Malware Analysis Report

2025-01-02 14:54

Sample ID 241203-m83qpssnfy
Target BobaFett 8.zip
SHA256 e85198201b19cdd32291f5fe1a969058d9cdbe6e6621b28ae3a985db45fae71e
Tags
badrabbit cerber mimikatz bootkit discovery evasion execution persistence privilege_escalation ransomware
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

e85198201b19cdd32291f5fe1a969058d9cdbe6e6621b28ae3a985db45fae71e

Threat Level: Known bad

The file BobaFett 8.zip was found to be: Known bad.

Malicious Activity Summary

badrabbit cerber mimikatz bootkit discovery evasion execution persistence privilege_escalation ransomware

Cerber family

Cerber

Badrabbit family

Mimikatz family

Mimikatz

BadRabbit

mimikatz is an open source tool to dump credentials on Windows

Contacts a large (1143) amount of remote hosts

Modifies Windows Firewall

Blocklisted process makes network request

Executes dropped EXE

Drops startup file

Loads dropped DLL

Creates a large amount of network flows

Writes to the Master Boot Record (MBR)

Enumerates connected drives

Adds Run key to start application

Sets desktop wallpaper using registry

Drops file in System32 directory

Drops file in Program Files directory

Drops file in Windows directory

System Location Discovery: System Language Discovery

System Network Configuration Discovery: Internet Connection Discovery

Program crash

Event Triggered Execution: Netsh Helper DLL

Command and Scripting Interpreter: PowerShell

Browser Information Discovery

Modifies data under HKEY_USERS

Suspicious use of SendNotifyMessage

Runs ping.exe

Modifies registry class

Suspicious use of SetWindowsHookEx

Kills process with taskkill

Suspicious behavior: EnumeratesProcesses

Opens file in notepad (likely ransom note)

Enumerates system info in registry

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of WriteProcessMemory

Checks SCSI registry key(s)

Suspicious behavior: LoadsDriver

Suspicious use of AdjustPrivilegeToken

Suspicious use of FindShellTrayWindow

Suspicious behavior: GetForegroundWindowSpam

Scheduled Task/Job: Scheduled Task

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-12-03 11:09

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-12-03 11:08

Reported

2024-12-03 11:25

Platform

win10v2004-20241007-en

Max time kernel

869s

Max time network

872s

Command Line

powershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\BobaFett\data\21.ps1

Signatures

BadRabbit

ransomware badrabbit

Badrabbit family

badrabbit

Cerber

ransomware cerber

Cerber family

cerber

Mimikatz

mimikatz

Mimikatz family

mimikatz

mimikatz is an open source tool to dump credentials on Windows

Description Indicator Process Target
N/A N/A N/A N/A

Contacts a large (1143) amount of remote hosts

discovery

Modifies Windows Firewall

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A
N/A N/A C:\Windows\SysWOW64\netsh.exe N/A

Drops startup file

Description Indicator Process Target
File opened for modification \??\c:\users\admin\appdata\roaming\microsoft\word\startup\ C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Windows\3C2C.tmp N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\~~CB = "cb.exe" C:\Users\Admin\AppData\Local\Temp\Temp1_ColorBug.zip\[email protected] N/A

Creates a large amount of network flows

discovery

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\k: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\q: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\x: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\z: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\b: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\j: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\v: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\w: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\a: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\o: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\l: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\r: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\t: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\y: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\g: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\i: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\m: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\n: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\p: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\s: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\u: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\e: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened (read-only) \??\h: C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\desktop C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\documents C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification C:\Windows\System32\devmgmt.msc C:\Windows\system32\mmc.exe N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\thunderbird C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\bitcoin C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\local\microsoft\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\SysWOW64\config\systemprofile\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\tmpEF7B.bmp" C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification \??\c:\program files (x86)\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\microsoft\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\the bat! C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files\ C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\thunderbird C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\bitcoin C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\steam C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\ C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\microsoft\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\microsoft\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\program files (x86)\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\INF\c_display.PNF C:\Windows\system32\mmc.exe N/A
File created C:\Windows\INF\c_fscontinuousbackup.PNF C:\Windows\system32\mmc.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\steam C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File created C:\Windows\INF\c_firmware.PNF C:\Windows\system32\mmc.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File created C:\Windows\INF\c_fsopenfilebackup.PNF C:\Windows\system32\mmc.exe N/A
File created C:\Windows\infpub.dat C:\Users\Admin\AppData\Local\Temp\Temp1_BadRabbit.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\the bat! C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\documents C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File created C:\Windows\INF\c_fsantivirus.PNF C:\Windows\system32\mmc.exe N/A
File created C:\Windows\INF\c_fsactivitymonitor.PNF C:\Windows\system32\mmc.exe N/A
File created C:\Windows\INF\c_camera.PNF C:\Windows\system32\mmc.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File created C:\Windows\INF\PerceptionSimulationSixDof.PNF C:\Windows\system32\mmc.exe N/A
File created C:\Windows\INF\c_extension.PNF C:\Windows\system32\mmc.exe N/A
File opened for modification C:\Windows\infpub.dat C:\Windows\SysWOW64\rundll32.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File created C:\Windows\INF\c_fssystem.PNF C:\Windows\system32\mmc.exe N/A
File created C:\Windows\INF\c_volume.PNF C:\Windows\system32\mmc.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\bitcoin C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\desktop C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\the bat! C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File created C:\Windows\INF\c_scmdisk.PNF C:\Windows\system32\mmc.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\excel C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\onenote C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\steam C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File created C:\Windows\INF\c_fscfsmetadataserver.PNF C:\Windows\system32\mmc.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\word C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File created C:\Windows\INF\c_netdriver.PNF C:\Windows\system32\mmc.exe N/A
File created C:\Windows\INF\c_fsencryption.PNF C:\Windows\system32\mmc.exe N/A
File created C:\Windows\INF\c_fsinfrastructure.PNF C:\Windows\system32\mmc.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\thunderbird C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification C:\Windows\Debug\WIA\wiatrace.log C:\Windows\SysWOW64\mspaint.exe N/A
File created C:\Windows\INF\c_fsreplication.PNF C:\Windows\system32\mmc.exe N/A
File created C:\Windows\INF\miradisp.PNF C:\Windows\system32\mmc.exe N/A
File created C:\Windows\INF\c_holographic.PNF C:\Windows\system32\mmc.exe N/A
File created C:\Windows\infpub.dat C:\Users\Admin\AppData\Local\Temp\Temp1_BadRabbit.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\office C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification C:\WINDOWS\SysWOW64 C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\powerpoint C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\documents C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File created C:\Windows\INF\c_fsquotamgmt.PNF C:\Windows\system32\mmc.exe N/A
File created C:\Windows\INF\c_receiptprinter.PNF C:\Windows\system32\mmc.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\local\microsoft\microsoft sql server C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\roaming\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File opened for modification \??\c:\windows\serviceprofiles\networkservice\appdata\local\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
File created C:\Windows\INF\c_fssystemrecovery.PNF C:\Windows\system32\mmc.exe N/A
File created C:\Windows\INF\c_mcx.PNF C:\Windows\system32\mmc.exe N/A
File opened for modification \??\c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\outlook C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A

Browser Information Discovery

discovery

Command and Scripting Interpreter: PowerShell

execution
Description Indicator Process Target
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A

Event Triggered Execution: Netsh Helper DLL

persistence privilege_escalation
Description Indicator Process Target
Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh C:\Windows\SysWOW64\netsh.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Documents\YouAreAnIdiot\YouAreAnIdiot.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\calc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Temp1_BadRabbit.zip\[email protected] N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Documents\YouAreAnIdiot\YouAreAnIdiot.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\mspaint.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\NOTEPAD.EXE N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\schtasks.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\explorer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\schtasks.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Documents\YouAreAnIdiot\YouAreAnIdiot.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Temp1_BadRabbit.zip\[email protected] N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\WINDOWS\SysWOW64\taskkill.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\rundll32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\notepad.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Temp1_BadRabbit.zip\[email protected] N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\WINDOWS\SysWOW64\PING.EXE N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\schtasks.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Temp1_ColorBug.zip\[email protected] N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Documents\YouAreAnIdiot\YouAreAnIdiot.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\mmc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Temp1_BadRabbit.zip\[email protected] N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\mshta.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Temp1_DesktopPuzzle.zip\[email protected] N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A

System Network Configuration Discovery: Internet Connection Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\cmd.exe N/A
N/A N/A C:\WINDOWS\SysWOW64\PING.EXE N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom C:\Windows\system32\mmc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\FriendlyName C:\Windows\system32\mmc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\FriendlyName C:\Windows\system32\mmc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 C:\Windows\system32\mmc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\system32\mmc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags C:\Windows\system32\mmc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 C:\Windows\system32\mmc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\000A C:\Windows\system32\mmc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags C:\Windows\system32\mmc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\000A\ C:\Windows\system32\mmc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\000A\ C:\Windows\system32\mmc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\FriendlyName C:\Windows\system32\mmc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 C:\Windows\system32\mmc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName C:\Windows\system32\mmc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Windows\system32\mmc.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom C:\Windows\system32\mmc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Windows\system32\mmc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 C:\Windows\system32\mmc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 C:\Windows\system32\mmc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\000A C:\Windows\system32\mmc.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\WINDOWS\SysWOW64\taskkill.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133776979037119076" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000_Classes\Local Settings C:\Windows\SysWOW64\calc.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000_Classes\Local Settings C:\Windows\SysWOW64\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected] N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\NOTEPAD.EXE N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\WINDOWS\SysWOW64\PING.EXE N/A

Scheduled Task/Job: Scheduled Task

persistence execution
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\schtasks.exe N/A
N/A N/A C:\Windows\SysWOW64\schtasks.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\SysWOW64\rundll32.exe N/A
N/A N/A C:\Windows\3C2C.tmp N/A
N/A N/A C:\Windows\3C2C.tmp N/A
N/A N/A C:\Windows\3C2C.tmp N/A
N/A N/A C:\Windows\3C2C.tmp N/A
N/A N/A C:\Windows\3C2C.tmp N/A
N/A N/A C:\Windows\3C2C.tmp N/A
N/A N/A C:\Windows\3C2C.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Windows\system32\mmc.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Windows\SysWOW64\mspaint.exe N/A
N/A N/A C:\Windows\SysWOW64\mspaint.exe N/A
N/A N/A C:\Windows\SysWOW64\mspaint.exe N/A
N/A N/A C:\Windows\SysWOW64\mspaint.exe N/A
N/A N/A C:\Windows\SysWOW64\mmc.exe N/A
N/A N/A C:\Windows\system32\mmc.exe N/A
N/A N/A C:\Windows\system32\mmc.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected] N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1664 wrote to memory of 372 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 372 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 3704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 1908 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 1908 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1664 wrote to memory of 4664 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

powershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\BobaFett\data\21.ps1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffb076acc40,0x7ffb076acc4c,0x7ffb076acc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1824,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1820 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2208,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2212 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2272,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2464 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3164,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3184 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3280,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3416 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3736,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4588 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=5076,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4444 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3480,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4524 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3332,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3456 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3748,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5292 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=5284,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3740 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4084,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5212 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=1312,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5084 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4796,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4816 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=3284,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5148 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=4804,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5696 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5896,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5900 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5824,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5560 /prefetch:1

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=5172,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5132 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5536,i,5454899844073578165,7924671661531791676,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6164 /prefetch:8

C:\Users\Admin\AppData\Local\Temp\Temp1_BadRabbit.zip\[email protected]

"C:\Users\Admin\AppData\Local\Temp\Temp1_BadRabbit.zip\[email protected]"

C:\Windows\SysWOW64\rundll32.exe

C:\Windows\system32\rundll32.exe C:\Windows\infpub.dat,#1 15

C:\Windows\SysWOW64\cmd.exe

/c schtasks /Delete /F /TN rhaegal

C:\Windows\SysWOW64\schtasks.exe

schtasks /Delete /F /TN rhaegal

C:\Windows\SysWOW64\cmd.exe

/c schtasks /Create /RU SYSTEM /SC ONSTART /TN rhaegal /TR "C:\Windows\system32\cmd.exe /C Start \"\" \"C:\Windows\dispci.exe\" -id 1289852051 && exit"

C:\Windows\SysWOW64\cmd.exe

/c schtasks /Create /SC once /TN drogon /RU SYSTEM /TR "C:\Windows\system32\shutdown.exe /r /t 0 /f" /ST 11:36:00

C:\Windows\3C2C.tmp

"C:\Windows\3C2C.tmp" \\.\pipe\{034237B7-E7BB-4C57-BE41-EC9C16F7D284}

C:\Windows\SysWOW64\schtasks.exe

schtasks /Create /SC once /TN drogon /RU SYSTEM /TR "C:\Windows\system32\shutdown.exe /r /t 0 /f" /ST 11:36:00

C:\Windows\SysWOW64\schtasks.exe

schtasks /Create /RU SYSTEM /SC ONSTART /TN rhaegal /TR "C:\Windows\system32\cmd.exe /C Start \"\" \"C:\Windows\dispci.exe\" -id 1289852051 && exit"

C:\Users\Admin\AppData\Local\Temp\Temp1_ColorBug.zip\[email protected]

"C:\Users\Admin\AppData\Local\Temp\Temp1_ColorBug.zip\[email protected]"

C:\Users\Admin\Documents\YouAreAnIdiot\YouAreAnIdiot.exe

"C:\Users\Admin\Documents\YouAreAnIdiot\YouAreAnIdiot.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3076 -ip 3076

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3076 -s 1556

C:\Users\Admin\Documents\YouAreAnIdiot\YouAreAnIdiot.exe

"C:\Users\Admin\Documents\YouAreAnIdiot\YouAreAnIdiot.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 900 -ip 900

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 900 -s 1532

C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]

"C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]"

C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]

"C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]" /watchdog

C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]

"C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]" /watchdog

C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]

"C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]" /watchdog

C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]

"C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]" /watchdog

C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]

"C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]" /watchdog

C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]

"C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ.zip\[email protected]" /main

C:\Windows\SysWOW64\notepad.exe

"C:\Windows\System32\notepad.exe" \note.txt

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x478 0x244

C:\Users\Admin\Documents\YouAreAnIdiot\YouAreAnIdiot.exe

"C:\Users\Admin\Documents\YouAreAnIdiot\YouAreAnIdiot.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 5076 -ip 5076

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5076 -s 1448

C:\Users\Admin\Documents\YouAreAnIdiot\YouAreAnIdiot.exe

"C:\Users\Admin\Documents\YouAreAnIdiot\YouAreAnIdiot.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 388 -p 568 -ip 568

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 568 -s 1444

C:\Windows\SysWOW64\mspaint.exe

"C:\Windows\System32\mspaint.exe"

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService

C:\Windows\SysWOW64\mmc.exe

"C:\Windows\system32\mmc.exe" "C:\Windows\System32\devmgmt.msc"

C:\Windows\system32\mmc.exe

"C:\Windows\System32\devmgmt.msc" "C:\Windows\System32\devmgmt.msc"

C:\Windows\SysWOW64\calc.exe

"C:\Windows\System32\calc.exe"

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Users\Admin\AppData\Local\Temp\Temp1_BadRabbit.zip\[email protected]

"C:\Users\Admin\AppData\Local\Temp\Temp1_BadRabbit.zip\[email protected]"

C:\Windows\SysWOW64\rundll32.exe

C:\Windows\system32\rundll32.exe C:\Windows\infpub.dat,#1 15

C:\Users\Admin\AppData\Local\Temp\Temp1_BadRabbit.zip\[email protected]

"C:\Users\Admin\AppData\Local\Temp\Temp1_BadRabbit.zip\[email protected]"

C:\Windows\SysWOW64\rundll32.exe

C:\Windows\system32\rundll32.exe C:\Windows\infpub.dat,#1 15

C:\Users\Admin\AppData\Local\Temp\Temp1_BadRabbit.zip\[email protected]

"C:\Users\Admin\AppData\Local\Temp\Temp1_BadRabbit.zip\[email protected]"

C:\Windows\SysWOW64\rundll32.exe

C:\Windows\system32\rundll32.exe C:\Windows\infpub.dat,#1 15

C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected]

"C:\Users\Admin\AppData\Local\Temp\Temp1_Cerber 5.zip\[email protected]"

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall set allprofiles state on

C:\Windows\SysWOW64\netsh.exe

C:\Windows\system32\netsh.exe advfirewall reset

C:\Windows\SysWOW64\explorer.exe

"C:\Windows\System32\explorer.exe"

C:\Windows\SysWOW64\mshta.exe

"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___XH3S3_.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}

C:\Windows\SysWOW64\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\_R_E_A_D___T_H_I_S___J2P70_.txt

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\system32\cmd.exe" /d /c taskkill /f /im "E" > NUL & ping -n 1 127.0.0.1 > NUL & del "C" > NUL && exit

C:\WINDOWS\SysWOW64\taskkill.exe

taskkill /f /im "E"

C:\WINDOWS\SysWOW64\PING.EXE

ping -n 1 127.0.0.1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=minecraft+hax+download+no+virus

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ffb023246f8,0x7ffb02324708,0x7ffb02324718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,12142065742568662532,11475616743317167562,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1868 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,12142065742568662532,11475616743317167562,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,12142065742568662532,11475616743317167562,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2760 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,12142065742568662532,11475616743317167562,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,12142065742568662532,11475616743317167562,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,12142065742568662532,11475616743317167562,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4696 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,12142065742568662532,11475616743317167562,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3516 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,12142065742568662532,11475616743317167562,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5424 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,12142065742568662532,11475616743317167562,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5424 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=dank+memz

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffb023246f8,0x7ffb02324708,0x7ffb02324718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2264,9878482589802125133,11384843849649297259,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2276 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2264,9878482589802125133,11384843849649297259,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2264,9878482589802125133,11384843849649297259,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3012 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,9878482589802125133,11384843849649297259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,9878482589802125133,11384843849649297259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,9878482589802125133,11384843849649297259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,9878482589802125133,11384843849649297259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4192 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2264,9878482589802125133,11384843849649297259,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4952 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2264,9878482589802125133,11384843849649297259,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4952 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,9878482589802125133,11384843849649297259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5492 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,9878482589802125133,11384843849649297259,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5556 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,9878482589802125133,11384843849649297259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5128 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,9878482589802125133,11384843849649297259,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=half+life+3+release+date

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffb023246f8,0x7ffb02324708,0x7ffb02324718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,9878482589802125133,11384843849649297259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5588 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,9878482589802125133,11384843849649297259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5524 /prefetch:1

C:\Users\Admin\AppData\Local\Temp\Temp1_DesktopPuzzle.zip\[email protected]

"C:\Users\Admin\AppData\Local\Temp\Temp1_DesktopPuzzle.zip\[email protected]"

C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe

"C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"

C:\Windows\splwow64.exe

C:\Windows\splwow64.exe 12288

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=batch+virus+download

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffb023246f8,0x7ffb02324708,0x7ffb02324718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,9878482589802125133,11384843849649297259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2104 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,9878482589802125133,11384843849649297259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5580 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 241.150.49.20.in-addr.arpa udp
US 8.8.8.8:53 227.153.247.72.in-addr.arpa udp
US 8.8.8.8:53 72.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 133.211.185.52.in-addr.arpa udp
US 8.8.8.8:53 104.219.191.52.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 172.217.16.228:443 www.google.com tcp
GB 172.217.16.228:443 www.google.com udp
US 8.8.8.8:53 3.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 228.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 53.210.109.20.in-addr.arpa udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 172.217.169.10:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
US 8.8.8.8:53 10.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 3.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 227.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 120.218.122.92.in-addr.arpa udp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.178.14:443 clients2.google.com tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
DE 142.250.185.99:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 99.185.250.142.in-addr.arpa udp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 dns-tunnel-check.googlezip.net udp
US 8.8.8.8:53 tunnel.googlezip.net udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
GB 142.250.187.202:443 ogads-pa.googleapis.com tcp
GB 142.250.187.202:443 ogads-pa.googleapis.com udp
US 8.8.8.8:53 157.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 2.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 play.google.com udp
GB 142.250.187.206:443 play.google.com tcp
US 8.8.8.8:53 206.187.250.142.in-addr.arpa udp
GB 142.250.187.206:443 play.google.com udp
US 8.8.8.8:53 consent.google.com udp
GB 142.250.180.14:443 consent.google.com tcp
US 8.8.8.8:53 14.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 id.google.com udp
ZA 192.178.54.35:443 id.google.com tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 35.54.178.192.in-addr.arpa udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
ZA 192.178.54.35:443 id.google.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 www.reddit.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.redditinc.com udp
GB 172.217.16.228:443 www.google.com tcp
US 199.60.103.228:443 www.redditinc.com tcp
US 8.8.8.8:53 redditinc.com udp
US 199.60.103.41:443 redditinc.com tcp
GB 172.217.16.228:443 www.google.com tcp
GB 172.217.169.10:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 228.103.60.199.in-addr.arpa udp
US 8.8.8.8:53 41.103.60.199.in-addr.arpa udp
GB 172.217.16.228:443 www.google.com udp
US 8.8.8.8:53 www.redditstatic.com udp
US 151.101.129.140:443 www.redditstatic.com tcp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
DE 142.250.185.99:443 beacons.gcp.gvt2.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 140.129.101.151.in-addr.arpa udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 8.8.8.8:53 26.73.42.20.in-addr.arpa udp
US 151.101.1.140:443 www.redditstatic.com tcp
US 151.101.1.140:443 www.redditstatic.com tcp
GB 172.217.16.228:443 www.google.com udp
US 8.8.8.8:53 140.1.101.151.in-addr.arpa udp
US 151.101.129.140:443 www.redditstatic.com tcp
US 8.8.8.8:53 preview.redd.it udp
US 151.101.193.140:443 preview.redd.it tcp
US 8.8.8.8:53 w3-reporting.reddit.com udp
GB 172.217.16.228:443 www.google.com udp
US 151.101.1.140:443 w3-reporting.reddit.com tcp
US 8.8.8.8:53 ad-delivery.net udp
US 172.67.69.19:443 ad-delivery.net tcp
US 8.8.8.8:53 140.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 19.69.67.172.in-addr.arpa udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 google.com udp
GB 142.250.187.238:443 google.com tcp
US 8.8.8.8:53 styles.redditmedia.com udp
US 151.101.1.140:443 styles.redditmedia.com tcp
US 8.8.8.8:53 www.reddit.com udp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 external-preview.redd.it udp
US 8.8.8.8:53 accounts.google.com udp
BE 74.125.206.84:443 accounts.google.com tcp
BE 74.125.206.84:443 accounts.google.com udp
US 8.8.8.8:53 www.redditstatic.com udp
US 8.8.8.8:53 i.redd.it udp
US 8.8.8.8:53 84.206.125.74.in-addr.arpa udp
US 8.8.8.8:53 w3-reporting-nel.reddit.com udp
US 8.8.8.8:53 alb.reddit.com udp
US 8.8.8.8:53 230.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 a.thumbs.redditmedia.com udp
US 151.101.65.140:443 a.thumbs.redditmedia.com tcp
US 8.8.8.8:53 140.65.101.151.in-addr.arpa udp
US 8.8.8.8:53 preview.redd.it udp
US 151.101.1.140:443 preview.redd.it tcp
US 151.101.1.140:443 preview.redd.it tcp
GB 172.217.169.10:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
DE 142.250.185.99:443 beacons.gcp.gvt2.com tcp
DE 142.250.185.99:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 e2c7.gcp.gvt2.com udp
IN 34.131.78.121:443 e2c7.gcp.gvt2.com tcp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.108.133:443 avatars.githubusercontent.com tcp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 185.199.108.133:443 user-images.githubusercontent.com tcp
US 185.199.108.133:443 user-images.githubusercontent.com tcp
US 8.8.8.8:53 private-user-images.githubusercontent.com udp
US 185.199.108.133:443 private-user-images.githubusercontent.com tcp
US 185.199.108.133:443 private-user-images.githubusercontent.com tcp
IN 34.131.78.121:443 e2c7.gcp.gvt2.com tcp
US 185.199.109.133:443 private-user-images.githubusercontent.com tcp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 154.109.199.185.in-addr.arpa udp
US 8.8.8.8:53 133.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 121.78.131.34.in-addr.arpa udp
US 8.8.8.8:53 133.109.199.185.in-addr.arpa udp
GB 172.217.169.10:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 beacons.gvt2.com udp
US 8.8.8.8:53 collector.github.com udp
US 185.199.109.154:443 github.githubassets.com tcp
US 8.8.8.8:53 api.github.com udp
US 140.82.112.21:443 collector.github.com tcp
US 140.82.112.21:443 collector.github.com tcp
GB 172.217.169.10:443 content-autofill.googleapis.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 21.112.82.140.in-addr.arpa udp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 w3-reporting-nel.reddit.com udp
GB 142.250.187.238:443 google.com udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 collector.github.com udp
GB 172.217.169.10:443 content-autofill.googleapis.com udp
GB 20.26.156.210:443 api.github.com tcp
DE 142.250.185.99:443 beacons.gcp.gvt2.com udp
DE 142.250.185.99:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 codeload.github.com udp
GB 20.26.156.216:443 codeload.github.com tcp
US 8.8.8.8:53 216.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 7.6.57.23.in-addr.arpa udp
GB 172.217.16.228:443 www.google.com udp
ZA 192.178.54.35:443 id.google.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 142.250.187.202:443 ogads-pa.googleapis.com udp
US 8.8.8.8:53 locate.measurementlab.net udp
GB 216.58.212.211:443 locate.measurementlab.net tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 211.212.58.216.in-addr.arpa udp
GB 142.250.187.206:443 play.google.com udp
US 8.8.8.8:53 ndt-mlab2-lhr04.mlab-oti.measurement-lab.org udp
GB 195.89.146.24:443 ndt-mlab2-lhr04.mlab-oti.measurement-lab.org tcp
US 8.8.8.8:53 24.146.89.195.in-addr.arpa udp
US 8.8.8.8:53 collector.github.com udp
DE 142.250.185.99:443 beacons.gcp.gvt2.com udp
GB 172.217.16.228:443 www.google.com udp
US 8.8.8.8:53 lens.google.com udp
GB 172.217.16.238:443 lens.google.com tcp
US 8.8.8.8:53 238.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 172.67.69.19:445 ad-delivery.net tcp
US 151.101.129.140:445 w3-reporting-nel.reddit.com tcp
GB 172.217.16.230:445 ad.doubleclick.net tcp
US 151.101.193.140:445 w3-reporting-nel.reddit.com tcp
GB 142.250.187.238:445 google.com tcp
US 151.101.1.140:445 w3-reporting-nel.reddit.com tcp
N/A 10.127.0.0:445 tcp
US 172.67.69.19:139 ad-delivery.net tcp
US 151.101.193.140:139 w3-reporting-nel.reddit.com tcp
US 151.101.129.140:139 w3-reporting-nel.reddit.com tcp
GB 172.217.16.230:139 ad.doubleclick.net tcp
US 151.101.1.140:139 w3-reporting-nel.reddit.com tcp
GB 142.250.187.238:139 google.com tcp
N/A 10.127.0.0:139 tcp
N/A 10.127.0.1:445 tcp
N/A 10.127.0.1:139 tcp
N/A 10.127.0.2:445 tcp
N/A 10.127.0.2:139 tcp
N/A 10.127.0.3:445 tcp
N/A 10.127.0.3:139 tcp
N/A 10.127.0.4:445 tcp
N/A 10.127.0.4:139 tcp
N/A 10.127.0.5:445 tcp
N/A 10.127.0.5:139 tcp
US 185.199.108.133:445 avatars.githubusercontent.com tcp
GB 172.217.16.227:445 fonts.gstatic.com tcp
DE 142.250.185.99:445 beacons.gcp.gvt2.com tcp
US 185.199.109.154:445 github.githubassets.com tcp
US 185.199.109.133:445 avatars.githubusercontent.com tcp
GB 172.217.169.10:445 content-autofill.googleapis.com tcp
GB 172.217.169.10:139 content-autofill.googleapis.com tcp
US 185.199.108.133:139 avatars.githubusercontent.com tcp
DE 142.250.185.99:139 beacons.gcp.gvt2.com tcp
GB 172.217.16.227:139 fonts.gstatic.com tcp
US 185.199.109.133:139 avatars.githubusercontent.com tcp
US 185.199.109.154:139 github.githubassets.com tcp
N/A 10.127.0.6:445 tcp
N/A 10.127.0.6:139 tcp
N/A 10.127.0.7:445 tcp
N/A 10.127.0.7:139 tcp
N/A 10.127.0.8:445 tcp
N/A 10.127.0.8:139 tcp
N/A 10.127.0.9:445 tcp
N/A 10.127.0.9:139 tcp
N/A 10.127.0.10:445 tcp
N/A 10.127.0.10:139 tcp
N/A 10.127.0.11:445 tcp
GB 20.26.156.216:445 codeload.github.com tcp
US 140.82.112.21:445 collector.github.com tcp
US 199.60.103.228:445 www.redditinc.com tcp
GB 216.58.212.211:445 locate.measurementlab.net tcp
GB 172.217.16.238:445 lens.google.com tcp
N/A 10.127.0.1:445 tcp
US 140.82.112.21:139 collector.github.com tcp
GB 20.26.156.216:139 codeload.github.com tcp
US 199.60.103.228:139 www.redditinc.com tcp
GB 216.58.212.211:139 locate.measurementlab.net tcp
GB 172.217.16.238:139 lens.google.com tcp
N/A 10.127.0.1:139 tcp
N/A 10.127.0.11:139 tcp
N/A 10.127.0.12:445 tcp
N/A 10.127.0.12:139 tcp
N/A 10.127.0.13:445 tcp
N/A 10.127.0.13:139 tcp
N/A 10.127.0.14:445 tcp
N/A 10.127.0.14:139 tcp
N/A 10.127.0.15:445 tcp
N/A 10.127.0.15:139 tcp
N/A 10.127.0.16:445 tcp
N/A 10.127.0.16:139 tcp
US 35.190.80.1:445 a.nel.cloudflare.com tcp
US 199.60.103.41:445 redditinc.com tcp
FI 37.27.61.183:445 tcp
US 199.60.103.41:139 redditinc.com tcp
US 35.190.80.1:139 a.nel.cloudflare.com tcp
FI 37.27.61.183:139 tcp
N/A 10.127.0.17:445 tcp
N/A 10.127.0.17:139 tcp
N/A 10.127.0.18:445 tcp
N/A 10.127.0.18:139 tcp
N/A 10.127.0.19:445 tcp
N/A 10.127.0.19:139 tcp
N/A 10.127.0.20:445 tcp
N/A 10.127.0.20:139 tcp
N/A 10.127.0.21:445 tcp
N/A 10.127.0.21:139 tcp
N/A 10.127.0.22:445 tcp
N/A 10.127.0.22:139 tcp
N/A 10.127.0.23:445 tcp
N/A 10.127.0.23:139 tcp
N/A 10.127.0.24:445 tcp
N/A 10.127.0.24:139 tcp
N/A 10.127.0.25:445 tcp
N/A 10.127.0.25:139 tcp
N/A 10.127.0.26:445 tcp
N/A 10.127.0.26:139 tcp
N/A 10.127.0.27:445 tcp
N/A 10.127.0.27:139 tcp
N/A 10.127.0.28:445 tcp
N/A 10.127.0.28:139 tcp
N/A 10.127.0.29:445 tcp
N/A 10.127.0.29:139 tcp
N/A 10.127.0.30:445 tcp
N/A 10.127.0.30:139 tcp
N/A 10.127.0.31:445 tcp
N/A 10.127.0.31:139 tcp
N/A 10.127.0.32:445 tcp
N/A 10.127.0.32:139 tcp
N/A 10.127.0.33:445 tcp
N/A 10.127.0.33:139 tcp
N/A 10.127.0.34:445 tcp
N/A 10.127.0.34:139 tcp
N/A 10.127.0.35:445 tcp
N/A 10.127.0.35:139 tcp
N/A 10.127.0.36:445 tcp
N/A 10.127.0.36:139 tcp
N/A 10.127.0.37:445 tcp
N/A 10.127.0.37:139 tcp
N/A 10.127.0.38:445 tcp
N/A 10.127.0.38:139 tcp
N/A 10.127.0.39:445 tcp
N/A 10.127.0.39:139 tcp
N/A 10.127.0.40:445 tcp
N/A 10.127.0.40:139 tcp
N/A 10.127.0.41:445 tcp
N/A 10.127.0.41:139 tcp
N/A 10.127.0.42:445 tcp
N/A 10.127.0.42:139 tcp
N/A 10.127.0.43:445 tcp
N/A 10.127.0.43:139 tcp
N/A 10.127.0.44:445 tcp
N/A 10.127.0.44:139 tcp
N/A 10.127.0.45:445 tcp
N/A 10.127.0.45:139 tcp
N/A 10.127.0.46:445 tcp
N/A 10.127.0.46:139 tcp
N/A 10.127.0.47:445 tcp
N/A 10.127.0.47:139 tcp
N/A 10.127.0.48:445 tcp
N/A 10.127.0.48:139 tcp
N/A 10.127.0.0:445 tcp
N/A 10.127.0.4:445 tcp
N/A 10.127.0.3:445 tcp
N/A 10.127.0.2:445 tcp
N/A 10.127.0.5:445 tcp
N/A 10.127.0.6:445 tcp
N/A 10.127.0.49:445 tcp
N/A 10.127.0.49:139 tcp
N/A 10.127.0.6:139 tcp
N/A 10.127.0.2:139 tcp
N/A 10.127.0.3:139 tcp
N/A 10.127.0.4:139 tcp
N/A 10.127.0.0:139 tcp
N/A 10.127.0.5:139 tcp
N/A 10.127.0.50:445 tcp
N/A 10.127.0.50:139 tcp
N/A 10.127.0.51:445 tcp
N/A 10.127.0.51:139 tcp
N/A 10.127.0.52:445 tcp
N/A 10.127.0.52:139 tcp
N/A 10.127.0.53:445 tcp
N/A 10.127.0.53:139 tcp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 collector.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 140.82.112.22:443 collector.github.com tcp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
DE 142.250.185.99:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 22.112.82.140.in-addr.arpa udp
N/A 10.127.0.54:445 tcp
N/A 10.127.0.54:139 tcp
US 8.8.8.8:53 6.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 2.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 3.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 0.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 4.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 5.0.127.10.in-addr.arpa udp
N/A 10.127.0.55:445 tcp
N/A 10.127.0.55:139 tcp
N/A 10.127.0.9:445 tcp
N/A 10.127.0.7:445 tcp
N/A 10.127.0.12:445 tcp
N/A 10.127.0.8:445 tcp
N/A 10.127.0.11:445 tcp
N/A 10.127.0.10:445 tcp
N/A 10.127.0.7:139 tcp
N/A 10.127.0.9:139 tcp
N/A 10.127.0.12:139 tcp
N/A 10.127.0.8:139 tcp
N/A 10.127.0.10:139 tcp
N/A 10.127.0.11:139 tcp
N/A 10.127.0.56:445 tcp
N/A 10.127.0.56:139 tcp
N/A 10.127.0.57:445 tcp
N/A 10.127.0.57:139 tcp
N/A 10.127.0.58:445 tcp
N/A 10.127.0.58:139 tcp
N/A 10.127.0.59:445 tcp
N/A 10.127.0.59:139 tcp
N/A 10.127.0.60:445 tcp
N/A 10.127.0.60:139 tcp
N/A 10.127.0.61:445 tcp
US 8.8.8.8:53 10.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 12.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 7.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 9.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 8.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 11.0.127.10.in-addr.arpa udp
N/A 10.127.0.61:139 tcp
N/A 10.127.0.14:445 tcp
N/A 10.127.0.13:445 tcp
N/A 10.127.0.62:445 tcp
N/A 10.127.0.17:445 tcp
N/A 10.127.0.15:445 tcp
N/A 10.127.0.16:445 tcp
N/A 10.127.0.18:445 tcp
N/A 10.127.0.62:139 tcp
N/A 10.127.0.15:139 tcp
N/A 10.127.0.17:139 tcp
N/A 10.127.0.18:139 tcp
N/A 10.127.0.14:139 tcp
N/A 10.127.0.16:139 tcp
N/A 10.127.0.13:139 tcp
N/A 10.127.0.63:445 tcp
N/A 10.127.0.63:139 tcp
N/A 10.127.0.64:445 tcp
N/A 10.127.0.64:139 tcp
N/A 10.127.0.65:445 tcp
N/A 10.127.0.65:139 tcp
N/A 10.127.0.66:445 tcp
N/A 10.127.0.66:139 tcp
N/A 10.127.0.67:445 tcp
N/A 10.127.0.67:139 tcp
US 8.8.8.8:53 17.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 15.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 18.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 16.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 14.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 13.0.127.10.in-addr.arpa udp
N/A 10.127.0.68:445 tcp
N/A 10.127.0.68:139 tcp
N/A 10.127.0.19:445 tcp
N/A 10.127.0.22:445 tcp
N/A 10.127.0.20:445 tcp
N/A 10.127.0.21:445 tcp
N/A 10.127.0.23:445 tcp
N/A 10.127.0.24:445 tcp
N/A 10.127.0.69:445 tcp
N/A 10.127.0.19:139 tcp
N/A 10.127.0.22:139 tcp
N/A 10.127.0.20:139 tcp
N/A 10.127.0.23:139 tcp
N/A 10.127.0.21:139 tcp
N/A 10.127.0.24:139 tcp
N/A 10.127.0.69:139 tcp
N/A 10.127.0.70:445 tcp
N/A 10.127.0.70:139 tcp
N/A 10.127.0.71:445 tcp
N/A 10.127.0.71:139 tcp
N/A 10.127.0.72:445 tcp
N/A 10.127.0.72:139 tcp
N/A 10.127.0.73:445 tcp
N/A 10.127.0.73:139 tcp
N/A 10.127.0.74:445 tcp
N/A 10.127.0.74:139 tcp
US 8.8.8.8:53 19.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 22.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 24.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 20.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 23.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 21.0.127.10.in-addr.arpa udp
US 151.101.1.140:445 w3-reporting-nel.reddit.com tcp
N/A 10.127.0.75:445 tcp
IE 93.107.12.0:6893 udp
IE 93.107.12.1:6893 udp
IE 93.107.12.2:6893 udp
IE 93.107.12.3:6893 udp
IE 93.107.12.4:6893 udp
IE 93.107.12.5:6893 udp
IE 93.107.12.6:6893 udp
IE 93.107.12.7:6893 udp
IE 93.107.12.8:6893 udp
IE 93.107.12.9:6893 udp
IE 93.107.12.10:6893 udp
IE 93.107.12.11:6893 udp
IE 93.107.12.12:6893 udp
IE 93.107.12.13:6893 udp
IE 93.107.12.14:6893 udp
IE 93.107.12.15:6893 udp
IE 93.107.12.16:6893 udp
IE 93.107.12.17:6893 udp
IE 93.107.12.18:6893 udp
IE 93.107.12.19:6893 udp
IE 93.107.12.20:6893 udp
IE 93.107.12.21:6893 udp
IE 93.107.12.22:6893 udp
IE 93.107.12.23:6893 udp
IE 93.107.12.24:6893 udp
IE 93.107.12.25:6893 udp
IE 93.107.12.26:6893 udp
IE 93.107.12.27:6893 udp
IE 93.107.12.28:6893 udp
IE 93.107.12.29:6893 udp
IE 93.107.12.30:6893 udp
IE 93.107.12.31:6893 udp
TR 95.1.200.0:6893 udp
TR 95.1.200.1:6893 udp
TR 95.1.200.2:6893 udp
TR 95.1.200.3:6893 udp
TR 95.1.200.4:6893 udp
TR 95.1.200.5:6893 udp
TR 95.1.200.6:6893 udp
TR 95.1.200.7:6893 udp
TR 95.1.200.8:6893 udp
TR 95.1.200.9:6893 udp
TR 95.1.200.10:6893 udp
TR 95.1.200.11:6893 udp
TR 95.1.200.12:6893 udp
TR 95.1.200.13:6893 udp
TR 95.1.200.14:6893 udp
TR 95.1.200.15:6893 udp
TR 95.1.200.16:6893 udp
TR 95.1.200.17:6893 udp
TR 95.1.200.18:6893 udp
TR 95.1.200.19:6893 udp
TR 95.1.200.20:6893 udp
TR 95.1.200.21:6893 udp
TR 95.1.200.22:6893 udp
TR 95.1.200.23:6893 udp
TR 95.1.200.24:6893 udp
TR 95.1.200.25:6893 udp
TR 95.1.200.26:6893 udp
TR 95.1.200.27:6893 udp
TR 95.1.200.28:6893 udp
TR 95.1.200.29:6893 udp
TR 95.1.200.30:6893 udp
TR 95.1.200.31:6893 udp
FR 87.98.176.0:6893 udp
FR 87.98.176.1:6893 udp
FR 87.98.176.2:6893 udp
FR 87.98.176.3:6893 udp
FR 87.98.176.4:6893 udp
FR 87.98.176.5:6893 udp
FR 87.98.176.6:6893 udp
FR 87.98.176.7:6893 udp
FR 87.98.176.8:6893 udp
FR 87.98.176.9:6893 udp
FR 87.98.176.10:6893 udp
FR 87.98.176.11:6893 udp
FR 87.98.176.12:6893 udp
FR 87.98.176.13:6893 udp
FR 87.98.176.14:6893 udp
FR 87.98.176.15:6893 udp
FR 87.98.176.16:6893 udp
FR 87.98.176.17:6893 udp
FR 87.98.176.18:6893 udp
FR 87.98.176.19:6893 udp
FR 87.98.176.20:6893 udp
FR 87.98.176.21:6893 udp
FR 87.98.176.22:6893 udp
FR 87.98.176.23:6893 udp
FR 87.98.176.24:6893 udp
FR 87.98.176.25:6893 udp
FR 87.98.176.26:6893 udp
FR 87.98.176.27:6893 udp
FR 87.98.176.28:6893 udp
FR 87.98.176.29:6893 udp
FR 87.98.176.30:6893 udp
FR 87.98.176.31:6893 udp
FR 87.98.176.32:6893 udp
FR 87.98.176.33:6893 udp
FR 87.98.176.34:6893 udp
FR 87.98.176.35:6893 udp
FR 87.98.176.36:6893 udp
FR 87.98.176.37:6893 udp
FR 87.98.176.38:6893 udp
FR 87.98.176.39:6893 udp
FR 87.98.176.40:6893 udp
FR 87.98.176.41:6893 udp
FR 87.98.176.42:6893 udp
FR 87.98.176.43:6893 udp
FR 87.98.176.44:6893 udp
FR 87.98.176.45:6893 udp
FR 87.98.176.46:6893 udp
FR 87.98.176.47:6893 udp
FR 87.98.176.48:6893 udp
FR 87.98.176.49:6893 udp
FR 87.98.176.50:6893 udp
FR 87.98.176.51:6893 udp
FR 87.98.176.52:6893 udp
FR 87.98.176.53:6893 udp
FR 87.98.176.54:6893 udp
FR 87.98.176.55:6893 udp
FR 87.98.176.56:6893 udp
FR 87.98.176.57:6893 udp
FR 87.98.176.58:6893 udp
FR 87.98.176.59:6893 udp
FR 87.98.176.60:6893 udp
FR 87.98.176.61:6893 udp
FR 87.98.176.62:6893 udp
FR 87.98.176.63:6893 udp
FR 87.98.176.64:6893 udp
FR 87.98.176.65:6893 udp
FR 87.98.176.66:6893 udp
FR 87.98.176.67:6893 udp
FR 87.98.176.68:6893 udp
FR 87.98.176.69:6893 udp
FR 87.98.176.70:6893 udp
FR 87.98.176.71:6893 udp
FR 87.98.176.72:6893 udp
FR 87.98.176.73:6893 udp
FR 87.98.176.74:6893 udp
FR 87.98.176.75:6893 udp
FR 87.98.176.76:6893 udp
FR 87.98.176.77:6893 udp
FR 87.98.176.78:6893 udp
FR 87.98.176.79:6893 udp
FR 87.98.176.80:6893 udp
FR 87.98.176.81:6893 udp
FR 87.98.176.82:6893 udp
FR 87.98.176.83:6893 udp
FR 87.98.176.84:6893 udp
FR 87.98.176.85:6893 udp
FR 87.98.176.86:6893 udp
FR 87.98.176.87:6893 udp
FR 87.98.176.88:6893 udp
FR 87.98.176.89:6893 udp
FR 87.98.176.90:6893 udp
FR 87.98.176.91:6893 udp
FR 87.98.176.92:6893 udp
FR 87.98.176.93:6893 udp
FR 87.98.176.94:6893 udp
FR 87.98.176.95:6893 udp
FR 87.98.176.96:6893 udp
FR 87.98.176.97:6893 udp
FR 87.98.176.98:6893 udp
FR 87.98.176.99:6893 udp
FR 87.98.176.100:6893 udp
FR 87.98.176.101:6893 udp
FR 87.98.176.102:6893 udp
FR 87.98.176.103:6893 udp
FR 87.98.176.104:6893 udp
FR 87.98.176.105:6893 udp
FR 87.98.176.106:6893 udp
FR 87.98.176.107:6893 udp
FR 87.98.176.108:6893 udp
FR 87.98.176.109:6893 udp
FR 87.98.176.110:6893 udp
FR 87.98.176.111:6893 udp
FR 87.98.176.112:6893 udp
FR 87.98.176.113:6893 udp
FR 87.98.176.114:6893 udp
FR 87.98.176.115:6893 udp
FR 87.98.176.116:6893 udp
FR 87.98.176.117:6893 udp
FR 87.98.176.118:6893 udp
FR 87.98.176.119:6893 udp
FR 87.98.176.120:6893 udp
FR 87.98.176.121:6893 udp
FR 87.98.176.122:6893 udp
FR 87.98.176.123:6893 udp
FR 87.98.176.124:6893 udp
FR 87.98.176.125:6893 udp
FR 87.98.176.126:6893 udp
FR 87.98.176.127:6893 udp
FR 87.98.176.128:6893 udp
FR 87.98.176.129:6893 udp
FR 87.98.176.130:6893 udp
FR 87.98.176.131:6893 udp
FR 87.98.176.132:6893 udp
FR 87.98.176.133:6893 udp
FR 87.98.176.134:6893 udp
FR 87.98.176.135:6893 udp
FR 87.98.176.136:6893 udp
FR 87.98.176.137:6893 udp
FR 87.98.176.138:6893 udp
FR 87.98.176.139:6893 udp
FR 87.98.176.140:6893 udp
FR 87.98.176.141:6893 udp
FR 87.98.176.142:6893 udp
FR 87.98.176.143:6893 udp
FR 87.98.176.144:6893 udp
FR 87.98.176.145:6893 udp
FR 87.98.176.146:6893 udp
FR 87.98.176.147:6893 udp
FR 87.98.176.148:6893 udp
FR 87.98.176.149:6893 udp
FR 87.98.176.150:6893 udp
FR 87.98.176.151:6893 udp
FR 87.98.176.152:6893 udp
FR 87.98.176.153:6893 udp
FR 87.98.176.154:6893 udp
FR 87.98.176.155:6893 udp
FR 87.98.176.156:6893 udp
FR 87.98.176.157:6893 udp
FR 87.98.176.158:6893 udp
FR 87.98.176.159:6893 udp
FR 87.98.176.160:6893 udp
FR 87.98.176.161:6893 udp
FR 87.98.176.162:6893 udp
FR 87.98.176.163:6893 udp
FR 87.98.176.164:6893 udp
FR 87.98.176.165:6893 udp
FR 87.98.176.166:6893 udp
BE 87.98.176.167:6893 udp
FR 87.98.176.168:6893 udp
FR 87.98.176.169:6893 udp
FR 87.98.176.170:6893 udp
FR 87.98.176.171:6893 udp
FR 87.98.176.172:6893 udp
FR 87.98.176.173:6893 udp
FR 87.98.176.174:6893 udp
FR 87.98.176.175:6893 udp
FR 87.98.176.176:6893 udp
FR 87.98.176.177:6893 udp
FR 87.98.176.178:6893 udp
FR 87.98.176.179:6893 udp
FR 87.98.176.180:6893 udp
FR 87.98.176.181:6893 udp
FR 87.98.176.182:6893 udp
FR 87.98.176.183:6893 udp
FR 87.98.176.184:6893 udp
FR 87.98.176.185:6893 udp
FR 87.98.176.186:6893 udp
FR 87.98.176.187:6893 udp
FR 87.98.176.188:6893 udp
FR 87.98.176.189:6893 udp
FR 87.98.176.190:6893 udp
FR 87.98.176.191:6893 udp
FR 87.98.176.192:6893 udp
FR 87.98.176.193:6893 udp
FR 87.98.176.194:6893 udp
FR 87.98.176.195:6893 udp
FR 87.98.176.196:6893 udp
FR 87.98.176.197:6893 udp
FR 87.98.176.198:6893 udp
FR 87.98.176.199:6893 udp
FR 87.98.176.200:6893 udp
FR 87.98.176.201:6893 udp
FR 87.98.176.202:6893 udp
FR 87.98.176.203:6893 udp
FR 87.98.176.204:6893 udp
FR 87.98.176.205:6893 udp
FR 87.98.176.206:6893 udp
FR 87.98.176.207:6893 udp
FR 87.98.176.208:6893 udp
FR 87.98.176.209:6893 udp
FR 87.98.176.210:6893 udp
FR 87.98.176.211:6893 udp
FR 87.98.176.212:6893 udp
FR 87.98.176.213:6893 udp
FR 87.98.176.214:6893 udp
FR 87.98.176.215:6893 udp
FR 87.98.176.216:6893 udp
FR 87.98.176.217:6893 udp
FR 87.98.176.218:6893 udp
FR 87.98.176.219:6893 udp
FR 87.98.176.220:6893 udp
FR 87.98.176.221:6893 udp
FR 87.98.176.222:6893 udp
FR 87.98.176.223:6893 udp
FR 87.98.176.224:6893 udp
FR 87.98.176.225:6893 udp
FR 87.98.176.226:6893 udp
FR 87.98.176.227:6893 udp
FR 87.98.176.228:6893 udp
FR 87.98.176.229:6893 udp
FR 87.98.176.230:6893 udp
FR 87.98.176.231:6893 udp
FR 87.98.176.232:6893 udp
FR 87.98.176.233:6893 udp
FR 87.98.176.234:6893 udp
FR 87.98.176.235:6893 udp
FR 87.98.176.236:6893 udp
FR 87.98.176.237:6893 udp
FR 87.98.176.238:6893 udp
FR 87.98.176.239:6893 udp
FR 87.98.176.240:6893 udp
FR 87.98.176.241:6893 udp
FR 87.98.176.242:6893 udp
FR 87.98.176.243:6893 udp
FR 87.98.176.244:6893 udp
FR 87.98.176.245:6893 udp
FR 87.98.176.246:6893 udp
FR 87.98.176.247:6893 udp
FR 87.98.176.248:6893 udp
FR 87.98.176.249:6893 udp
FR 87.98.176.250:6893 udp
FR 87.98.176.251:6893 udp
FR 87.98.176.252:6893 udp
FR 87.98.176.253:6893 udp
FR 87.98.176.254:6893 udp
US 8.8.8.8:53 0.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 1.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 2.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 3.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 4.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 5.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 7.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 6.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 8.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 9.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 10.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 11.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 12.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 13.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 14.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 15.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 16.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 17.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 18.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 19.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 20.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 21.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 22.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 23.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 24.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 25.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 26.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 27.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 28.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 29.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 30.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 31.12.107.93.in-addr.arpa udp
US 8.8.8.8:53 0.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 1.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 2.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 3.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 4.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 5.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 6.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 8.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 7.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 9.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 11.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 10.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 12.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 13.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 14.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 15.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 16.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 17.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 19.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 18.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 20.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 21.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 22.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 23.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 24.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 25.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 26.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 27.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 28.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 30.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 31.200.1.95.in-addr.arpa udp
US 8.8.8.8:53 0.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 1.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 2.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 3.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 4.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 5.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 6.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 7.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 8.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 9.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 10.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 11.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 12.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 13.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 14.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 15.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 16.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 17.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 18.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 19.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 20.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 21.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 22.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 23.176.98.87.in-addr.arpa udp
N/A 10.127.0.75:139 tcp
US 8.8.8.8:53 24.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 25.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 26.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 27.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 28.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 29.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 30.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 31.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 32.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 33.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 34.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 35.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 36.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 37.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 38.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 39.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 40.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 41.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 42.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 43.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 44.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 45.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 46.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 48.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 49.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 50.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 51.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 52.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 53.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 54.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 55.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 56.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 57.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 58.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 59.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 60.176.98.87.in-addr.arpa udp
N/A 10.127.0.25:445 tcp
US 8.8.8.8:53 61.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 62.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 63.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 64.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 65.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 66.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 67.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 68.176.98.87.in-addr.arpa udp
N/A 10.127.0.29:445 tcp
US 8.8.8.8:53 69.176.98.87.in-addr.arpa udp
N/A 10.127.0.27:445 tcp
N/A 10.127.0.28:445 tcp
N/A 10.127.0.26:445 tcp
US 8.8.8.8:53 70.176.98.87.in-addr.arpa udp
N/A 10.127.0.30:445 tcp
US 8.8.8.8:53 71.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 72.176.98.87.in-addr.arpa udp
FR 87.98.176.255:6893 udp
FR 87.98.177.0:6893 udp
FR 87.98.177.1:6893 udp
FR 87.98.177.2:6893 udp
FR 87.98.177.3:6893 udp
FR 87.98.177.4:6893 udp
FR 87.98.177.5:6893 udp
FR 87.98.177.6:6893 udp
FR 87.98.177.7:6893 udp
FR 87.98.177.8:6893 udp
FR 87.98.177.9:6893 udp
FR 87.98.177.10:6893 udp
FR 87.98.177.11:6893 udp
FR 87.98.177.12:6893 udp
FR 87.98.177.13:6893 udp
FR 87.98.177.14:6893 udp
FR 87.98.177.15:6893 udp
FR 87.98.177.16:6893 udp
FR 87.98.177.17:6893 udp
FR 87.98.177.18:6893 udp
FR 87.98.177.19:6893 udp
FR 87.98.177.20:6893 udp
FR 87.98.177.21:6893 udp
FR 87.98.177.22:6893 udp
FR 87.98.177.23:6893 udp
US 8.8.8.8:53 73.176.98.87.in-addr.arpa udp
FR 87.98.177.24:6893 udp
FR 87.98.177.25:6893 udp
FR 87.98.177.26:6893 udp
FR 87.98.177.27:6893 udp
FR 87.98.177.28:6893 udp
FR 87.98.177.29:6893 udp
FR 87.98.177.30:6893 udp
FR 87.98.177.31:6893 udp
FR 87.98.177.32:6893 udp
FR 87.98.177.33:6893 udp
FR 87.98.177.34:6893 udp
FR 87.98.177.35:6893 udp
FR 87.98.177.36:6893 udp
FR 87.98.177.37:6893 udp
FR 87.98.177.38:6893 udp
FR 87.98.177.39:6893 udp
FR 87.98.177.40:6893 udp
FR 87.98.177.41:6893 udp
FR 87.98.177.42:6893 udp
FR 87.98.177.43:6893 udp
FR 87.98.177.44:6893 udp
FR 87.98.177.45:6893 udp
FR 87.98.177.46:6893 udp
FR 87.98.177.47:6893 udp
FR 87.98.177.48:6893 udp
FR 87.98.177.49:6893 udp
FR 87.98.177.50:6893 udp
FR 87.98.177.51:6893 udp
FR 87.98.177.52:6893 udp
FR 87.98.177.53:6893 udp
FR 87.98.177.54:6893 udp
FR 87.98.177.55:6893 udp
FR 87.98.177.56:6893 udp
FR 87.98.177.57:6893 udp
FR 87.98.177.58:6893 udp
FR 87.98.177.59:6893 udp
FR 87.98.177.60:6893 udp
FR 87.98.177.61:6893 udp
FR 87.98.177.62:6893 udp
FR 87.98.177.63:6893 udp
FR 87.98.177.64:6893 udp
FR 87.98.177.65:6893 udp
FR 87.98.177.66:6893 udp
FR 87.98.177.67:6893 udp
FR 87.98.177.68:6893 udp
FR 87.98.177.69:6893 udp
FR 87.98.177.70:6893 udp
FR 87.98.177.71:6893 udp
FR 87.98.177.72:6893 udp
FR 87.98.177.73:6893 udp
FR 87.98.177.74:6893 udp
FR 87.98.177.75:6893 udp
FR 87.98.177.76:6893 udp
FR 87.98.177.77:6893 udp
FR 87.98.177.78:6893 udp
FR 87.98.177.79:6893 udp
FR 87.98.177.80:6893 udp
FR 87.98.177.81:6893 udp
FR 87.98.177.82:6893 udp
FR 87.98.177.83:6893 udp
FR 87.98.177.84:6893 udp
FR 87.98.177.85:6893 udp
FR 87.98.177.86:6893 udp
FR 87.98.177.87:6893 udp
FR 87.98.177.88:6893 udp
FR 87.98.177.89:6893 udp
FR 87.98.177.90:6893 udp
FR 87.98.177.91:6893 udp
FR 87.98.177.92:6893 udp
FR 87.98.177.93:6893 udp
FR 87.98.177.94:6893 udp
FR 87.98.177.95:6893 udp
FR 87.98.177.96:6893 udp
FR 87.98.177.97:6893 udp
FR 87.98.177.98:6893 udp
FR 87.98.177.99:6893 udp
US 8.8.8.8:53 74.176.98.87.in-addr.arpa udp
FR 87.98.177.100:6893 udp
FR 87.98.177.101:6893 udp
FR 87.98.177.102:6893 udp
FR 87.98.177.103:6893 udp
FR 87.98.177.104:6893 udp
FR 87.98.177.105:6893 udp
FR 87.98.177.106:6893 udp
FR 87.98.177.107:6893 udp
FR 87.98.177.108:6893 udp
FR 87.98.177.109:6893 udp
FR 87.98.177.110:6893 udp
FR 87.98.177.111:6893 udp
FR 87.98.177.112:6893 udp
FR 87.98.177.113:6893 udp
FR 87.98.177.114:6893 udp
FR 87.98.177.115:6893 udp
FR 87.98.177.116:6893 udp
FR 87.98.177.117:6893 udp
FR 87.98.177.118:6893 udp
FR 87.98.177.119:6893 udp
FR 87.98.177.120:6893 udp
FR 87.98.177.121:6893 udp
FR 87.98.177.122:6893 udp
FR 87.98.177.123:6893 udp
FR 87.98.177.124:6893 udp
FR 87.98.177.125:6893 udp
FR 87.98.177.126:6893 udp
FR 87.98.177.127:6893 udp
FR 87.98.177.128:6893 udp
FR 87.98.177.129:6893 udp
FR 87.98.177.130:6893 udp
FR 87.98.177.131:6893 udp
FR 87.98.177.132:6893 udp
FR 87.98.177.133:6893 udp
FR 87.98.177.134:6893 udp
FR 87.98.177.135:6893 udp
FR 87.98.177.136:6893 udp
FR 87.98.177.137:6893 udp
FR 87.98.177.138:6893 udp
FR 87.98.177.139:6893 udp
FR 87.98.177.140:6893 udp
FR 87.98.177.141:6893 udp
FR 87.98.177.142:6893 udp
FR 87.98.177.143:6893 udp
FR 87.98.177.144:6893 udp
FR 87.98.177.145:6893 udp
FR 87.98.177.146:6893 udp
FR 87.98.177.147:6893 udp
FR 87.98.177.148:6893 udp
FR 87.98.177.149:6893 udp
FR 87.98.177.150:6893 udp
FR 87.98.177.151:6893 udp
FR 87.98.177.152:6893 udp
FR 87.98.177.153:6893 udp
FR 87.98.177.154:6893 udp
FR 87.98.177.155:6893 udp
FR 87.98.177.156:6893 udp
FR 87.98.177.157:6893 udp
FR 87.98.177.158:6893 udp
FR 87.98.177.159:6893 udp
FR 87.98.177.160:6893 udp
FR 87.98.177.161:6893 udp
FR 87.98.177.162:6893 udp
FR 87.98.177.163:6893 udp
FR 87.98.177.164:6893 udp
FR 87.98.177.165:6893 udp
FR 87.98.177.166:6893 udp
FR 87.98.177.167:6893 udp
FR 87.98.177.168:6893 udp
FR 87.98.177.169:6893 udp
FR 87.98.177.170:6893 udp
FR 87.98.177.171:6893 udp
FR 87.98.177.172:6893 udp
FR 87.98.177.173:6893 udp
FR 87.98.177.174:6893 udp
FR 87.98.177.175:6893 udp
FR 87.98.177.176:6893 udp
FR 87.98.177.177:6893 udp
FR 87.98.177.178:6893 udp
FR 87.98.177.179:6893 udp
FR 87.98.177.180:6893 udp
FR 87.98.177.181:6893 udp
FR 87.98.177.182:6893 udp
FR 87.98.177.183:6893 udp
FR 87.98.177.184:6893 udp
FR 87.98.177.185:6893 udp
FR 87.98.177.186:6893 udp
FR 87.98.177.187:6893 udp
FR 87.98.177.188:6893 udp
FR 87.98.177.189:6893 udp
FR 87.98.177.190:6893 udp
FR 87.98.177.191:6893 udp
FR 87.98.177.192:6893 udp
FR 87.98.177.193:6893 udp
FR 87.98.177.194:6893 udp
FR 87.98.177.195:6893 udp
FR 87.98.177.196:6893 udp
FR 87.98.177.197:6893 udp
FR 87.98.177.198:6893 udp
FR 87.98.177.199:6893 udp
FR 87.98.177.200:6893 udp
FR 87.98.177.201:6893 udp
FR 87.98.177.202:6893 udp
FR 87.98.177.203:6893 udp
FR 87.98.177.204:6893 udp
FR 87.98.177.205:6893 udp
FR 87.98.177.206:6893 udp
FR 87.98.177.207:6893 udp
FR 87.98.177.208:6893 udp
FR 87.98.177.209:6893 udp
FR 87.98.177.210:6893 udp
FR 87.98.177.211:6893 udp
FR 87.98.177.212:6893 udp
FR 87.98.177.213:6893 udp
FR 87.98.177.214:6893 udp
FR 87.98.177.215:6893 udp
FR 87.98.177.216:6893 udp
FR 87.98.177.217:6893 udp
FR 87.98.177.218:6893 udp
FR 87.98.177.219:6893 udp
FR 87.98.177.220:6893 udp
FR 87.98.177.221:6893 udp
FR 87.98.177.222:6893 udp
FR 87.98.177.223:6893 udp
FR 87.98.177.224:6893 udp
FR 87.98.177.225:6893 udp
FR 87.98.177.226:6893 udp
FR 87.98.177.227:6893 udp
FR 87.98.177.228:6893 udp
FR 87.98.177.229:6893 udp
FR 87.98.177.230:6893 udp
FR 87.98.177.231:6893 udp
FR 87.98.177.232:6893 udp
FR 87.98.177.233:6893 udp
FR 87.98.177.234:6893 udp
FR 87.98.177.235:6893 udp
FR 87.98.177.236:6893 udp
FR 87.98.177.237:6893 udp
FR 87.98.177.238:6893 udp
FR 87.98.177.239:6893 udp
FR 87.98.177.240:6893 udp
FR 87.98.177.241:6893 udp
FR 87.98.177.242:6893 udp
FR 87.98.177.243:6893 udp
FR 87.98.177.244:6893 udp
FR 87.98.177.245:6893 udp
FR 87.98.177.246:6893 udp
FR 87.98.177.247:6893 udp
FR 87.98.177.248:6893 udp
FR 87.98.177.249:6893 udp
FR 87.98.177.250:6893 udp
FR 87.98.177.251:6893 udp
FR 87.98.177.252:6893 udp
FR 87.98.177.253:6893 udp
FR 87.98.177.254:6893 udp
US 8.8.8.8:53 75.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 76.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 77.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 78.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 79.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 80.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 81.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 83.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 82.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 84.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 85.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 86.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 88.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 87.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 89.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 90.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 91.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 92.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 93.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 94.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 95.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 96.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 97.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 98.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 99.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 100.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 101.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 102.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 103.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 104.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 105.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 106.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 107.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 108.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 109.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 110.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 111.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 112.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 114.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 113.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 115.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 116.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 117.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 118.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 119.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 120.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 121.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 122.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 123.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 124.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 125.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 126.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 127.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 128.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 129.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 130.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 131.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 132.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 133.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 134.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 135.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 136.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 137.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 138.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 139.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 140.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 141.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 142.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 144.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 143.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 145.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 146.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 147.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 148.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 149.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 150.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 151.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 152.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 153.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 154.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 155.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 156.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 157.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 158.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 159.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 160.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 161.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 162.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 163.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 164.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 165.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 166.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 167.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 168.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 169.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 170.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 171.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 172.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 173.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 174.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 175.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 176.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 177.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 178.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 179.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 180.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 181.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 182.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 183.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 184.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 185.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 186.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 187.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 188.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 189.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 190.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 191.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 192.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 194.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 195.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 196.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 197.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 198.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 199.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 200.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 201.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 202.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 203.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 204.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 205.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 206.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 207.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 208.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 209.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 210.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 211.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 212.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 213.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 214.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 215.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 216.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 217.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 218.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 219.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 220.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 221.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 222.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 223.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 224.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 225.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 226.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 227.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 228.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 229.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 230.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 231.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 232.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 233.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 234.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 235.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 237.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 238.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 239.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 240.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 241.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 242.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 244.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 245.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 246.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 247.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 248.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 249.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 250.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 251.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 252.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 253.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 254.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 255.176.98.87.in-addr.arpa udp
US 8.8.8.8:53 0.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 1.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 2.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 3.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 4.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 5.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 6.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 7.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 8.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 9.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 10.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 11.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 12.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 13.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 15.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 17.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 16.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 18.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 19.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 20.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 21.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 22.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 23.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 24.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 25.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 26.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 27.177.98.87.in-addr.arpa udp
FR 87.98.177.255:6893 udp
FR 87.98.178.0:6893 udp
FR 87.98.178.1:6893 udp
FR 87.98.178.2:6893 udp
FR 87.98.178.3:6893 udp
FR 87.98.178.4:6893 udp
FR 87.98.178.5:6893 udp
FR 87.98.178.6:6893 udp
FR 87.98.178.7:6893 udp
FR 87.98.178.8:6893 udp
FR 87.98.178.9:6893 udp
FR 87.98.178.10:6893 udp
FR 87.98.178.11:6893 udp
FR 87.98.178.12:6893 udp
FR 87.98.178.13:6893 udp
FR 87.98.178.14:6893 udp
FR 87.98.178.15:6893 udp
FR 87.98.178.16:6893 udp
FR 87.98.178.17:6893 udp
FR 87.98.178.18:6893 udp
FR 87.98.178.19:6893 udp
FR 87.98.178.20:6893 udp
FR 87.98.178.21:6893 udp
FR 87.98.178.22:6893 udp
FR 87.98.178.23:6893 udp
FR 87.98.178.24:6893 udp
FR 87.98.178.25:6893 udp
FR 87.98.178.26:6893 udp
FR 87.98.178.27:6893 udp
FR 87.98.178.28:6893 udp
FR 87.98.178.29:6893 udp
FR 87.98.178.30:6893 udp
FR 87.98.178.31:6893 udp
FR 87.98.178.32:6893 udp
FR 87.98.178.33:6893 udp
FR 87.98.178.34:6893 udp
FR 87.98.178.35:6893 udp
FR 87.98.178.36:6893 udp
FR 87.98.178.37:6893 udp
FR 87.98.178.38:6893 udp
FR 87.98.178.39:6893 udp
FR 87.98.178.40:6893 udp
FR 87.98.178.41:6893 udp
FR 87.98.178.42:6893 udp
FR 87.98.178.43:6893 udp
FR 87.98.178.44:6893 udp
FR 87.98.178.45:6893 udp
FR 87.98.178.46:6893 udp
FR 87.98.178.47:6893 udp
FR 87.98.178.48:6893 udp
FR 87.98.178.49:6893 udp
FR 87.98.178.50:6893 udp
FR 87.98.178.51:6893 udp
FR 87.98.178.52:6893 udp
FR 87.98.178.53:6893 udp
FR 87.98.178.54:6893 udp
FR 87.98.178.55:6893 udp
FR 87.98.178.56:6893 udp
FR 87.98.178.57:6893 udp
FR 87.98.178.58:6893 udp
FR 87.98.178.59:6893 udp
FR 87.98.178.60:6893 udp
FR 87.98.178.61:6893 udp
FR 87.98.178.62:6893 udp
FR 87.98.178.63:6893 udp
FR 87.98.178.64:6893 udp
FR 87.98.178.65:6893 udp
FR 87.98.178.66:6893 udp
FR 87.98.178.67:6893 udp
FR 87.98.178.68:6893 udp
FR 87.98.178.69:6893 udp
FR 87.98.178.70:6893 udp
FR 87.98.178.71:6893 udp
FR 87.98.178.72:6893 udp
FR 87.98.178.73:6893 udp
FR 87.98.178.74:6893 udp
FR 87.98.178.75:6893 udp
FR 87.98.178.76:6893 udp
FR 87.98.178.77:6893 udp
FR 87.98.178.78:6893 udp
FR 87.98.178.79:6893 udp
FR 87.98.178.80:6893 udp
FR 87.98.178.81:6893 udp
FR 87.98.178.82:6893 udp
FR 87.98.178.83:6893 udp
FR 87.98.178.84:6893 udp
FR 87.98.178.85:6893 udp
FR 87.98.178.86:6893 udp
FR 87.98.178.87:6893 udp
FR 87.98.178.88:6893 udp
FR 87.98.178.89:6893 udp
FR 87.98.178.90:6893 udp
FR 87.98.178.91:6893 udp
FR 87.98.178.92:6893 udp
FR 87.98.178.93:6893 udp
FR 87.98.178.94:6893 udp
FR 87.98.178.95:6893 udp
FR 87.98.178.96:6893 udp
FR 87.98.178.97:6893 udp
FR 87.98.178.98:6893 udp
FR 87.98.178.99:6893 udp
FR 87.98.178.100:6893 udp
FR 87.98.178.101:6893 udp
FR 87.98.178.102:6893 udp
FR 87.98.178.103:6893 udp
FR 87.98.178.104:6893 udp
FR 87.98.178.105:6893 udp
FR 87.98.178.106:6893 udp
FR 87.98.178.107:6893 udp
FR 87.98.178.108:6893 udp
FR 87.98.178.109:6893 udp
FR 87.98.178.110:6893 udp
FR 87.98.178.111:6893 udp
FR 87.98.178.112:6893 udp
FR 87.98.178.113:6893 udp
FR 87.98.178.114:6893 udp
FR 87.98.178.115:6893 udp
FR 87.98.178.116:6893 udp
FR 87.98.178.117:6893 udp
FR 87.98.178.118:6893 udp
FR 87.98.178.119:6893 udp
FR 87.98.178.120:6893 udp
FR 87.98.178.121:6893 udp
FR 87.98.178.122:6893 udp
FR 87.98.178.123:6893 udp
FR 87.98.178.124:6893 udp
FR 87.98.178.125:6893 udp
FR 87.98.178.126:6893 udp
FR 87.98.178.127:6893 udp
FR 87.98.178.128:6893 udp
FR 87.98.178.129:6893 udp
FR 87.98.178.130:6893 udp
FR 87.98.178.131:6893 udp
FR 87.98.178.132:6893 udp
FR 87.98.178.133:6893 udp
FR 87.98.178.134:6893 udp
FR 87.98.178.135:6893 udp
FR 87.98.178.136:6893 udp
FR 87.98.178.137:6893 udp
FR 87.98.178.138:6893 udp
FR 87.98.178.139:6893 udp
FR 87.98.178.140:6893 udp
FR 87.98.178.141:6893 udp
FR 87.98.178.142:6893 udp
FR 87.98.178.143:6893 udp
FR 87.98.178.144:6893 udp
US 8.8.8.8:53 28.177.98.87.in-addr.arpa udp
FR 87.98.178.145:6893 udp
FR 87.98.178.146:6893 udp
FR 87.98.178.147:6893 udp
FR 87.98.178.148:6893 udp
FR 87.98.178.149:6893 udp
FR 87.98.178.150:6893 udp
FR 87.98.178.151:6893 udp
FR 87.98.178.152:6893 udp
FR 87.98.178.153:6893 udp
FR 87.98.178.154:6893 udp
FR 87.98.178.155:6893 udp
FR 87.98.178.156:6893 udp
FR 87.98.178.157:6893 udp
FR 87.98.178.158:6893 udp
FR 87.98.178.159:6893 udp
FR 87.98.178.160:6893 udp
FR 87.98.178.161:6893 udp
FR 87.98.178.162:6893 udp
FR 87.98.178.163:6893 udp
FR 87.98.178.164:6893 udp
FR 87.98.178.165:6893 udp
FR 87.98.178.166:6893 udp
FR 87.98.178.167:6893 udp
FR 87.98.178.168:6893 udp
FR 87.98.178.169:6893 udp
FR 87.98.178.170:6893 udp
FR 87.98.178.171:6893 udp
FR 87.98.178.172:6893 udp
FR 87.98.178.173:6893 udp
FR 87.98.178.174:6893 udp
FR 87.98.178.175:6893 udp
FR 87.98.178.176:6893 udp
FR 87.98.178.177:6893 udp
FR 87.98.178.178:6893 udp
FR 87.98.178.179:6893 udp
FR 87.98.178.180:6893 udp
FR 87.98.178.181:6893 udp
FR 87.98.178.182:6893 udp
FR 87.98.178.183:6893 udp
FR 87.98.178.184:6893 udp
FR 87.98.178.185:6893 udp
FR 87.98.178.186:6893 udp
FR 87.98.178.187:6893 udp
FR 87.98.178.188:6893 udp
FR 87.98.178.189:6893 udp
FR 87.98.178.190:6893 udp
FR 87.98.178.191:6893 udp
FR 87.98.178.192:6893 udp
FR 87.98.178.193:6893 udp
FR 87.98.178.194:6893 udp
FR 87.98.178.195:6893 udp
FR 87.98.178.196:6893 udp
FR 87.98.178.197:6893 udp
FR 87.98.178.198:6893 udp
FR 87.98.178.199:6893 udp
FR 87.98.178.200:6893 udp
FR 87.98.178.201:6893 udp
FR 87.98.178.202:6893 udp
FR 87.98.178.203:6893 udp
FR 87.98.178.204:6893 udp
FR 87.98.178.205:6893 udp
FR 87.98.178.206:6893 udp
FR 87.98.178.207:6893 udp
FR 87.98.178.208:6893 udp
FR 87.98.178.209:6893 udp
FR 87.98.178.210:6893 udp
FR 87.98.178.211:6893 udp
FR 87.98.178.212:6893 udp
FR 87.98.178.213:6893 udp
FR 87.98.178.214:6893 udp
FR 87.98.178.215:6893 udp
FR 87.98.178.216:6893 udp
FR 87.98.178.217:6893 udp
FR 87.98.178.218:6893 udp
FR 87.98.178.219:6893 udp
FR 87.98.178.220:6893 udp
FR 87.98.178.221:6893 udp
FR 87.98.178.222:6893 udp
FR 87.98.178.223:6893 udp
FR 87.98.178.224:6893 udp
FR 87.98.178.225:6893 udp
FR 87.98.178.226:6893 udp
FR 87.98.178.227:6893 udp
FR 87.98.178.228:6893 udp
FR 87.98.178.229:6893 udp
FR 87.98.178.230:6893 udp
FR 87.98.178.231:6893 udp
FR 87.98.178.232:6893 udp
FR 87.98.178.233:6893 udp
FR 87.98.178.234:6893 udp
FR 87.98.178.235:6893 udp
FR 87.98.178.236:6893 udp
FR 87.98.178.237:6893 udp
FR 87.98.178.238:6893 udp
FR 87.98.178.239:6893 udp
FR 87.98.178.240:6893 udp
FR 87.98.178.241:6893 udp
FR 87.98.178.242:6893 udp
FR 87.98.178.243:6893 udp
FR 87.98.178.244:6893 udp
FR 87.98.178.245:6893 udp
FR 87.98.178.246:6893 udp
FR 87.98.178.247:6893 udp
FR 87.98.178.248:6893 udp
FR 87.98.178.249:6893 udp
FR 87.98.178.250:6893 udp
FR 87.98.178.251:6893 udp
FR 87.98.178.252:6893 udp
FR 87.98.178.253:6893 udp
FR 87.98.178.254:6893 udp
US 8.8.8.8:53 29.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 31.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 30.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 32.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 33.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 34.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 35.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 36.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 37.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 38.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 39.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 40.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 41.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 43.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 42.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 44.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 45.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 46.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 47.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 48.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 49.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 50.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 51.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 52.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 53.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 54.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 55.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 56.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 57.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 58.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 59.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 60.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 61.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 62.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 63.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 64.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 65.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 66.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 67.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 68.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 69.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 70.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 71.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 72.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 73.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 74.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 76.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 75.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 77.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 78.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 79.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 80.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 81.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 82.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 83.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 84.177.98.87.in-addr.arpa udp
N/A 10.127.0.25:139 tcp
N/A 10.127.0.26:139 tcp
N/A 10.127.0.29:139 tcp
N/A 10.127.0.27:139 tcp
N/A 10.127.0.28:139 tcp
N/A 10.127.0.30:139 tcp
US 8.8.8.8:53 85.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 86.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 87.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 88.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 89.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 90.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 92.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 93.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 94.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 95.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 96.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 97.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 98.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 100.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 101.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 102.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 103.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 105.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 104.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 106.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 108.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 107.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 110.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 112.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 111.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 113.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 114.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 116.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 115.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 117.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 118.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 120.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 119.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 121.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 123.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 124.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 122.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 125.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 126.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 127.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 129.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 130.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 131.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 132.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 133.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 134.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 135.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 136.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 137.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 138.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 139.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 140.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 142.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 143.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 144.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 145.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 146.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 147.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 148.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 149.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 150.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 151.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 152.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 153.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 154.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 156.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 157.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 155.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 158.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 159.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 160.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 161.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 162.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 163.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 164.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 165.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 166.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 167.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 168.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 169.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 170.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 171.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 172.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 173.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 174.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 175.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 176.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 177.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 178.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 180.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 181.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 183.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 182.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 184.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 185.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 186.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 187.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 188.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 189.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 190.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 191.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 192.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 193.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 194.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 196.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 195.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 197.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 198.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 199.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 200.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 201.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 202.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 203.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 204.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 205.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 206.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 207.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 208.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 209.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 210.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 211.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 212.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 213.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 214.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 215.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 216.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 217.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 218.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 219.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 220.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 221.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 222.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 224.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 223.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 225.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 227.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 228.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 229.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 230.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 231.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 232.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 233.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 234.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 235.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 236.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 237.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 238.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 239.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 240.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 241.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 242.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 243.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 244.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 245.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 246.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 247.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 248.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 249.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 250.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 251.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 253.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 254.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 255.177.98.87.in-addr.arpa udp
US 8.8.8.8:53 0.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 1.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 2.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 3.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 4.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 5.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 6.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 7.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 8.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 9.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 10.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 11.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 12.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 13.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 14.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 16.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 18.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 17.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 19.178.98.87.in-addr.arpa udp
FR 87.98.178.255:6893 udp
FR 87.98.179.0:6893 udp
FR 87.98.179.1:6893 udp
FR 87.98.179.2:6893 udp
FR 87.98.179.3:6893 udp
FR 87.98.179.4:6893 udp
FR 87.98.179.5:6893 udp
FR 87.98.179.6:6893 udp
FR 87.98.179.7:6893 udp
FR 87.98.179.8:6893 udp
FR 87.98.179.9:6893 udp
FR 87.98.179.10:6893 udp
FR 87.98.179.11:6893 udp
FR 87.98.179.12:6893 udp
FR 87.98.179.13:6893 udp
FR 87.98.179.14:6893 udp
FR 87.98.179.15:6893 udp
FR 87.98.179.16:6893 udp
FR 87.98.179.17:6893 udp
FR 87.98.179.18:6893 udp
FR 87.98.179.19:6893 udp
FR 87.98.179.20:6893 udp
FR 87.98.179.21:6893 udp
FR 87.98.179.22:6893 udp
FR 87.98.179.23:6893 udp
FR 87.98.179.24:6893 udp
FR 87.98.179.25:6893 udp
FR 87.98.179.26:6893 udp
FR 87.98.179.27:6893 udp
FR 87.98.179.28:6893 udp
FR 87.98.179.29:6893 udp
FR 87.98.179.30:6893 udp
FR 87.98.179.31:6893 udp
FR 87.98.179.32:6893 udp
FR 87.98.179.33:6893 udp
FR 87.98.179.34:6893 udp
FR 87.98.179.35:6893 udp
FR 87.98.179.36:6893 udp
FR 87.98.179.37:6893 udp
FR 87.98.179.38:6893 udp
FR 87.98.179.39:6893 udp
FR 87.98.179.40:6893 udp
FR 87.98.179.41:6893 udp
FR 87.98.179.42:6893 udp
FR 87.98.179.43:6893 udp
FR 87.98.179.44:6893 udp
FR 87.98.179.45:6893 udp
FR 87.98.179.46:6893 udp
FR 87.98.179.47:6893 udp
FR 87.98.179.48:6893 udp
FR 87.98.179.49:6893 udp
FR 87.98.179.50:6893 udp
FR 87.98.179.51:6893 udp
FR 87.98.179.52:6893 udp
FR 87.98.179.53:6893 udp
FR 87.98.179.54:6893 udp
FR 87.98.179.55:6893 udp
FR 87.98.179.56:6893 udp
FR 87.98.179.57:6893 udp
FR 87.98.179.58:6893 udp
FR 87.98.179.59:6893 udp
FR 87.98.179.60:6893 udp
FR 87.98.179.61:6893 udp
FR 87.98.179.62:6893 udp
FR 87.98.179.63:6893 udp
FR 87.98.179.64:6893 udp
FR 87.98.179.65:6893 udp
FR 87.98.179.66:6893 udp
FR 87.98.179.67:6893 udp
FR 87.98.179.68:6893 udp
FR 87.98.179.69:6893 udp
FR 87.98.179.70:6893 udp
FR 87.98.179.71:6893 udp
FR 87.98.179.72:6893 udp
FR 87.98.179.73:6893 udp
FR 87.98.179.74:6893 udp
FR 87.98.179.75:6893 udp
FR 87.98.179.76:6893 udp
FR 87.98.179.77:6893 udp
FR 87.98.179.78:6893 udp
FR 87.98.179.79:6893 udp
FR 87.98.179.80:6893 udp
FR 87.98.179.81:6893 udp
FR 87.98.179.82:6893 udp
FR 87.98.179.83:6893 udp
FR 87.98.179.84:6893 udp
FR 87.98.179.85:6893 udp
FR 87.98.179.86:6893 udp
FR 87.98.179.87:6893 udp
FR 87.98.179.88:6893 udp
FR 87.98.179.89:6893 udp
FR 87.98.179.90:6893 udp
FR 87.98.179.91:6893 udp
FR 87.98.179.92:6893 udp
FR 87.98.179.93:6893 udp
FR 87.98.179.94:6893 udp
FR 87.98.179.95:6893 udp
FR 87.98.179.96:6893 udp
FR 87.98.179.97:6893 udp
FR 87.98.179.98:6893 udp
FR 87.98.179.99:6893 udp
FR 87.98.179.100:6893 udp
FR 87.98.179.101:6893 udp
FR 87.98.179.102:6893 udp
FR 87.98.179.103:6893 udp
FR 87.98.179.104:6893 udp
FR 87.98.179.105:6893 udp
FR 87.98.179.106:6893 udp
FR 87.98.179.107:6893 udp
FR 87.98.179.108:6893 udp
FR 87.98.179.109:6893 udp
FR 87.98.179.110:6893 udp
FR 87.98.179.111:6893 udp
FR 87.98.179.112:6893 udp
FR 87.98.179.113:6893 udp
FR 87.98.179.114:6893 udp
FR 87.98.179.115:6893 udp
FR 87.98.179.116:6893 udp
FR 87.98.179.117:6893 udp
FR 87.98.179.118:6893 udp
FR 87.98.179.119:6893 udp
FR 87.98.179.120:6893 udp
FR 87.98.179.121:6893 udp
FR 87.98.179.122:6893 udp
FR 87.98.179.123:6893 udp
FR 87.98.179.124:6893 udp
FR 87.98.179.125:6893 udp
FR 87.98.179.126:6893 udp
FR 87.98.179.127:6893 udp
FR 87.98.179.128:6893 udp
FR 87.98.179.129:6893 udp
FR 87.98.179.130:6893 udp
FR 87.98.179.131:6893 udp
FR 87.98.179.132:6893 udp
FR 87.98.179.133:6893 udp
FR 87.98.179.134:6893 udp
FR 87.98.179.135:6893 udp
FR 87.98.179.136:6893 udp
FR 87.98.179.137:6893 udp
FR 87.98.179.138:6893 udp
FR 87.98.179.139:6893 udp
FR 87.98.179.140:6893 udp
FR 87.98.179.141:6893 udp
FR 87.98.179.142:6893 udp
FR 87.98.179.143:6893 udp
FR 87.98.179.144:6893 udp
FR 87.98.179.145:6893 udp
FR 87.98.179.146:6893 udp
FR 87.98.179.147:6893 udp
FR 87.98.179.148:6893 udp
FR 87.98.179.149:6893 udp
FR 87.98.179.150:6893 udp
FR 87.98.179.151:6893 udp
FR 87.98.179.152:6893 udp
FR 87.98.179.153:6893 udp
FR 87.98.179.154:6893 udp
FR 87.98.179.155:6893 udp
FR 87.98.179.156:6893 udp
FR 87.98.179.157:6893 udp
FR 87.98.179.158:6893 udp
FR 87.98.179.159:6893 udp
FR 87.98.179.160:6893 udp
FR 87.98.179.161:6893 udp
FR 87.98.179.162:6893 udp
FR 87.98.179.163:6893 udp
FR 87.98.179.164:6893 udp
FR 87.98.179.165:6893 udp
FR 87.98.179.166:6893 udp
FR 87.98.179.167:6893 udp
FR 87.98.179.168:6893 udp
FR 87.98.179.169:6893 udp
FR 87.98.179.170:6893 udp
FR 87.98.179.171:6893 udp
FR 87.98.179.172:6893 udp
FR 87.98.179.173:6893 udp
FR 87.98.179.174:6893 udp
FR 87.98.179.175:6893 udp
FR 87.98.179.176:6893 udp
FR 87.98.179.177:6893 udp
FR 87.98.179.178:6893 udp
FR 87.98.179.179:6893 udp
FR 87.98.179.180:6893 udp
FR 87.98.179.181:6893 udp
FR 87.98.179.182:6893 udp
FR 87.98.179.183:6893 udp
FR 87.98.179.184:6893 udp
FR 87.98.179.185:6893 udp
FR 87.98.179.186:6893 udp
FR 87.98.179.187:6893 udp
FR 87.98.179.188:6893 udp
FR 87.98.179.189:6893 udp
FR 87.98.179.190:6893 udp
FR 87.98.179.191:6893 udp
FR 87.98.179.192:6893 udp
FR 87.98.179.193:6893 udp
FR 87.98.179.194:6893 udp
FR 87.98.179.195:6893 udp
FR 87.98.179.196:6893 udp
FR 87.98.179.197:6893 udp
FR 87.98.179.198:6893 udp
FR 87.98.179.199:6893 udp
FR 87.98.179.200:6893 udp
FR 87.98.179.201:6893 udp
FR 87.98.179.202:6893 udp
FR 87.98.179.203:6893 udp
FR 87.98.179.204:6893 udp
FR 87.98.179.205:6893 udp
FR 87.98.179.206:6893 udp
FR 87.98.179.207:6893 udp
FR 87.98.179.208:6893 udp
FR 87.98.179.209:6893 udp
FR 87.98.179.210:6893 udp
FR 87.98.179.211:6893 udp
FR 87.98.179.212:6893 udp
FR 87.98.179.213:6893 udp
FR 87.98.179.214:6893 udp
FR 87.98.179.215:6893 udp
FR 87.98.179.216:6893 udp
FR 87.98.179.217:6893 udp
FR 87.98.179.218:6893 udp
FR 87.98.179.219:6893 udp
FR 87.98.179.220:6893 udp
FR 87.98.179.221:6893 udp
FR 87.98.179.222:6893 udp
FR 87.98.179.223:6893 udp
FR 87.98.179.224:6893 udp
FR 87.98.179.225:6893 udp
FR 87.98.179.226:6893 udp
FR 87.98.179.227:6893 udp
FR 87.98.179.228:6893 udp
FR 87.98.179.229:6893 udp
FR 87.98.179.230:6893 udp
FR 87.98.179.231:6893 udp
FR 87.98.179.232:6893 udp
FR 87.98.179.233:6893 udp
FR 87.98.179.234:6893 udp
FR 87.98.179.235:6893 udp
FR 87.98.179.236:6893 udp
FR 87.98.179.237:6893 udp
FR 87.98.179.238:6893 udp
FR 87.98.179.239:6893 udp
FR 87.98.179.240:6893 udp
FR 87.98.179.241:6893 udp
FR 87.98.179.242:6893 udp
FR 87.98.179.243:6893 udp
FR 87.98.179.244:6893 udp
FR 87.98.179.245:6893 udp
FR 87.98.179.246:6893 udp
FR 87.98.179.247:6893 udp
FR 87.98.179.248:6893 udp
FR 87.98.179.249:6893 udp
FR 87.98.179.250:6893 udp
FR 87.98.179.251:6893 udp
FR 87.98.179.252:6893 udp
FR 87.98.179.253:6893 udp
FR 87.98.179.254:6893 udp
US 8.8.8.8:53 20.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 21.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 22.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 23.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 24.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 25.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 26.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 27.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 28.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 29.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 30.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 31.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 32.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 33.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 34.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 35.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 36.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 37.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 38.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 39.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 40.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 41.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 42.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 43.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 44.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 45.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 46.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 47.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 48.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 49.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 50.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 51.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 52.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 53.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 54.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 55.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 56.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 57.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 58.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 59.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 61.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 62.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 63.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 64.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 65.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 66.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 67.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 68.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 69.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 70.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 71.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 72.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 73.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 74.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 75.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 76.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 77.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 78.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 80.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 81.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 82.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 83.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 84.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 85.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 86.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 87.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 88.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 89.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 90.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 91.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 92.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 93.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 94.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 95.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 96.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 97.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 98.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 99.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 100.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 101.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 102.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 103.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 104.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 105.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 106.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 107.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 108.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 109.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 110.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 111.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 112.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 113.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 114.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 115.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 116.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 117.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 118.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 119.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 120.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 121.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 122.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 123.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 124.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 125.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 126.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 127.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 128.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 129.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 130.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 131.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 132.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 133.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 134.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 135.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 136.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 137.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 138.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 139.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 140.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 141.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 142.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 143.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 144.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 145.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 146.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 147.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 148.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 149.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 150.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 151.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 152.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 153.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 154.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 155.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 156.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 157.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 158.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 160.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 159.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 161.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 163.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 162.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 164.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 165.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 166.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 167.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 168.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 170.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 171.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 172.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 174.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 175.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 176.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 177.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 178.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 179.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 180.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 181.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 182.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 183.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 184.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 185.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 186.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 187.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 188.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 189.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 190.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 191.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 192.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 193.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 194.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 195.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 196.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 197.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 198.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 199.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 200.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 201.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 202.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 203.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 204.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 205.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 206.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 207.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 208.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 209.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 255.178.98.87.in-addr.arpa udp
US 8.8.8.8:53 0.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 1.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 2.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 3.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 4.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 5.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 6.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 7.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 8.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 9.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 10.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 11.179.98.87.in-addr.arpa udp
N/A 10.127.0.76:445 tcp
US 8.8.8.8:53 12.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 13.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 14.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 15.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 16.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 17.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 18.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 19.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 20.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 21.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 22.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 24.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 25.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 26.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 27.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 28.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 29.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 30.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 32.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 33.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 34.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 35.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 36.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 37.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 38.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 39.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 40.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 41.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 42.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 43.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 44.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 45.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 46.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 47.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 48.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 49.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 50.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 51.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 53.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 52.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 54.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 55.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 56.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 57.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 59.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 60.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 61.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 62.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 63.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 64.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 65.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 66.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 67.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 68.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 69.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 70.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 71.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 73.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 75.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 76.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 77.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 78.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 79.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 80.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 81.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 82.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 83.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 85.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 86.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 87.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 88.179.98.87.in-addr.arpa udp
FR 87.98.179.255:6893 udp
US 8.8.8.8:53 89.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 90.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 91.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 92.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 93.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 94.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 96.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 95.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 97.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 98.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 99.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 100.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 101.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 102.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 103.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 104.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 105.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 106.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 107.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 108.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 109.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 110.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 111.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 112.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 113.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 114.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 115.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 116.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 117.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 118.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 119.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 120.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 121.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 122.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 123.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 124.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 125.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 126.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 127.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 129.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 131.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 132.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 133.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 134.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 135.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 136.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 137.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 138.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 139.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 140.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 141.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 142.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 143.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 144.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 145.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 146.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 147.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 148.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 149.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 150.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 151.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 152.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 153.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 154.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 155.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 156.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 157.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 158.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 159.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 160.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 161.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 162.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 163.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 164.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 165.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 166.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 167.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 168.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 169.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 170.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 171.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 172.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 173.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 174.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 175.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 176.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 177.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 178.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 179.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 180.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 181.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 182.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 183.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 184.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 185.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 186.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 187.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 188.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 190.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 191.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 192.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 193.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 194.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 195.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 196.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 197.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 198.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 199.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 200.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 201.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 202.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 203.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 204.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 205.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 206.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 207.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 208.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 209.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 211.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 212.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 213.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 214.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 215.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 216.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 217.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 218.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 220.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 219.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 221.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 223.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 224.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 225.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 226.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 227.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 228.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 230.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 231.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 232.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 233.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 234.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 235.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 236.179.98.87.in-addr.arpa udp
US 8.8.8.8:53 237.179.98.87.in-addr.arpa udp
N/A 10.127.0.76:139 tcp
IE 93.107.12.0:6893 udp
IE 93.107.12.1:6893 udp
IE 93.107.12.2:6893 udp
IE 93.107.12.3:6893 udp
IE 93.107.12.4:6893 udp
IE 93.107.12.5:6893 udp
IE 93.107.12.6:6893 udp
IE 93.107.12.7:6893 udp
IE 93.107.12.8:6893 udp
IE 93.107.12.9:6893 udp
IE 93.107.12.10:6893 udp
IE 93.107.12.11:6893 udp
IE 93.107.12.12:6893 udp
IE 93.107.12.13:6893 udp
IE 93.107.12.14:6893 udp
IE 93.107.12.15:6893 udp
IE 93.107.12.16:6893 udp
IE 93.107.12.17:6893 udp
IE 93.107.12.18:6893 udp
IE 93.107.12.19:6893 udp
IE 93.107.12.20:6893 udp
IE 93.107.12.21:6893 udp
IE 93.107.12.22:6893 udp
IE 93.107.12.23:6893 udp
IE 93.107.12.24:6893 udp
IE 93.107.12.25:6893 udp
IE 93.107.12.26:6893 udp
IE 93.107.12.27:6893 udp
IE 93.107.12.28:6893 udp
IE 93.107.12.29:6893 udp
IE 93.107.12.30:6893 udp
IE 93.107.12.31:6893 udp
TR 95.1.200.0:6893 udp
TR 95.1.200.1:6893 udp
TR 95.1.200.2:6893 udp
TR 95.1.200.3:6893 udp
TR 95.1.200.4:6893 udp
TR 95.1.200.5:6893 udp
TR 95.1.200.6:6893 udp
TR 95.1.200.7:6893 udp
TR 95.1.200.8:6893 udp
TR 95.1.200.9:6893 udp
TR 95.1.200.10:6893 udp
TR 95.1.200.11:6893 udp
TR 95.1.200.12:6893 udp
TR 95.1.200.13:6893 udp
TR 95.1.200.14:6893 udp
TR 95.1.200.15:6893 udp
TR 95.1.200.16:6893 udp
TR 95.1.200.17:6893 udp
TR 95.1.200.18:6893 udp
TR 95.1.200.19:6893 udp
TR 95.1.200.20:6893 udp
TR 95.1.200.21:6893 udp
TR 95.1.200.22:6893 udp
TR 95.1.200.23:6893 udp
TR 95.1.200.24:6893 udp
TR 95.1.200.25:6893 udp
TR 95.1.200.26:6893 udp
TR 95.1.200.27:6893 udp
TR 95.1.200.28:6893 udp
TR 95.1.200.29:6893 udp
TR 95.1.200.30:6893 udp
TR 95.1.200.31:6893 udp
FR 87.98.176.0:6893 udp
FR 87.98.176.1:6893 udp
FR 87.98.176.2:6893 udp
FR 87.98.176.3:6893 udp
FR 87.98.176.4:6893 udp
FR 87.98.176.5:6893 udp
FR 87.98.176.6:6893 udp
FR 87.98.176.7:6893 udp
FR 87.98.176.8:6893 udp
FR 87.98.176.9:6893 udp
FR 87.98.176.10:6893 udp
FR 87.98.176.11:6893 udp
FR 87.98.176.12:6893 udp
FR 87.98.176.13:6893 udp
FR 87.98.176.14:6893 udp
FR 87.98.176.15:6893 udp
FR 87.98.176.16:6893 udp
FR 87.98.176.17:6893 udp
FR 87.98.176.18:6893 udp
FR 87.98.176.19:6893 udp
FR 87.98.176.20:6893 udp
FR 87.98.176.21:6893 udp
FR 87.98.176.22:6893 udp
FR 87.98.176.23:6893 udp
FR 87.98.176.24:6893 udp
FR 87.98.176.25:6893 udp
FR 87.98.176.26:6893 udp
FR 87.98.176.27:6893 udp
FR 87.98.176.28:6893 udp
FR 87.98.176.29:6893 udp
FR 87.98.176.30:6893 udp
FR 87.98.176.31:6893 udp
FR 87.98.176.32:6893 udp
FR 87.98.176.33:6893 udp
FR 87.98.176.34:6893 udp
FR 87.98.176.35:6893 udp
FR 87.98.176.36:6893 udp
FR 87.98.176.37:6893 udp
FR 87.98.176.38:6893 udp
FR 87.98.176.39:6893 udp
FR 87.98.176.40:6893 udp
FR 87.98.176.41:6893 udp
FR 87.98.176.42:6893 udp
FR 87.98.176.43:6893 udp
FR 87.98.176.44:6893 udp
FR 87.98.176.45:6893 udp
FR 87.98.176.46:6893 udp
FR 87.98.176.47:6893 udp
FR 87.98.176.48:6893 udp
FR 87.98.176.49:6893 udp
FR 87.98.176.50:6893 udp
FR 87.98.176.51:6893 udp
FR 87.98.176.52:6893 udp
FR 87.98.176.53:6893 udp
FR 87.98.176.54:6893 udp
FR 87.98.176.55:6893 udp
FR 87.98.176.56:6893 udp
FR 87.98.176.57:6893 udp
FR 87.98.176.58:6893 udp
FR 87.98.176.59:6893 udp
FR 87.98.176.60:6893 udp
FR 87.98.176.61:6893 udp
FR 87.98.176.62:6893 udp
FR 87.98.176.63:6893 udp
FR 87.98.176.64:6893 udp
FR 87.98.176.65:6893 udp
FR 87.98.176.66:6893 udp
FR 87.98.176.67:6893 udp
FR 87.98.176.68:6893 udp
FR 87.98.176.69:6893 udp
FR 87.98.176.70:6893 udp
FR 87.98.176.71:6893 udp
FR 87.98.176.72:6893 udp
FR 87.98.176.73:6893 udp
FR 87.98.176.74:6893 udp
FR 87.98.176.75:6893 udp
FR 87.98.176.76:6893 udp
FR 87.98.176.77:6893 udp
FR 87.98.176.78:6893 udp
FR 87.98.176.79:6893 udp
FR 87.98.176.80:6893 udp
FR 87.98.176.81:6893 udp
FR 87.98.176.82:6893 udp
FR 87.98.176.83:6893 udp
FR 87.98.176.84:6893 udp
FR 87.98.176.85:6893 udp
FR 87.98.176.86:6893 udp
FR 87.98.176.87:6893 udp
FR 87.98.176.88:6893 udp
FR 87.98.176.89:6893 udp
FR 87.98.176.90:6893 udp
FR 87.98.176.91:6893 udp
FR 87.98.176.92:6893 udp
FR 87.98.176.93:6893 udp
FR 87.98.176.94:6893 udp
FR 87.98.176.95:6893 udp
FR 87.98.176.96:6893 udp
FR 87.98.176.97:6893 udp
FR 87.98.176.98:6893 udp
FR 87.98.176.99:6893 udp
FR 87.98.176.100:6893 udp
FR 87.98.176.101:6893 udp
FR 87.98.176.102:6893 udp
FR 87.98.176.103:6893 udp
FR 87.98.176.104:6893 udp
FR 87.98.176.105:6893 udp
FR 87.98.176.106:6893 udp
FR 87.98.176.107:6893 udp
FR 87.98.176.108:6893 udp
FR 87.98.176.109:6893 udp
FR 87.98.176.110:6893 udp
FR 87.98.176.111:6893 udp
FR 87.98.176.112:6893 udp
FR 87.98.176.113:6893 udp
FR 87.98.176.114:6893 udp
FR 87.98.176.115:6893 udp
FR 87.98.176.116:6893 udp
FR 87.98.176.117:6893 udp
FR 87.98.176.118:6893 udp
FR 87.98.176.119:6893 udp
FR 87.98.176.120:6893 udp
FR 87.98.176.121:6893 udp
FR 87.98.176.122:6893 udp
FR 87.98.176.123:6893 udp
FR 87.98.176.124:6893 udp
FR 87.98.176.125:6893 udp
FR 87.98.176.126:6893 udp
FR 87.98.176.127:6893 udp
FR 87.98.176.128:6893 udp
FR 87.98.176.129:6893 udp
FR 87.98.176.130:6893 udp
FR 87.98.176.131:6893 udp
FR 87.98.176.132:6893 udp
FR 87.98.176.133:6893 udp
FR 87.98.176.134:6893 udp
FR 87.98.176.135:6893 udp
FR 87.98.176.136:6893 udp
FR 87.98.176.137:6893 udp
FR 87.98.176.138:6893 udp
FR 87.98.176.139:6893 udp
FR 87.98.176.140:6893 udp
FR 87.98.176.141:6893 udp
FR 87.98.176.142:6893 udp
FR 87.98.176.143:6893 udp
FR 87.98.176.144:6893 udp
FR 87.98.176.145:6893 udp
FR 87.98.176.146:6893 udp
FR 87.98.176.147:6893 udp
FR 87.98.176.148:6893 udp
FR 87.98.176.149:6893 udp
FR 87.98.176.150:6893 udp
FR 87.98.176.151:6893 udp
FR 87.98.176.152:6893 udp
FR 87.98.176.153:6893 udp
FR 87.98.176.154:6893 udp
FR 87.98.176.155:6893 udp
FR 87.98.176.156:6893 udp
FR 87.98.176.157:6893 udp
FR 87.98.176.158:6893 udp
FR 87.98.176.159:6893 udp
FR 87.98.176.160:6893 udp
FR 87.98.176.161:6893 udp
FR 87.98.176.162:6893 udp
FR 87.98.176.163:6893 udp
FR 87.98.176.164:6893 udp
FR 87.98.176.165:6893 udp
FR 87.98.176.166:6893 udp
BE 87.98.176.167:6893 udp
FR 87.98.176.168:6893 udp
FR 87.98.176.169:6893 udp
FR 87.98.176.170:6893 udp
FR 87.98.176.171:6893 udp
FR 87.98.176.172:6893 udp
FR 87.98.176.173:6893 udp
FR 87.98.176.174:6893 udp
FR 87.98.176.175:6893 udp
FR 87.98.176.176:6893 udp
FR 87.98.176.177:6893 udp
FR 87.98.176.178:6893 udp
FR 87.98.176.179:6893 udp
FR 87.98.176.180:6893 udp
FR 87.98.176.181:6893 udp
FR 87.98.176.182:6893 udp
FR 87.98.176.183:6893 udp
FR 87.98.176.184:6893 udp
FR 87.98.176.185:6893 udp
FR 87.98.176.186:6893 udp
FR 87.98.176.187:6893 udp
FR 87.98.176.188:6893 udp
FR 87.98.176.189:6893 udp
FR 87.98.176.190:6893 udp
FR 87.98.176.191:6893 udp
FR 87.98.176.192:6893 udp
FR 87.98.176.193:6893 udp
FR 87.98.176.194:6893 udp
FR 87.98.176.195:6893 udp
FR 87.98.176.196:6893 udp
FR 87.98.176.197:6893 udp
FR 87.98.176.198:6893 udp
FR 87.98.176.199:6893 udp
FR 87.98.176.200:6893 udp
FR 87.98.176.201:6893 udp
FR 87.98.176.202:6893 udp
FR 87.98.176.203:6893 udp
FR 87.98.176.204:6893 udp
FR 87.98.176.205:6893 udp
FR 87.98.176.206:6893 udp
FR 87.98.176.207:6893 udp
FR 87.98.176.208:6893 udp
FR 87.98.176.209:6893 udp
FR 87.98.176.210:6893 udp
FR 87.98.176.211:6893 udp
FR 87.98.176.212:6893 udp
FR 87.98.176.213:6893 udp
FR 87.98.176.214:6893 udp
FR 87.98.176.215:6893 udp
FR 87.98.176.216:6893 udp
FR 87.98.176.217:6893 udp
FR 87.98.176.218:6893 udp
FR 87.98.176.219:6893 udp
FR 87.98.176.220:6893 udp
FR 87.98.176.221:6893 udp
FR 87.98.176.222:6893 udp
FR 87.98.176.223:6893 udp
FR 87.98.176.224:6893 udp
FR 87.98.176.225:6893 udp
FR 87.98.176.226:6893 udp
FR 87.98.176.227:6893 udp
FR 87.98.176.228:6893 udp
FR 87.98.176.229:6893 udp
FR 87.98.176.230:6893 udp
FR 87.98.176.231:6893 udp
FR 87.98.176.232:6893 udp
FR 87.98.176.233:6893 udp
FR 87.98.176.234:6893 udp
FR 87.98.176.235:6893 udp
FR 87.98.176.236:6893 udp
FR 87.98.176.237:6893 udp
FR 87.98.176.238:6893 udp
FR 87.98.176.239:6893 udp
FR 87.98.176.240:6893 udp
FR 87.98.176.241:6893 udp
FR 87.98.176.242:6893 udp
FR 87.98.176.243:6893 udp
FR 87.98.176.244:6893 udp
FR 87.98.176.245:6893 udp
FR 87.98.176.246:6893 udp
FR 87.98.176.247:6893 udp
FR 87.98.176.248:6893 udp
FR 87.98.176.249:6893 udp
FR 87.98.176.250:6893 udp
FR 87.98.176.251:6893 udp
FR 87.98.176.252:6893 udp
FR 87.98.176.253:6893 udp
FR 87.98.176.254:6893 udp
FR 87.98.176.255:6893 udp
FR 87.98.177.0:6893 udp
FR 87.98.177.1:6893 udp
FR 87.98.177.2:6893 udp
FR 87.98.177.3:6893 udp
FR 87.98.177.4:6893 udp
FR 87.98.177.5:6893 udp
FR 87.98.177.6:6893 udp
FR 87.98.177.7:6893 udp
FR 87.98.177.8:6893 udp
FR 87.98.177.9:6893 udp
FR 87.98.177.10:6893 udp
FR 87.98.177.11:6893 udp
FR 87.98.177.12:6893 udp
FR 87.98.177.13:6893 udp
FR 87.98.177.14:6893 udp
FR 87.98.177.15:6893 udp
FR 87.98.177.16:6893 udp
FR 87.98.177.17:6893 udp
FR 87.98.177.18:6893 udp
FR 87.98.177.19:6893 udp
FR 87.98.177.20:6893 udp
FR 87.98.177.21:6893 udp
FR 87.98.177.22:6893 udp
FR 87.98.177.23:6893 udp
FR 87.98.177.24:6893 udp
FR 87.98.177.25:6893 udp
FR 87.98.177.26:6893 udp
FR 87.98.177.27:6893 udp
FR 87.98.177.28:6893 udp
FR 87.98.177.29:6893 udp
FR 87.98.177.30:6893 udp
FR 87.98.177.31:6893 udp
FR 87.98.177.32:6893 udp
FR 87.98.177.33:6893 udp
FR 87.98.177.34:6893 udp
FR 87.98.177.35:6893 udp
FR 87.98.177.36:6893 udp
FR 87.98.177.37:6893 udp
FR 87.98.177.38:6893 udp
FR 87.98.177.39:6893 udp
FR 87.98.177.40:6893 udp
FR 87.98.177.41:6893 udp
FR 87.98.177.42:6893 udp
FR 87.98.177.43:6893 udp
FR 87.98.177.44:6893 udp
FR 87.98.177.45:6893 udp
FR 87.98.177.46:6893 udp
FR 87.98.177.47:6893 udp
FR 87.98.177.48:6893 udp
FR 87.98.177.49:6893 udp
FR 87.98.177.50:6893 udp
FR 87.98.177.51:6893 udp
FR 87.98.177.52:6893 udp
FR 87.98.177.53:6893 udp
FR 87.98.177.54:6893 udp
FR 87.98.177.55:6893 udp
FR 87.98.177.56:6893 udp
FR 87.98.177.57:6893 udp
FR 87.98.177.58:6893 udp
FR 87.98.177.59:6893 udp
FR 87.98.177.60:6893 udp
FR 87.98.177.61:6893 udp
FR 87.98.177.62:6893 udp
FR 87.98.177.63:6893 udp
FR 87.98.177.64:6893 udp
FR 87.98.177.65:6893 udp
FR 87.98.177.66:6893 udp
FR 87.98.177.67:6893 udp
FR 87.98.177.68:6893 udp
FR 87.98.177.69:6893 udp
FR 87.98.177.70:6893 udp
FR 87.98.177.71:6893 udp
FR 87.98.177.72:6893 udp
FR 87.98.177.73:6893 udp
FR 87.98.177.74:6893 udp
FR 87.98.177.75:6893 udp
FR 87.98.177.76:6893 udp
FR 87.98.177.77:6893 udp
FR 87.98.177.78:6893 udp
FR 87.98.177.79:6893 udp
FR 87.98.177.80:6893 udp
FR 87.98.177.81:6893 udp
FR 87.98.177.82:6893 udp
FR 87.98.177.83:6893 udp
FR 87.98.177.84:6893 udp
FR 87.98.177.85:6893 udp
FR 87.98.177.86:6893 udp
FR 87.98.177.87:6893 udp
FR 87.98.177.88:6893 udp
FR 87.98.177.89:6893 udp
FR 87.98.177.90:6893 udp
FR 87.98.177.91:6893 udp
FR 87.98.177.92:6893 udp
FR 87.98.177.93:6893 udp
FR 87.98.177.94:6893 udp
FR 87.98.177.95:6893 udp
FR 87.98.177.96:6893 udp
FR 87.98.177.97:6893 udp
FR 87.98.177.98:6893 udp
FR 87.98.177.99:6893 udp
FR 87.98.177.100:6893 udp
FR 87.98.177.101:6893 udp
FR 87.98.177.102:6893 udp
FR 87.98.177.103:6893 udp
FR 87.98.177.104:6893 udp
FR 87.98.177.105:6893 udp
FR 87.98.177.106:6893 udp
FR 87.98.177.107:6893 udp
FR 87.98.177.108:6893 udp
FR 87.98.177.109:6893 udp
FR 87.98.177.110:6893 udp
FR 87.98.177.111:6893 udp
FR 87.98.177.112:6893 udp
FR 87.98.177.113:6893 udp
FR 87.98.177.114:6893 udp
FR 87.98.177.115:6893 udp
FR 87.98.177.116:6893 udp
FR 87.98.177.117:6893 udp
FR 87.98.177.118:6893 udp
FR 87.98.177.119:6893 udp
FR 87.98.177.120:6893 udp
FR 87.98.177.121:6893 udp
FR 87.98.177.122:6893 udp
FR 87.98.177.123:6893 udp
FR 87.98.177.124:6893 udp
FR 87.98.177.125:6893 udp
FR 87.98.177.126:6893 udp
FR 87.98.177.127:6893 udp
FR 87.98.177.128:6893 udp
FR 87.98.177.129:6893 udp
FR 87.98.177.130:6893 udp
FR 87.98.177.131:6893 udp
FR 87.98.177.132:6893 udp
FR 87.98.177.133:6893 udp
FR 87.98.177.134:6893 udp
FR 87.98.177.135:6893 udp
FR 87.98.177.136:6893 udp
FR 87.98.177.137:6893 udp
FR 87.98.177.138:6893 udp
FR 87.98.177.139:6893 udp
FR 87.98.177.140:6893 udp
FR 87.98.177.141:6893 udp
FR 87.98.177.142:6893 udp
FR 87.98.177.143:6893 udp
FR 87.98.177.144:6893 udp
FR 87.98.177.145:6893 udp
FR 87.98.177.146:6893 udp
FR 87.98.177.147:6893 udp
FR 87.98.177.148:6893 udp
FR 87.98.177.149:6893 udp
FR 87.98.177.150:6893 udp
FR 87.98.177.151:6893 udp
FR 87.98.177.152:6893 udp
FR 87.98.177.153:6893 udp
FR 87.98.177.154:6893 udp
FR 87.98.177.155:6893 udp
FR 87.98.177.156:6893 udp
FR 87.98.177.157:6893 udp
FR 87.98.177.158:6893 udp
FR 87.98.177.159:6893 udp
FR 87.98.177.160:6893 udp
FR 87.98.177.161:6893 udp
FR 87.98.177.162:6893 udp
FR 87.98.177.163:6893 udp
FR 87.98.177.164:6893 udp
FR 87.98.177.165:6893 udp
FR 87.98.177.166:6893 udp
FR 87.98.177.167:6893 udp
FR 87.98.177.168:6893 udp
FR 87.98.177.169:6893 udp
FR 87.98.177.170:6893 udp
FR 87.98.177.171:6893 udp
FR 87.98.177.172:6893 udp
FR 87.98.177.173:6893 udp
FR 87.98.177.174:6893 udp
FR 87.98.177.175:6893 udp
FR 87.98.177.176:6893 udp
FR 87.98.177.177:6893 udp
FR 87.98.177.178:6893 udp
FR 87.98.177.179:6893 udp
FR 87.98.177.180:6893 udp
FR 87.98.177.181:6893 udp
FR 87.98.177.182:6893 udp
FR 87.98.177.183:6893 udp
FR 87.98.177.184:6893 udp
FR 87.98.177.185:6893 udp
FR 87.98.177.186:6893 udp
FR 87.98.177.187:6893 udp
FR 87.98.177.188:6893 udp
FR 87.98.177.189:6893 udp
FR 87.98.177.190:6893 udp
FR 87.98.177.191:6893 udp
FR 87.98.177.192:6893 udp
FR 87.98.177.193:6893 udp
FR 87.98.177.194:6893 udp
FR 87.98.177.195:6893 udp
FR 87.98.177.196:6893 udp
FR 87.98.177.197:6893 udp
FR 87.98.177.198:6893 udp
FR 87.98.177.199:6893 udp
FR 87.98.177.200:6893 udp
FR 87.98.177.201:6893 udp
FR 87.98.177.202:6893 udp
FR 87.98.177.203:6893 udp
FR 87.98.177.204:6893 udp
FR 87.98.177.205:6893 udp
FR 87.98.177.206:6893 udp
FR 87.98.177.207:6893 udp
FR 87.98.177.208:6893 udp
FR 87.98.177.209:6893 udp
FR 87.98.177.210:6893 udp
FR 87.98.177.211:6893 udp
FR 87.98.177.212:6893 udp
FR 87.98.177.213:6893 udp
FR 87.98.177.214:6893 udp
FR 87.98.177.215:6893 udp
FR 87.98.177.216:6893 udp
FR 87.98.177.217:6893 udp
FR 87.98.177.218:6893 udp
FR 87.98.177.219:6893 udp
FR 87.98.177.220:6893 udp
FR 87.98.177.221:6893 udp
FR 87.98.177.222:6893 udp
FR 87.98.177.223:6893 udp
FR 87.98.177.224:6893 udp
FR 87.98.177.225:6893 udp
FR 87.98.177.226:6893 udp
FR 87.98.177.227:6893 udp
FR 87.98.177.228:6893 udp
FR 87.98.177.229:6893 udp
FR 87.98.177.230:6893 udp
FR 87.98.177.231:6893 udp
FR 87.98.177.232:6893 udp
FR 87.98.177.233:6893 udp
FR 87.98.177.234:6893 udp
FR 87.98.177.235:6893 udp
FR 87.98.177.236:6893 udp
FR 87.98.177.237:6893 udp
FR 87.98.177.238:6893 udp
FR 87.98.177.239:6893 udp
FR 87.98.177.240:6893 udp
FR 87.98.177.241:6893 udp
FR 87.98.177.242:6893 udp
FR 87.98.177.243:6893 udp
FR 87.98.177.244:6893 udp
FR 87.98.177.245:6893 udp
FR 87.98.177.246:6893 udp
FR 87.98.177.247:6893 udp
FR 87.98.177.248:6893 udp
FR 87.98.177.249:6893 udp
FR 87.98.177.250:6893 udp
FR 87.98.177.251:6893 udp
FR 87.98.177.252:6893 udp
FR 87.98.177.253:6893 udp
FR 87.98.177.254:6893 udp
N/A 10.127.0.77:445 tcp
FR 87.98.177.255:6893 udp
FR 87.98.178.0:6893 udp
FR 87.98.178.1:6893 udp
FR 87.98.178.2:6893 udp
FR 87.98.178.3:6893 udp
FR 87.98.178.4:6893 udp
FR 87.98.178.5:6893 udp
FR 87.98.178.6:6893 udp
FR 87.98.178.7:6893 udp
FR 87.98.178.8:6893 udp
FR 87.98.178.9:6893 udp
FR 87.98.178.10:6893 udp
FR 87.98.178.11:6893 udp
FR 87.98.178.12:6893 udp
FR 87.98.178.13:6893 udp
FR 87.98.178.14:6893 udp
FR 87.98.178.15:6893 udp
FR 87.98.178.16:6893 udp
FR 87.98.178.17:6893 udp
FR 87.98.178.18:6893 udp
FR 87.98.178.19:6893 udp
FR 87.98.178.20:6893 udp
FR 87.98.178.21:6893 udp
FR 87.98.178.22:6893 udp
FR 87.98.178.23:6893 udp
FR 87.98.178.24:6893 udp
FR 87.98.178.25:6893 udp
FR 87.98.178.26:6893 udp
FR 87.98.178.27:6893 udp
FR 87.98.178.28:6893 udp
FR 87.98.178.29:6893 udp
FR 87.98.178.30:6893 udp
FR 87.98.178.31:6893 udp
FR 87.98.178.32:6893 udp
FR 87.98.178.33:6893 udp
FR 87.98.178.34:6893 udp
FR 87.98.178.35:6893 udp
FR 87.98.178.36:6893 udp
FR 87.98.178.37:6893 udp
FR 87.98.178.38:6893 udp
FR 87.98.178.39:6893 udp
FR 87.98.178.40:6893 udp
FR 87.98.178.41:6893 udp
FR 87.98.178.42:6893 udp
FR 87.98.178.43:6893 udp
FR 87.98.178.44:6893 udp
FR 87.98.178.45:6893 udp
FR 87.98.178.46:6893 udp
FR 87.98.178.47:6893 udp
FR 87.98.178.48:6893 udp
FR 87.98.178.49:6893 udp
FR 87.98.178.50:6893 udp
FR 87.98.178.51:6893 udp
FR 87.98.178.52:6893 udp
FR 87.98.178.53:6893 udp
FR 87.98.178.54:6893 udp
FR 87.98.178.55:6893 udp
FR 87.98.178.56:6893 udp
FR 87.98.178.57:6893 udp
FR 87.98.178.58:6893 udp
FR 87.98.178.59:6893 udp
FR 87.98.178.60:6893 udp
FR 87.98.178.61:6893 udp
FR 87.98.178.62:6893 udp
FR 87.98.178.63:6893 udp
FR 87.98.178.64:6893 udp
FR 87.98.178.65:6893 udp
FR 87.98.178.66:6893 udp
FR 87.98.178.67:6893 udp
FR 87.98.178.68:6893 udp
FR 87.98.178.69:6893 udp
FR 87.98.178.70:6893 udp
FR 87.98.178.71:6893 udp
FR 87.98.178.72:6893 udp
FR 87.98.178.73:6893 udp
FR 87.98.178.74:6893 udp
FR 87.98.178.75:6893 udp
FR 87.98.178.76:6893 udp
FR 87.98.178.77:6893 udp
FR 87.98.178.78:6893 udp
FR 87.98.178.79:6893 udp
FR 87.98.178.80:6893 udp
FR 87.98.178.81:6893 udp
FR 87.98.178.82:6893 udp
FR 87.98.178.83:6893 udp
FR 87.98.178.84:6893 udp
FR 87.98.178.85:6893 udp
FR 87.98.178.86:6893 udp
FR 87.98.178.87:6893 udp
FR 87.98.178.88:6893 udp
FR 87.98.178.89:6893 udp
FR 87.98.178.90:6893 udp
FR 87.98.178.91:6893 udp
FR 87.98.178.92:6893 udp
FR 87.98.178.93:6893 udp
FR 87.98.178.94:6893 udp
FR 87.98.178.95:6893 udp
FR 87.98.178.96:6893 udp
FR 87.98.178.97:6893 udp
FR 87.98.178.98:6893 udp
FR 87.98.178.99:6893 udp
FR 87.98.178.100:6893 udp
FR 87.98.178.101:6893 udp
FR 87.98.178.102:6893 udp
FR 87.98.178.103:6893 udp
FR 87.98.178.104:6893 udp
FR 87.98.178.105:6893 udp
FR 87.98.178.106:6893 udp
FR 87.98.178.107:6893 udp
FR 87.98.178.108:6893 udp
FR 87.98.178.109:6893 udp
FR 87.98.178.110:6893 udp
FR 87.98.178.111:6893 udp
FR 87.98.178.112:6893 udp
FR 87.98.178.113:6893 udp
FR 87.98.178.114:6893 udp
FR 87.98.178.115:6893 udp
FR 87.98.178.116:6893 udp
FR 87.98.178.117:6893 udp
FR 87.98.178.118:6893 udp
FR 87.98.178.119:6893 udp
FR 87.98.178.120:6893 udp
FR 87.98.178.121:6893 udp
FR 87.98.178.122:6893 udp
FR 87.98.178.123:6893 udp
FR 87.98.178.124:6893 udp
FR 87.98.178.125:6893 udp
FR 87.98.178.126:6893 udp
FR 87.98.178.127:6893 udp
FR 87.98.178.128:6893 udp
FR 87.98.178.129:6893 udp
FR 87.98.178.130:6893 udp
FR 87.98.178.131:6893 udp
FR 87.98.178.132:6893 udp
FR 87.98.178.133:6893 udp
FR 87.98.178.134:6893 udp
FR 87.98.178.135:6893 udp
FR 87.98.178.136:6893 udp
FR 87.98.178.137:6893 udp
FR 87.98.178.138:6893 udp
FR 87.98.178.139:6893 udp
FR 87.98.178.140:6893 udp
FR 87.98.178.141:6893 udp
FR 87.98.178.142:6893 udp
FR 87.98.178.143:6893 udp
FR 87.98.178.144:6893 udp
FR 87.98.178.145:6893 udp
FR 87.98.178.146:6893 udp
FR 87.98.178.147:6893 udp
FR 87.98.178.148:6893 udp
FR 87.98.178.149:6893 udp
FR 87.98.178.150:6893 udp
FR 87.98.178.151:6893 udp
FR 87.98.178.152:6893 udp
FR 87.98.178.153:6893 udp
FR 87.98.178.154:6893 udp
FR 87.98.178.155:6893 udp
FR 87.98.178.156:6893 udp
FR 87.98.178.157:6893 udp
FR 87.98.178.158:6893 udp
FR 87.98.178.159:6893 udp
FR 87.98.178.160:6893 udp
FR 87.98.178.161:6893 udp
FR 87.98.178.162:6893 udp
FR 87.98.178.163:6893 udp
FR 87.98.178.164:6893 udp
FR 87.98.178.165:6893 udp
FR 87.98.178.166:6893 udp
FR 87.98.178.167:6893 udp
FR 87.98.178.168:6893 udp
FR 87.98.178.169:6893 udp
FR 87.98.178.170:6893 udp
FR 87.98.178.171:6893 udp
FR 87.98.178.172:6893 udp
FR 87.98.178.173:6893 udp
FR 87.98.178.174:6893 udp
FR 87.98.178.175:6893 udp
FR 87.98.178.176:6893 udp
FR 87.98.178.177:6893 udp
FR 87.98.178.178:6893 udp
FR 87.98.178.179:6893 udp
FR 87.98.178.180:6893 udp
FR 87.98.178.181:6893 udp
FR 87.98.178.182:6893 udp
FR 87.98.178.183:6893 udp
FR 87.98.178.184:6893 udp
FR 87.98.178.185:6893 udp
FR 87.98.178.186:6893 udp
FR 87.98.178.187:6893 udp
FR 87.98.178.188:6893 udp
FR 87.98.178.189:6893 udp
FR 87.98.178.190:6893 udp
FR 87.98.178.191:6893 udp
FR 87.98.178.192:6893 udp
FR 87.98.178.193:6893 udp
FR 87.98.178.194:6893 udp
FR 87.98.178.195:6893 udp
FR 87.98.178.196:6893 udp
FR 87.98.178.197:6893 udp
FR 87.98.178.198:6893 udp
FR 87.98.178.199:6893 udp
FR 87.98.178.200:6893 udp
FR 87.98.178.201:6893 udp
FR 87.98.178.202:6893 udp
FR 87.98.178.203:6893 udp
FR 87.98.178.204:6893 udp
FR 87.98.178.205:6893 udp
FR 87.98.178.206:6893 udp
FR 87.98.178.207:6893 udp
FR 87.98.178.208:6893 udp
FR 87.98.178.209:6893 udp
FR 87.98.178.210:6893 udp
FR 87.98.178.211:6893 udp
FR 87.98.178.212:6893 udp
FR 87.98.178.213:6893 udp
FR 87.98.178.214:6893 udp
FR 87.98.178.215:6893 udp
FR 87.98.178.216:6893 udp
FR 87.98.178.217:6893 udp
FR 87.98.178.218:6893 udp
FR 87.98.178.219:6893 udp
FR 87.98.178.220:6893 udp
FR 87.98.178.221:6893 udp
FR 87.98.178.222:6893 udp
FR 87.98.178.223:6893 udp
FR 87.98.178.224:6893 udp
FR 87.98.178.225:6893 udp
FR 87.98.178.226:6893 udp
FR 87.98.178.227:6893 udp
FR 87.98.178.228:6893 udp
FR 87.98.178.229:6893 udp
FR 87.98.178.230:6893 udp
FR 87.98.178.231:6893 udp
FR 87.98.178.232:6893 udp
FR 87.98.178.233:6893 udp
FR 87.98.178.234:6893 udp
FR 87.98.178.235:6893 udp
FR 87.98.178.236:6893 udp
FR 87.98.178.237:6893 udp
FR 87.98.178.238:6893 udp
FR 87.98.178.239:6893 udp
FR 87.98.178.240:6893 udp
FR 87.98.178.241:6893 udp
FR 87.98.178.242:6893 udp
FR 87.98.178.243:6893 udp
FR 87.98.178.244:6893 udp
FR 87.98.178.245:6893 udp
FR 87.98.178.246:6893 udp
FR 87.98.178.247:6893 udp
FR 87.98.178.248:6893 udp
FR 87.98.178.249:6893 udp
FR 87.98.178.250:6893 udp
FR 87.98.178.251:6893 udp
FR 87.98.178.252:6893 udp
FR 87.98.178.253:6893 udp
FR 87.98.178.254:6893 udp
N/A 10.127.0.77:139 tcp
FR 87.98.178.255:6893 udp
FR 87.98.179.0:6893 udp
FR 87.98.179.1:6893 udp
FR 87.98.179.2:6893 udp
FR 87.98.179.3:6893 udp
FR 87.98.179.4:6893 udp
FR 87.98.179.5:6893 udp
FR 87.98.179.6:6893 udp
FR 87.98.179.7:6893 udp
FR 87.98.179.8:6893 udp
FR 87.98.179.9:6893 udp
FR 87.98.179.10:6893 udp
FR 87.98.179.11:6893 udp
FR 87.98.179.12:6893 udp
FR 87.98.179.13:6893 udp
FR 87.98.179.14:6893 udp
FR 87.98.179.15:6893 udp
FR 87.98.179.16:6893 udp
FR 87.98.179.17:6893 udp
FR 87.98.179.18:6893 udp
FR 87.98.179.19:6893 udp
FR 87.98.179.20:6893 udp
FR 87.98.179.21:6893 udp
FR 87.98.179.22:6893 udp
FR 87.98.179.23:6893 udp
FR 87.98.179.24:6893 udp
FR 87.98.179.25:6893 udp
FR 87.98.179.26:6893 udp
FR 87.98.179.27:6893 udp
FR 87.98.179.28:6893 udp
FR 87.98.179.29:6893 udp
FR 87.98.179.30:6893 udp
FR 87.98.179.31:6893 udp
FR 87.98.179.32:6893 udp
FR 87.98.179.33:6893 udp
FR 87.98.179.34:6893 udp
FR 87.98.179.35:6893 udp
FR 87.98.179.36:6893 udp
FR 87.98.179.37:6893 udp
FR 87.98.179.38:6893 udp
FR 87.98.179.39:6893 udp
FR 87.98.179.40:6893 udp
FR 87.98.179.41:6893 udp
FR 87.98.179.42:6893 udp
FR 87.98.179.43:6893 udp
FR 87.98.179.44:6893 udp
FR 87.98.179.45:6893 udp
FR 87.98.179.46:6893 udp
FR 87.98.179.47:6893 udp
FR 87.98.179.48:6893 udp
FR 87.98.179.49:6893 udp
FR 87.98.179.50:6893 udp
FR 87.98.179.51:6893 udp
FR 87.98.179.52:6893 udp
FR 87.98.179.53:6893 udp
FR 87.98.179.54:6893 udp
FR 87.98.179.55:6893 udp
FR 87.98.179.56:6893 udp
FR 87.98.179.57:6893 udp
FR 87.98.179.58:6893 udp
FR 87.98.179.59:6893 udp
FR 87.98.179.60:6893 udp
FR 87.98.179.61:6893 udp
FR 87.98.179.62:6893 udp
FR 87.98.179.63:6893 udp
FR 87.98.179.64:6893 udp
FR 87.98.179.65:6893 udp
FR 87.98.179.66:6893 udp
FR 87.98.179.67:6893 udp
FR 87.98.179.68:6893 udp
FR 87.98.179.69:6893 udp
FR 87.98.179.70:6893 udp
FR 87.98.179.71:6893 udp
FR 87.98.179.72:6893 udp
FR 87.98.179.73:6893 udp
FR 87.98.179.74:6893 udp
FR 87.98.179.75:6893 udp
FR 87.98.179.76:6893 udp
FR 87.98.179.77:6893 udp
FR 87.98.179.78:6893 udp
FR 87.98.179.79:6893 udp
FR 87.98.179.80:6893 udp
FR 87.98.179.81:6893 udp
FR 87.98.179.82:6893 udp
FR 87.98.179.83:6893 udp
FR 87.98.179.84:6893 udp
FR 87.98.179.85:6893 udp
FR 87.98.179.86:6893 udp
FR 87.98.179.87:6893 udp
FR 87.98.179.88:6893 udp
FR 87.98.179.89:6893 udp
FR 87.98.179.90:6893 udp
FR 87.98.179.91:6893 udp
FR 87.98.179.92:6893 udp
FR 87.98.179.93:6893 udp
FR 87.98.179.94:6893 udp
FR 87.98.179.95:6893 udp
FR 87.98.179.96:6893 udp
FR 87.98.179.97:6893 udp
FR 87.98.179.98:6893 udp
FR 87.98.179.99:6893 udp
FR 87.98.179.100:6893 udp
FR 87.98.179.101:6893 udp
FR 87.98.179.102:6893 udp
FR 87.98.179.103:6893 udp
FR 87.98.179.104:6893 udp
FR 87.98.179.105:6893 udp
FR 87.98.179.106:6893 udp
FR 87.98.179.107:6893 udp
FR 87.98.179.108:6893 udp
FR 87.98.179.109:6893 udp
FR 87.98.179.110:6893 udp
FR 87.98.179.111:6893 udp
FR 87.98.179.112:6893 udp
FR 87.98.179.113:6893 udp
FR 87.98.179.114:6893 udp
FR 87.98.179.115:6893 udp
FR 87.98.179.116:6893 udp
FR 87.98.179.117:6893 udp
FR 87.98.179.118:6893 udp
FR 87.98.179.119:6893 udp
FR 87.98.179.120:6893 udp
FR 87.98.179.121:6893 udp
FR 87.98.179.122:6893 udp
FR 87.98.179.123:6893 udp
FR 87.98.179.124:6893 udp
FR 87.98.179.125:6893 udp
FR 87.98.179.126:6893 udp
FR 87.98.179.127:6893 udp
FR 87.98.179.128:6893 udp
FR 87.98.179.129:6893 udp
FR 87.98.179.130:6893 udp
FR 87.98.179.131:6893 udp
FR 87.98.179.132:6893 udp
FR 87.98.179.133:6893 udp
FR 87.98.179.134:6893 udp
FR 87.98.179.135:6893 udp
FR 87.98.179.136:6893 udp
FR 87.98.179.137:6893 udp
FR 87.98.179.138:6893 udp
FR 87.98.179.139:6893 udp
FR 87.98.179.140:6893 udp
FR 87.98.179.141:6893 udp
FR 87.98.179.142:6893 udp
FR 87.98.179.143:6893 udp
FR 87.98.179.144:6893 udp
FR 87.98.179.145:6893 udp
FR 87.98.179.146:6893 udp
FR 87.98.179.147:6893 udp
FR 87.98.179.148:6893 udp
FR 87.98.179.149:6893 udp
FR 87.98.179.150:6893 udp
FR 87.98.179.151:6893 udp
FR 87.98.179.152:6893 udp
FR 87.98.179.153:6893 udp
FR 87.98.179.154:6893 udp
FR 87.98.179.155:6893 udp
FR 87.98.179.156:6893 udp
FR 87.98.179.157:6893 udp
FR 87.98.179.158:6893 udp
FR 87.98.179.159:6893 udp
FR 87.98.179.160:6893 udp
FR 87.98.179.161:6893 udp
FR 87.98.179.162:6893 udp
FR 87.98.179.163:6893 udp
FR 87.98.179.164:6893 udp
FR 87.98.179.165:6893 udp
FR 87.98.179.166:6893 udp
FR 87.98.179.167:6893 udp
FR 87.98.179.168:6893 udp
FR 87.98.179.169:6893 udp
FR 87.98.179.170:6893 udp
FR 87.98.179.171:6893 udp
FR 87.98.179.172:6893 udp
FR 87.98.179.173:6893 udp
FR 87.98.179.174:6893 udp
FR 87.98.179.175:6893 udp
FR 87.98.179.176:6893 udp
FR 87.98.179.177:6893 udp
FR 87.98.179.178:6893 udp
FR 87.98.179.179:6893 udp
FR 87.98.179.180:6893 udp
FR 87.98.179.181:6893 udp
FR 87.98.179.182:6893 udp
FR 87.98.179.183:6893 udp
FR 87.98.179.184:6893 udp
FR 87.98.179.185:6893 udp
FR 87.98.179.186:6893 udp
FR 87.98.179.187:6893 udp
FR 87.98.179.188:6893 udp
FR 87.98.179.189:6893 udp
FR 87.98.179.190:6893 udp
FR 87.98.179.191:6893 udp
FR 87.98.179.192:6893 udp
FR 87.98.179.193:6893 udp
FR 87.98.179.194:6893 udp
FR 87.98.179.195:6893 udp
FR 87.98.179.196:6893 udp
FR 87.98.179.197:6893 udp
FR 87.98.179.198:6893 udp
FR 87.98.179.199:6893 udp
FR 87.98.179.200:6893 udp
FR 87.98.179.201:6893 udp
FR 87.98.179.202:6893 udp
FR 87.98.179.203:6893 udp
FR 87.98.179.204:6893 udp
FR 87.98.179.205:6893 udp
FR 87.98.179.206:6893 udp
FR 87.98.179.207:6893 udp
FR 87.98.179.208:6893 udp
FR 87.98.179.209:6893 udp
FR 87.98.179.210:6893 udp
FR 87.98.179.211:6893 udp
FR 87.98.179.212:6893 udp
FR 87.98.179.213:6893 udp
FR 87.98.179.214:6893 udp
FR 87.98.179.215:6893 udp
FR 87.98.179.216:6893 udp
FR 87.98.179.217:6893 udp
FR 87.98.179.218:6893 udp
FR 87.98.179.219:6893 udp
FR 87.98.179.220:6893 udp
FR 87.98.179.221:6893 udp
FR 87.98.179.222:6893 udp
FR 87.98.179.223:6893 udp
FR 87.98.179.224:6893 udp
FR 87.98.179.225:6893 udp
FR 87.98.179.226:6893 udp
FR 87.98.179.227:6893 udp
FR 87.98.179.228:6893 udp
FR 87.98.179.229:6893 udp
FR 87.98.179.230:6893 udp
FR 87.98.179.231:6893 udp
FR 87.98.179.232:6893 udp
FR 87.98.179.233:6893 udp
FR 87.98.179.234:6893 udp
FR 87.98.179.235:6893 udp
FR 87.98.179.236:6893 udp
FR 87.98.179.237:6893 udp
FR 87.98.179.238:6893 udp
FR 87.98.179.239:6893 udp
FR 87.98.179.240:6893 udp
FR 87.98.179.241:6893 udp
FR 87.98.179.242:6893 udp
FR 87.98.179.243:6893 udp
FR 87.98.179.244:6893 udp
FR 87.98.179.245:6893 udp
FR 87.98.179.246:6893 udp
FR 87.98.179.247:6893 udp
FR 87.98.179.248:6893 udp
FR 87.98.179.249:6893 udp
FR 87.98.179.250:6893 udp
FR 87.98.179.251:6893 udp
FR 87.98.179.252:6893 udp
FR 87.98.179.253:6893 udp
FR 87.98.179.254:6893 udp
FR 87.98.179.255:6893 udp
N/A 10.127.0.78:445 tcp
N/A 10.127.0.78:139 tcp
N/A 10.127.0.79:445 tcp
N/A 10.127.0.79:139 tcp
US 151.101.129.140:445 alb.reddit.com tcp
N/A 10.127.0.80:445 tcp
N/A 10.127.0.80:139 tcp
N/A 10.127.0.81:445 tcp
US 8.8.8.8:53 25.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 29.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 28.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 26.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 27.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 30.0.127.10.in-addr.arpa udp
N/A 10.127.0.81:139 tcp
N/A 10.127.0.82:445 tcp
N/A 10.127.0.31:445 tcp
N/A 10.127.0.33:445 tcp
N/A 10.127.0.32:445 tcp
N/A 10.127.0.35:445 tcp
N/A 10.127.0.34:445 tcp
N/A 10.127.0.36:445 tcp
N/A 10.127.0.31:139 tcp
N/A 10.127.0.32:139 tcp
N/A 10.127.0.33:139 tcp
N/A 10.127.0.34:139 tcp
N/A 10.127.0.36:139 tcp
N/A 10.127.0.35:139 tcp
N/A 10.127.0.82:139 tcp
US 8.8.8.8:53 google.co.ck udp
GB 172.217.16.228:80 google.co.ck tcp
GB 172.217.16.228:80 google.co.ck tcp
US 8.8.8.8:53 www.google.com udp
GB 172.217.16.228:80 www.google.com tcp
GB 172.217.16.228:443 www.google.com tcp
US 8.8.8.8:53 support.google.com udp
GB 172.217.16.228:443 www.google.com udp
N/A 10.127.0.83:445 tcp
N/A 10.127.0.83:139 tcp
N/A 10.127.0.84:445 tcp
N/A 10.127.0.84:139 tcp
N/A 10.127.0.85:445 tcp
US 151.101.193.140:445 alb.reddit.com tcp
N/A 10.127.0.85:139 tcp
N/A 10.127.0.86:445 tcp
N/A 10.127.0.86:139 tcp
N/A 10.127.0.87:445 tcp
N/A 10.127.0.87:139 tcp
US 8.8.8.8:53 33.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 31.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 36.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 34.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 35.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 32.0.127.10.in-addr.arpa udp
N/A 10.127.0.88:445 tcp
N/A 10.127.0.88:139 tcp
GB 172.217.16.228:80 www.google.com tcp
GB 172.217.16.228:80 www.google.com tcp
N/A 10.127.0.37:445 tcp
N/A 10.127.0.38:445 tcp
N/A 10.127.0.39:445 tcp
N/A 10.127.0.40:445 tcp
N/A 10.127.0.41:445 tcp
N/A 10.127.0.42:445 tcp
GB 172.217.16.228:80 www.google.com tcp
GB 172.217.16.228:443 www.google.com udp
GB 172.217.16.228:443 www.google.com tcp
N/A 10.127.0.37:139 tcp
N/A 10.127.0.38:139 tcp
N/A 10.127.0.39:139 tcp
N/A 10.127.0.89:445 tcp
N/A 10.127.0.42:139 tcp
N/A 10.127.0.40:139 tcp
N/A 10.127.0.41:139 tcp
N/A 10.127.0.89:139 tcp
N/A 10.127.0.90:445 tcp
US 172.67.69.19:445 ad-delivery.net tcp
N/A 10.127.0.90:139 tcp
N/A 10.127.0.91:445 tcp
N/A 10.127.0.91:139 tcp
N/A 10.127.0.92:445 tcp
N/A 10.127.0.92:139 tcp
N/A 10.127.0.93:445 tcp
N/A 10.127.0.93:139 tcp
N/A 10.127.0.94:445 tcp
US 8.8.8.8:53 39.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 38.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 40.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 42.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 41.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 37.0.127.10.in-addr.arpa udp
N/A 10.127.0.94:139 tcp
N/A 10.127.0.95:445 tcp
N/A 10.127.0.43:445 tcp
N/A 10.127.0.44:445 tcp
N/A 10.127.0.45:445 tcp
GB 172.217.16.228:445 www.google.com tcp
N/A 10.127.0.47:445 tcp
N/A 10.127.0.46:445 tcp
N/A 10.127.0.95:139 tcp
GB 142.250.187.238:445 google.com tcp
N/A 10.127.0.43:139 tcp
N/A 10.127.0.44:139 tcp
N/A 10.127.0.45:139 tcp
GB 172.217.16.228:139 www.google.com tcp
N/A 10.127.0.47:139 tcp
N/A 10.127.0.46:139 tcp
N/A 10.127.0.96:445 tcp
N/A 10.127.0.96:139 tcp
N/A 10.127.0.97:445 tcp
N/A 10.127.0.97:139 tcp
N/A 10.127.0.98:445 tcp
N/A 10.127.0.98:139 tcp
N/A 10.127.0.99:445 tcp
N/A 10.127.0.99:139 tcp
N/A 10.127.0.100:445 tcp
N/A 10.127.0.100:139 tcp
GB 172.217.16.230:445 ad.doubleclick.net tcp
US 8.8.8.8:53 43.0.127.10.in-addr.arpa udp
IE 20.190.159.0:445 login.live.com tcp
N/A 10.127.0.101:445 tcp
US 8.8.8.8:53 45.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 44.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 46.0.127.10.in-addr.arpa udp
IE 20.190.159.0:139 login.live.com tcp
N/A 10.127.0.101:139 tcp
N/A 10.127.0.48:445 tcp
US 13.107.42.16:445 config.edge.skype.com tcp
N/A 10.127.0.50:445 tcp
N/A 10.127.0.49:445 tcp
N/A 10.127.0.102:445 tcp
US 13.107.42.16:139 config.edge.skype.com tcp
N/A 10.127.0.48:139 tcp
N/A 10.127.0.50:139 tcp
N/A 10.127.0.49:139 tcp
N/A 10.127.0.102:139 tcp
N/A 10.127.0.103:445 tcp
N/A 10.127.0.103:139 tcp
N/A 10.127.0.104:445 tcp
N/A 10.127.0.104:139 tcp
GB 172.217.16.228:80 www.google.com tcp
N/A 10.127.0.105:445 tcp
GB 172.217.16.228:443 www.google.com udp
N/A 10.127.0.105:139 tcp
N/A 10.127.0.106:445 tcp
US 151.101.65.140:445 alb.reddit.com tcp
N/A 10.127.0.106:139 tcp
N/A 10.127.0.51:445 tcp
N/A 10.127.0.51:139 tcp
N/A 10.127.0.107:445 tcp

Files

memory/2788-0-0x00007FFB07423000-0x00007FFB07425000-memory.dmp

memory/2788-10-0x000001F81AF90000-0x000001F81AFB2000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_jj2eiysf.ixj.ps1

MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

memory/2788-11-0x00007FFB07420000-0x00007FFB07EE1000-memory.dmp

memory/2788-12-0x00007FFB07420000-0x00007FFB07EE1000-memory.dmp

memory/2788-13-0x00007FFB07420000-0x00007FFB07EE1000-memory.dmp

memory/2788-16-0x00007FFB07420000-0x00007FFB07EE1000-memory.dmp

\??\pipe\crashpad_1664_LLQKJIFFHYYXTOAR

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 81c10f88b82311299aaa10d0be85f180
SHA1 6575ca750ca00db5621733ed7a0a729cc19e2be2
SHA256 7ebe595efa1067c88f877b91182acb86e053dfaff310409299ed611b6a70ee09
SHA512 4b9b0ea2231bb4fc27bdb5fa2c08d5b4bb8f7470782aed523078595569f138264b7d7f32eb8d0220c6c350df4fd52278cd438ee28afd2b2c5a7a7f2be1921721

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c65f7fca304160d4f8d7a838805a52ae
SHA1 38f07bcbad1dcc0b147c33fe8d77ca76d9f33251
SHA256 14b7fb48cbeaa5b7d0aeb587abebcc3212d925a1a9b3888c863763dfedc54dc3
SHA512 b47015d98b8bb6b31bd10e6afad8357b18b74a229f478ab8fe4b8c65418e6ac0b8feb84b1858b623df0ca8bcdc07602a802ef1cbd261e5b292be05682205e5c7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 fc450751867a6e19ba5513dc184a625b
SHA1 77f08ba8e6cf10de4d6fa678d97981d9def1f291
SHA256 287fd1077b35a763b0e5040748e1306001c8fb3fa9e8386ab66e61494578f481
SHA512 89c860c9a25f91f5f7e67489d9c4bc71bea02d1855dfac3e4a1bd69910b1e3dcefead3ae50e86af229bc8599df5254c75544a9901f48c89ab757f903b818c746

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005

MD5 2be38925751dc3580e84c3af3a87f98d
SHA1 8a390d24e6588bef5da1d3db713784c11ca58921
SHA256 1412046f2516b688d644ff26b6c7ef2275b6c8f132eb809bd32e118208a4ec1b
SHA512 1341ffc84f16c1247eb0e9baacd26a70c6b9ee904bc2861e55b092263613c0f09072efd174b3e649a347ef3192ae92d7807cc4f5782f8fd07389703d75c4c4e2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

MD5 749a4ba901b10b8395cf53c03391528d
SHA1 be5668f922a4f06f864ea1abbea331886280fc40
SHA256 5f6f7d683dcadd2433a4db263343de2f5e735a078a8158f88f742634261ed412
SHA512 9257d5994f4b69e59f3b02c13065b5094d5e790fbce3f7bb3272f4a609287549f3715e80e6c21e95702ae5754771e1ff016be9d87e4c212f2a5dce88f57b1152

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fab5cb41e1cfd0c9c0bf09cb60f25e46
SHA1 e696ee4d28eb25354ecf2e13ce2f1340fddef4c7
SHA256 9283fd527a69978779d003f967cdfa29f7bd544700dba2c95c70412311200da9
SHA512 7a2665fd3cd722fe69c85aa91d2dfbdfac81c16f006558728754175559367883fc0cbc838a75daab00c4673520f9df581e3bf9f6b0006da1d4325d3fd080f98a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7bf91b488176a4af59d78969e36ed6f2
SHA1 d490cd2caf0eca5251388f734245f703f245798d
SHA256 4cace80a77dd5fa2f42829a388c5f650fd279b7c496f94b2f2fee1acc9729c70
SHA512 9cb2fde4ad58e12a3f461cfb5047819fb31c4113a91fae2c6b38635631cf2df6bef2a44e09ed1e1a0b1f8c9abe700cfc42bb9c56a283beea5a1f6816826ffc26

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 a4ad30b8c2c200df20b5ded7efe5e8d6
SHA1 75a7a75a97abfcf64095e03bd6eec5b6cba00f94
SHA256 4df1354a6a578389b0c35ab5feca5d544a21fa90bed3832490ae396602d9dd79
SHA512 9cd3f62a221fd4d11834569065e7502c832d17462ff6311b19589036b789efe3eb90e556fdad3709038647800be38f32a7374dfb664ddc2be4e2f76dd0df3fd3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 a6a5c957e2cfbe382e30f27e2c26fc80
SHA1 fd4a0fb8a0844da120478be225baa8b2f7db8770
SHA256 ec4cbae2755284799db14e2adf36361b3e73a733bc329384bdb059b8682eb48a
SHA512 95cd59d7792a9eb218964e803635655b75f3c225fd488f0b1bdcaa14629131c5a7a1c4a004c09456e3edd9a58a36ae4ee9437aa253f9006fd08940cbc1875e8f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a810e78da482d0113edb49ea6d8a63e7
SHA1 8eaff20e8ce14b12a690093c8050d62dc28f3e48
SHA256 ac51c6b6823c741f985fe454043c0481cdb793a44b31b4ade91052e42e51efa2
SHA512 82aec4c7a5582afe74202288d5d9a0731cae7f18425cebebf3d35d5c459842aea0783e38dee019f7a8a0e196d2aceffe6f82e518e27dc57eec654017e0e7fc98

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a8c645017ff5f5a2eebba4b84119672e
SHA1 6c6ca5416bc88e3ef385db76499efcb726a57320
SHA256 dc80c473c179f2e08ae52883d15ad23823fcde82c5e4290111d77572c88ba61e
SHA512 85d63327f977664eddaca0a9e6c28afc722c3161e74b88e35ea3fa7ce8604a06dee10b6b26323e30c106c37c263f8a5e2fd951ab7f5839fe71f28a57049ef30b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fb8986536240e03c4b1395c7b14f9201
SHA1 ba7d0ab8f00a69b38e83b3e83dbd0d295d491bc6
SHA256 5a7fc44f6b2f35ea10daef7db5e690bc1cb7c55d23e7d83902e94340d1b06380
SHA512 f37e85c1c525d6a2125746a51d22255e89878b0c335fcc9d147fc170e5e4b3c62b0991394d0ab40bfe2a7578dc49dc3285eeb6d57a8c9a75d4a5efdce2a19bbf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3433acc1e2c72c679c84df464ef4ae5e
SHA1 231db445c622828012555933781c4f8b1d719590
SHA256 38986722b03d5b203bd715af049cd3489f59a5da422fc330d0c3a9e0df8299df
SHA512 93a5571e3e612974cffc3149c27fb904763c24fa6b28cb97212557a6e9b97389299afda424d561390a1c406f2b2511623f517622f3822c0ecdad70154e97a1a8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 38f7325a92347e38e2f4a72dbbcfd17b
SHA1 70bc162587c2f4e2bf7a1b6c4aad144925c84a2f
SHA256 d150d951aae3a7cff4ed9393c70866026da27d5eb78f2127ec6afd47c1bea3eb
SHA512 f26450c70f403bda68cb17ed1b5da4a30c725bc80968c29ce22ff9d0a9d523343147fcf4215815ace3e52eafbbb5c9e4ea04a801342c05f9739761f37c3814cd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 384790f5b29b333fd46688a6f5ea11a4
SHA1 044c2422b1950759a4711cbdec0207089a90aad8
SHA256 e045c1b62731949067cf0be265f233f43f8102a3cbffd5ba93743e527229a0df
SHA512 bcdadd63b03bdad431c3b8fee0c10da61b1db2daac82d54631000b38a1b2890d108a8a4a9fc78761786316292360d3096c3727cee4862833c77691bc7087c505

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3f35e131b9b527e88d797d58c3949551
SHA1 2c7d057bc07b13afb0eaaf7fd927b9631dc4e0fe
SHA256 a891fb518440eca271b6979b3b1d3883a78fd8b3a9602c7eef39b5d17a6d5161
SHA512 23aca31254160c6d213b586d84cb9bf2be0893eecb71977d3619b47de9b0426754f535ebd4285fb4a1c4b955d89003f9f1331d6937670d84a57fb7407e312df2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 83dd953cd9c5d569eb13b9d263dcf850
SHA1 a6f4910c5a43b0aca5d6e767eb0b550f862ad6df
SHA256 f163137dfbea8e38969177c409be337dfd0937ceb04b2182803a7dd5d0b1d4ec
SHA512 392cded7ab996353b109bb2c24ba474e970ed2f6085a84b30a435350d5fe10ef33828274860e260b3c3c1c67f11fabc261c6e7f2f54b801dd384e5dbbcd668c3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 f2b513e3ef67a410d16a89821e0247a6
SHA1 899a955ddee196c9d4fe37ac2bc3a9506b6d59c1
SHA256 9fe55d9b034880e16953ef849ef6f60b93e7ac1709f819a6473d6df141c72495
SHA512 20b3b2891ce39bc83824f8618776ee5736c527d3bba19dcf1c4e474fd4f6a04a2ac2197fd44ca1ea7ed42c8d3d45552cd43d92ce3186283e94e690f97d07f473

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a0c8bf57fa60db9895c1815f648badea
SHA1 28909256543c6fa98745ba449df1f0d8e9a6cd1a
SHA256 6b7d1f6e2507e742d2d936fab08386c4c9dc952a8b8ff9a96e7d2fd01d7e03fb
SHA512 927986861bcba1f6a8693c57eb421b616b81d66a464090ad83e5bdfa75575e083a12d67835cca04a6a0cd44a9d55050983832f78fc6cc2899c69c8015a60785b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1c997f2ba2ea139dbe4e5d2450f32fed
SHA1 f33bddf63aeacf266287c2a587b1223b8ff131dd
SHA256 95e892526e52152638ea9350ca1da64ebc44281a9508c7944a4ac78e349a74fe
SHA512 db2df731f85bb7681659004dd75e389f912276d6e91e9e26f2059e1c53ab084f4eaf9c7efc763e8bcbae866aea5f6add45fd3e3f1e2570daeb30463afda608c5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014

MD5 73ad1336e97d07a5752426b57eb1b1b5
SHA1 556dc0d2b109fee6ef22f81beabe9b1ab8dee58a
SHA256 4055e5ed6349d4e3515299fb9e29a5042ad4ac0caa5671674ae48752b99cc6d1
SHA512 3bac8ea5c5a570b165261e5691c45abac052e9d3972820f622541335029e5fccf5bfbba9a2d440446166430e8243b637d65f8251f21ad6df767382f570c5725f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c

MD5 61a227111a600754c7dfcfab9be415d7
SHA1 00f0af7e2d67c409dce3ff4579f42943855201cc
SHA256 6be80d693fa9b2887e12e5e88f80f5fbb9256713ca34ca266b6c5531a0c73450
SHA512 bdcd51bacb5835f5f083d12923f06b064f3eda81eb46c9a611961028a06aa516d209410e779dde21535ef7972c31ff9a2c692651fb0395d6b593b030826bb699

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 245f3fdf5dea75f2d81910e24b32e86c
SHA1 64a716818a29d3c64e78a35aaeedbfddb2ed2d7d
SHA256 485f0bd51affdfb27a824aa4c4147ab35d85c66b6e4314a298d36c251cd9e62f
SHA512 cc4ceae92778d6ccd589b90eff538d6477a9c6c1e856440a227d5ff7dcc5f2c9caee7a52950bc213704f1a4d30553da0a375d4005ff7e2a0ffd2bc40179dafeb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025

MD5 e319c7af7370ac080fbc66374603ed3a
SHA1 4f0cd3c48c2e82a167384d967c210bdacc6904f9
SHA256 5ad4c276af3ac5349ee9280f8a8144a30d33217542e065864c8b424a08365132
SHA512 4681a68a428e15d09010e2b2edba61e22808da1b77856f3ff842ebd022a1b801dfbb7cbb2eb8c1b6c39ae397d20892a3b7af054650f2899d0d16fc12d3d1a011

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c68581d49c58fe9ac7c8b8a7efeed07d
SHA1 d881d12674fafc8842e4e751bc3790d0d9bd4ab2
SHA256 af7c8901bae26232b24222715e9e8df1361530862c7b58f0769f1cb410530208
SHA512 b1a0927792f576589e9bd837abe7d6e5f6abc4d9f9cc4dc6f1ee922910d40ccf02c2e459e512289e15df3f73b794463dd0da544380602a1d8e15167868b64159

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 9ae67ff57117a9c5fd95d1776a313a32
SHA1 f738b7dc0ef5b6120b8e2413bede90bc24627156
SHA256 5cf8a057d9d14423265ece6e3fb5c97024c4e6abdeb00931427d41ba6a0988cf
SHA512 a878eb4408550d2abf62f206f408e17329eb69e8b583ff2ca089b6b7d53678a21445ebef6ed3e56ee7f38c008585612623e48cc68298a1b26639c259b5aebc20

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 16821ba2dba0609578644eba54e4ff1e
SHA1 f9619a60f8c2db20959d90faaa219a1a648fafc0
SHA256 63a88587375b0f25f27f84e6a53039873bdcf13f62c4d6cd169bf581e0b6b65a
SHA512 3c695d1e887d65404455fd8eda633c1f4d6b29a83553ad1b9119ec177ad6c5b8d735a66dd618c9568564d761a0f697227d3e3a9bd7b302535419689a9b75c605

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8bcc6413e185acdceb96a550005c2aae
SHA1 fb99efba1fa4e817f841da32f4b95e844e69d066
SHA256 5a0e4926803eb2cecfe477002f9bf793bafa86ac8d95484a97239ef95943ed32
SHA512 42693a910f5617d26502e5e9e604e52788f7196794046af6efe45b2c0eb7fe044be21efa30b1a866ed12489b29495b6e3d54445c09e1c3cca460c5934246fb34

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\98a453fe-6816-4a98-95c6-ef84424017ca.tmp

MD5 cef642f5636529147f633e87d8e2b955
SHA1 1e5ab95234c8350e681a3f7e5091dd7d141e2392
SHA256 7944ad4c1a0888042ac0e11ec144ab0fa546b8f4c20334ee28b9a3436290ab7d
SHA512 8ff99d24d4a386a82aaa6db65faba7a25e1412bd4de640d2c21718077c17314f232f887462bfdd434fdfcb0bf8c58b69b8e8acc58a395f45807abd0c80b5f26c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1a05f93e7be39db230d17fa6561ea7ef
SHA1 636b39ae56560d47e0c81e14b5552f262b6d1aac
SHA256 293bbab1298b57d51eb14193e1045976756ea94e74aad328ad90862ce063eb17
SHA512 e0455363e8048f9b1fdd1eaf74373d839b6b2ed806f0ee3c34a28a9f63390a16bc13508ebeeb6803731dda5b4145d72ab39289827fafe880bd9d85bf8e6ce022

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 5f6b6e1c63ae526bfcf6d1b8130a758d
SHA1 7bb546388c138ee0c4451f16cd44da0d5f6f5a36
SHA256 ee6366e2b946160742cc239fbd28946740119ef16c46ccdc297e634a6e156fc0
SHA512 148d0dadda16788a4e5abd53d0e5be6ec5228aa240705b0e2ce609b74099fcea6ba91f2df4abf59a6206e4643d1a3ec9f5ce4b9b8867f112bc2513911e987a61

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 524083cc23bab7bb9d0ed24426d47194
SHA1 2e1d9602046175c535a3d8d9d3502cbb3e140ee9
SHA256 24d844effa35637cc69af55512685e15ccd3f08bcbcecc1762c7f2334a926fdb
SHA512 7a5bbdacc94ad7e96391da6168a33254a04f08c2a5c0541e6dfe3e2641e9748904e5d6138f931772d876a8f280e6327c305b4d26bab0bd7f4abe9fe072fbe5a3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 63154fbbf0a6426610e8c4cd94ee370c
SHA1 61c1c6b5314024fe24f12948e5e80c6bb6a7fa0d
SHA256 d22178f8551e2d69d119c4b1be872627f032745a4ffd9d5f1b4ce27b9b5c9c80
SHA512 552b29d3002f61559fbd151027bbf488d0f2c4b0533f6dd43d1ac07172604613659f9ebd668230850b4cd1676d87ec8bab5d7cdf79b9d6188f56ddf4d49e3a67

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b3b64a281b6b28fde1710b7f6f618e4c
SHA1 0084e5ba573bcfb94017cd06d85eaf9c14feb308
SHA256 4b2941572253e15fbebd1688548bacf8f8a298baf6f5cf6bf11a9288c8fa6023
SHA512 d68fca2e5b41ec51db29f84c1feed3a3540b3bf5e784ae71339125ec2a843505cb196eca6f86c3ff4ff30e1281188aa9d3e6b4464b12076f247cd6740f8c455e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002f

MD5 fa8ae85cfc56110ff1729eebe2609764
SHA1 4c6b9c02cdc10cf66124433b82870181b0df65a0
SHA256 baea020ae16d5a52fbbefd32f25bf6dae904fd57421d5bb57532e458df0ef449
SHA512 5d321eaf5dbe8ec99292a253222a3442b9fc543c3206845de36e5a583b527f11b4ef35da5c9b2feaecc98f37e1169341a98bc1a67e967d872167cf9b6477f2cc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002e

MD5 22f8e8462a27145ea793382dafe8ec67
SHA1 7f0589a9f295be39510acf2b106e8e46dccddf4b
SHA256 933f3044207ebf1d9acccdcc5394b7bdaf54d9932bf01390d1af544017e007c7
SHA512 f5ec4ae9f67ee59375de26642951220b48d8bd84770e5ebc6c3fc213c47a934a5186d4fb1563f1dde105684e550605f6347b6e7ce38694b531d08543422bf74d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000039

MD5 4801be8e10d90b7f116bd5c0317aecad
SHA1 7aa7b575011fe38f6e33fbec98e8c92fb1b26957
SHA256 925fe993dba774b69b734410aad20f58a2c95eccaf7f0662abcc2e61530e105c
SHA512 069f2aa0e6957a0287753abe91df33b88e87d20879e8054a4896f19382fb3db0dad7676931e1571aa3697f466d01b139c22ec1cfacc12ed3598a14d3ec68e512

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003c

MD5 40a6b237f42519acd0a706a818260d1d
SHA1 175195e274a1c77ca8092c2b15ee4c4d0d9d6411
SHA256 27cdc4e9ba44c11e7393e98c6f52f775a9c4d6cdeecbb1b5fcef072b62546610
SHA512 4462e17e0d0e16885ebe305067e25936b2a5107320b1497269b3d53325e722d58ef773eb5a6721b616eeff2388c69f8ea075d2fcb5e9158af188afef6e95f8fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003b

MD5 d4a2ff26c8ee4a780ad1512cf0accf94
SHA1 3af526b912d73b477fa3771330e9f31c965ff673
SHA256 5254fec48dd11c76d948d14b9e0ce4ac5a7974057099ee0bd76f21a2002ba600
SHA512 b10018dc0a655bf9b6afa45391b36e1fe321e76ac05d68ad77ae4a386fb359d2120fb54fc1d39d0c5eb6991a92b9c1c04cb57de2a5d773b59bc6468ee9ec7b1d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003a

MD5 cfaa6aa1b9f6f12931e4042327e96bc6
SHA1 0ec8803a0db3c1b8c83ede71c782172e692f8de6
SHA256 28f31fc264a745c0dba19ffe74c2b98a1b7664d31939653f0f5c1489288563a1
SHA512 b0af00108c554f06429e4c832c159ba9102b6531c9b6918c4e99cff43206087745208a45ecff2aff7b4bf6574ee5a65a80a90e05313b4d4e117bff01ce0aa84b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 f7b5997e5af8d85510d8917cea99e91f
SHA1 396e2ce743a84db6bfc2d34b41dbc8113a086fc9
SHA256 3eac4c3897b4cb36c41e84028aef9d2c421803d44adbd70b42d0c6f0fa94db92
SHA512 42053c152c03bb72f25ac239f81c65eedef693ec0c12c8f6d58e4838eacf00efac80967d018d932a7870714b8466591fbd1716144b45ac28b7c684b6db316fe4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 384b36f5fea5ac7f65ef63a8507279e2
SHA1 e9ef1c4603d68d59b3ba64869586605baefb7a45
SHA256 0a04ee3183a777507692982b62e689382018e290177882291bdbd266a62afe91
SHA512 86ca3ff15bee3efb33cc019d6472eb844411241119ea3fea0a98fcefa7c8c931902e4700d8632d5f47dfc514ccb3ea9b79e2b416fd83e694d5a5cf86f6888cda

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 8e7c7d558c05316de18f7c8bf343596e
SHA1 6e3aae990fe5c9c6199c8ec029c441afe277224d
SHA256 4c19f863efb18544643fe39941515ae4110b3ba6faf886ba9c863753124217d1
SHA512 0d15da99f678e28937a31bd503ab6f279d49869729c441bdf25255fb48b8cca4fa40d207965b67d8cb3c7c0d4da6d066a8be3b3f414a4366df9b95c2bd38f84e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8ba31f7546ef32b3ba877cd895d849ff
SHA1 b1b90ffb136e43194ebb5d716b9efc4e8cc54d41
SHA256 a9da454a0afc8ada45897ada4c258b396bc38d6f44830445cdd18e7ab8fed462
SHA512 2973069d85ba54da4bad5550316e65f07e9e92ebb1f2ebed27818af1b37d670297f50e22654feb16eb082a8f63d847e04707db122d52ab90e8bd3008592a478c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 0759c77434554d3539715d0bec9ab39e
SHA1 fe70caf820a42ec9dcc694dcedf0a43387138c16
SHA256 d5427e0533d737c397b8dca27a129e5a74aca768974b269615e56059c42fc063
SHA512 e2e8ca6c11af92ab5c0ea087082f116f379561be7de201322f5505e65d1d10d0353c984badf28c1c4331dd23119f2d19a7b96828ad8b67ec5fa74e92bc3b25a6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6581d15d7be4d193b5dd5b20a085ce7b
SHA1 9a94c3994d0cf16f75f845aa9a68995e1d35eb81
SHA256 4c96b091cb100e4c67867f32e71041e5403b359065c1688ff451c597aba09e31
SHA512 a70b411b36ba196e091fe0e7ac64cf8696f028bc0b68292cc1aee2c036e5960d58e5a4a61b6c753c38ded4463c6d5542c61d376bca06b329beb8dcc8e7da4a3a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6d2e76767bd7877c9993897decfca515
SHA1 b90eae9b05997c03f7bc7729f68f7cccada09483
SHA256 9826d3a704938b39dae2dfa5d254f47bf8d5d6b393d458645bbf5e5354ad55f3
SHA512 cfd789a76884da1d29195253617e7d2a64289dd4d9f233136ce29551a160974c2ed32ad7897fa950ddb98199a83fc9d7d0b1f05083eb9e3f6e9842d28e3ff593

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 62a89718cf68c2b21bf7d9a90cfe6c2d
SHA1 58a324e23e2f97c11c2d4b488dd564bbee6147e7
SHA256 eba54a67a72ee683b833e134f6b1eb4058ac65c6f806d1751fb8224cdde6056b
SHA512 8955c440e554ebdefab91f7df4cf6d37bd3e8524a87ac55064beda5299c230892c93c84f7fe10858d73b0623c960e76f180c6e84ce16a306767a60a88a0eb2b9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a57d6ea9f44db4159c8a2455907cd5e9
SHA1 2ad98561e49c7aead3b24d859f3e0a9b80dbf0f2
SHA256 dc718b204599ebc6ac06c8a79edb1f7e0e6799a12930876067f57c97156c04b0
SHA512 e072a78307736627f2b8d95e692a7feec1077a3fd94147bd6db0765177606277251aa1038f4438babd4cc5d718636c782bec3bb6ef4e1b3c52ac4d8ac72d4ca5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9424c570ab9990dddb7fcf9871443e06
SHA1 fd47e03bd843e375e8884e2067b9f21871914913
SHA256 69ad066f08b08c2b35a7277ec86d6d32edff2b64d3b36dd3cb9224a95b929599
SHA512 b42865ed193660c44f6632ad6b5b59c7899bdf6c08fd69803a1575fec62c2e867ee935c500f8d12700903f03f9c8075691ecec814b73eb22cab58dcef66c91b0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7f06778e467c6638a60c040fec9edd85
SHA1 f138af54dc543b3b898e10f71d05cb6598022a64
SHA256 2da0a876b2426c3616cc4687c54606ee609550dcbc225f2924d1ae1260e14253
SHA512 3c2fa40decd55c2e5f30796ecfd21d469622dc99a3a1b949f250682ed0ccc427e9eb01f90e4725040fde5edb45c6953ce28118252afee9fb7c612b773fcde3a9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d5c2f48d33d12d825a21235999b8d175
SHA1 b3068718af6320b0543a356797713ec56254d15a
SHA256 3a1d389461a44d13475c7aef519c0cba18cce973011a09d63c4c595f609b832f
SHA512 bcb2dd8b769c958e9b200c1c5d647a8a29478e6b6ed6df2a32afa9797bc76848230df82363ffe9d8f04ca5268db3c0f1e44e3c5fd10b082a84a7cf2a28c8befd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c6f8b2cbcbd2f93bdd348fc8c4501f44
SHA1 fb0323233fb7df494ee30bb8a21e0c71e4400115
SHA256 c6ae35420388e5ecadff3867a245282363809b9edd3609d05171d3dcd43236e5
SHA512 cc5732be8559f0eee47747ba0aa48161ebaf2a6291ed3ab5ffc82420b6c8e7f2031a220c89eef71fff8b35fcd6389230985d03768ec1feb1238abd7f96014fc7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6a889f00478584f957a5ae6c44b0822f
SHA1 afb56c1d7613dbf1cc55f3620a0e03fa2e41ddd6
SHA256 eb9d16ff5a3edf837c7a746ebf4d6810607cbc5311cbfef664f0d98629d8be80
SHA512 7ce6a3837674756c808adfc3c48e9ab4ccef825036be2e88b943a5984e2ddac18511faa2e0bbfb78650b24306039ad2c19013b6c1432d47288ec8ad5954c1fef

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 7532ce2c7231eba464d4b1a2418fd722
SHA1 bd2701556cf26c5c1e51c2f17a5c8d0a8881174e
SHA256 e29d223a57d803e99aa5bd03dfb3f4d1a2d793c433f79d4e746eb971b03d9f98
SHA512 9588cc9e347abb411f357f0cdb6e5d6976fa2ec5f1d717a9ff4fb3a3c59fc4033b79d41b4110c0838a1afa7ca4018677f79785a8744e91822e3f5dcc1de34efc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c1574ef2654f110ab506e18aef1ccc6f
SHA1 cbd736e834d87ff1d5b35c572776c862b764ae7a
SHA256 122c643e8a350265d4063fe39d83c63c565018e11ce01f1905f9d904e4f7e025
SHA512 847ac83cb5d6b1a4b3e60e568d587b944dd178b19aec82194b624cb982329ceb2a5ff199e0c41196f2709562c0f73d4592574f7a0f8ec0c7d8421405ed7d437e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1a2120916c587c28b730ae898d89b4f0
SHA1 506083cc9df31240676146f6b97d1d6ec5c48dfd
SHA256 1cf7397ba8aa6f9222ea55413d78d00a244d658eca81695e5b11c4f987655d39
SHA512 26e77ca5f1d05d074a4a9ec877d479354a12ab50e02f9458890254b9849d0e0225d5e5be575a4a208d085f43af1601ea959acfe205b619afcb94760ea1451b31

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1a6219033ea22f13c84896d27e2e486f
SHA1 f26b725b34bb28a4385c27694b81d236187c3e8d
SHA256 0ed3b0e896e81bf92f746ea092ed2167a8c14f23cc507810e31414e48714f719
SHA512 14fa551d9acf2457b1fab9dbbb076f4081252e051e8a222db8534e859001d0432796fd680a0c676269b1b3a77abad7855041ecc0a518cf28b8737ed9cea25b4c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6aef0313ea546aa4a7593966a3905dbe
SHA1 a2d40ab6ffcbf7508d59552fdbe5b4823ee8bb13
SHA256 bcf77c79f76826ca4d082cb4b1208238944dca0d7ae959ebad71c996dea9ce8e
SHA512 6b2adea329a57922e19e0bf92298f0c787a0dfa326da8e37955bb7486ddb339869a5b677b17c918cb8efb9dbc892c8f57c04ca9e01941a7e52907ca42e2450cb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 04c4050a334837ec2a25df3c67b3d893
SHA1 cc0e71e987aa27d122ae329c2a33d1edb585a028
SHA256 1b2b39331b0f008e5398a9befc6209fb41c2599010e92fc6f2638cb184474ee8
SHA512 fdaac6b868a3e1ed3021359e2224ccbb68a366fd6c5b437cd05718e1814b61c92c92a485474f3d988fbf9983b147e74c7f65f4f01ecaaf16b01ec61d3ff1aaa5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b

MD5 f346a43522bd15ddddefb51dba19f24a
SHA1 72bfd88abe0bbffeb67e83d53cc26603e3e1ecc6
SHA256 b8eba3d24df1663989b8e0e5dca8b43d349668996a0044691ac1ee020947cd15
SHA512 0d50d17524f7a137ca4f84db9db8da0279ea33e1801ea0d5898d7e1330ca4dbb74ecd2ae3a846bba18eafa37b61110d17bcde27cf9246ae263a60fb9ff004ee2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 88596e9c6ec18ce4aa6784e712791c09
SHA1 40e821265cc0af0e78c197af7ecaa20aa59d634f
SHA256 3f4e3065f4ef827fd618ba6c792d659472064aa4b1abfe55c7600c854bf86daf
SHA512 9974d053cb67d0a113bac28f83c74be1ec5d5eecd25214472a483ff4a508ffae9a2415c786f36ab9346f11255c637226e136cf8ce529d865835ad64b230242b1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 5b5b1f792b05b527b3298b70924fbe6d
SHA1 91f32834c729a149dc68ba8d36a10603b8c235ff
SHA256 033807fc6e60a258ae6be879734abd5b830ac19e8fc37c60b96faf9b198761b0
SHA512 0c3071828b0b3ee48f99da936b4cb370bedeaa9a77d6785062028637a904879141087f1b6092a01237cf917254d53fa9b2d46ad6a6f5daae1a40cd22b0b23272

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 bd867462e6f017c29aeb1cfd7072f13e
SHA1 1aa7fa4d999889f0e5d6e02516d23e82aa1012fc
SHA256 b47a2ec38118efdb1df03e07b156f6bd57bd91f29db7df66478450189cf1e521
SHA512 99ece353efdbf6c6221e06a1648403ad4291923d158cdc26b597992a6faa6d1ac2a7cd1999e673e478d2afb030e4488d43db1c61f9b2633bb4273a3a72dd6ba0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 c9461c592ae674df5a04fb7c414cb642
SHA1 c0059cf57cc826dea90daccfd8263d598be91f17
SHA256 18c8783d71d5db8a49b1aba399960c0b848da8177d7c6733bba9f23fbd41785c
SHA512 57f8c4972920c9fee0e7639f2c6525be97055dd1678af6d2c92aa0191fc01ffed2b27b7e98c92b02014f3a919ab5a9b326a7d349cbbb8a858ed90e90a6884744

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2ee4b023b60b9815ab67744d0271abff
SHA1 6a636b8d228f93357d1ea1400b5a75903d4172ee
SHA256 7d5550c3e22f736907a48e3a013efbc445dd7a2c7f052b7e02109e12fc0dcd34
SHA512 bb5adccda0c419237aaf0eba3a9072ddb5db519bf89b1ba9fff27018e96a74424f1bee2061acc9cc9394bbb6fb3698d7df9cd70d9838da179740ad4e1890a03f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 249d8128b0e46fd6972434000eb60a51
SHA1 fdb9966c3c04bab1da9d32cf39b7b2ad0fe37e6b
SHA256 39725eeef58250704c1e937a62236bc145abf443f3b625c4abf1920b2c9fd964
SHA512 364d125e20c141983b15bf8b86c9fa1f93b1d2f9cea893f084aa5c3da8736173bf0e7ee908cd5002fdabb97db213fc33ac15f0f3683ddae798fc9231d2b93865

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 bc53dffd2d7c1bde69c2b1f1c32203cc
SHA1 521e214aca77f27c36a90f5d84d96dd00343db7f
SHA256 0507d9f57be36b7d47223f73ecb8e1dfb9927f42fbcba0e42a623aa02c883c37
SHA512 634b9f7e19985f9fe8fa3bd0e2124a8507b646f336831765211bc1cf41cdbd7b8909ba299ffb0ff2e26ef948a2c55aad389d585775507e3d1b0de3518c81499f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8c4f8b60a32af50e52b28bb7eae75259
SHA1 22fe6608f3711d43f58a4a7d9c3e31e71bd907ca
SHA256 330c3511dd79141f0d218ea902b006de2eb28fefca415cb2ad533da41677d52f
SHA512 8540b3ef29f08d817fb5fddff49af9af61decc76c3d25eb3b5c0f181ceb71eff476ba7609a949c869646cf879e9210da54add73ec621972fa77dc50445a63d10

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 27bc0e6ace0a0571680c7a2d5876f4bb
SHA1 b6b486f4674f0ff86497e015efc5e118a6752161
SHA256 720895ed16bd2cefc46461e33495806086e721ce955fc6dafd7002ec3309af9b
SHA512 84085d380c5ae77b75b2ecc5d917835badb7a89d7b9e06e60acc70f50d8fe6eca1c824577dd50b2add3db336804d7e8af0e20a0e7f188d24d5ab2c0a24c19d51

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 342cc08ba9e968fa3c4bf93227db4295
SHA1 7ed6c4c043704308b29cffd0f8cfaefd36285b65
SHA256 e5baa0ec580768a1a17bdb50ce3676adb48e6a9c5d04da358130b8254d070814
SHA512 f6e89934e632ed53073effa62983c26ffe8c1f28a5d7a7d319a90efbb2634218835411d12a2a4b79fd959e008a30d57f565015ee08adf8838d96524311e7922e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a2826b907e2e7971b34c790de95a6f2c
SHA1 3c3dc2accb14565c1d3476f800729e6b413350bd
SHA256 cb82e68bf707e5f6c8a0a76053385299b8ba25cdbdee3d32458b9d11b08cfd41
SHA512 8bbb5c5d004b301eef8b92bb3721312e2447145fbc1b7a4aab532fdcdc48687a9ce48151d24a914c77d1bec2892dc0e0408250cd52b2116f1021999d37e385e6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e9e58ab1079bd11d1c034df1bd95a958
SHA1 c391c7adf9e1793aa1a90b0403808144484da43f
SHA256 290a53866a0099e57fad78904c6178b55bea123755e5c911e951c6b0fb0658f0
SHA512 7202f2cf8896668553ccde76c80821cf8b2a122f089267c4cc442f8c033eb93a0d5a15b89721a552dcca815d8e76a114eb975c082a64e79fe543f36fd3f91ef7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 88a2045e6de4818b07fea21d0ce673b6
SHA1 6192ec5c8cb9416f7fae70af7a16cc206b98049b
SHA256 013f46b5c6333efcccc88456560e506691ee27c997a05a1282e47f25f6dfecc1
SHA512 3224e388be1c295f6719584d20a7cc9a1c94f6a7192ac2e2b6e7ba5ec53d9c9d5a84e5bb531da4c439ba039df52957f398c06fe557a646687f48cb3862baa28c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6daae60ebeb2a628d2a627ff3ff056c2
SHA1 004e11f7de6bf37ac6e58c2d8978040512659d69
SHA256 16d7ca0e81fe79195de77761a353d1a961a93e3e6cbae10dcbdc75028a4a2ee7
SHA512 fc4b67c0ece032463430e41743d3fcf372eb04c696b19f0cfb2882179be51cd88ff11d7e1caa880e6671d9f909d4aa1113f671f2c9dfaad9f880c049224bf0e6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 86cbcc5b2c9879039ec91c7638effb3f
SHA1 ff05097b073493f7b806b2ffca4a2d4b99c9ddf2
SHA256 3582c6bd69da70c8e41bfcd4e5988552ac1e02ac239515bd36dc553bf4eeac02
SHA512 125016e68fba5353e560668be1ce81adbd97c58d50641679d70c159582543ca020f29807dfab56d2ce7a5f22dc7abc6f25874a75117337ebd889e50a05091b84

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a9cbb4f5a629be4a1e6e94ae3b3584e6
SHA1 c354289acd28d80082d4ce93522891435922d4d5
SHA256 69ba23349ca9ee0779cf16580e6473dfe6e0aee31cc7e272040ba66b70bb1984
SHA512 9004e1628fa06d9c66adc50574146bd0f6c13aed1fc7cff8f8243ec987c3aee166b509da6286a0e462bb5bde7253f4bfca92c44b04af1e38fb26fddefbf87558

C:\Windows\infpub.dat

MD5 1d724f95c61f1055f0d02c2154bbccd3
SHA1 79116fe99f2b421c52ef64097f0f39b815b20907
SHA256 579fd8a0385482fb4c789561a30b09f25671e86422f40ef5cca2036b28f99648
SHA512 f2d7b018d1516df1c97cfff5507957c75c6d9bf8e2ce52ae0052706f4ec62f13eba6d7be17e6ad2b693fdd58e1fd091c37f17bd2b948cdcd9b95b4ad428c0113

memory/448-1805-0x0000000002A00000-0x0000000002A68000-memory.dmp

memory/448-1812-0x0000000002A00000-0x0000000002A68000-memory.dmp

memory/448-1815-0x0000000002A00000-0x0000000002A68000-memory.dmp

C:\Windows\3C2C.tmp

MD5 347ac3b6b791054de3e5720a7144a977
SHA1 413eba3973a15c1a6429d9f170f3e8287f98c21c
SHA256 301b905eb98d8d6bb559c04bbda26628a942b2c4107c07a02e8f753bdcfe347c
SHA512 9a399916bc681964af1e1061bc0a8e2926307642557539ad587ce6f9b5ef93bdf1820fe5d7b5ffe5f0bb38e5b4dc6add213ba04048c0c7c264646375fcd01787

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2fa7775fd1985aa94a49f2a259e66694
SHA1 3bc886539679b915cfcb0d0382d3a6fb43279f24
SHA256 9d91a2870f3b475d7803aed4b5e737bdc5d9fc2c291c0f5786f3701d93af7035
SHA512 66065a6e883d6345d36057478ec31252e38787a93a4c56528f2dce2feb454e0ac2dc2de7b8cc1f6e86c29b885d5c06d99fc978ed6c50302b4999b8fd81bbf824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 07711624c8c40414b81ed6e5023322bc
SHA1 f1f9465a366ab5f6e7571e9b8180d23718e0509b
SHA256 f5b26f12014a86a98cca1f8c9f3e0c1810a14198705c686b4125491d65b982d8
SHA512 50ea9c299916e63da726015db56fcc83c95902e4245e67c3fee3e14d45546fc1c4fdf7cd04a7f17870a07da0aa2c3d2ccdd807fdeea145da919cbe33ff905232

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e2566814c7323669260e889303c0ad87
SHA1 d055721d0c52a2d7d5d88968cc39181fe5b79b3f
SHA256 541491aa4b07ea19043796b47e3e31e013c398b8ce6c92b6d30b5efe3685ff6e
SHA512 75e9de97472168628741df473161a1bddd1d806a7827b081a52b8e6925198b4e54e6f70cda176338180bb5af74f06e52d7a144772dc75a6f421d9e6b11bdad6d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 10da4205fe9eaafc0fee09675d2abdf7
SHA1 cff4a2ade83f6f992909a021a0ef98220596cdd3
SHA256 ae75b8c7e3a8a9b825a58ff24fe0f1cc81cf9e0b01a899865957a4c784c975c8
SHA512 906be89764aa4d5efdf4089027f09dc690097d1b8e163abd1598f3a677255bfca36264decd85ab4390b9acb2b2660350db39c52c1d34bd42ef3dd8ff8dc16bb3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1efba990be0709b61825ca333972de9a
SHA1 56358e1193f3dcaf9db9e9f3a9433fdab6fde541
SHA256 15868f2a6dbf8b1b765eec3d0e99c04e05fde8d289a1242faf8ea10d2d0e71b4
SHA512 e969e736d92a8728b7102a9451c29f09e48288e5305e33cced17b691424c373bd261702f0187667af7131904f81fe91b9d4c11a7bf85c0faac16517b36ab1e30

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7002dcbecf191663c3fc108bd1b8f10c
SHA1 47f73e545863a8f64958cf8204c19944a1537e6f
SHA256 b842200f2780d9604ea5b5ff22bcae7209b59a4fc1ecbc843e9f19cb9fc21161
SHA512 cc061992d02cd1c2a6aab838a49ebe11b74d90c05710f36f02bd35b99a61f5c96026d46f8345b5e82105ac8de866e8631e75b6dc47f51706b882527fd6266dce

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c8459750a128c730069a68f218a0544d
SHA1 87a0352098f819336e1039ccbbd1f9174f641ada
SHA256 9a337083e64638c464082cf0ada1ca595ced059853175e70328c487ff71dd296
SHA512 cf0b9fb9efb2be2711386fab270742541fa2f5b08d28210c6952a343b88fc34f262724e2d273055dca56baaf81afcf8ea7c47da4c3425d668de326b510d0085c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 03af03b10feba504b48fedc5ee0b6a30
SHA1 61218669d903b727a8441768c6ca544bd6ac4133
SHA256 91e013d92149e66110eb76670bf5341848dd5a53b20b7bb08ee84e5db967e757
SHA512 e7e2d9b93e3a0582d863eabf70fd31a01c71fcc4dd91a86287177e8203888fea6951c30b1471457ad8ac1bee80a082d78aa2ef8e7e2239341c75f6bcb63d53e1

memory/4648-1963-0x0000000000400000-0x0000000000414000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0884941b26dabc8a25d35e3f71f98007
SHA1 0465c143ea94718814d58501e306fa9edbf01836
SHA256 da82e8ec1b61441bbf46d4878b448441ab03714544b74f21c0d46ed81d68ba66
SHA512 4be20f1eb24cc6ed4f54fa66a8d0eed9adb7b3e329de83ff50f326f4e060c339976f36e1488449b2dc844d776329457487d3ddf0ef3fbf015e371bc2cf146774

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3b3681e67e5cc1aa15a1cba7008b4a9d
SHA1 8656ed9c047173badf7c1e004a2ff8cc4c6de9b5
SHA256 e5b3ad88f46a66c43de9fab06214734f641c5171bcf1bdfb040e9df7664107a8
SHA512 4dcb56177da3c29e6500f511bfe41e1ac2b2226a728c8b6b42ce09086efd0ffd8942ed46a32bfcf73387b8a30175157bf47e25c79402451d6ab1d1272cb76e2a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\b59da828-06c2-43d0-a7a1-193e172386d2.tmp

MD5 85fbb29d1a1f2e82b21940024c96aeff
SHA1 2d8dff327e28af978374be3c6b772d1e88d60e0f
SHA256 2d7dee09d2c336b5550d0df580b8ab2810426b4868509ab90d3fcf975257ae59
SHA512 7ad736d3a9ee704576c8d940a5872c70c239ec16cb0e8e750a8898c7c28bfce3d2698f03872dc7d1fd1a5b6c713ec42a3f8defdc3596ff4a47ad348ba989c697

memory/3076-1997-0x0000000000990000-0x0000000000A02000-memory.dmp

memory/3076-1998-0x00000000053C0000-0x000000000545C000-memory.dmp

memory/3076-1999-0x0000000005A10000-0x0000000005FB4000-memory.dmp

memory/3076-2000-0x0000000005500000-0x0000000005592000-memory.dmp

memory/3076-2001-0x00000000054A0000-0x00000000054AA000-memory.dmp

memory/3076-2002-0x0000000005760000-0x00000000057B6000-memory.dmp

memory/3076-2003-0x00000000056F0000-0x00000000056FA000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3c22928f97a34ce615aa6f04b1b3cd66
SHA1 5cfc48d07dfe70e3feb7e9657ef3d552e83e1d2c
SHA256 dbb8e7a0d84503a93af14a6acc4d5eb0d9ca39cf8af427bc77e586176f8d927f
SHA512 c8f0398009b6e384e6a5a97a1eb55aa840f3580c663bbdd9afd430f64b57b05e95525d2b07e7fd29dd5842f089c4a02f1b99ed8a97abae789af0e4da6e2d29cb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3ba7dcf4b71bed2b5deaaea3e5a1a6df
SHA1 a3e229cfc5747ea56934b4a6ed7b71026fc99bdf
SHA256 87b54376a37b170163de9aba9699f922421a3d3a2118cad984b2dd88904f687d
SHA512 c1938b86468ef97539d34a8b093f72b6054375c48c1f5e76b1d085d4d0db4d4b04a54146caf761fc42b5fbda94506598c04287d38e2b97dca1b7bb41eec01e59

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 96768576e560ef77cfc5bdfc8087334b
SHA1 aa269b4d6b3ec80d80befbfd6c01d28f8f9f489a
SHA256 e718ed0876d300fec8c5820405230bbf195e59e01e9ae5673b4cfed206ae5efc
SHA512 7b3fe687cb44d94e72375e7dfe8d1e6888e2620473d31124038b1696b564e86825cff53c983493ecb52d36f6bfc390eacf4b945964f8631441e4b0162636ae9c

C:\note.txt

MD5 afa6955439b8d516721231029fb9ca1b
SHA1 087a043cc123c0c0df2ffadcf8e71e3ac86bbae9
SHA256 8e9f20f6864c66576536c0b866c6ffdcf11397db67fe120e972e244c3c022270
SHA512 5da21a31fbc4e8250dffed30f66b896bdf007ac91948140334fe36a3f010e1bac3e70a07e9f3eb9da8633189091fd5cadcabbaacd3e01da0fe7ae28a11b3dddf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2611e1ee4cadcc12a45ec1b89a3aef6b
SHA1 7b718720164a2c6da15472761cbe89b6f419ded7
SHA256 7c5c58bd589f92d2abf4d3e57231d43d6142463e4dadb6dc779530022c2f3a99
SHA512 4196780e6acdd8192d481ca28eeead6a2e2e3233d884b8cf0528788cd7f304e2e827953f8b81f7edc2aec175f80b14c9be7d9b4400c8d44b71bd873ed49a5919

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 347b8f322ecc0133cc6582a72186dac8
SHA1 74269fb70273014ab51fc7f1d700050fe3cbee15
SHA256 5c2c6d3b656b22ad296e0ed22563a9616753e7d80373047e6a1662f09bdd19c6
SHA512 bc33d7109bf00711c4af03e7d821c6efc3c01793311cbf93d44a4ad841f27707943ece46b8149e124df4b9279be74bcdb7c0d3862afed7e1c841ee7a4c9ae949

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 4ed5c01694b94cbfb5f6ec822aff2f55
SHA1 18afc91547e5b8e7412803654c24e5c103efa269
SHA256 fa87b837b48977472cdf2c5ba489a8fbfa817ff259e34a8ae9e101e981b0add2
SHA512 0e957e202842e25582858bdfa176a1e32f659cf2768589504840ccdeeea241ea89b0fb988ad71352e780a31b2f1adfb10b46d4a51b6c8ef9276ba468eb4ee05a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 924ec04dc8bb60f5359b01d62ceca1af
SHA1 337cbd32a66993cdf424add639b3052c4bea2dac
SHA256 5c824ed01d1119c2121db16385a6a47308afe2a4d1f8c4c7c82f738f24cb1604
SHA512 194920f8398c23df831a3f6a83e17c2b1a2301f5a582f4dec0730085f77558a751c8056ca81ecd914c6c329575057d2d94d7d0732a6f46f89166435f8686b168

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a13b19f12a9326c9f14036e357f6a2d4
SHA1 fb9821decd98fe422cce33d2360b646858da6055
SHA256 3a8edba996855426830c0a99f90a629d27691abfd67f4f388f63fca4db9818ee
SHA512 b937937d4c40b1dd61ca3fff73b8fb9599442b6b4df9ead1cfbe3392134f76869de19c3bf25b0d922de551bbaa3aa41ca947501d4e90ca6d58ee87d97ce2ea0e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4b428baf1bf83d33354fd074547408fe
SHA1 7eda7753e6fcf7e17d3bf49518ae2759679d45fa
SHA256 cb55f178d2d30386340a21c89bbca5631aac66ec75215645a8fe6307a161be66
SHA512 b70a992663e3a91af2f33857366a565e00c095b45de138d9563289dacdbae340222a26d27335c0f1ed30d3cca0823704c0f376813a15fe26f8b788d727d15db7

C:\Windows\infpub.dat

MD5 c4f26ed277b51ef45fa180be597d96e8
SHA1 e9efc622924fb965d4a14bdb6223834d9a9007e7
SHA256 14d82a676b63ab046ae94fa5e41f9f69a65dc7946826cb3d74cea6c030c2f958
SHA512 afc2a8466f106e81d423065b07aed2529cbf690ab4c3e019334f1bedfb42dc0e0957be83d860a84b7285bd49285503bfe95a1cf571a678dbc9bdb07789da928e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b89bb99ce6451ab2cb80d1329f0016b1
SHA1 19ae684a12908cb899dd930182fe5e58eac9e806
SHA256 3bd5c126cb158bb0d4cac84651eae585996e23e8823f4aad391a50682fbcbd9d
SHA512 770ecec3607ee90c7c6fed38ae897032d6ea2f9fabaf76395bbf717af85b2490773c0ea9e87a3cef535768f2dbb0658e10276ff4d2420bcae641dc774de88816

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c830f9a85c6893d74a4fcf93f8c3fa0e
SHA1 2dfa7713aa77895264db1e96bd3b70867fdd62f8
SHA256 29d9dc7e4cae36d9a9f1b9aeb9da5f668b5854cd6e8927f31425541e1b6df12e
SHA512 db3000025472d0469c7b80d43377a63acbbd5929fdd3a722a2f8cf79337b21c80f8d4d258b0aa668f3fb365f960cf81761df4f75218ec94a6b3c73c79e910add

C:\Users\Admin\AppData\Roaming\Microsoft\OneNote\16.0\_R_E_A_D___T_H_I_S___LL762KL_.hta

MD5 2650f5cae24c4f6fb693497dc9d4ec32
SHA1 82da90dc75044bb90a0fa550728556da173c55ed
SHA256 a9e8c334b961407d375f972b9a0eeb0c059d81338031a57958922821a6193bbe
SHA512 d3a0e3b8187346a01e2d67f3a5029efada51e6b410d4d870e068928dc8edbc96f3c7ee39ce7397546b748e5d32c2419e78eba0a6cc8afa09a7c65e1ac9ab5bcc

C:\Users\Admin\AppData\Local\Microsoft\OneNote\16.0\cache\_R_E_A_D___T_H_I_S___5BMJ2W_.txt

MD5 bc8d1cd64ea524afa5a63fd2f48998ea
SHA1 ecdde43e2f1134ee03f686d1361adbd4446ba1b7
SHA256 98ff365475471a3178bf3ac157f288c6c440d4adf6c6f9cca982a0ed5d8a59ce
SHA512 44d6bf2e5f5598e82dd8bc23d87ad35bc85fc11b663799cf6374a66b4cc0f2c2bf2ba450a0182b1d104591f2fd5e6cc46042c41faa5162df4acddd3703709fe7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 847a1149b99f9755c882cf5423298cd0
SHA1 ceea18974a767d0b9762639ef54f277d1f1db699
SHA256 44c07c8662b742cf91fca5f191017efee9e67ba62e90b3cc7ff51b972d272a9a
SHA512 383f5693774f49638625409760c15c44fde6dda19d5768429e062e3dad3879661983869ec46ecb8a9d8bc23db8371e03c06ad5b3ad49d74c274651ddb12d7875

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 f426165d1e5f7df1b7a3758c306cd4ae
SHA1 59ef728fbbb5c4197600f61daec48556fec651c1
SHA256 b68dfc21866d0abe5c75d70acc54670421fa9b26baf98af852768676a901b841
SHA512 8d437fcb85acb0705bf080141e7a021740901248985a76299ea8c43e46ad78fb88c738322cf302f6a550caa5e79d85b36827e9b329b1094521b17cf638c015b6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 6960857d16aadfa79d36df8ebbf0e423
SHA1 e1db43bd478274366621a8c6497e270d46c6ed4f
SHA256 f40b812ce44e391423eb66602ac0af138a1e948aa8c4116045fef671ef21cd32
SHA512 6deb2a63055a643759dd0ae125fb2f68ec04a443dbf8b066a812b42352bbcfa4517382ed0910c190c986a864559c3453c772e153ee2e9432fb2de2e1e49ca7fe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 bacb15a3ebbe015d94825db3e59432b4
SHA1 a7190d4335018bad03f85d2dcd92cd4c6c1b42f8
SHA256 54d6204e7abaf44eda05568dc6b2fa938242c11ca8d4fcb3d493f3f3029fa80a
SHA512 bc4e8c972f9ae5bb0e9332a7e4a66cdeb58a824187e9c9a81e9fc330a9208b534b1ab8646b66ffd29ad146de1a77311467001fda3fecdae98db8a9c02a8e28c7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 403dd572e6d84a01807849cbba25e641
SHA1 d72a0e5959cc184a10684ed682f2e1bc3da73486
SHA256 6d7b43cc9a4ddaa71da86529c5fb66a7dd5878560fd33b7946295bdb1dd8e455
SHA512 0ee7c7c4557cf879756740ddcf24ee329cb67211047fa146b43f3b177232a529b45cdd1355d7d6931a41aa31569053724016f6c866a0f3546a13f5dc015b4c3a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 0095e8555fdc960fd236c676558719ef
SHA1 876f6ac8d92151cb00bcd5f9a97a7877b0aa47fc
SHA256 953bdddabc186b4f30e31e7c92806c2ca91a6757aa02453c0258f9e0fd294f77
SHA512 b393c181df5f665be610f6f2892b1a3890ccbabd3c6bfd1383e3782e5ebf9a43f20c2d37423646ca9a5df83492cba69c0841fb66bc1cbc046b1fda3af353e2d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 3db5a3670b26a1d23502028ed9d5aff4
SHA1 2102cc001f733d6c8192858793cf0c9a6ffd48b4
SHA256 3d3802ad51da091e83ebc890c41422dd5cd7d6122d1469a158253021a4c52c81
SHA512 4a4d325b517bf8b0d99f694b1b54b0b23ff8bf56e615666d4c73029ee65fec4a04be602bdede51f475780725f7de147ac92e1b13a49a962d76e02936e6f9f84e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 7347e6dd4d1925f733f8f77c828f7b0c
SHA1 4af04015850d12ae8fb61f94b6510f9806ca84e3
SHA256 3ac96551aab97c843554f50fc961ce2b6624358a92169c1dfdc878674d18cf60
SHA512 73e52c264db188ed9fb6ced590de5954587474ad59034138cbf1551f79e3f272a950ec0f1f591a9700eb68bbe7a1d090a911b3ae7a486e8add0057baf03ae038

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 b942b4c6657efbcbbaf18314ecb6757b
SHA1 97da77102c9e47926c7546c88bc7480b028b9e07
SHA256 c89d5041d0a816f2b0dbccf40fa960594ff9c29c3377e908d73e6422fac5ddbe
SHA512 8c54beeb120f0507c246ff262eae1e83cde96bead4313e9f6da482da408cdbc882a662848236b9eb5ef7f48d974bea5504b9ab875895b4fd8844a1e42df393cd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7d3f13ed3f6375493e27bfe108a43e57
SHA1 dd13eda3b105e655e92d6795933a163ac60a3e04
SHA256 21f0ee66924e6fb3877a61936b8d5dda31ee7c229be8b9e41aad1c72c2fe5690
SHA512 8b04d5ba6f6d0cadc7784b175e66b871b524173e5f6ca1f7ac9ea3c8848f438dbfb5ea6a4e768b2f8dfb7ee21bf2275ee1df5245006db012b541c1145cf306a4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log

MD5 e78e27609fb27918dd0f07a750643d01
SHA1 d875feee1dba70271faf9befa232156d6914f857
SHA256 0e50f35812cad6f1255d5d324ea9a4e9a4e634a55fc79d5bae02e87a2136cbdd
SHA512 9d9acfa374fbe1a5f2be4fec62d3ae961067ae98d186b3ebbeb0019c57298f7befa96e7ca6518b6d4f2e805eaf77dc5a0d1f3c97ac8365c0998c5fecf7d5ae25

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db

MD5 0395d1b7a1c6327c6637ecec9d4ed691
SHA1 cf23a5cc23d95f3917fa895d5042e39f67a4b9db
SHA256 0926730a77ceb464b7c3ab051db2c596e75f7b5d23d04e7fcea55c7675bfae8d
SHA512 b3133e0393d48ff71ffb2ac028e51266b564d45771ae4c96369f3cfb84d3759bdcc54a058879f9b6ebb5f68a5bcf2522fa184cb8f66f9b84f0c4e9d52a227ac2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1

MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log

MD5 1564c0065bcbd08d72f554f907471028
SHA1 03c0405bf014f0b3bf95352527874f6a9b640000
SHA256 5c5bf488c15c639d3a86a12e0d77c90091a60b8ac4e6f11995cf1f049ea1bf65
SHA512 ad31b455a7bd85611b230a54cf15919cf194aa3ee2fd8537b60b5684b4b5cbf3884cba0b92409b2e067e9d198188bf76b5da48cfac411455a4d19e40f4b3cb4a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

MD5 b1f3897fde20d4e15de2d63e3a32ca03
SHA1 9d475e0191d21a6beeb869001c234bef09cf3dfa
SHA256 20e03013481ee1e98a96373a33803cc10567bb0503e0e0b6fd1c62b8f36f0b2f
SHA512 429570ef9020d8ab1483db7f0a6f4a4278e418b4095e7b42b417a1175680fefc24a767fcd13e5f1208740488ac041acdf9599b581c40cd2e2abe53fe244ad8ac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 7366d737aa330cc6b6a7402593a2f443
SHA1 228697933c4bc3558840a9b58d69e97a199b25b2
SHA256 aaa60b3f17ea2b219d2db8c3d2d428bd44f3bd586716e06fdf1142827070e70d
SHA512 2d8c75f1f6eba3c6918b3a05a93329c16fa105562399629a44f31531fc0bc7dc0ee1692a9254620946eb25a9f0aa6223e57949eaa7e848cfdfc141776bd04a2e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 05e8266c7da504f736e2856c998c65fd
SHA1 b2f4f5178b44096c5ad9932491c0f9ea33e32275
SHA256 28e6398962fcffac7098a6743a7669a3ac762275331618435486320c299823a9
SHA512 e2521f11d939eeb8430a9a5d5b16ad54e657460e292111d9e2296d5514eb1cd92f7219112612a686660bcda6bb5f6dc8cca17102740e7eff9da8cc1454ba5758

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History Provider Cache

MD5 a9851aa4c3c8af2d1bd8834201b2ba51
SHA1 fa95986f7ebfac4aab3b261d3ed0a21b142e91fc
SHA256 e708be5e34097c8b4b6ecb50ead7705843d0dc4b0779b95ef57073d80f36c191
SHA512 41a1b4d650ff55b164f3db02c8440f044c4ec31d8ddbbbf56195d4e27473c6b1379dfad3581e16429650e2364791f5c19aae723efc11986bb986ef262538b818

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13377698641119231

MD5 d903d047dfad9d12c4467ee316efe81b
SHA1 88ecde8d67cef826af6d1a4db6575c23f93b6b99
SHA256 40b31e964762d08e24b3aad85ce9541dd133034e3238eaabdb7ed5aa85bb9244
SHA512 439e3051ba58f962ad5c63e50b323112b0c31b34b6f6402c56147591134f4b1aeaaa7f16e9d75f5b0c6c46c6426230c66edfab251cb9683fd9f55fc11bb3e370

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e95695fa-8b65-44ee-9d18-9849190e0f31.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons

MD5 745e5b84f4652ff531297b6865d78094
SHA1 3e632725173cf9223cf0b09024fb217e721a1f73
SHA256 ceb3a5f8612ca5d921c155e1dcd9dfd636ee37c6a62e4a4cbea9c6a4014ab283
SHA512 81cabc0338b91f1a8eca360ced0e4dc22d3ccce374eb822f917e5e4332763bd8e475d18a1e90d7e06c0e6eb661fdc9dea79a3b4432a7673e48d213472ecb4e2b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

MD5 4fa4e7da306930e1ca801c051db69034
SHA1 6ea6fd6ed8c556d03c9989be0aa5bc97c8332cd8
SHA256 e1a8726171410a64524ab028bfa51de04d4070d2cc2cd6a7821e1ae6cfe00275
SHA512 4c3e0aa37c9324644aec0b94ba8f0819fb7f6addcb56fff7c4012415742ed8acb573f1e4f7bd18d0e82a164fd61590572fd168981816f1bb52fa62ec901cbfb1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links

MD5 3d8ffa5b2bc6f24dde2e1dd6c799f06e
SHA1 acc0e7fb716ffa7902fa88353f21464d1d95a2e9
SHA256 1ea98b8852bf53114f2f4572ee40d53ac829fdbb8e955e86ddff2c75f254c2cd
SHA512 de72d92566c4f3eca4da77a9ce1bb6187580ce907e75990651860e4aea4d234b9840f8c3e4f5b3b8dfdd66be39143610f6ee95ce61f2f67f33459e96ebe2b0e6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

MD5 05d3bd83c8aba7af59232c836d76439b
SHA1 da6ccc33e00b82b6fa6207d05813d864fae3c035
SHA256 304c9bfbf54d212b326cc049487a2f0175248db4a6cd98f5c7b6e23bc1cc4474
SHA512 9d61b4375823f962ce21260b56bc02e92614d32b9d6aee30d810afc686f2ef751b5afc811f46569391b476a7015742a1d78ce79acacf64c40e7662dc1a8fd7a3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History

MD5 0f6bb32b610d62c9853bcb779000cae8
SHA1 03a61d1c7c8d7692e05aa84997346a4d2052b5ec
SHA256 714178e9b86f1051cea146f944ade5b904bc6a5a30972b9eb0e7389f9981790d
SHA512 549bbb8af13be4e68ef9502157f29fda897da6a1c646a9bd725da0b371dd9cc4bd97f200108f62e7bec996241dbd22e208b80900e05356cd81c7978987f2e98f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version

MD5 838a7b32aefb618130392bc7d006aa2e
SHA1 5159e0f18c9e68f0e75e2239875aa994847b8290
SHA256 ac3dd2221d90b09b795f1f72e72e4860342a4508fe336c4b822476eb25a55eaa
SHA512 9e350f0565cc726f66146838f9cebaaa38dd01892ffab9a45fe4f72e5be5459c0442e99107293a7c6f2412c71f668242c5e5a502124bc57cbf3b6ad8940cb3e9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 aefd77f47fb84fae5ea194496b44c67a
SHA1 dcfbb6a5b8d05662c4858664f81693bb7f803b82
SHA256 4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611
SHA512 b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 94a83afd867b18374151f4bca236052e
SHA1 03ff62e7a5182b8a9c4a959585c68d18f45a5051
SHA256 cb359dc700af778b3ee7dca3dacb5eb56359c4e3969ce3914712dc2ede31ead8
SHA512 6ae61f77d82b2c0af1f67c33dd5019693c704c1e95a133498bb501c0f3d31bd21a78c5b2bb21783e591e27bf395c302ac960b38b6e98e21543c2ae0be42b6a86

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 5cc6cddc804d8920dd77f08529005c91
SHA1 8f4c29a8470750b4762f9a617240d88ef4ffcb3f
SHA256 72aed8331142aab8ef1680e7d9be9e337a468382d295d837ed7d9429079c795e
SHA512 7031a424cfe678c34f50f311ffd5571f5727d8a36cc56b91754dd5eac6261f8072bad8b648513fd15034c76ceb51f9c77239bf6553854fb7a18c6ba3d932daa3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 2dafcb7f8a928e7a7d6b0b0921376d8d
SHA1 d9d3dc854f85b1a1168475ffd8f994272679d583
SHA256 dd1e6c6d221b5b9d83d27b69b0837057b022e64f630bea69487eb9fa7e4a7b2d
SHA512 67490590d0c173eb4c9fce740ce293f14880d91209b57f49e9cd7561066bec906db3f1c6e5100a680b6ecdcca564642617b6702598d72a6bbca8f28ca2c5a224

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 553dc860676b69f59f91e29de4f63d1f
SHA1 bdb8071da931c9d53f70165bf88757e21b6b1884
SHA256 9f9466ba82a22bc49e70fa789d10d91e9768f0806933d9f6b2c4e88804ab7282
SHA512 32f07bc61d5c96f0c70f9132ce59f5006486ca74f70c278f5db247933afa75c6b6c88475bf3cec829e6d99a157efc7151f96a3a1fa8a5f5fe5457db1c14300b0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c844859d8386bf4e14b88267a5012365
SHA1 0731163bc2b4efd69fc3d50af907851d7004aece
SHA256 a0294c673c0e898ccdb776e84f47a691c75fc65acbf31371fc5e579a35b0a4b3
SHA512 d491010d2e3b2aa9469352ae083ca54152a845cddd1e0e4eef01678f3ebbbe072ed9a944c74407f9f0e952bed3c3d943544213daddd7167c3adee36844804bb3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 13d9fb1477e9230f19ce637e2cc2412d
SHA1 72ddf75d2d0269e8d4f8f2d5c3d44d911ed559ad
SHA256 67a8d08e3dfc24dca7d3b0f23d70973295354a747dbd3d0e1b70fd113583b56a
SHA512 595bfcdb74e2ceb80126a65011a0519b629d504d549f7556e419ed8b531a51c5df4660888fcc68e4f53df921abef4ae4f81948165908dc20d3de6bf308ed1f68

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0b147bf24a055057797ea68664c54da2
SHA1 24dc0c9b428bf32defa643237ccd44750204c9a3
SHA256 1eccbb301f8dcdccfe94ca46fd7e53b0df85eb130a8f1eb892b403b80ccffad7
SHA512 959b55d876575807c97ee0adfd31abb9b6f557dc9982fe94c92642415169bf8d6b9907148f737000b0cc1827772d68a5ce7f77972e717a67c755a09b84b3ce3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 c9160a7c8a01517a4fa19798d138f8c1
SHA1 2e7b3d18d44b71d19d1c238a035d730df9176fa8
SHA256 95cb1b57f4fd8661df5bc02e243b328e064df71e4821eb28f4e1c670ebcc1c1e
SHA512 f2ef678317f1b1bb3bd230eacdd411ce3acba68dd72a26f18980702d12e54112ae0dcc7e430e12617dc86e4a6bbf708991f9a8c4c4c90783804beadb4ad60d92

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1ae27eeafee1c1082618ba024bbef5b9
SHA1 c01afe897f9d08ca317a8efd432f16bb63ce2160
SHA256 4dc249c2090ab3bd20e24f8621775c49de8ec9dc540db5d15573ea442f7a9ee8
SHA512 4557f7ba9fd0c47e153fd9813347b600f2916e020a65ba5426755805fdea0c58279a82fd18eb48d27eebb8e074c1efdd794ca97c12f0179b60a4beb79ebefed2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 bba3ff6ed4e4f3a785e193710e62a3ff
SHA1 d342f7290dddf157a776e80ca73679c323869e61
SHA256 1761c617a2bc9a1e3be51747c29e04333ee248cd0ad98b13bfb1c54e368f3b96
SHA512 e4027e5c6af0e3301b566491f9d7856820810f6a9b59f0872c4ea4656b7313c03191bcd550343fc3d06e9893036cf1eb23c79e4f108f998cf71d8e385b20e5bd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 7229ecec762180717487c5f6d02ad08d
SHA1 e166b0c61521d285e9d3a49a372a583c28bb4b8f
SHA256 a50b990074753bb67b3c905cf38cb4802a5cbe96fadfb614e2b631f07008a5dc
SHA512 80221259668849b23b35babf947486709ad6de8c787b7af387fbd0ce942c72962e5892b214e7e1138012eaf4a1fa1e23d8af3d3e7383c33b151da9e9f1966060

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 52a141e2e7da254b57d158d34450a391
SHA1 6f5263eccb90488ec2588db122baaabffd9efb77
SHA256 7441bbc7e06ef92896863150e199f86f49214fddb044d2cb5f692aafb085ddd7
SHA512 05fccc6739bf69fbd5c1984741908f1842555db0ae79e22f327488e73aa200bbc82b6fb769df76f04a42ce69bf364b16da23c89ed23eb9a20ac91d7c27a5cb10