Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1791s
  • max time network
    1799s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11/12/2024, 01:38 UTC

General

  • Target

    Client-built.exe

  • Size

    3.1MB

  • MD5

    b08447d3d65d6378339c7a9836c53b32

  • SHA1

    6b15e2cfa3080b825aa0c9e84649d9ba1bcbfc7c

  • SHA256

    d52810d59dcc0f3c448941207cd1c62ebcf7c096613db2422179e2a0d1e6f6d8

  • SHA512

    a1a49c87c99d5ea0b506d43e855e4abd32d77108636d1d488e8acef0aa24c74e8352f7a034f12e7f32b09674be8d7a88af245905533123bc7f363f9a99db2f09

  • SSDEEP

    49152:bvylL26AaNeWgPhlmVqvMQ7XSKsCm1JTLoGdiTHHB72eh2NT:bvqL26AaNeWgPhlmVqkQ7XSKsC2

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

tutorial

C2

FartGaming-22249.portmap.host:22249

Mutex

4d1902df-e7f6-4600-8451-58c97c590990

Attributes
  • encryption_key

    4806609BA25461872268CE64CAE8C71D1E7E632F

  • install_name

    TmpSpoofer.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Temp HWID Spoofer

  • subdirectory

    SubDir

Signatures

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

  • Quasar family
  • Quasar payload 3 IoCs
  • Executes dropped EXE 1 IoCs
  • Scheduled Task/Job: Scheduled Task 1 TTPs 2 IoCs

    Schtasks is often used by malware for persistence or to perform post-infection execution.

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Client-built.exe
    "C:\Users\Admin\AppData\Local\Temp\Client-built.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2060
    • C:\Windows\system32\schtasks.exe
      "schtasks" /create /tn "Temp HWID Spoofer" /sc ONLOGON /tr "C:\Users\Admin\AppData\Roaming\SubDir\TmpSpoofer.exe" /rl HIGHEST /f
      2⤵
      • Scheduled Task/Job: Scheduled Task
      PID:1036
    • C:\Users\Admin\AppData\Roaming\SubDir\TmpSpoofer.exe
      "C:\Users\Admin\AppData\Roaming\SubDir\TmpSpoofer.exe"
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2816
      • C:\Windows\system32\schtasks.exe
        "schtasks" /create /tn "Temp HWID Spoofer" /sc ONLOGON /tr "C:\Users\Admin\AppData\Roaming\SubDir\TmpSpoofer.exe" /rl HIGHEST /f
        3⤵
        • Scheduled Task/Job: Scheduled Task
        PID:2716

Network

  • flag-us
    DNS
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    Remote address:
    8.8.8.8:53
    Request
    FartGaming-22249.portmap.host
    IN A
    Response
    FartGaming-22249.portmap.host
    IN A
    193.161.193.99
  • flag-us
    DNS
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    Remote address:
    8.8.8.8:53
    Request
    FartGaming-22249.portmap.host
    IN A
    Response
    FartGaming-22249.portmap.host
    IN A
    193.161.193.99
  • flag-us
    DNS
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    Remote address:
    8.8.8.8:53
    Request
    FartGaming-22249.portmap.host
    IN A
    Response
    FartGaming-22249.portmap.host
    IN A
    193.161.193.99
  • flag-us
    DNS
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    Remote address:
    8.8.8.8:53
    Request
    FartGaming-22249.portmap.host
    IN A
    Response
    FartGaming-22249.portmap.host
    IN A
    193.161.193.99
  • flag-us
    DNS
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    Remote address:
    8.8.8.8:53
    Request
    FartGaming-22249.portmap.host
    IN A
    Response
    FartGaming-22249.portmap.host
    IN A
    193.161.193.99
  • flag-us
    DNS
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    Remote address:
    8.8.8.8:53
    Request
    FartGaming-22249.portmap.host
    IN A
    Response
    FartGaming-22249.portmap.host
    IN A
    193.161.193.99
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    40 B
    3
    1
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    40 B
    3
    1
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    80 B
    3
    2
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    80 B
    3
    2
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    80 B
    3
    2
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    80 B
    3
    2
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    40 B
    3
    1
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    80 B
    3
    2
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    80 B
    3
    2
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    40 B
    3
    1
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    80 B
    3
    2
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    120 B
    3
    3
  • 193.161.193.99:22249
    FartGaming-22249.portmap.host
    TmpSpoofer.exe
    152 B
    40 B
    3
    1
  • 8.8.8.8:53
    FartGaming-22249.portmap.host
    dns
    TmpSpoofer.exe
    75 B
    91 B
    1
    1

    DNS Request

    FartGaming-22249.portmap.host

    DNS Response

    193.161.193.99

  • 8.8.8.8:53
    FartGaming-22249.portmap.host
    dns
    TmpSpoofer.exe
    75 B
    91 B
    1
    1

    DNS Request

    FartGaming-22249.portmap.host

    DNS Response

    193.161.193.99

  • 8.8.8.8:53
    FartGaming-22249.portmap.host
    dns
    TmpSpoofer.exe
    75 B
    91 B
    1
    1

    DNS Request

    FartGaming-22249.portmap.host

    DNS Response

    193.161.193.99

  • 8.8.8.8:53
    FartGaming-22249.portmap.host
    dns
    TmpSpoofer.exe
    75 B
    91 B
    1
    1

    DNS Request

    FartGaming-22249.portmap.host

    DNS Response

    193.161.193.99

  • 8.8.8.8:53
    FartGaming-22249.portmap.host
    dns
    TmpSpoofer.exe
    75 B
    91 B
    1
    1

    DNS Request

    FartGaming-22249.portmap.host

    DNS Response

    193.161.193.99

  • 8.8.8.8:53
    FartGaming-22249.portmap.host
    dns
    TmpSpoofer.exe
    75 B
    91 B
    1
    1

    DNS Request

    FartGaming-22249.portmap.host

    DNS Response

    193.161.193.99

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\SubDir\TmpSpoofer.exe

    Filesize

    3.1MB

    MD5

    b08447d3d65d6378339c7a9836c53b32

    SHA1

    6b15e2cfa3080b825aa0c9e84649d9ba1bcbfc7c

    SHA256

    d52810d59dcc0f3c448941207cd1c62ebcf7c096613db2422179e2a0d1e6f6d8

    SHA512

    a1a49c87c99d5ea0b506d43e855e4abd32d77108636d1d488e8acef0aa24c74e8352f7a034f12e7f32b09674be8d7a88af245905533123bc7f363f9a99db2f09

  • memory/2060-0-0x000007FEF5D33000-0x000007FEF5D34000-memory.dmp

    Filesize

    4KB

  • memory/2060-1-0x0000000000A20000-0x0000000000D44000-memory.dmp

    Filesize

    3.1MB

  • memory/2060-2-0x000007FEF5D30000-0x000007FEF671C000-memory.dmp

    Filesize

    9.9MB

  • memory/2060-9-0x000007FEF5D30000-0x000007FEF671C000-memory.dmp

    Filesize

    9.9MB

  • memory/2816-7-0x000007FEF5D30000-0x000007FEF671C000-memory.dmp

    Filesize

    9.9MB

  • memory/2816-10-0x000007FEF5D30000-0x000007FEF671C000-memory.dmp

    Filesize

    9.9MB

  • memory/2816-8-0x0000000000D10000-0x0000000001034000-memory.dmp

    Filesize

    3.1MB

  • memory/2816-11-0x000007FEF5D30000-0x000007FEF671C000-memory.dmp

    Filesize

    9.9MB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.