.16.76:6892 udp
LT 194.165.16.77:6892 udp
LT 194.165.16.78:6892 udp
LT 194.165.16.79:6892 udp
LT 194.165.16.80:6892 udp
LT 194.165.16.81:6892 udp
LT 194.165.16.82:6892 udp
LT 194.165.16.83:6892 udp
LT 194.165.16.84:6892 udp
LT 194.165.16.85:6892 udp
LT 194.165.16.86:6892 udp
LT 194.165.16.87:6892 udp
LT 194.165.16.88:6892 udp
LT 194.165.16.89:6892 udp
LT 194.165.16.90:6892 udp
LT 194.165.16.91:6892 udp
LT 194.165.16.92:6892 udp
LT 194.165.16.93:6892 udp
LT 194.165.16.94:6892 udp
LT 194.165.16.95:6892 udp
LT 194.165.16.96:6892 udp
LT 194.165.16.97:6892 udp
LT 194.165.16.98:6892 udp
LT 194.165.16.99:6892 udp
LT 194.165.16.100:6892 udp
LT 194.165.16.101:6892 udp
LT 194.165.16.102:6892 udp
LT 194.165.16.103:6892 udp
LT 194.165.16.104:6892 udp
LT 194.165.16.105:6892 udp
LT 194.165.16.106:6892 udp
LT 194.165.16.107:6892 udp
LT 194.165.16.108:6892 udp
LT 194.165.16.109:6892 udp
LT 194.165.16.110:6892 udp
LT 194.165.16.111:6892 udp
LT 194.165.16.112:6892 udp
LT 194.165.16.113:6892 udp
LT 194.165.16.114:6892 udp
LT 194.165.16.115:6892 udp
LT 194.165.16.116:6892 udp
LT 194.165.16.117:6892 udp
LT 194.165.16.118:6892 udp
LT 194.165.16.119:6892 udp
LT 194.165.16.120:6892 udp
LT 194.165.16.121:6892 udp
LT 194.165.16.122:6892 udp
LT 194.165.16.123:6892 udp
LT 194.165.16.124:6892 udp
LT 194.165.16.125:6892 udp
LT 194.165.16.126:6892 udp
LT 194.165.16.127:6892 udp
LT 194.165.16.128:6892 udp
LT 194.165.16.129:6892 udp
LT 194.165.16.130:6892 udp
LT 194.165.16.131:6892 udp
LT 194.165.16.132:6892 udp
LT 194.165.16.133:6892 udp
LT 194.165.16.134:6892 udp
LT 194.165.16.135:6892 udp
LT 194.165.16.136:6892 udp
LT 194.165.16.137:6892 udp
LT 194.165.16.138:6892 udp
LT 194.165.16.139:6892 udp
LT 194.165.16.140:6892 udp
LT 194.165.16.141:6892 udp
LT 194.165.16.142:6892 udp
LT 194.165.16.143:6892 udp
LT 194.165.16.144:6892 udp
LT 194.165.16.145:6892 udp
LT 194.165.16.146:6892 udp
LT 194.165.16.147:6892 udp
LT 194.165.16.148:6892 udp
LT 194.165.16.149:6892 udp
LT 194.165.16.150:6892 udp
LT 194.165.16.151:6892 udp
LT 194.165.16.152:6892 udp
LT 194.165.16.153:6892 udp
LT 194.165.16.154:6892 udp
LT 194.165.16.155:6892 udp
LT 194.165.16.156:6892 udp
LT 194.165.16.157:6892 udp
LT 194.165.16.158:6892 udp
LT 194.165.16.159:6892 udp
LT 194.165.16.160:6892 udp
LT 194.165.16.161:6892 udp
LT 194.165.16.162:6892 udp
LT 194.165.16.163:6892 udp
LT 194.165.16.164:6892 udp
LT 194.165.16.165:6892 udp
LT 194.165.16.166:6892 udp
LT 194.165.16.167:6892 udp
LT 194.165.16.168:6892 udp
LT 194.165.16.169:6892 udp
LT 194.165.16.170:6892 udp
LT 194.165.16.171:6892 udp
LT 194.165.16.172:6892 udp
LT 194.165.16.173:6892 udp
LT 194.165.16.174:6892 udp
LT 194.165.16.175:6892 udp
LT 194.165.16.176:6892 udp
LT 194.165.16.177:6892 udp
LT 194.165.16.178:6892 udp
LT 194.165.16.179:6892 udp
LT 194.165.16.180:6892 udp
LT 194.165.16.181:6892 udp
LT 194.165.16.182:6892 udp
LT 194.165.16.183:6892 udp
LT 194.165.16.184:6892 udp
LT 194.165.16.185:6892 udp
LT 194.165.16.186:6892 udp
LT 194.165.16.187:6892 udp
LT 194.165.16.188:6892 udp
LT 194.165.16.189:6892 udp
LT 194.165.16.190:6892 udp
LT 194.165.16.191:6892 udp
LT 194.165.16.192:6892 udp
LT 194.165.16.193:6892 udp
LT 194.165.16.194:6892 udp
LT 194.165.16.195:6892 udp
LT 194.165.16.196:6892 udp
LT 194.165.16.197:6892 udp
LT 194.165.16.198:6892 udp
LT 194.165.16.199:6892 udp
LT 194.165.16.200:6892 udp
LT 194.165.16.201:6892 udp
LT 194.165.16.202:6892 udp
LT 194.165.16.203:6892 udp
LT 194.165.16.204:6892 udp
LT 194.165.16.205:6892 udp
LT 194.165.16.206:6892 udp
LT 194.165.16.207:6892 udp
LT 194.165.16.208:6892 udp
LT 194.165.16.209:6892 udp
LT 194.165.16.210:6892 udp
LT 194.165.16.211:6892 udp
LT 194.165.16.212:6892 udp
LT 194.165.16.213:6892 udp
LT 194.165.16.214:6892 udp
LT 194.165.16.215:6892 udp
LT 194.165.16.216:6892 udp
LT 194.165.16.217:6892 udp
LT 194.165.16.218:6892 udp
LT 194.165.16.219:6892 udp
LT 194.165.16.220:6892 udp
LT 194.165.16.221:6892 udp
LT 194.165.16.222:6892 udp
LT 194.165.16.223:6892 udp
LT 194.165.16.224:6892 udp
LT 194.165.16.225:6892 udp
LT 194.165.16.226:6892 udp
LT 194.165.16.227:6892 udp
LT 194.165.16.228:6892 udp
LT 194.165.16.229:6892 udp
LT 194.165.16.230:6892 udp
LT 194.165.16.231:6892 udp
LT 194.165.16.232:6892 udp
LT 194.165.16.233:6892 udp
LT 194.165.16.234:6892 udp
LT 194.165.16.235:6892 udp
LT 194.165.16.236:6892 udp
LT 194.165.16.237:6892 udp
LT 194.165.16.238:6892 udp
LT 194.165.16.239:6892 udp
LT 194.165.16.240:6892 udp
LT 194.165.16.241:6892 udp
LT 194.165.16.242:6892 udp
LT 194.165.16.243:6892 udp
LT 194.165.16.244:6892 udp
LT 194.165.16.245:6892 udp
LT 194.165.16.246:6892 udp
LT 194.165.16.247:6892 udp
LT 194.165.16.248:6892 udp
LT 194.165.16.249:6892 udp
LT 194.165.16.250:6892 udp
LT 194.165.16.251:6892 udp
LT 194.165.16.252:6892 udp
LT 194.165.16.253:6892 udp
LT 194.165.16.254:6892 udp
LT 194.165.16.255:6892 udp
LT 194.165.17.0:6892 udp
LT 194.165.17.1:6892 udp
LT 194.165.17.2:6892 udp
LT 194.165.17.3:6892 udp
LT 194.165.17.4:6892 udp
LT 194.165.17.5:6892 udp
LT 194.165.17.6:6892 udp
LT 194.165.17.7:6892 udp
LT 194.165.17.8:6892 udp
LT 194.165.17.9:6892 udp
LT 194.165.17.10:6892 udp
LT 194.165.17.11:6892 udp
LT 194.165.17.12:6892 udp
LT 194.165.17.13:6892 udp
LT 194.165.17.14:6892 udp
LT 194.165.17.15:6892 udp
LT 194.165.17.16:6892 udp
LT 194.165.17.17:6892 udp
LT 194.165.17.18:6892 udp
LT 194.165.17.19:6892 udp
LT 194.165.17.20:6892 udp
LT 194.165.17.21:6892 udp
LT 194.165.17.22:6892 udp
LT 194.165.17.23:6892 udp
LT 194.165.17.24:6892 udp
LT 194.165.17.25:6892 udp
LT 194.165.17.26:6892 udp
LT 194.165.17.27:6892 udp
LT 194.165.17.28:6892 udp
LT 194.165.17.29:6892 udp
LT 194.165.17.30:6892 udp
LT 194.165.17.31:6892 udp
LT 194.165.17.32:6892 udp
LT 194.165.17.33:6892 udp
LT 194.165.17.34:6892 udp
LT 194.165.17.35:6892 udp
LT 194.165.17.36:6892 udp
LT 194.165.17.37:6892 udp
LT 194.165.17.38:6892 udp
LT 194.165.17.39:6892 udp
LT 194.165.17.40:6892 udp
LT 194.165.17.41:6892 udp
LT 194.165.17.42:6892 udp
LT 194.165.17.43:6892 udp
LT 194.165.17.44:6892 udp
LT 194.165.17.45:6892 udp
LT 194.165.17.46:6892 udp
LT 194.165.17.47:6892 udp
LT 194.165.17.48:6892 udp
LT 194.165.17.49:6892 udp
LT 194.165.17.50:6892 udp
LT 194.165.17.51:6892 udp
LT 194.165.17.52:6892 udp
LT 194.165.17.53:6892 udp
LT 194.165.17.54:6892 udp
LT 194.165.17.55:6892 udp
LT 194.165.17.56:6892 udp
LT 194.165.17.57:6892 udp
LT 194.165.17.58:6892 udp
LT 194.165.17.59:6892 udp
LT 194.165.17.60:6892 udp
LT 194.165.17.61:6892 udp
LT 194.165.17.62:6892 udp
LT 194.165.17.63:6892 udp
LT 194.165.17.64:6892 udp
LT 194.165.17.65:6892 udp
LT 194.165.17.66:6892 udp
LT 194.165.17.67:6892 udp
LT 194.165.17.68:6892 udp
LT 194.165.17.69:6892 udp
LT 194.165.17.70:6892 udp
LT 194.165.17.71:6892 udp
LT 194.165.17.72:6892 udp
LT 194.165.17.73:6892 udp
LT 194.165.17.74:6892 udp
LT 194.165.17.75:6892 udp
LT 194.165.17.76:6892 udp
LT 194.165.17.77:6892 udp
LT 194.165.17.78:6892 udp
LT 194.165.17.79:6892 udp
LT 194.165.17.80:6892 udp
LT 194.165.17.81:6892 udp
LT 194.165.17.82:6892 udp
LT 194.165.17.83:6892 udp
LT 194.165.17.84:6892 udp
LT 194.165.17.85:6892 udp
LT 194.165.17.86:6892 udp
LT 194.165.17.87:6892 udp
LT 194.165.17.88:6892 udp
LT 194.165.17.89:6892 udp
LT 194.165.17.90:6892 udp
LT 194.165.17.91:6892 udp
LT 194.165.17.92:6892 udp
LT 194.165.17.93:6892 udp
LT 194.165.17.94:6892 udp
LT 194.165.17.95:6892 udp
LT 194.165.17.96:6892 udp
LT 194.165.17.97:6892 udp
LT 194.165.17.98:6892 udp
LT 194.165.17.99:6892 udp
LT 194.165.17.100:6892 udp
LT 194.165.17.101:6892 udp
LT 194.165.17.102:6892 udp
LT 194.165.17.103:6892 udp
LT 194.165.17.104:6892 udp
LT 194.165.17.105:6892 udp
LT 194.165.17.106:6892 udp
LT 194.165.17.107:6892 udp
LT 194.165.17.108:6892 udp
LT 194.165.17.109:6892 udp
LT 194.165.17.110:6892 udp
LT 194.165.17.111:6892 udp
LT 194.165.17.112:6892 udp
LT 194.165.17.113:6892 udp
LT 194.165.17.114:6892 udp
LT 194.165.17.115:6892 udp
LT 194.165.17.116:6892 udp
LT 194.165.17.117:6892 udp
LT 194.165.17.118:6892 udp
LT 194.165.17.119:6892 udp
LT 194.165.17.120:6892 udp
LT 194.165.17.121:6892 udp
LT 194.165.17.122:6892 udp
LT 194.165.17.123:6892 udp
LT 194.165.17.124:6892 udp
LT 194.165.17.125:6892 udp
LT 194.165.17.126:6892 udp
LT 194.165.17.127:6892 udp
LT 194.165.17.128:6892 udp
LT 194.165.17.129:6892 udp
LT 194.165.17.130:6892 udp
LT 194.165.17.131:6892 udp
LT 194.165.17.132:6892 udp
LT 194.165.17.133:6892 udp
LT 194.165.17.134:6892 udp
LT 194.165.17.135:6892 udp
LT 194.165.17.136:6892 udp
LT 194.165.17.137:6892 udp
LT 194.165.17.138:6892 udp
LT 194.165.17.139:6892 udp
LT 194.165.17.140:6892 udp
LT 194.165.17.141:6892 udp
LT 194.165.17.142:6892 udp
LT 194.165.17.143:6892 udp
LT 194.165.17.144:6892 udp
LT 194.165.17.145:6892 udp
LT 194.165.17.146:6892 udp
LT 194.165.17.147:6892 udp
LT 194.165.17.148:6892 udp
LT 194.165.17.149:6892 udp
LT 194.165.17.150:6892 udp
LT 194.165.17.151:6892 udp
LT 194.165.17.152:6892 udp
LT 194.165.17.153:6892 udp
LT 194.165.17.154:6892 udp
LT 194.165.17.155:6892 udp
LT 194.165.17.156:6892 udp
LT 194.165.17.157:6892 udp
LT 194.165.17.158:6892 udp
LT 194.165.17.159:6892 udp
LT 194.165.17.160:6892 udp
LT 194.165.17.161:6892 udp
LT 194.165.17.162:6892 udp
LT 194.165.17.163:6892 udp
LT 194.165.17.164:6892 udp
LT 194.165.17.165:6892 udp
LT 194.165.17.166:6892 udp
LT 194.165.17.167:6892 udp
LT 194.165.17.168:6892 udp
LT 194.165.17.169:6892 udp
LT 194.165.17.170:6892 udp
LT 194.165.17.171:6892 udp
LT 194.165.17.172:6892 udp
LT 194.165.17.173:6892 udp
LT 194.165.17.174:6892 udp
LT 194.165.17.175:6892 udp
LT 194.165.17.176:6892 udp
LT 194.165.17.177:6892 udp
LT 194.165.17.178:6892 udp
LT 194.165.17.179:6892 udp
LT 194.165.17.180:6892 udp
LT 194.165.17.181:6892 udp
LT 194.165.17.182:6892 udp
LT 194.165.17.183:6892 udp
LT 194.165.17.184:6892 udp
LT 194.165.17.185:6892 udp
LT 194.165.17.186:6892 udp
LT 194.165.17.187:6892 udp
LT 194.165.17.188:6892 udp
LT 194.165.17.189:6892 udp
LT 194.165.17.190:6892 udp
LT 194.165.17.191:6892 udp
LT 194.165.17.192:6892 udp
LT 194.165.17.193:6892 udp
LT 194.165.17.194:6892 udp
LT 194.165.17.195:6892 udp
LT 194.165.17.196:6892 udp
LT 194.165.17.197:6892 udp
LT 194.165.17.198:6892 udp
LT 194.165.17.199:6892 udp
LT 194.165.17.200:6892 udp
LT 194.165.17.201:6892 udp
LT 194.165.17.202:6892 udp
LT 194.165.17.203:6892 udp
LT 194.165.17.204:6892 udp
LT 194.165.17.205:6892 udp
LT 194.165.17.206:6892 udp
LT 194.165.17.207:6892 udp
LT 194.165.17.208:6892 udp
LT 194.165.17.209:6892 udp
LT 194.165.17.210:6892 udp
LT 194.165.17.211:6892 udp
LT 194.165.17.212:6892 udp
LT 194.165.17.213:6892 udp
LT 194.165.17.214:6892 udp
LT 194.165.17.215:6892 udp
LT 194.165.17.216:6892 udp
LT 194.165.17.217:6892 udp
LT 194.165.17.218:6892 udp
LT 194.165.17.219:6892 udp
LT 194.165.17.220:6892 udp
LT 194.165.17.221:6892 udp
LT 194.165.17.222:6892 udp
LT 194.165.17.223:6892 udp
LT 194.165.17.224:6892 udp
LT 194.165.17.225:6892 udp
LT 194.165.17.226:6892 udp
LT 194.165.17.227:6892 udp
LT 194.165.17.228:6892 udp
LT 194.165.17.229:6892 udp
LT 194.165.17.230:6892 udp
LT 194.165.17.231:6892 udp
LT 194.165.17.232:6892 udp
LT 194.165.17.233:6892 udp
LT 194.165.17.234:6892 udp
LT 194.165.17.235:6892 udp
LT 194.165.17.236:6892 udp
LT 194.165.17.237:6892 udp
LT 194.165.17.238:6892 udp
LT 194.165.17.239:6892 udp
LT 194.165.17.240:6892 udp
LT 194.165.17.241:6892 udp
LT 194.165.17.242:6892 udp
LT 194.165.17.243:6892 udp
LT 194.165.17.244:6892 udp
LT 194.165.17.245:6892 udp
LT 194.165.17.246:6892 udp
LT 194.165.17.247:6892 udp
LT 194.165.17.248:6892 udp
LT 194.165.17.249:6892 udp
LT 194.165.17.250:6892 udp
LT 194.165.17.251:6892 udp
LT 194.165.17.252:6892 udp
LT 194.165.17.253:6892 udp
LT 194.165.17.254:6892 udp
N/A 127.0.0.0:6892 udp
N/A 127.0.0.1:6892 udp
N/A 127.0.0.2:6892 udp
N/A 127.0.0.3:6892 udp
N/A 127.0.0.4:6892 udp
N/A 127.0.0.5:6892 udp
N/A 127.0.0.6:6892 udp
N/A 127.0.0.7:6892 udp
N/A 127.0.0.8:6892 udp
N/A 127.0.0.9:6892 udp
N/A 127.0.0.10:6892 udp
N/A 127.0.0.11:6892 udp
N/A 127.0.0.12:6892 udp
N/A 127.0.0.13:6892 udp
N/A 127.0.0.14:6892 udp
N/A 127.0.0.15:6892 udp
N/A 127.0.0.16:6892 udp
N/A 127.0.0.17:6892 udp
N/A 127.0.0.18:6892 udp
N/A 127.0.0.19:6892 udp
N/A 127.0.0.20:6892 udp
N/A 127.0.0.21:6892 udp
N/A 127.0.0.22:6892 udp
N/A 127.0.0.23:6892 udp
N/A 127.0.0.24:6892 udp
N/A 127.0.0.25:6892 udp
N/A 127.0.0.26:6892 udp
N/A 127.0.0.27:6892 udp
N/A 127.0.0.28:6892 udp
N/A 127.0.0.29:6892 udp
N/A 127.0.0.30:6892 udp
N/A 127.0.0.31:6892 udp
LT 194.165.17.255:6892 udp
US 8.8.8.8:53 ffoqr3ug7m726zou.bvbg1l.top udp
US 8.8.8.8:53 btc.blockr.io udp
US 8.8.8.8:53 api.blockcypher.com udp
US 104.20.99.10:80 api.blockcypher.com tcp
US 8.8.8.8:53 chain.so udp
US 104.22.65.108:443 chain.so tcp
US 8.8.8.8:53 c.pki.goog udp
GB 142.250.200.3:80 c.pki.goog tcp
US 8.8.8.8:53 crl.microsoft.com udp
GB 2.19.252.157:80 crl.microsoft.com tcp
US 8.8.8.8:53 www.microsoft.com udp
GB 95.100.245.144:80 www.microsoft.com tcp

Files

memory/3012-9-0x0000000000770000-0x0000000000771000-memory.dmp

\Users\Admin\AppData\Local\Temp\lemurs.dll

MD5 349ff55e70ed9a44611e9585aea44481
SHA1 65ef1354579103c4e87c2ffca5270e36e5d6bf2c
SHA256 27d8323ca50e040da96f71b273b7482026d65bf5ac83bacf817b432f7c3a7279
SHA512 54bd9e9b67cae56040376d2eb1fde9e58b31d6da3efe360b14cfc5069d5728d3777c41eb3f389db928b31cb0a6fd9f2e3bbb25cd41891754d8bec350cadf8d57

\Users\Admin\AppData\Local\Temp\nsy9436.tmp\System.dll

MD5 a436db0c473a087eb61ff5c53c34ba27
SHA1 65ea67e424e75f5065132b539c8b2eda88aa0506
SHA256 75ed40311875312617d6711baed0be29fcaee71031ca27a8d308a72b15a51e49
SHA512 908f46a855480af6eacb2fb64de0e60b1e04bbb10b23992e2cf38a4cbebdcd7d3928c4c022d7ad9f7479265a8f426b93eef580afec95570e654c360d62f5e08d

memory/2232-10-0x0000000000400000-0x0000000000432000-memory.dmp

memory/2232-14-0x0000000000400000-0x0000000000432000-memory.dmp

memory/2232-22-0x0000000000400000-0x0000000000432000-memory.dmp

memory/2232-20-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

memory/2232-18-0x0000000000400000-0x0000000000432000-memory.dmp

memory/2232-16-0x0000000000400000-0x0000000000432000-memory.dmp

memory/2232-12-0x0000000000400000-0x0000000000432000-memory.dmp

memory/2232-24-0x0000000000400000-0x0000000000432000-memory.dmp

memory/2232-26-0x0000000000400000-0x0000000000432000-memory.dmp

memory/2232-31-0x0000000000400000-0x0000000000432000-memory.dmp

memory/2232-33-0x0000000000400000-0x0000000000432000-memory.dmp

memory/2232-36-0x0000000000400000-0x0000000000432000-memory.dmp

memory/2232-37-0x0000000000400000-0x0000000000432000-memory.dmp

memory/2232-38-0x0000000000400000-0x0000000000432000-memory.dmp

C:\Users\Admin\Music\_README_.hta

MD5 9960f555253472d5f2f5378595df5097
SHA1 0442c1bad0f0ec955b3d75a38eef1d4ce6ca7162
SHA256 5f1b0a6ba20e0e3efaa8387e34ee52bfb3f4f39916240dc8c5e8389fc41d43fd
SHA512 5483eb8bd780e37af705f2d4630d95e865e53a8bf4181cc5ba173106db111c7b70a11f75f295e2c75297a0b2e7e690cea91f0335e03a4cf3b0fb9297c7e04dc9

memory/2232-326-0x0000000000400000-0x0000000000432000-memory.dmp

memory/2232-333-0x0000000000400000-0x0000000000432000-memory.dmp

memory/2232-342-0x0000000000400000-0x0000000000432000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-11-25 19:41

Reported

2024-11-25 19:44

Platform

win10v2004-20241007-en

Max time kernel

148s

Max time network

150s

Command Line

"C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe"

Signatures

Cerber

ransomware cerber

Cerber family

cerber

Deletes shadow copies

ransomware defense_evasion impact execution

Contacts a large (523) amount of remote hosts

discovery

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A

Reads user/profile data of web browsers

spyware stealer

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\tmpE5F6.bmp" C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Microsoft Office\root\Templates\1033\ONENOTE\16\Stationery\BLANK.ONE C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Templates\1033\ONENOTE\16\Stationery\DESIGNER.ONE C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Templates\1033\ONENOTE\16\Stationery\PLANNERS.ONE C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Templates\1033\ONENOTE\16\Stationery\ACADEMIC.ONE C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Templates\1033\ONENOTE\16\Stationery\BUSINESS.ONE C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
File created C:\Program Files\Microsoft Office\root\Templates\1033\ONENOTE\16\Stationery\_README_.hta C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\mshta.exe N/A

System Network Configuration Discovery: Internet Connection Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Windows\system32\PING.EXE N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\taskkill.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\system32\PING.EXE N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: 34 N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: 35 N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: 36 N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: 33 N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: 34 N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: 35 N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: 36 N/A C:\Windows\system32\wbem\WMIC.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskkill.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 5092 wrote to memory of 3708 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 5092 wrote to memory of 3708 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 5092 wrote to memory of 3708 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 5092 wrote to memory of 3708 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 5092 wrote to memory of 3708 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 5092 wrote to memory of 3708 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 5092 wrote to memory of 3708 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 5092 wrote to memory of 3708 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 5092 wrote to memory of 3708 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 5092 wrote to memory of 3708 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe
PID 3708 wrote to memory of 1072 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 3708 wrote to memory of 1072 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 1072 wrote to memory of 4340 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\wbem\WMIC.exe
PID 1072 wrote to memory of 4340 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\wbem\WMIC.exe
PID 3708 wrote to memory of 2128 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 3708 wrote to memory of 2128 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 3708 wrote to memory of 2128 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Windows\SysWOW64\mshta.exe
PID 3708 wrote to memory of 2168 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 3708 wrote to memory of 2168 N/A C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe C:\Windows\system32\cmd.exe
PID 2168 wrote to memory of 440 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 2168 wrote to memory of 440 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\taskkill.exe
PID 2168 wrote to memory of 1240 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE
PID 2168 wrote to memory of 1240 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\PING.EXE

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe"

C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe"

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\wbem\WMIC.exe

C:\Windows\system32\wbem\wmic.exe shadowcopy delete

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x4f0 0x4f4

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\AppData\Local\Temp\_README_.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\taskkill.exe

taskkill /f /im "9d84da3b539d6a860f8dc5216ced6d01_JaffaCakes118.exe"

C:\Windows\system32\PING.EXE

ping -n 1 127.0.0.1

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 66.209.201.84.in-addr.arpa udp
US 8.8.8.8:53 0.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 104.219.191.52.in-addr.arpa udp
N/A 192.168.0.0:6892 udp
N/A 192.168.0.1:6892 udp
N/A 192.168.0.2:6892 udp
N/A 192.168.0.3:6892 udp
N/A 192.168.0.4:6892 udp
N/A 192.168.0.5:6892 udp
N/A 192.168.0.6:6892 udp
N/A 192.168.0.7:6892 udp
N/A 192.168.0.8:6892 udp
N/A 192.168.0.9:6892 udp
N/A 192.168.0.10:6892 udp
N/A 192.168.0.11:6892 udp
N/A 192.168.0.12:6892 udp
N/A 192.168.0.13:6892 udp
N/A 192.168.0.14:6892 udp
N/A 192.168.0.15:6892 udp
N/A 192.168.0.16:6892 udp
N/A 192.168.0.17:6892 udp
N/A 192.168.0.18:6892 udp
N/A 192.168.0.19:6892 udp
N/A 192.168.0.20:6892 udp
N/A 192.168.0.21:6892 udp
N/A 192.168.0.22:6892 udp
N/A 192.168.0.23:6892 udp
N/A 192.168.0.24:6892 udp
N/A 192.168.0.25:6892 udp
N/A 192.168.0.26:6892 udp
N/A 192.168.0.27:6892 udp
N/A 192.168.0.28:6892 udp
N/A 192.168.0.29:6892 udp
N/A 192.168.0.30:6892 udp
N/A 192.168.0.31:6892 udp
LT 194.165.16.0:6892 udp
LT 194.165.16.1:6892 udp
LT 194.165.16.2:6892 udp
LT 194.165.16.3:6892 udp
LT 194.165.16.4:6892 udp
LT 194.165.16.5:6892 udp
LT 194.165.16.6:6892 udp
LT 194.165.16.7:6892 udp
LT 194.165.16.8:6892 udp
LT 194.165.16.9:6892 udp
LT 194.165.16.10:6892 udp
LT 194.165.16.11:6892 udp
LT 194.165.16.12:6892 udp
LT 194.165.16.13:6892 udp
LT 194.165.16.14:6892 udp
LT 194.165.16.15:6892 udp
LT 194.165.16.16:6892 udp
LT 194.165.16.17:6892 udp
LT 194.165.16.18:6892 udp
LT 194.165.16.19:6892 udp
LT 194.165.16.20:6892 udp
LT 194.165.16.21:6892 udp
LT 194.165.16.22:6892 udp
LT 194.165.16.23:6892 udp
LT 194.165.16.24:6892 udp
LT 194.165.16.25:6892 udp
LT 194.165.16.26:6892 udp
LT 194.165.16.27:6892 udp
LT 194.165.16.28:6892 udp
LT 194.165.16.29:6892 udp
LT 194.165.16.30:6892 udp
LT 194.165.16.31:6892 udp
LT 194.165.16.32:6892 udp
LT 194.165.16.33:6892 udp
LT 194.165.16.34:6892 udp
LT 194.165.16.35:6892 udp
LT 194.165.16.36:6892 udp
LT 194.165.16.37:6892 udp
LT 194.165.16.38:6892 udp
LT 194.165.16.39:6892 udp
LT 194.165.16.40:6892 udp
LT 194.165.16.41:6892 udp
LT 194.165.16.42:6892 udp
LT 194.165.16.43:6892 udp
LT 194.165.16.44:6892 udp
LT 194.165.16.45:6892 udp
LT 194.165.16.46:6892 udp
LT 194.165.16.47:6892 udp
LT 194.165.16.48:6892 udp
LT 194.165.16.49:6892 udp
LT 194.165.16.50:6892 udp
LT 194.165.16.51:6892 udp
LT 194.165.16.52:6892 udp
LT 194.165.16.53:6892 udp
LT 194.165.16.54:6892 udp
LT 194.165.16.55:6892 udp
LT 194.165.16.56:6892 udp
LT 194.165.16.57:6892 udp
LT 194.165.16.58:6892 udp
LT 194.165.16.59:6892 udp
LT 194.165.16.60:6892 udp
LT 194.165.16.61:6892 udp
LT 194.165.16.62:6892 udp
LT 194.165.16.63:6892 udp
LT 194.165.16.64:6892 udp
LT 194.165.16.65:6892 udp
LT 194.165.16.66:6892 udp
LT 194.165.16.67:6892 udp
LT 194.165.16.68:6892 udp
LT 194.165.16.69:6892 udp
LT 194.165.16.70:6892 udp
LT 194.165.16.71:6892 udp
LT 194.165.16.72:6892 udp
LT 194.165.16.73:6892 udp
LT 194.165.16.74:6892 udp
LT 194.165.16.75:6892 udp
LT 194.165.16.76:6892 udp
LT 194.165.16.77:6892 udp
LT 194.165.16.78:6892 udp
LT 194.165.16.79:6892 udp
LT 194.165.16.80:6892 udp
LT 194.165.16.81:6892 udp
LT 194.165.16.82:6892 udp
LT 194.165.16.83:6892 udp
LT 194.165.16.84:6892 udp
LT 194.165.16.85:6892 udp
LT 194.165.16.86:6892 udp
LT 194.165.16.87:6892 udp
LT 194.165.16.88:6892 udp
LT 194.165.16.89:6892 udp
LT 194.165.16.90:6892 udp
LT 194.165.16.91:6892 udp
LT 194.165.16.92:6892 udp
LT 194.165.16.93:6892 udp
LT 194.165.16.94:6892 udp
LT 194.165.16.95:6892 udp
LT 194.165.16.96:6892 udp
LT 194.165.16.97:6892 udp
LT 194.165.16.98:6892 udp
LT 194.165.16.99:6892 udp
LT 194.165.16.100:6892 udp
LT 194.165.16.101:6892 udp
LT 194.165.16.102:6892 udp
LT 194.165.16.103:6892 udp
LT 194.165.16.104:6892 udp
LT 194.165.16.105:6892 udp
LT 194.165.16.106:6892 udp
LT 194.165.16.107:6892 udp
LT 194.165.16.108:6892 udp
LT 194.165.16.109:6892 udp
LT 194.165.16.110:6892 udp
LT 194.165.16.111:6892 udp
LT 194.165.16.112:6892 udp
LT 194.165.16.113:6892 udp
LT 194.165.16.114:6892 udp
LT 194.165.16.115:6892 udp
LT 194.165.16.116:6892 udp
LT 194.165.16.117:6892 udp
LT 194.165.16.118:6892 udp
LT 194.165.16.119:6892 udp
LT 194.165.16.120:6892 udp
LT 194.165.16.121:6892 udp
LT 194.165.16.122:6892 udp
LT 194.165.16.123:6892 udp
LT 194.165.16.124:6892 udp
LT 194.165.16.125:6892 udp
LT 194.165.16.126:6892 udp
LT 194.165.16.127:6892 udp
LT 194.165.16.128:6892 udp
LT 194.165.16.129:6892 udp
LT 194.165.16.130:6892 udp
LT 194.165.16.131:6892 udp
LT 194.165.16.132:6892 udp
LT 194.165.16.133:6892 udp
LT 194.165.16.134:6892 udp
LT 194.165.16.135:6892 udp
LT 194.165.16.136:6892 udp
LT 194.165.16.137:6892 udp
LT 194.165.16.138:6892 udp
LT 194.165.16.139:6892 udp
LT 194.165.16.140:6892 udp
LT 194.165.16.141:6892 udp
LT 194.165.16.142:6892 udp
LT 194.165.16.143:6892 udp
LT 194.165.16.144:6892 udp
LT 194.165.16.145:6892 udp
LT 194.165.16.146:6892 udp
LT 194.165.16.147:6892 udp
LT 194.165.16.148:6892 udp
LT 194.165.16.149:6892 udp
LT 194.165.16.150:6892 udp
LT 194.165.16.151:6892 udp
LT 194.165.16.152:6892 udp
LT 194.165.16.153:6892 udp
LT 194.165.16.154:6892 udp
LT 194.165.16.155:6892 udp
LT 194.165.16.156:6892 udp
LT 194.165.16.157:6892 udp
LT 194.165.16.158:6892 udp
LT 194.165.16.159:6892 udp
LT 194.165.16.160:6892 udp
LT 194.165.16.161:6892 udp
LT 194.165.16.162:6892 udp
LT 194.165.16.163:6892 udp
LT 194.165.16.164:6892 udp
LT 194.165.16.165:6892 udp
LT 194.165.16.166:6892 udp
LT 194.165.16.167:6892 udp
LT 194.165.16.168:6892 udp
LT 194.165.16.169:6892 udp
LT 194.165.16.170:6892 udp
LT 194.165.16.171:6892 udp
LT 194.165.16.172:6892 udp
LT 194.165.16.173:6892 udp
LT 194.165.16.174:6892 udp
LT 194.165.16.175:6892 udp
LT 194.165.16.176:6892 udp
LT 194.165.16.177:6892 udp
LT 194.165.16.178:6892 udp
LT 194.165.16.179:6892 udp
LT 194.165.16.180:6892 udp
LT 194.165.16.181:6892 udp
LT 194.165.16.182:6892 udp
LT 194.165.16.183:6892 udp
LT 194.165.16.184:6892 udp
LT 194.165.16.185:6892 udp
LT 194.165.16.186:6892 udp
LT 194.165.16.187:6892 udp
LT 194.165.16.188:6892 udp
LT 194.165.16.189:6892 udp
LT 194.165.16.190:6892 udp
LT 194.165.16.191:6892 udp
LT 194.165.16.192:6892 udp
LT 194.165.16.193:6892 udp
LT 194.165.16.194:6892 udp
LT 194.165.16.195:6892 udp
LT 194.165.16.196:6892 udp
LT 194.165.16.197:6892 udp
LT 194.165.16.198:6892 udp
LT 194.165.16.199:6892 udp
LT 194.165.16.200:6892 udp
LT 194.165.16.201:6892 udp
LT 194.165.16.202:6892 udp
LT 194.165.16.203:6892 udp
LT 194.165.16.204:6892 udp
LT 194.165.16.205:6892 udp
LT 194.165.16.206:6892 udp
LT 194.165.16.207:6892 udp
LT 194.165.16.208:6892 udp
LT 194.165.16.209:6892 udp
LT 194.165.16.210:6892 udp
LT 194.165.16.211:6892 udp
LT 194.165.16.212:6892 udp
LT 194.165.16.213:6892 udp
LT 194.165.16.214:6892 udp
LT 194.165.16.215:6892 udp
LT 194.165.16.216:6892 udp
LT 194.165.16.217:6892 udp
LT 194.165.16.218:6892 udp
LT 194.165.16.219:6892 udp
LT 194.165.16.220:6892 udp
LT 194.165.16.221:6892 udp
LT 194.165.16.222:6892 udp
LT 194.165.16.223:6892 udp
LT 194.165.16.224:6892 udp
LT 194.165.16.225:6892 udp
LT 194.165.16.226:6892 udp
LT 194.165.16.227:6892 udp
LT 194.165.16.228:6892 udp
LT 194.165.16.229:6892 udp
LT 194.165.16.230:6892 udp
LT 194.165.16.231:6892 udp
LT 194.165.16.232:6892 udp
LT 194.165.16.233:6892 udp
LT 194.165.16.234:6892 udp
LT 194.165.16.235:6892 udp
LT 194.165.16.236:6892 udp
LT 194.165.16.237:6892 udp
LT 194.165.16.238:6892 udp
LT 194.165.16.239:6892 udp
LT 194.165.16.240:6892 udp
LT 194.165.16.241:6892 udp
LT 194.165.16.242:6892 udp
LT 194.165.16.243:6892 udp
LT 194.165.16.244:6892 udp
LT 194.165.16.245:6892 udp
LT 194.165.16.246:6892 udp
LT 194.165.16.247:6892 udp
LT 194.165.16.248:6892 udp
LT 194.165.16.249:6892 udp
LT 194.165.16.250:6892 udp
LT 194.165.16.251:6892 udp
LT 194.165.16.252:6892 udp
LT 194.165.16.253:6892 udp
LT 194.165.16.254:6892 udp
US 8.8.8.8:53 0.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 2.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 3.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 4.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 5.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 6.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 9.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 8.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 7.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 10.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 11.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 12.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 13.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 14.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 15.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 16.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 17.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 18.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 20.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 21.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 19.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 22.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 23.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 24.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 26.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 25.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 28.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 27.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 29.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 30.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 0.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 31.0.0.127.in-addr.arpa udp
US 8.8.8.8:53 1.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 2.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 3.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 4.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 5.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 6.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 7.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 8.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 9.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 10.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 11.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 12.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 13.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 14.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 15.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 16.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 17.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 18.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 19.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 20.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 21.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 22.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 23.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 24.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 26.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 25.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 28.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 27.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 29.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 30.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 0.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 31.0.168.192.in-addr.arpa udp
US 8.8.8.8:53 1.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 3.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 2.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 5.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 4.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 6.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 7.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 8.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 9.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 10.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 11.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 12.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 13.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 14.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 15.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 16.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 17.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 18.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 19.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 20.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 21.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 22.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 23.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 24.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 25.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 26.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 27.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 28.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 29.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 30.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 31.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 33.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 34.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 35.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 36.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 37.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 38.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 39.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 40.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 41.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 42.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 43.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 44.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 45.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 46.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 47.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 48.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 49.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 50.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 51.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 52.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 53.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 54.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 55.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 56.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 58.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 59.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 60.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 61.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 62.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 63.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 64.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 65.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 66.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 67.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 68.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 69.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 70.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 71.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 72.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 73.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 74.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 75.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 76.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 77.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 78.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 79.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 81.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 80.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 82.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 83.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 84.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 86.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 87.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 88.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 89.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 90.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 91.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 92.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 93.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 94.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 95.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 96.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 97.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 98.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 99.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 100.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 101.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 102.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 103.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 104.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 105.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 106.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 107.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 108.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 109.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 110.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 111.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 112.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 113.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 114.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 115.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 116.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 117.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 118.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 119.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 120.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 121.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 122.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 123.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 124.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 125.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 126.16.165.194.in-addr.arpa udp
N/A 127.0.0.0:6892 udp
N/A 127.0.0.1:6892 udp
N/A 127.0.0.2:6892 udp
N/A 127.0.0.3:6892 udp
N/A 127.0.0.4:6892 udp
N/A 127.0.0.5:6892 udp
N/A 127.0.0.6:6892 udp
N/A 127.0.0.7:6892 udp
N/A 127.0.0.8:6892 udp
N/A 127.0.0.9:6892 udp
N/A 127.0.0.10:6892 udp
N/A 127.0.0.11:6892 udp
N/A 127.0.0.12:6892 udp
N/A 127.0.0.13:6892 udp
N/A 127.0.0.14:6892 udp
N/A 127.0.0.15:6892 udp
N/A 127.0.0.16:6892 udp
N/A 127.0.0.17:6892 udp
N/A 127.0.0.18:6892 udp
N/A 127.0.0.19:6892 udp
N/A 127.0.0.20:6892 udp
N/A 127.0.0.21:6892 udp
N/A 127.0.0.22:6892 udp
N/A 127.0.0.23:6892 udp
N/A 127.0.0.24:6892 udp
N/A 127.0.0.25:6892 udp
N/A 127.0.0.26:6892 udp
N/A 127.0.0.27:6892 udp
N/A 127.0.0.28:6892 udp
N/A 127.0.0.29:6892 udp
N/A 127.0.0.30:6892 udp
N/A 127.0.0.31:6892 udp
US 8.8.8.8:53 127.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 128.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 129.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 130.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 131.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 132.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 133.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 134.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 135.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 136.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 138.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 137.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 139.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 140.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 141.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 142.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 143.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 144.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 145.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 146.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 147.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 148.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 149.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 150.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 151.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 152.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 153.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 154.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 155.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 156.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 157.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 158.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 159.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 160.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 161.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 162.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 163.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 164.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 165.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 166.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 168.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 167.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 169.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 170.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 171.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 172.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 173.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 174.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 175.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 176.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 177.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 178.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 179.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 180.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 181.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 182.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 183.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 184.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 185.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 186.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 187.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 188.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 189.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 190.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 191.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 192.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 193.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 194.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 195.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 196.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 197.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 198.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 199.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 200.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 201.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 202.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 203.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 204.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 205.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 206.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 207.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 208.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 209.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 210.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 211.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 212.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 213.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 214.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 215.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 216.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 217.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 218.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 219.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 220.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 221.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 222.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 223.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 224.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 225.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 226.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 227.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 228.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 229.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 230.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 231.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 232.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 233.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 234.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 235.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 236.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 237.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 238.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 239.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 240.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 241.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 242.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 243.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 244.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 245.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 246.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 247.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 248.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 249.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 250.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 251.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 252.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 253.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 254.16.165.194.in-addr.arpa udp
LT 194.165.16.255:6892 udp
LT 194.165.17.0:6892 udp
LT 194.165.17.1:6892 udp
LT 194.165.17.2:6892 udp
LT 194.165.17.3:6892 udp
LT 194.165.17.4:6892 udp
LT 194.165.17.5:6892 udp
LT 194.165.17.6:6892 udp
LT 194.165.17.7:6892 udp
LT 194.165.17.8:6892 udp
LT 194.165.17.9:6892 udp
LT 194.165.17.10:6892 udp
LT 194.165.17.11:6892 udp
LT 194.165.17.12:6892 udp
LT 194.165.17.13:6892 udp
LT 194.165.17.14:6892 udp
LT 194.165.17.15:6892 udp
LT 194.165.17.16:6892 udp
LT 194.165.17.17:6892 udp
LT 194.165.17.18:6892 udp
LT 194.165.17.19:6892 udp
LT 194.165.17.20:6892 udp
LT 194.165.17.21:6892 udp
LT 194.165.17.22:6892 udp
LT 194.165.17.23:6892 udp
LT 194.165.17.24:6892 udp
LT 194.165.17.25:6892 udp
LT 194.165.17.26:6892 udp
LT 194.165.17.27:6892 udp
LT 194.165.17.28:6892 udp
LT 194.165.17.29:6892 udp
LT 194.165.17.30:6892 udp
LT 194.165.17.31:6892 udp
LT 194.165.17.32:6892 udp
LT 194.165.17.33:6892 udp
LT 194.165.17.34:6892 udp
LT 194.165.17.35:6892 udp
LT 194.165.17.36:6892 udp
LT 194.165.17.37:6892 udp
LT 194.165.17.38:6892 udp
LT 194.165.17.39:6892 udp
LT 194.165.17.40:6892 udp
LT 194.165.17.41:6892 udp
LT 194.165.17.42:6892 udp
LT 194.165.17.43:6892 udp
LT 194.165.17.44:6892 udp
LT 194.165.17.45:6892 udp
LT 194.165.17.46:6892 udp
LT 194.165.17.47:6892 udp
LT 194.165.17.48:6892 udp
LT 194.165.17.49:6892 udp
LT 194.165.17.50:6892 udp
LT 194.165.17.51:6892 udp
LT 194.165.17.52:6892 udp
LT 194.165.17.53:6892 udp
LT 194.165.17.54:6892 udp
LT 194.165.17.55:6892 udp
LT 194.165.17.56:6892 udp
LT 194.165.17.57:6892 udp
LT 194.165.17.58:6892 udp
LT 194.165.17.59:6892 udp
LT 194.165.17.60:6892 udp
LT 194.165.17.61:6892 udp
LT 194.165.17.62:6892 udp
LT 194.165.17.63:6892 udp
LT 194.165.17.64:6892 udp
LT 194.165.17.65:6892 udp
LT 194.165.17.66:6892 udp
LT 194.165.17.67:6892 udp
LT 194.165.17.68:6892 udp
LT 194.165.17.69:6892 udp
LT 194.165.17.70:6892 udp
LT 194.165.17.71:6892 udp
LT 194.165.17.72:6892 udp
LT 194.165.17.73:6892 udp
LT 194.165.17.74:6892 udp
LT 194.165.17.75:6892 udp
LT 194.165.17.76:6892 udp
LT 194.165.17.77:6892 udp
LT 194.165.17.78:6892 udp
LT 194.165.17.79:6892 udp
LT 194.165.17.80:6892 udp
LT 194.165.17.81:6892 udp
LT 194.165.17.82:6892 udp
LT 194.165.17.83:6892 udp
LT 194.165.17.84:6892 udp
LT 194.165.17.85:6892 udp
LT 194.165.17.86:6892 udp
LT 194.165.17.87:6892 udp
LT 194.165.17.88:6892 udp
LT 194.165.17.89:6892 udp
LT 194.165.17.90:6892 udp
LT 194.165.17.91:6892 udp
LT 194.165.17.92:6892 udp
LT 194.165.17.93:6892 udp
LT 194.165.17.94:6892 udp
LT 194.165.17.95:6892 udp
LT 194.165.17.96:6892 udp
LT 194.165.17.97:6892 udp
LT 194.165.17.98:6892 udp
LT 194.165.17.99:6892 udp
LT 194.165.17.100:6892 udp
LT 194.165.17.101:6892 udp
LT 194.165.17.102:6892 udp
LT 194.165.17.103:6892 udp
LT 194.165.17.104:6892 udp
LT 194.165.17.105:6892 udp
LT 194.165.17.106:6892 udp
LT 194.165.17.107:6892 udp
LT 194.165.17.108:6892 udp
LT 194.165.17.109:6892 udp
LT 194.165.17.110:6892 udp
LT 194.165.17.111:6892 udp
LT 194.165.17.112:6892 udp
LT 194.165.17.113:6892 udp
LT 194.165.17.114:6892 udp
LT 194.165.17.115:6892 udp
LT 194.165.17.116:6892 udp
LT 194.165.17.117:6892 udp
LT 194.165.17.118:6892 udp
LT 194.165.17.119:6892 udp
LT 194.165.17.120:6892 udp
LT 194.165.17.121:6892 udp
LT 194.165.17.122:6892 udp
LT 194.165.17.123:6892 udp
LT 194.165.17.124:6892 udp
LT 194.165.17.125:6892 udp
LT 194.165.17.126:6892 udp
LT 194.165.17.127:6892 udp
LT 194.165.17.128:6892 udp
LT 194.165.17.129:6892 udp
LT 194.165.17.130:6892 udp
LT 194.165.17.131:6892 udp
LT 194.165.17.132:6892 udp
LT 194.165.17.133:6892 udp
LT 194.165.17.134:6892 udp
LT 194.165.17.135:6892 udp
LT 194.165.17.136:6892 udp
LT 194.165.17.137:6892 udp
LT 194.165.17.138:6892 udp
LT 194.165.17.139:6892 udp
LT 194.165.17.140:6892 udp
LT 194.165.17.141:6892 udp
LT 194.165.17.142:6892 udp
LT 194.165.17.143:6892 udp
LT 194.165.17.144:6892 udp
LT 194.165.17.145:6892 udp
LT 194.165.17.146:6892 udp
LT 194.165.17.147:6892 udp
LT 194.165.17.148:6892 udp
LT 194.165.17.149:6892 udp
LT 194.165.17.150:6892 udp
LT 194.165.17.151:6892 udp
LT 194.165.17.152:6892 udp
LT 194.165.17.153:6892 udp
LT 194.165.17.154:6892 udp
LT 194.165.17.155:6892 udp
LT 194.165.17.156:6892 udp
LT 194.165.17.157:6892 udp
LT 194.165.17.158:6892 udp
LT 194.165.17.159:6892 udp
LT 194.165.17.160:6892 udp
LT 194.165.17.161:6892 udp
LT 194.165.17.162:6892 udp
LT 194.165.17.163:6892 udp
LT 194.165.17.164:6892 udp
LT 194.165.17.165:6892 udp
LT 194.165.17.166:6892 udp
LT 194.165.17.167:6892 udp
LT 194.165.17.168:6892 udp
LT 194.165.17.169:6892 udp
LT 194.165.17.170:6892 udp
LT 194.165.17.171:6892 udp
LT 194.165.17.172:6892 udp
LT 194.165.17.173:6892 udp
LT 194.165.17.174:6892 udp
LT 194.165.17.175:6892 udp
LT 194.165.17.176:6892 udp
LT 194.165.17.177:6892 udp
LT 194.165.17.178:6892 udp
LT 194.165.17.179:6892 udp
LT 194.165.17.180:6892 udp
LT 194.165.17.181:6892 udp
LT 194.165.17.182:6892 udp
LT 194.165.17.183:6892 udp
LT 194.165.17.184:6892 udp
LT 194.165.17.185:6892 udp
LT 194.165.17.186:6892 udp
LT 194.165.17.187:6892 udp
LT 194.165.17.188:6892 udp
LT 194.165.17.189:6892 udp
LT 194.165.17.190:6892 udp
LT 194.165.17.191:6892 udp
LT 194.165.17.192:6892 udp
LT 194.165.17.193:6892 udp
LT 194.165.17.194:6892 udp
LT 194.165.17.195:6892 udp
LT 194.165.17.196:6892 udp
LT 194.165.17.197:6892 udp
LT 194.165.17.198:6892 udp
LT 194.165.17.199:6892 udp
LT 194.165.17.200:6892 udp
LT 194.165.17.201:6892 udp
LT 194.165.17.202:6892 udp
LT 194.165.17.203:6892 udp
LT 194.165.17.204:6892 udp
LT 194.165.17.205:6892 udp
LT 194.165.17.206:6892 udp
LT 194.165.17.207:6892 udp
LT 194.165.17.208:6892 udp
LT 194.165.17.209:6892 udp
LT 194.165.17.210:6892 udp
LT 194.165.17.211:6892 udp
LT 194.165.17.212:6892 udp
LT 194.165.17.213:6892 udp
LT 194.165.17.214:6892 udp
LT 194.165.17.215:6892 udp
LT 194.165.17.216:6892 udp
LT 194.165.17.217:6892 udp
LT 194.165.17.218:6892 udp
LT 194.165.17.219:6892 udp
LT 194.165.17.220:6892 udp
LT 194.165.17.221:6892 udp
LT 194.165.17.222:6892 udp
LT 194.165.17.223:6892 udp
LT 194.165.17.224:6892 udp
LT 194.165.17.225:6892 udp
LT 194.165.17.226:6892 udp
LT 194.165.17.227:6892 udp
LT 194.165.17.228:6892 udp
LT 194.165.17.229:6892 udp
LT 194.165.17.230:6892 udp
LT 194.165.17.231:6892 udp
LT 194.165.17.232:6892 udp
LT 194.165.17.233:6892 udp
LT 194.165.17.234:6892 udp
LT 194.165.17.235:6892 udp
LT 194.165.17.236:6892 udp
LT 194.165.17.237:6892 udp
LT 194.165.17.238:6892 udp
LT 194.165.17.239:6892 udp
LT 194.165.17.240:6892 udp
LT 194.165.17.241:6892 udp
LT 194.165.17.242:6892 udp
LT 194.165.17.243:6892 udp
LT 194.165.17.244:6892 udp
LT 194.165.17.245:6892 udp
LT 194.165.17.246:6892 udp
LT 194.165.17.247:6892 udp
LT 194.165.17.248:6892 udp
LT 194.165.17.249:6892 udp
LT 194.165.17.250:6892 udp
LT 194.165.17.251:6892 udp
LT 194.165.17.252:6892 udp
LT 194.165.17.253:6892 udp
LT 194.165.17.254:6892 udp
US 8.8.8.8:53 255.16.165.194.in-addr.arpa udp
US 8.8.8.8:53 0.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 1.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 2.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 3.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 5.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 7.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 8.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 9.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 6.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 10.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 11.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 13.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 12.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 14.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 15.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 16.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 17.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 18.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 19.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 20.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 22.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 24.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 21.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 23.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 25.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 26.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 27.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 28.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 29.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 31.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 30.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 32.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 34.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 33.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 35.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 37.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 38.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 39.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 40.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 36.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 42.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 43.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 41.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 47.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 46.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 44.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 45.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 48.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 49.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 50.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 51.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 52.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 54.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 53.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 55.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 56.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 58.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 57.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 59.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 60.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 61.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 62.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 63.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 64.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 65.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 67.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 66.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 68.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 69.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 70.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 71.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 72.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 73.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 74.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 75.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 76.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 77.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 78.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 79.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 81.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 82.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 83.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 84.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 85.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 86.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 87.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 88.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 90.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 89.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 91.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 92.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 93.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 94.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 95.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 96.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 97.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 98.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 99.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 100.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 101.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 102.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 103.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 104.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 105.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 106.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 107.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 108.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 109.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 110.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 111.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 112.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 113.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 114.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 115.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 116.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 117.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 118.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 120.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 121.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 122.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 123.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 124.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 125.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 126.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 127.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 128.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 129.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 130.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 131.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 132.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 133.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 134.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 136.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 137.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 138.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 139.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 140.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 141.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 142.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 143.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 144.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 145.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 146.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 147.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 148.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 149.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 150.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 151.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 152.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 153.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 154.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 155.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 156.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 157.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 158.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 159.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 160.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 161.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 162.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 163.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 164.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 166.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 165.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 167.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 168.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 169.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 170.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 171.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 172.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 173.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 174.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 175.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 176.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 177.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 178.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 179.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 180.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 181.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 182.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 183.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 184.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 185.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 186.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 187.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 188.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 189.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 190.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 191.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 192.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 193.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 194.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 195.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 196.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 197.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 198.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 199.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 200.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 201.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 202.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 203.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 204.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 205.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 206.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 207.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 208.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 209.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 210.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 211.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 212.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 213.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 214.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 215.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 216.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 217.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 218.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 219.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 220.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 221.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 222.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 223.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 224.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 225.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 226.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 227.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 228.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 229.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 230.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 231.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 232.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 233.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 234.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 235.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 236.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 237.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 238.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 239.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 240.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 241.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 242.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 243.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 244.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 245.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 246.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 247.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 248.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 250.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 251.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 252.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 253.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 254.17.165.194.in-addr.arpa udp
LT 194.165.17.255:6892 udp
US 8.8.8.8:53 255.17.165.194.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 8.8.8.8:53 56.163.245.4.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
N/A 127.0.0.0:6892 udp
N/A 127.0.0.1:6892 udp
N/A 127.0.0.2:6892 udp
N/A 127.0.0.3:6892 udp
N/A 127.0.0.4:6892 udp
N/A 127.0.0.5:6892 udp
N/A 127.0.0.6:6892 udp
N/A 127.0.0.7:6892 udp
N/A 127.0.0.8:6892 udp
N/A 127.0.0.9:6892 udp
N/A 127.0.0.10:6892 udp
N/A 127.0.0.11:6892 udp
N/A 127.0.0.12:6892 udp
N/A 127.0.0.13:6892 udp
N/A 127.0.0.14:6892 udp
N/A 127.0.0.15:6892 udp
N/A 127.0.0.16:6892 udp
N/A 127.0.0.17:6892 udp
N/A 127.0.0.18:6892 udp
N/A 127.0.0.19:6892 udp
N/A 127.0.0.20:6892 udp
N/A 127.0.0.21:6892 udp
N/A 127.0.0.22:6892 udp
N/A 127.0.0.23:6892 udp
N/A 127.0.0.24:6892 udp
N/A 127.0.0.25:6892 udp
N/A 127.0.0.26:6892 udp
N/A 127.0.0.27:6892 udp
N/A 127.0.0.28:6892 udp
N/A 127.0.0.29:6892 udp
N/A 127.0.0.30:6892 udp
N/A 127.0.0.31:6892 udp
N/A 192.168.0.0:6892 udp
N/A 192.168.0.1:6892 udp
N/A 192.168.0.2:6892 udp
N/A 192.168.0.3:6892 udp
N/A 192.168.0.4:6892 udp
N/A 192.168.0.5:6892 udp
N/A 192.168.0.6:6892 udp
N/A 192.168.0.7:6892 udp
N/A 192.168.0.8:6892 udp
N/A 192.168.0.9:6892 udp
N/A 192.168.0.10:6892 udp
N/A 192.168.0.11:6892 udp
N/A 192.168.0.12:6892 udp
N/A 192.168.0.13:6892 udp
N/A 192.168.0.14:6892 udp
N/A 192.168.0.15:6892 udp
N/A 192.168.0.16:6892 udp
N/A 192.168.0.17:6892 udp
N/A 192.168.0.18:6892 udp
N/A 192.168.0.19:6892 udp
N/A 192.168.0.20:6892 udp
N/A 192.168.0.21:6892 udp
N/A 192.168.0.22:6892 udp
N/A 192.168.0.23:6892 udp
N/A 192.168.0.24:6892 udp
N/A 192.168.0.25:6892 udp
N/A 192.168.0.26:6892 udp
N/A 192.168.0.27:6892 udp
N/A 192.168.0.28:6892 udp
N/A 192.168.0.29:6892 udp
N/A 192.168.0.30:6892 udp
N/A 192.168.0.31:6892 udp
LT 194.165.16.0:6892 udp
LT 194.165.16.1:6892 udp
LT 194.165.16.2:6892 udp
LT 194.165.16.3:6892 udp
LT 194.165.16.4:6892 udp
LT 194.165.16.5:6892 udp
LT 194.165.16.6:6892 udp
LT 194.165.16.7:6892 udp
LT 194.165.16.8:6892 udp
LT 194.165.16.9:6892 udp
LT 194.165.16.10:6892 udp
LT 194.165.16.11:6892 udp
LT 194.165.16.12:6892 udp
LT 194.165.16.13:6892 udp
LT 194.165.16.14:6892 udp
LT 194.165.16.15:6892 udp
LT 194.165.16.16:6892 udp
LT 194.165.16.17:6892 udp
LT 194.165.16.18:6892 udp
LT 194.165.16.19:6892 udp
LT 194.165.16.20:6892 udp
LT 194.165.16.21:6892 udp
LT 194.165.16.22:6892 udp
LT 194.165.16.23:6892 udp
LT 194.165.16.24:6892 udp
LT 194.165.16.25:6892 udp
LT 194.165.16.26:6892 udp
LT 194.165.16.27:6892 udp
LT 194.165.16.28:6892 udp
LT 194.165.16.29:6892 udp
LT 194.165.16.30:6892 udp
LT 194.165.16.31:6892 udp
LT 194.165.16.32:6892 udp
LT 194.165.16.33:6892 udp
LT 194.165.16.34:6892 udp
LT 194.165.16.35:6892 udp
LT 194.165.16.36:6892 udp
LT 194.165.16.37:6892 udp
LT 194.165.16.38:6892 udp
LT 194.165.16.39:6892 udp
LT 194.165.16.40:6892 udp
LT 194.165.16.41:6892 udp
LT 194.165.16.42:6892 udp
LT 194.165.16.43:6892 udp
LT 194.165.16.44:6892 udp
LT 194.165.16.45:6892 udp
LT 194.165.16.46:6892 udp
LT 194.165.16.47:6892 udp
LT 194.165.16.48:6892 udp
LT 194.165.16.49:6892 udp
LT 194.165.16.50:6892 udp
LT 194.165.16.51:6892 udp
LT 194.165.16.52:6892 udp
LT 194.165.16.53:6892 udp
LT 194.165.16.54:6892 udp
LT 194.165.16.55:6892 udp
LT 194.165.16.56:6892 udp
LT 194.165.16.57:6892 udp
LT 194.165.16.58:6892 udp
LT 194.165.16.59:6892 udp
LT 194.165.16.60:6892 udp
LT 194.165.16.61:6892 udp
LT 194.165.16.62:6892 udp
LT 194.165.16.63:6892 udp
LT 194.165.16.64:6892 udp
LT 194.165.16.65:6892 udp
LT 194.165.16.66:6892 udp
LT 194.165.16.67:6892 udp
LT 194.165.16.68:6892 udp
LT 194.165.16.69:6892 udp
LT 194.165.16.70:6892 udp
LT 194.165.16.71:6892 udp
LT 194.165.16.72:6892 udp
LT 194.165.16.73:6892 udp
LT 194.165.16.74:6892 udp
LT 194.165.16.75:6892 udp
LT 194.165.16.76:6892 udp
LT 194.165.16.77:6892 udp
LT 194.165.16.78:6892 udp
LT 194.165.16.79:6892 udp
LT 194.165.16.80:6892 udp
LT 194.165.16.81:6892 udp
LT 194.165.16.82:6892 udp
LT 194.165.16.83:6892 udp
LT 194.165.16.84:6892 udp
LT 194.165.16.85:6892 udp
LT 194.165.16.86:6892 udp
LT 194.165.16.87:6892 udp
LT 194.165.16.88:6892 udp
LT 194.165.16.89:6892 udp
LT 194.165.16.90:6892 udp
LT 194.165.16.91:6892 udp
LT 194.165.16.92:6892 udp
LT 194.165.16.93:6892 udp
LT 194.165.16.94:6892 udp
LT 194.165.16.95:6892 udp
LT 194.165.16.96:6892 udp
LT 194.165.16.97:6892 udp
LT 194.165.16.98:6892 udp
LT 194.165.16.99:6892 udp
LT 194.165.16.100:6892 udp
LT 194.165.16.101:6892 udp
LT 194.165.16.102:6892 udp
LT 194.165.16.103:6892 udp
LT 194.165.16.104:6892 udp
LT 194.165.16.105:6892 udp
LT 194.165.16.106:6892 udp
LT 194.165.16.107:6892 udp
LT 194.165.16.108:6892 udp
LT 194.165.16.109:6892 udp
LT 194.165.16.110:6892 udp
LT 194.165.16.111:6892 udp
LT 194.165.16.112:6892 udp
LT 194.165.16.113:6892 udp
LT 194.165.16.114:6892 udp
LT 194.165.16.115:6892 udp
LT 194.165.16.116:6892 udp
LT 194.165.16.117:6892 udp
LT 194.165.16.118:6892 udp
LT 194.165.16.119:6892 udp
LT 194.165.16.120:6892 udp
LT 194.165.16.121:6892 udp
LT 194.165.16.122:6892 udp
LT 194.165.16.123:6892 udp
LT 194.165.16.124:6892 udp
LT 194.165.16.125:6892 udp
LT 194.165.16.126:6892 udp
LT 194.165.16.127:6892 udp
LT 194.165.16.128:6892 udp
LT 194.165.16.129:6892 udp
LT 194.165.16.130:6892 udp
LT 194.165.16.131:6892 udp
LT 194.165.16.132:6892 udp
LT 194.165.16.133:6892 udp
LT 194.165.16.134:6892 udp
LT 194.165.16.135:6892 udp
LT 194.165.16.136:6892 udp
LT 194.165.16.137:6892 udp
LT 194.165.16.138:6892 udp
LT 194.165.16.139:6892 udp
LT 194.165.16.140:6892 udp
LT 194.165.16.141:6892 udp
LT 194.165.16.142:6892 udp
LT 194.165.16.143:6892 udp
LT 194.165.16.144:6892 udp
LT 194.165.16.145:6892 udp
LT 194.165.16.146:6892 udp
LT 194.165.16.147:6892 udp
LT 194.165.16.148:6892 udp
LT 194.165.16.149:6892 udp
LT 194.165.16.150:6892 udp
LT 194.165.16.151:6892 udp
LT 194.165.16.152:6892 udp
LT 194.165.16.153:6892 udp
LT 194.165.16.154:6892 udp
LT 194.165.16.155:6892 udp
LT 194.165.16.156:6892 udp
LT 194.165.16.157:6892 udp
LT 194.165.16.158:6892 udp
LT 194.165.16.159:6892 udp
LT 194.165.16.160:6892 udp
LT 194.165.16.161:6892 udp
LT 194.165.16.162:6892 udp
LT 194.165.16.163:6892 udp
LT 194.165.16.164:6892 udp
LT 194.165.16.165:6892 udp
LT 194.165.16.166:6892 udp
LT 194.165.16.167:6892 udp
LT 194.165.16.168:6892 udp
LT 194.165.16.169:6892 udp
LT 194.165.16.170:6892 udp
LT 194.165.16.171:6892 udp
LT 194.165.16.172:6892 udp
LT 194.165.16.173:6892 udp
LT 194.165.16.174:6892 udp
LT 194.165.16.175:6892 udp
LT 194.165.16.176:6892 udp
LT 194.165.16.177:6892 udp
LT 194.165.16.178:6892 udp
LT 194.165.16.179:6892 udp
LT 194.165.16.180:6892 udp
LT 194.165.16.181:6892 udp
LT 194.165.16.182:6892 udp
LT 194.165.16.183:6892 udp
LT 194.165.16.184:6892 udp
LT 194.165.16.185:6892 udp
LT 194.165.16.186:6892 udp
LT 194.165.16.187:6892 udp
LT 194.165.16.188:6892 udp
LT 194.165.16.189:6892 udp
LT 194.165.16.190:6892 udp
LT 194.165.16.191:6892 udp
LT 194.165.16.192:6892 udp
LT 194.165.16.193:6892 udp
LT 194.165.16.194:6892 udp
LT 194.165.16.195:6892 udp
LT 194.165.16.196:6892 udp
LT 194.165.16.197:6892 udp
LT 194.165.16.198:6892 udp
LT 194.165.16.199:6892 udp
LT 194.165.16.200:6892 udp
LT 194.165.16.201:6892 udp
LT 194.165.16.202:6892 udp
LT 194.165.16.203:6892 udp
LT 194.165.16.204:6892 udp
LT 194.165.16.205:6892 udp
LT 194.165.16.206:6892 udp
LT 194.165.16.207:6892 udp
LT 194.165.16.208:6892 udp
LT 194.165.16.209:6892 udp
LT 194.165.16.210:6892 udp
LT 194.165.16.211:6892 udp
LT 194.165.16.212:6892 udp
LT 194.165.16.213:6892 udp
LT 194.165.16.214:6892 udp
LT 194.165.16.215:6892 udp
LT 194.165.16.216:6892 udp
LT 194.165.16.217:6892 udp
LT 194.165.16.218:6892 udp
LT 194.165.16.219:6892 udp
LT 194.165.16.220:6892 udp
LT 194.165.16.221:6892 udp
LT 194.165.16.222:6892 udp
LT 194.165.16.223:6892 udp
LT 194.165.16.224:6892 udp
LT 194.165.16.225:6892 udp
LT 194.165.16.226:6892 udp
LT 194.165.16.227:6892 udp
LT 194.165.16.228:6892 udp
LT 194.165.16.229:6892 udp
LT 194.165.16.230:6892 udp
LT 194.165.16.231:6892 udp
LT 194.165.16.232:6892 udp
LT 194.165.16.233:6892 udp
LT 194.165.16.234:6892 udp
LT 194.165.16.235:6892 udp
LT 194.165.16.236:6892 udp
LT 194.165.16.237:6892 udp
LT 194.165.16.238:6892 udp
LT 194.165.16.239:6892 udp
LT 194.165.16.240:6892 udp
LT 194.165.16.241:6892 udp
LT 194.165.16.242:6892 udp
LT 194.165.16.243:6892 udp
LT 194.165.16.244:6892 udp
LT 194.165.16.245:6892 udp
LT 194.165.16.246:6892 udp
LT 194.165.16.247:6892 udp
LT 194.165.16.248:6892 udp
LT 194.165.16.249:6892 udp
LT 194.165.16.250:6892 udp
LT 194.165.16.251:6892 udp
LT 194.165.16.252:6892 udp
LT 194.165.16.253:6892 udp
LT 194.165.16.254:6892 udp
LT 194.165.16.255:6892 udp
LT 194.165.17.0:6892 udp
LT 194.165.17.1:6892 udp
LT 194.165.17.2:6892 udp
LT 194.165.17.3:6892 udp
LT 194.165.17.4:6892 udp
LT 194.165.17.5:6892 udp
LT 194.165.17.6:6892 udp
LT 194.165.17.7:6892 udp
LT 194.165.17.8:6892 udp
LT 194.165.17.9:6892 udp
LT 194.165.17.10:6892 udp
LT 194.165.17.11:6892 udp
LT 194.165.17.12:6892 udp
LT 194.165.17.13:6892 udp
LT 194.165.17.14:6892 udp
LT 194.165.17.15:6892 udp
LT 194.165.17.16:6892 udp
LT 194.165.17.17:6892 udp
LT 194.165.17.18:6892 udp
LT 194.165.17.19:6892 udp
LT 194.165.17.20:6892 udp
LT 194.165.17.21:6892 udp
LT 194.165.17.22:6892 udp
LT 194.165.17.23:6892 udp
LT 194.165.17.24:6892 udp
LT 194.165.17.25:6892 udp
LT 194.165.17.26:6892 udp
LT 194.165.17.27:6892 udp
LT 194.165.17.28:6892 udp
LT 194.165.17.29:6892 udp
LT 194.165.17.30:6892 udp
LT 194.165.17.31:6892 udp
LT 194.165.17.32:6892 udp
LT 194.165.17.33:6892 udp
LT 194.165.17.34:6892 udp
LT 194.165.17.35:6892 udp
LT 194.165.17.36:6892 udp
LT 194.165.17.37:6892 udp
LT 194.165.17.38:6892 udp
LT 194.165.17.39:6892 udp
LT 194.165.17.40:6892 udp
LT 194.165.17.41:6892 udp
LT 194.165.17.42:6892 udp
LT 194.165.17.43:6892 udp
LT 194.165.17.44:6892 udp
LT 194.165.17.45:6892 udp
LT 194.165.17.46:6892 udp
LT 194.165.17.47:6892 udp
LT 194.165.17.48:6892 udp
LT 194.165.17.49:6892 udp
LT 194.165.17.50:6892 udp
LT 194.165.17.51:6892 udp
LT 194.165.17.52:6892 udp
LT 194.165.17.53:6892 udp
LT 194.165.17.54:6892 udp
LT 194.165.17.55:6892 udp
LT 194.165.17.56:6892 udp
LT 194.165.17.57:6892 udp
LT 194.165.17.58:6892 udp
LT 194.165.17.59:6892 udp
LT 194.165.17.60:6892 udp
LT 194.165.17.61:6892 udp
LT 194.165.17.62:6892 udp
LT 194.165.17.63:6892 udp
LT 194.165.17.64:6892 udp
LT 194.165.17.65:6892 udp
LT 194.165.17.66:6892 udp
LT 194.165.17.67:6892 udp
LT 194.165.17.68:6892 udp
LT 194.165.17.69:6892 udp
LT 194.165.17.70:6892 udp
LT 194.165.17.71:6892 udp
LT 194.165.17.72:6892 udp
LT 194.165.17.73:6892 udp
LT 194.165.17.74:6892 udp
LT 194.165.17.75:6892 udp
LT 194.165.17.76:6892 udp
LT 194.165.17.77:6892 udp
LT 194.165.17.78:6892 udp
LT 194.165.17.79:6892 udp
LT 194.165.17.80:6892 udp
LT 194.165.17.81:6892 udp
LT 194.165.17.82:6892 udp
LT 194.165.17.83:6892 udp
LT 194.165.17.84:6892 udp
LT 194.165.17.85:6892 udp
LT 194.165.17.86:6892 udp
LT 194.165.17.87:6892 udp
LT 194.165.17.88:6892 udp
LT 194.165.17.89:6892 udp
LT 194.165.17.90:6892 udp
LT 194.165.17.91:6892 udp
LT 194.165.17.92:6892 udp
LT 194.165.17.93:6892 udp
LT 194.165.17.94:6892 udp
LT 194.165.17.95:6892 udp
LT 194.165.17.96:6892 udp
LT 194.165.17.97:6892 udp
LT 194.165.17.98:6892 udp
LT 194.165.17.99:6892 udp
LT 194.165.17.100:6892 udp
LT 194.165.17.101:6892 udp
LT 194.165.17.102:6892 udp
LT 194.165.17.103:6892 udp
LT 194.165.17.104:6892 udp
LT 194.165.17.105:6892 udp
LT 194.165.17.106:6892 udp
LT 194.165.17.107:6892 udp
LT 194.165.17.108:6892 udp
LT 194.165.17.109:6892 udp
LT 194.165.17.110:6892 udp
LT 194.165.17.111:6892 udp
LT 194.165.17.112:6892 udp
LT 194.165.17.113:6892 udp
LT 194.165.17.114:6892 udp
LT 194.165.17.115:6892 udp
LT 194.165.17.116:6892 udp
LT 194.165.17.117:6892 udp
LT 194.165.17.118:6892 udp
LT 194.165.17.119:6892 udp
LT 194.165.17.120:6892 udp
LT 194.165.17.121:6892 udp
LT 194.165.17.122:6892 udp
LT 194.165.17.123:6892 udp
LT 194.165.17.124:6892 udp
LT 194.165.17.125:6892 udp
LT 194.165.17.126:6892 udp
LT 194.165.17.127:6892 udp
LT 194.165.17.128:6892 udp
LT 194.165.17.129:6892 udp
LT 194.165.17.130:6892 udp
LT 194.165.17.131:6892 udp
LT 194.165.17.132:6892 udp
LT 194.165.17.133:6892 udp
LT 194.165.17.134:6892 udp
LT 194.165.17.135:6892 udp
LT 194.165.17.136:6892 udp
LT 194.165.17.137:6892 udp
LT 194.165.17.138:6892 udp
LT 194.165.17.139:6892 udp
LT 194.165.17.140:6892 udp
LT 194.165.17.141:6892 udp
LT 194.165.17.142:6892 udp
LT 194.165.17.143:6892 udp
LT 194.165.17.144:6892 udp
LT 194.165.17.145:6892 udp
LT 194.165.17.146:6892 udp
LT 194.165.17.147:6892 udp
LT 194.165.17.148:6892 udp
LT 194.165.17.149:6892 udp
LT 194.165.17.150:6892 udp
LT 194.165.17.151:6892 udp
LT 194.165.17.152:6892 udp
LT 194.165.17.153:6892 udp
LT 194.165.17.154:6892 udp
LT 194.165.17.155:6892 udp
LT 194.165.17.156:6892 udp
LT 194.165.17.157:6892 udp
LT 194.165.17.158:6892 udp
LT 194.165.17.159:6892 udp
LT 194.165.17.160:6892 udp
LT 194.165.17.161:6892 udp
LT 194.165.17.162:6892 udp
LT 194.165.17.163:6892 udp
LT 194.165.17.164:6892 udp
LT 194.165.17.165:6892 udp
LT 194.165.17.166:6892 udp
LT 194.165.17.167:6892 udp
LT 194.165.17.168:6892 udp
LT 194.165.17.169:6892 udp
LT 194.165.17.170:6892 udp
LT 194.165.17.171:6892 udp
LT 194.165.17.172:6892 udp
LT 194.165.17.173:6892 udp
LT 194.165.17.174:6892 udp
LT 194.165.17.175:6892 udp
LT 194.165.17.176:6892 udp
LT 194.165.17.177:6892 udp
LT 194.165.17.178:6892 udp
LT 194.165.17.179:6892 udp
LT 194.165.17.180:6892 udp
LT 194.165.17.181:6892 udp
LT 194.165.17.182:6892 udp
LT 194.165.17.183:6892 udp
LT 194.165.17.184:6892 udp
LT 194.165.17.185:6892 udp
LT 194.165.17.186:6892 udp
LT 194.165.17.187:6892 udp
LT 194.165.17.188:6892 udp
LT 194.165.17.189:6892 udp
LT 194.165.17.190:6892 udp
LT 194.165.17.191:6892 udp
LT 194.165.17.192:6892 udp
LT 194.165.17.193:6892 udp
LT 194.165.17.194:6892 udp
LT 194.165.17.195:6892 udp
LT 194.165.17.196:6892 udp
LT 194.165.17.197:6892 udp
LT 194.165.17.198:6892 udp
LT 194.165.17.199:6892 udp
LT 194.165.17.200:6892 udp
LT 194.165.17.201:6892 udp
LT 194.165.17.202:6892 udp
LT 194.165.17.203:6892 udp
LT 194.165.17.204:6892 udp
LT 194.165.17.205:6892 udp
LT 194.165.17.206:6892 udp
LT 194.165.17.207:6892 udp
LT 194.165.17.208:6892 udp
LT 194.165.17.209:6892 udp
LT 194.165.17.210:6892 udp
LT 194.165.17.211:6892 udp
LT 194.165.17.212:6892 udp
LT 194.165.17.213:6892 udp
LT 194.165.17.214:6892 udp
LT 194.165.17.215:6892 udp
LT 194.165.17.216:6892 udp
LT 194.165.17.217:6892 udp
LT 194.165.17.218:6892 udp
LT 194.165.17.219:6892 udp
LT 194.165.17.220:6892 udp
LT 194.165.17.221:6892 udp
LT 194.165.17.222:6892 udp
LT 194.165.17.223:6892 udp
LT 194.165.17.224:6892 udp
LT 194.165.17.225:6892 udp
LT 194.165.17.226:6892 udp
LT 194.165.17.227:6892 udp
LT 194.165.17.228:6892 udp
LT 194.165.17.229:6892 udp
LT 194.165.17.230:6892 udp
LT 194.165.17.231:6892 udp
LT 194.165.17.232:6892 udp
LT 194.165.17.233:6892 udp
LT 194.165.17.234:6892 udp
LT 194.165.17.235:6892 udp
LT 194.165.17.236:6892 udp
LT 194.165.17.237:6892 udp
LT 194.165.17.238:6892 udp
LT 194.165.17.239:6892 udp
LT 194.165.17.240:6892 udp
LT 194.165.17.241:6892 udp
LT 194.165.17.242:6892 udp
LT 194.165.17.243:6892 udp
LT 194.165.17.244:6892 udp
LT 194.165.17.245:6892 udp
LT 194.165.17.246:6892 udp
LT 194.165.17.247:6892 udp
LT 194.165.17.248:6892 udp
LT 194.165.17.249:6892 udp
LT 194.165.17.250:6892 udp
LT 194.165.17.251:6892 udp
LT 194.165.17.252:6892 udp
LT 194.165.17.253:6892 udp
LT 194.165.17.254:6892 udp
LT 194.165.17.255:6892 udp
N/A 127.0.0.0:6892 udp
N/A 127.0.0.1:6892 udp
N/A 127.0.0.2:6892 udp
N/A 127.0.0.3:6892 udp
N/A 127.0.0.4:6892 udp
N/A 127.0.0.5:6892 udp
N/A 127.0.0.6:6892 udp
N/A 127.0.0.7:6892 udp
N/A 127.0.0.8:6892 udp
N/A 127.0.0.9:6892 udp
N/A 127.0.0.10:6892 udp
N/A 127.0.0.11:6892 udp
N/A 127.0.0.12:6892 udp
N/A 127.0.0.13:6892 udp
N/A 127.0.0.14:6892 udp
N/A 127.0.0.15:6892 udp
N/A 127.0.0.16:6892 udp
N/A 127.0.0.17:6892 udp
N/A 127.0.0.18:6892 udp
N/A 127.0.0.19:6892 udp
N/A 127.0.0.20:6892 udp
N/A 127.0.0.21:6892 udp
N/A 127.0.0.22:6892 udp
N/A 127.0.0.23:6892 udp
N/A 127.0.0.24:6892 udp
N/A 127.0.0.25:6892 udp
N/A 127.0.0.26:6892 udp
N/A 127.0.0.27:6892 udp
N/A 127.0.0.28:6892 udp
N/A 127.0.0.29:6892 udp
N/A 127.0.0.30:6892 udp
N/A 127.0.0.31:6892 udp
N/A 192.168.0.0:6892 udp
N/A 192.168.0.1:6892 udp
N/A 192.168.0.2:6892 udp
N/A 192.168.0.3:6892 udp
N/A 192.168.0.4:6892 udp
N/A 192.168.0.5:6892 udp
N/A 192.168.0.6:6892 udp
N/A 192.168.0.7:6892 udp
N/A 192.168.0.8:6892 udp
N/A 192.168.0.9:6892 udp
N/A 192.168.0.10:6892 udp
N/A 192.168.0.11:6892 udp
N/A 192.168.0.12:6892 udp
N/A 192.168.0.13:6892 udp
N/A 192.168.0.14:6892 udp
N/A 192.168.0.15:6892 udp
N/A 192.168.0.16:6892 udp
N/A 192.168.0.17:6892 udp
N/A 192.168.0.18:6892 udp
N/A 192.168.0.19:6892 udp
N/A 192.168.0.20:6892 udp
N/A 192.168.0.21:6892 udp
N/A 192.168.0.22:6892 udp
N/A 192.168.0.23:6892 udp
N/A 192.168.0.24:6892 udp
N/A 192.168.0.25:6892 udp
N/A 192.168.0.26:6892 udp
N/A 192.168.0.27:6892 udp
N/A 192.168.0.28:6892 udp
N/A 192.168.0.29:6892 udp
N/A 192.168.0.30:6892 udp
N/A 192.168.0.31:6892 udp
LT 194.165.16.0:6892 udp
LT 194.165.16.1:6892 udp
LT 194.165.16.2:6892 udp
LT 194.165.16.3:6892 udp
LT 194.165.16.4:6892 udp
LT 194.165.16.5:6892 udp
LT 194.165.16.6:6892 udp
LT 194.165.16.7:6892 udp
LT 194.165.16.8:6892 udp
LT 194.165.16.9:6892 udp
LT 194.165.16.10:6892 udp
LT 194.165.16.11:6892 udp
LT 194.165.16.12:6892 udp
LT 194.165.16.13:6892 udp
LT 194.165.16.14:6892 udp
LT 194.165.16.15:6892 udp
LT 194.165.16.16:6892 udp
LT 194.165.16.17:6892 udp
LT 194.165.16.18:6892 udp
LT 194.165.16.19:6892 udp
LT 194.165.16.20:6892 udp
LT 194.165.16.21:6892 udp
LT 194.165.16.22:6892 udp
LT 194.165.16.23:6892 udp
LT 194.165.16.24:6892 udp
LT 194.165.16.25:6892 udp
LT 194.165.16.26:6892 udp
LT 194.165.16.27:6892 udp
LT 194.165.16.28:6892 udp
LT 194.165.16.29:6892 udp
LT 194.165.16.30:6892 udp
LT 194.165.16.31:6892 udp
LT 194.165.16.32:6892 udp
LT 194.165.16.33:6892 udp
LT 194.165.16.34:6892 udp
LT 194.165.16.35:6892 udp
LT 194.165.16.36:6892 udp
LT 194.165.16.37:6892 udp
LT 194.165.16.38:6892 udp
LT 194.165.16.39:6892 udp
LT 194.165.16.40:6892 udp
LT 194.165.16.41:6892 udp
LT 194.165.16.42:6892 udp
LT 194.165.16.43:6892 udp
LT 194.165.16.44:6892 udp
LT 194.165.16.45:6892 udp
LT 194.165.16.46:6892 udp
LT 194.165.16.47:6892 udp
LT 194.165.16.48:6892 udp
LT 194.165.16.49:6892 udp
LT 194.165.16.50:6892 udp
LT 194.165.16.51:6892 udp
LT 194.165.16.52:6892 udp
LT 194.165.16.53:6892 udp
LT 194.165.16.54:6892 udp
LT 194.165.16.55:6892 udp
LT 194.165.16.56:6892 udp
LT 194.165.16.57:6892 udp
LT 194.165.16.58:6892 udp
LT 194.165.16.59:6892 udp
LT 194.165.16.60:6892 udp
LT 194.165.16.61:6892 udp
LT 194.165.16.62:6892 udp
LT 194.165.16.63:6892 udp
LT 194.165.16.64:6892 udp
LT 194.165.16.65:6892 udp
LT 194.165.16.66:6892 udp
LT 194.165.16.67:6892 udp
LT 194.165.16.68:6892 udp
LT 194.165.16.69:6892 udp
LT 194.165.16.70:6892 udp
LT 194.165.16.71:6892 udp
LT 194.165.16.72:6892 udp
LT 194.165.16.73:6892 udp
LT 194.165.16.74:6892 udp
LT 194.165.16.75:6892 udp
LT 194.165.16.76:6892 udp
LT 194.165.16.77:6892 udp
LT 194.165.16.78:6892 udp
LT 194.165.16.79:6892 udp
LT 194.165.16.80:6892 udp
LT 194.165.16.81:6892 udp
LT 194.165.16.82:6892 udp
LT 194.165.16.83:6892 udp
LT 194.165.16.84:6892 udp
LT 194.165.16.85:6892 udp
LT 194.165.16.86:6892 udp
LT 194.165.16.87:6892 udp
LT 194.165.16.88:6892 udp
LT 194.165.16.89:6892 udp
LT 194.165.16.90:6892 udp
LT 194.165.16.91:6892 udp
LT 194.165.16.92:6892 udp
LT 194.165.16.93:6892 udp
LT 194.165.16.94:6892 udp
LT 194.165.16.95:6892 udp
LT 194.165.16.96:6892 udp
LT 194.165.16.97:6892 udp
LT 194.165.16.98:6892 udp
LT 194.165.16.99:6892 udp
LT 194.165.16.100:6892 udp
LT 194.165.16.101:6892 udp
LT 194.165.16.102:6892 udp
LT 194.165.16.103:6892 udp
LT 194.165.16.104:6892 udp
LT 194.165.16.105:6892 udp
LT 194.165.16.106:6892 udp
LT 194.165.16.107:6892 udp
LT 194.165.16.108:6892 udp
LT 194.165.16.109:6892 udp
LT 194.165.16.110:6892 udp
LT 194.165.16.111:6892 udp
LT 194.165.16.112:6892 udp
LT 194.165.16.113:6892 udp
LT 194.165.16.114:6892 udp
LT 194.165.16.115:6892 udp
LT 194.165.16.116:6892 udp
LT 194.165.16.117:6892 udp
LT 194.165.16.118:6892 udp
LT 194.165.16.119:6892 udp
LT 194.165.16.120:6892 udp
LT 194.165.16.121:6892 udp
LT 194.165.16.122:6892 udp
LT 194.165.16.123:6892 udp
LT 194.165.16.124:6892 udp
LT 194.165.16.125:6892 udp
LT 194.165.16.126:6892 udp
LT 194.165.16.127:6892 udp
LT 194.165.16.128:6892 udp
LT 194.165.16.129:6892 udp
LT 194.165.16.130:6892 udp
LT 194.165.16.131:6892 udp
LT 194.165.16.132:6892 udp
LT 194.165.16.133:6892 udp
LT 194.165.16.134:6892 udp
LT 194.165.16.135:6892 udp
LT 194.165.16.136:6892 udp
LT 194.165.16.137:6892 udp
LT 194.165.16.138:6892 udp
LT 194.165.16.139:6892 udp
LT 194.165.16.140:6892 udp
LT 194.165.16.141:6892 udp
LT 194.165.16.142:6892 udp
LT 194.165.16.143:6892 udp
LT 194.165.16.144:6892 udp
LT 194.165.16.145:6892 udp
LT 194.165.16.146:6892 udp
LT 194.165.16.147:6892 udp
LT 194.165.16.148:6892 udp
LT 194.165.16.149:6892 udp
LT 194.165.16.150:6892 udp
LT 194.165.16.151:6892 udp
LT 194.165.16.152:6892 udp
LT 194.165.16.153:6892 udp
LT 194.165.16.154:6892 udp
LT 194.165.16.155:6892 udp
LT 194.165.16.156:6892 udp
LT 194.165.16.157:6892 udp
LT 194.165.16.158:6892 udp
LT 194.165.16.159:6892 udp
LT 194.165.16.160:6892 udp
LT 194.165.16.161:6892 udp
LT 194.165.16.162:6892 udp
LT 194.165.16.163:6892 udp
LT 194.165.16.164:6892 udp
LT 194.165.16.165:6892 udp
LT 194.165.16.166:6892 udp
LT 194.165.16.167:6892 udp
LT 194.165.16.168:6892 udp
LT 194.165.16.169:6892 udp
LT 194.165.16.170:6892 udp
LT 194.165.16.171:6892 udp
LT 194.165.16.172:6892 udp
LT 194.165.16.173:6892 udp
LT 194.165.16.174:6892 udp
LT 194.165.16.175:6892 udp
LT 194.165.16.176:6892 udp
LT 194.165.16.177:6892 udp
LT 194.165.16.178:6892 udp
LT 194.165.16.179:6892 udp
LT 194.165.16.180:6892 udp
LT 194.165.16.181:6892 udp
LT 194.165.16.182:6892 udp
LT 194.165.16.183:6892 udp
LT 194.165.16.184:6892 udp
LT 194.165.16.185:6892 udp
LT 194.165.16.186:6892 udp
LT 194.165.16.187:6892 udp
LT 194.165.16.188:6892 udp
LT 194.165.16.189:6892 udp
LT 194.165.16.190:6892 udp
LT 194.165.16.191:6892 udp
LT 194.165.16.192:6892 udp
LT 194.165.16.193:6892 udp
LT 194.165.16.194:6892 udp
LT 194.165.16.195:6892 udp
LT 194.165.16.196:6892 udp
LT 194.165.16.197:6892 udp
LT 194.165.16.198:6892 udp
LT 194.165.16.199:6892 udp
LT 194.165.16.200:6892 udp
LT 194.165.16.201:6892 udp
LT 194.165.16.202:6892 udp
LT 194.165.16.203:6892 udp
LT 194.165.16.204:6892 udp
LT 194.165.16.205:6892 udp
LT 194.165.16.206:6892 udp
LT 194.165.16.207:6892 udp
LT 194.165.16.208:6892 udp
LT 194.165.16.209:6892 udp
LT 194.165.16.210:6892 udp
LT 194.165.16.211:6892 udp
LT 194.165.16.212:6892 udp
LT 194.165.16.213:6892 udp
LT 194.165.16.214:6892 udp
LT 194.165.16.215:6892 udp
LT 194.165.16.216:6892 udp
LT 194.165.16.217:6892 udp
LT 194.165.16.218:6892 udp
LT 194.165.16.219:6892 udp
LT 194.165.16.220:6892 udp
LT 194.165.16.221:6892 udp
LT 194.165.16.222:6892 udp
LT 194.165.16.223:6892 udp
LT 194.165.16.224:6892 udp
LT 194.165.16.225:6892 udp
LT 194.165.16.226:6892 udp
LT 194.165.16.227:6892 udp
LT 194.165.16.228:6892 udp
LT 194.165.16.229:6892 udp
LT 194.165.16.230:6892 udp
LT 194.165.16.231:6892 udp
LT 194.165.16.232:6892 udp
LT 194.165.16.233:6892 udp
LT 194.165.16.234:6892 udp
LT 194.165.16.235:6892 udp
LT 194.165.16.236:6892 udp
LT 194.165.16.237:6892 udp
LT 194.165.16.238:6892 udp
LT 194.165.16.239:6892 udp
LT 194.165.16.240:6892 udp
LT 194.165.16.241:6892 udp
LT 194.165.16.242:6892 udp
LT 194.165.16.243:6892 udp
LT 194.165.16.244:6892 udp
LT 194.165.16.245:6892 udp
LT 194.165.16.246:6892 udp
LT 194.165.16.247:6892 udp
LT 194.165.16.248:6892 udp
LT 194.165.16.249:6892 udp
LT 194.165.16.250:6892 udp
LT 194.165.16.251:6892 udp
LT 194.165.16.252:6892 udp
LT 194.165.16.253:6892 udp
LT 194.165.16.254:6892 udp
LT 194.165.16.255:6892 udp
LT 194.165.17.0:6892 udp
LT 194.165.17.1:6892 udp
LT 194.165.17.2:6892 udp
LT 194.165.17.3:6892 udp
LT 194.165.17.4:6892 udp
LT 194.165.17.5:6892 udp
LT 194.165.17.6:6892 udp
LT 194.165.17.7:6892 udp
LT 194.165.17.8:6892 udp
LT 194.165.17.9:6892 udp
LT 194.165.17.10:6892 udp
LT 194.165.17.11:6892 udp
LT 194.165.17.12:6892 udp
LT 194.165.17.13:6892 udp
LT 194.165.17.14:6892 udp
LT 194.165.17.15:6892 udp
LT 194.165.17.16:6892 udp
LT 194.165.17.17:6892 udp
LT 194.165.17.18:6892 udp
LT 194.165.17.19:6892 udp
LT 194.165.17.20:6892 udp
LT 194.165.17.21:6892 udp
LT 194.165.17.22:6892 udp
LT 194.165.17.23:6892 udp
LT 194.165.17.24:6892 udp
LT 194.165.17.25:6892 udp
LT 194.165.17.26:6892 udp
LT 194.165.17.27:6892 udp
LT 194.165.17.28:6892 udp
LT 194.165.17.29:6892 udp
LT 194.165.17.30:6892 udp
LT 194.165.17.31:6892 udp
LT 194.165.17.32:6892 udp
LT 194.165.17.33:6892 udp
LT 194.165.17.34:6892 udp
LT 194.165.17.35:6892 udp
LT 194.165.17.36:6892 udp
LT 194.165.17.37:6892 udp
LT 194.165.17.38:6892 udp
LT 194.165.17.39:6892 udp
LT 194.165.17.40:6892 udp
LT 194.165.17.41:6892 udp
LT 194.165.17.42:6892 udp
LT 194.165.17.43:6892 udp
LT 194.165.17.44:6892 udp
LT 194.165.17.45:6892 udp
LT 194.165.17.46:6892 udp
LT 194.165.17.47:6892 udp
LT 194.165.17.48:6892 udp
LT 194.165.17.49:6892 udp
LT 194.165.17.50:6892 udp
LT 194.165.17.51:6892 udp
LT 194.165.17.52:6892 udp
LT 194.165.17.53:6892 udp
LT 194.165.17.54:6892 udp
LT 194.165.17.55:6892 udp
LT 194.165.17.56:6892 udp
LT 194.165.17.57:6892 udp
LT 194.165.17.58:6892 udp
LT 194.165.17.59:6892 udp
LT 194.165.17.60:6892 udp
LT 194.165.17.61:6892 udp
LT 194.165.17.62:6892 udp
LT 194.165.17.63:6892 udp
LT 194.165.17.64:6892 udp
LT 194.165.17.65:6892 udp
LT 194.165.17.66:6892 udp
LT 194.165.17.67:6892 udp
LT 194.165.17.68:6892 udp
LT 194.165.17.69:6892 udp
LT 194.165.17.70:6892 udp
LT 194.165.17.71:6892 udp
LT 194.165.17.72:6892 udp
LT 194.165.17.73:6892 udp
LT 194.165.17.74:6892 udp
LT 194.165.17.75:6892 udp
LT 194.165.17.76:6892 udp
LT 194.165.17.77:6892 udp
LT 194.165.17.78:6892 udp
LT 194.165.17.79:6892 udp
LT 194.165.17.80:6892 udp
LT 194.165.17.81:6892 udp
LT 194.165.17.82:6892 udp
LT 194.165.17.83:6892 udp
LT 194.165.17.84:6892 udp
LT 194.165.17.85:6892 udp
LT 194.165.17.86:6892 udp
LT 194.165.17.87:6892 udp
LT 194.165.17.88:6892 udp
LT 194.165.17.89:6892 udp
LT 194.165.17.90:6892 udp
LT 194.165.17.91:6892 udp
LT 194.165.17.92:6892 udp
LT 194.165.17.93:6892 udp
LT 194.165.17.94:6892 udp
LT 194.165.17.95:6892 udp
LT 194.165.17.96:6892 udp
LT 194.165.17.97:6892 udp
LT 194.165.17.98:6892 udp
LT 194.165.17.99:6892 udp
LT 194.165.17.100:6892 udp
LT 194.165.17.101:6892 udp
LT 194.165.17.102:6892 udp
LT 194.165.17.103:6892 udp
LT 194.165.17.104:6892 udp
LT 194.165.17.105:6892 udp
LT 194.165.17.106:6892 udp
LT 194.165.17.107:6892 udp
LT 194.165.17.108:6892 udp
LT 194.165.17.109:6892 udp
LT 194.165.17.110:6892 udp
LT 194.165.17.111:6892 udp
LT 194.165.17.112:6892 udp
LT 194.165.17.113:6892 udp
LT 194.165.17.114:6892 udp
LT 194.165.17.115:6892 udp
LT 194.165.17.116:6892 udp
LT 194.165.17.117:6892 udp
LT 194.165.17.118:6892 udp
LT 194.165.17.119:6892 udp
LT 194.165.17.120:6892 udp
LT 194.165.17.121:6892 udp
LT 194.165.17.122:6892 udp
LT 194.165.17.123:6892 udp
LT 194.165.17.124:6892 udp
LT 194.165.17.125:6892 udp
LT 194.165.17.126:6892 udp
LT 194.165.17.127:6892 udp
LT 194.165.17.128:6892 udp
LT 194.165.17.129:6892 udp
LT 194.165.17.130:6892 udp
LT 194.165.17.131:6892 udp
LT 194.165.17.132:6892 udp
LT 194.165.17.133:6892 udp
LT 194.165.17.134:6892 udp
LT 194.165.17.135:6892 udp
LT 194.165.17.136:6892 udp
LT 194.165.17.137:6892 udp
LT 194.165.17.138:6892 udp
LT 194.165.17.139:6892 udp
LT 194.165.17.140:6892 udp
LT 194.165.17.141:6892 udp
LT 194.165.17.142:6892 udp
LT 194.165.17.143:6892 udp
LT 194.165.17.144:6892 udp
LT 194.165.17.145:6892 udp
LT 194.165.17.146:6892 udp
LT 194.165.17.147:6892 udp
LT 194.165.17.148:6892 udp
LT 194.165.17.149:6892 udp
LT 194.165.17.150:6892 udp
LT 194.165.17.151:6892 udp
LT 194.165.17.152:6892 udp
LT 194.165.17.153:6892 udp
LT 194.165.17.154:6892 udp
LT 194.165.17.155:6892 udp
LT 194.165.17.156:6892 udp
LT 194.165.17.157:6892 udp
LT 194.165.17.158:6892 udp
LT 194.165.17.159:6892 udp
LT 194.165.17.160:6892 udp
LT 194.165.17.161:6892 udp
LT 194.165.17.162:6892 udp
LT 194.165.17.163:6892 udp
LT 194.165.17.164:6892 udp
LT 194.165.17.165:6892 udp
LT 194.165.17.166:6892 udp
LT 194.165.17.167:6892 udp
LT 194.165.17.168:6892 udp
LT 194.165.17.169:6892 udp
LT 194.165.17.170:6892 udp
LT 194.165.17.171:6892 udp
LT 194.165.17.172:6892 udp
LT 194.165.17.173:6892 udp
LT 194.165.17.174:6892 udp
LT 194.165.17.175:6892 udp
LT 194.165.17.176:6892 udp
LT 194.165.17.177:6892 udp
LT 194.165.17.178:6892 udp
LT 194.165.17.179:6892 udp
LT 194.165.17.180:6892 udp
LT 194.165.17.181:6892 udp
LT 194.165.17.182:6892 udp
LT 194.165.17.183:6892 udp
LT 194.165.17.184:6892 udp
LT 194.165.17.185:6892 udp
LT 194.165.17.186:6892 udp
LT 194.165.17.187:6892 udp
LT 194.165.17.188:6892 udp
LT 194.165.17.189:6892 udp
LT 194.165.17.190:6892 udp
LT 194.165.17.191:6892 udp
LT 194.165.17.192:6892 udp
LT 194.165.17.193:6892 udp
LT 194.165.17.194:6892 udp
LT 194.165.17.195:6892 udp
LT 194.165.17.196:6892 udp
LT 194.165.17.197:6892 udp
LT 194.165.17.198:6892 udp
LT 194.165.17.199:6892 udp
LT 194.165.17.200:6892 udp
LT 194.165.17.201:6892 udp
LT 194.165.17.202:6892 udp
LT 194.165.17.203:6892 udp
LT 194.165.17.204:6892 udp
LT 194.165.17.205:6892 udp
LT 194.165.17.206:6892 udp
LT 194.165.17.207:6892 udp
LT 194.165.17.208:6892 udp
LT 194.165.17.209:6892 udp
LT 194.165.17.210:6892 udp
LT 194.165.17.211:6892 udp
LT 194.165.17.212:6892 udp
LT 194.165.17.213:6892 udp
LT 194.165.17.214:6892 udp
LT 194.165.17.215:6892 udp
LT 194.165.17.216:6892 udp
LT 194.165.17.217:6892 udp
LT 194.165.17.218:6892 udp
LT 194.165.17.219:6892 udp
LT 194.165.17.220:6892 udp
LT 194.165.17.221:6892 udp
LT 194.165.17.222:6892 udp
LT 194.165.17.223:6892 udp
LT 194.165.17.224:6892 udp
LT 194.165.17.225:6892 udp
LT 194.165.17.226:6892 udp
LT 194.165.17.227:6892 udp
LT 194.165.17.228:6892 udp
LT 194.165.17.229:6892 udp
LT 194.165.17.230:6892 udp
LT 194.165.17.231:6892 udp
LT 194.165.17.232:6892 udp
LT 194.165.17.233:6892 udp
LT 194.165.17.234:6892 udp
LT 194.165.17.235:6892 udp
LT 194.165.17.236:6892 udp
LT 194.165.17.237:6892 udp
LT 194.165.17.238:6892 udp
LT 194.165.17.239:6892 udp
LT 194.165.17.240:6892 udp
LT 194.165.17.241:6892 udp
LT 194.165.17.242:6892 udp
LT 194.165.17.243:6892 udp
LT 194.165.17.244:6892 udp
LT 194.165.17.245:6892 udp
LT 194.165.17.246:6892 udp
LT 194.165.17.247:6892 udp
LT 194.165.17.248:6892 udp
LT 194.165.17.249:6892 udp
LT 194.165.17.250:6892 udp
LT 194.165.17.251:6892 udp
LT 194.165.17.252:6892 udp
LT 194.165.17.253:6892 udp
LT 194.165.17.254:6892 udp
US 8.8.8.8:53 19.229.111.52.in-addr.arpa udp
LT 194.165.17.255:6892 udp
US 8.8.8.8:53 ffoqr3ug7m726zou.bvbg1l.top udp

Files

C:\Users\Admin\AppData\Local\Temp\nsq7AC0.tmp\System.dll

MD5 a436db0c473a087eb61ff5c53c34ba27
SHA1 65ea67e424e75f5065132b539c8b2eda88aa0506
SHA256 75ed40311875312617d6711baed0be29fcaee71031ca27a8d308a72b15a51e49
SHA512 908f46a855480af6eacb2fb64de0e60b1e04bbb10b23992e2cf38a4cbebdcd7d3928c4c022d7ad9f7479265a8f426b93eef580afec95570e654c360d62f5e08d

C:\Users\Admin\AppData\Local\Temp\lemurs.dll

MD5 349ff55e70ed9a44611e9585aea44481
SHA1 65ef1354579103c4e87c2ffca5270e36e5d6bf2c
SHA256 27d8323ca50e040da96f71b273b7482026d65bf5ac83bacf817b432f7c3a7279
SHA512 54bd9e9b67cae56040376d2eb1fde9e58b31d6da3efe360b14cfc5069d5728d3777c41eb3f389db928b31cb0a6fd9f2e3bbb25cd41891754d8bec350cadf8d57

memory/5092-12-0x00000000022B0000-0x00000000022B1000-memory.dmp

memory/3708-13-0x0000000000400000-0x0000000000432000-memory.dmp

memory/3708-15-0x0000000000400000-0x0000000000432000-memory.dmp

memory/3708-17-0x0000000000400000-0x0000000000432000-memory.dmp

memory/3708-16-0x0000000000400000-0x0000000000432000-memory.dmp

memory/3708-22-0x0000000000400000-0x0000000000432000-memory.dmp

memory/3708-23-0x0000000000400000-0x0000000000432000-memory.dmp

memory/3708-24-0x0000000000400000-0x0000000000432000-memory.dmp

memory/3708-28-0x0000000000400000-0x0000000000432000-memory.dmp

memory/3708-29-0x0000000000400000-0x0000000000432000-memory.dmp

memory/3708-31-0x0000000000400000-0x0000000000432000-memory.dmp

memory/3708-30-0x0000000000400000-0x0000000000432000-memory.dmp

C:\Users\Admin\Pictures\_README_.hta

MD5 34c80b8759ed3638a278cc8f501fdf60
SHA1 66b12e30fd0e8a222ea2105cb6691fb6fdb02820
SHA256 46324ec92e0df520e7c8da5df56508d0fa47273916abb55f571117cc161b3e80
SHA512 38e11e251ae76f7545ea23a3a8bcdfb1f8c101a53b8c0155c647be8e20077444f8d2d34c27ba035790165295ad4addabe7756635aa87b2fadf47824904379b6a

memory/3708-729-0x0000000000400000-0x0000000000432000-memory.dmp

memory/3708-735-0x0000000000400000-0x0000000000432000-memory.dmp

memory/3708-742-0x0000000000400000-0x0000000000432000-memory.dmp

Analysis: behavioral3

Detonation Overview

Submitted

2024-11-25 19:41

Reported

2024-11-25 19:44

Platform

win7-20240903-en

Max time kernel

121s

Max time network

122s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

Signatures

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\rundll32.exe

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

C:\Windows\SysWOW64\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\System.dll,#1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1252 -s 224

Network

N/A

Files

N/A