Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

fec5a0d4de...18.exe

windows7-x64

10

fec5a0d4de...18.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/12/2024, 06:16 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fec5a0d4dea87955c124f2eaa1f759f5_JaffaCakes118.exe

  • Size

    837KB

  • MD5

    fec5a0d4dea87955c124f2eaa1f759f5

  • SHA1

    ea2e50e16448ac8131391e5322663660ef0a5632

  • SHA256

    4f3220da017e7be3e0b168a958134aae6dc96458cb12118e849465e2af752629

  • SHA512

    2d52122e66c2239dff9186c3d91c036ba5a3ab3645bcdaba58157c5e2712b0b15131eee44b6760bfb45506f2f7155202c3cca141585c20e1f1333ddba07038b9

  • SSDEEP

    24576:ghZnfY/dbcSq8cluurLKjgHKOKWOGNpBpK:wfYFwt1fKjgHKYdpBp

Score
10/10
cryptolockerdiscoverypersistenceransomware

Malware Config

Signatures

  • CryptoLocker

    Ransomware family with multiple variants.

    ransomwarecryptolocker
  • Cryptolocker family
    cryptolocker
  • Deletes itself 1 IoCs
  • Executes dropped EXE 2 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fec5a0d4dea87955c124f2eaa1f759f5_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fec5a0d4dea87955c124f2eaa1f759f5_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:324
    • C:\Users\Admin\AppData\Roaming\Wawbmdknpbal.exe
      "C:\Users\Admin\AppData\Roaming\Wawbmdknpbal.exe" "/rC:\Users\Admin\AppData\Local\Temp\fec5a0d4dea87955c124f2eaa1f759f5_JaffaCakes118.exe"
      2⤵
      • Deletes itself
      • Executes dropped EXE
      • Adds Run key to start application
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2956
      • C:\Users\Admin\AppData\Roaming\Wawbmdknpbal.exe
        "C:\Users\Admin\AppData\Roaming\Wawbmdknpbal.exe" /w00000218
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:1208

Network

  • flag-us
    DNS
    149.220.183.52.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    149.220.183.52.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    8.8.8.8.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    8.8.8.8.in-addr.arpa
    IN PTR
    Response
    8.8.8.8.in-addr.arpa
    IN PTR
    dnsgoogle
  • flag-us
    DNS
    172.214.232.199.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    172.214.232.199.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    71.31.126.40.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    71.31.126.40.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    95.221.229.192.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    95.221.229.192.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    uxeswjdsqvyin.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    uxeswjdsqvyin.co.uk
    IN A
    Response
  • flag-us
    DNS
    uwntgneksrtwo.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    uwntgneksrtwo.info
    IN A
    Response
  • flag-us
    DNS
    196.249.167.52.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    196.249.167.52.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    vyosqsxqkepjw.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    vyosqsxqkepjw.com
    IN A
    Response
  • flag-us
    DNS
    gyfyvwtfttqoo.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    gyfyvwtfttqoo.net
    IN A
    Response
  • flag-us
    DNS
    tmglvfgamjtbo.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    tmglvfgamjtbo.biz
    IN A
    Response
  • flag-us
    DNS
    idpchgoplrwcq.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    idpchgoplrwcq.ru
    IN A
    Response
  • flag-us
    DNS
    vqqohobkehaoh.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    vqqohobkehaoh.org
    IN A
    Response
  • flag-us
    DNS
    eqjmlrjargdtd.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    eqjmlrjargdtd.co.uk
    IN A
    Response
  • flag-us
    DNS
    rekylavukvggd.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    rekylavukvggd.info
    IN A
    Response
  • flag-us
    DNS
    gutpwbekjejhm.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    gutpwbekjejhm.com
    IN A
    Response
  • flag-us
    DNS
    tiucwjqfctmtd.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    tiucwjqfctmtd.net
    IN A
    Response
  • flag-us
    DNS
    odnynitdwhrkd.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    odnynitdwhrkd.biz
    IN A
    Response
  • flag-us
    DNS
    pfoxxqegpyrol.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    pfoxxqegpyrol.ru
    IN A
    Response
  • flag-us
    DNS
    qhxcyronofxxf.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    qhxcyronofxxf.org
    IN A
    Response
  • flag-us
    DNS
    rjybjayqhwxce.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    rjybjayqhwxce.co.uk
    IN A
    Response
  • flag-us
    DNS
    murmddjxutepd.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    murmddjxutepd.info
    IN A
    Response
  • flag-us
    DNS
    nwslnltbnletl.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    nwslnltbnletl.com
    IN A
    Response
  • flag-us
    DNS
    oycpomeimrkdm.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    oycpomeimrkdm.net
    IN A
    Response
  • flag-us
    DNS
    56.163.245.4.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    56.163.245.4.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    pbdoyuolfjkhl.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    pbdoyuolfjkhl.biz
    IN A
    Response
  • flag-us
    DNS
    pbdoyuolfjkhl.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    pbdoyuolfjkhl.biz
    IN A
    Response
  • flag-us
    DNS
    241.42.69.40.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    241.42.69.40.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    skkchqaxofgrq.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    skkchqaxofgrq.ru
    IN A
    Response
  • flag-us
    DNS
    gxlohvvygpnvh.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    gxlohvvygpnvh.org
    IN A
    Response
  • flag-us
    DNS
    tlucbgnppxgbq.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    tlucbgnppxgbq.co.uk
    IN A
    Response
  • flag-us
    DNS
    hyvobljqhinfq.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    hyvobljqhinfq.info
    IN A
    Response
  • flag-us
    DNS
    oiouhlrrqwcpm.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    oiouhlrrqwcpm.com
    IN A
    Response
  • flag-us
    DNS
    cvphhqnsihjtd.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    cvphhqnsihjtd.net
    IN A
    Response
  • flag-us
    DNS
    pjyubbfjrpcyf.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    pjyubbfjrpcyf.biz
    IN A
    Response
  • flag-us
    DNS
    dwahbgbkjajdf.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    dwahbgbkjajdf.ru
    IN A
    Response
  • flag-us
    DNS
    boscycakrslfi.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    boscycakrslfi.org
    IN A
    Response
  • flag-us
    DNS
    cqtbjhtqjfhrh.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    cqtbjhtqjfhrh.co.uk
    IN A
    Response
  • flag-us
    DNS
    cpdcsrncslloi.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    cpdcsrncslloi.info
    IN A
    Response
  • flag-us
    DNS
    drebdwhikxhbq.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    drebdwhikxhbq.com
    IN A
    Response
  • flag-us
    DNS
    wmwuywretkhdp.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    wmwuywretkhdp.net
    IN A
    Response
  • flag-us
    DNS
    xoxtjclklwdpo.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    xoxtjclklwdpo.biz
    IN A
    Response
  • flag-us
    DNS
    xoxtjclklwdpo.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    xoxtjclklwdpo.biz
    IN A
    Response
  • flag-us
    DNS
    xnhusmfvudhmi.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    xnhusmfvudhmi.ru
    IN A
    Response
  • flag-us
    DNS
    xnhusmfvudhmi.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    xnhusmfvudhmi.ru
    IN A
    Response
  • flag-us
    DNS
    ypitdrycmpdyq.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    ypitdrycmpdyq.org
    IN A
    Response
  • flag-us
    DNS
    ypitdrycmpdyq.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    ypitdrycmpdyq.org
    IN A
    Response
  • flag-us
    DNS
    ljyuxpabknunk.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    ljyuxpabknunk.co.uk
    IN A
    Response
  • flag-us
    DNS
    ljyuxpabknunk.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    ljyuxpabknunk.co.uk
    IN A
    Response
  • flag-us
    DNS
    ywahxxmvddxak.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    ywahxxmvddxak.info
    IN A
    Response
  • flag-us
    DNS
    ywahxxmvddxak.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    ywahxxmvddxak.info
    IN A
    Response
  • flag-us
    DNS
    nnjxjfnyjarst.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    nnjxjfnyjarst.com
    IN A
    Response
  • flag-us
    DNS
    nnjxjfnyjarst.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    nnjxjfnyjarst.com
    IN A
    Response
  • flag-us
    DNS
    bbkkjnatcpufk.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    bbkkjnatcpufk.net
    IN A
    Response
  • flag-us
    DNS
    bbkkjnatcpufk.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    bbkkjnatcpufk.net
    IN A
    Response
  • flag-us
    DNS
    hhdnxkrumfqlg.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    hhdnxkrumfqlg.biz
    IN A
    Response
  • flag-us
    DNS
    hhdnxkrumfqlg.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    hhdnxkrumfqlg.biz
    IN A
    Response
  • flag-us
    DNS
    uueaxsepfutxg.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    uueaxsepfutxg.ru
    IN A
    Response
  • flag-us
    DNS
    uueaxsepfutxg.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    uueaxsepfutxg.ru
    IN A
    Response
  • flag-us
    DNS
    jlnqjafslrnqi.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    jlnqjafslrnqi.org
    IN A
    Response
  • flag-us
    DNS
    jlnqjafslrnqi.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    jlnqjafslrnqi.org
    IN A
    Response
  • flag-us
    DNS
    wyodjirnehqdy.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    wyodjirnehqdy.co.uk
    IN A
    Response
  • flag-us
    DNS
    wyodjirnehqdy.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    wyodjirnehqdy.co.uk
    IN A
    Response
  • flag-us
    DNS
    tnhupbaynbvjy.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    tnhupbaynbvjy.info
    IN A
    Response
  • flag-us
    DNS
    tnhupbaynbvjy.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    tnhupbaynbvjy.info
    IN A
    Response
  • flag-us
    DNS
    upitajkcgsvnh.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    upitajkcgsvnh.com
    IN A
    Response
  • flag-us
    DNS
    upitajkcgsvnh.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    upitajkcgsvnh.com
    IN A
    Response
  • flag-us
    DNS
    85.49.80.91.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    85.49.80.91.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    85.49.80.91.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    85.49.80.91.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    vrrxbqnwmnsoi.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    vrrxbqnwmnsoi.net
    IN A
    Response
  • flag-us
    DNS
    vrrxbqnwmnsoi.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    vrrxbqnwmnsoi.net
    IN A
    Response
  • flag-us
    DNS
    wtswlyxaffssh.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    wtswlyxaffssh.biz
    IN A
    Response
  • flag-us
    DNS
    wtswlyxaffssh.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    wtswlyxaffssh.biz
    IN A
    Response
  • flag-us
    DNS
    pllnpvrspsrhg.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    pllnpvrspsrhg.ru
    IN A
    Response
  • flag-us
    DNS
    pllnpvrspsrhg.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    pllnpvrspsrhg.ru
    IN A
    Response
  • flag-us
    DNS
    qnmmaecvikrlo.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    qnmmaecvikrlo.org
    IN A
    Response
  • flag-us
    DNS
    qnmmaecvikrlo.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    qnmmaecvikrlo.org
    IN A
    Response
  • flag-us
    DNS
    rpvqblfqofomi.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    rpvqblfqofomi.co.uk
    IN A
    Response
  • flag-us
    DNS
    rpvqblfqofomi.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    rpvqblfqofomi.co.uk
    IN A
    Response
  • flag-us
    DNS
    srwpltpthwoqh.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    srwpltpthwoqh.info
    IN A
    Response
  • flag-us
    DNS
    srwpltpthwoqh.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    srwpltpthwoqh.info
    IN A
    Response
  • flag-us
    DNS
    xmjetpuursily.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    xmjetpuursily.com
    IN A
    Response
  • flag-us
    DNS
    xmjetpuursily.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    xmjetpuursily.com
    IN A
    Response
  • flag-us
    DNS
    lcemguqvgjetp.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    lcemguqvgjetp.net
    IN A
    Response
  • flag-us
    DNS
    lcemguqvgjetp.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    lcemguqvgjetp.net
    IN A
    Response
  • flag-us
    DNS
    yntenypslbymr.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    yntenypslbymr.biz
    IN A
    Response
  • flag-us
    DNS
    yntenypslbymr.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    yntenypslbymr.biz
    IN A
    Response
  • flag-us
    DNS
    mdomaeltaruur.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    mdomaeltaruur.ru
    IN A
    Response
  • flag-us
    DNS
    mdomaeltaruur.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    mdomaeltaruur.ru
    IN A
    Response
  • flag-us
    DNS
    venrjwxdbanry.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    venrjwxdbanry.org
    IN A
    Response
  • flag-us
    DNS
    venrjwxdbanry.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    venrjwxdbanry.org
    IN A
    Response
  • flag-us
    DNS
    jtiavctepqjap.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    jtiavctepqjap.co.uk
    IN A
    Response
  • flag-us
    DNS
    jtiavctepqjap.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    jtiavctepqjap.co.uk
    IN A
    Response
  • flag-us
    DNS
    wfxrdgsbuiesy.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    wfxrdgsbuiesy.info
    IN A
    Response
  • flag-us
    DNS
    wfxrdgsbuiesy.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    wfxrdgsbuiesy.info
    IN A
    Response
  • flag-us
    DNS
    kusaplocjyaby.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    kusaplocjyaby.com
    IN A
    Response
  • flag-us
    DNS
    kusaplocjyaby.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    kusaplocjyaby.com
    IN A
    Response
  • flag-us
    DNS
    cdrrwbqfmvirc.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    cdrrwbqfmvirc.net
    IN A
    Response
  • flag-us
    DNS
    cdrrwbqfmvirc.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    cdrrwbqfmvirc.net
    IN A
    Response
  • flag-us
    DNS
    dhmuugklbjweb.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    dhmuugklbjweb.biz
    IN A
    Response
  • flag-us
    DNS
    dhmuugklbjweb.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    dhmuugklbjweb.biz
    IN A
    Response
  • flag-us
    DNS
    decrqkldgeysu.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    decrqkldgeysu.ru
    IN A
    Response
  • flag-us
    DNS
    decrqkldgeysu.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    decrqkldgeysu.ru
    IN A
    Response
  • flag-us
    DNS
    eiwuopfjurnfd.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    eiwuopfjurnfd.org
    IN A
    Response
  • flag-us
    DNS
    eiwuopfjurnfd.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    eiwuopfjurnfd.org
    IN A
    Response
  • flag-us
    DNS
    auvfmitnvdnxq.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    auvfmitnvdnxq.co.uk
    IN A
    Response
  • flag-us
    DNS
    auvfmitnvdnxq.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    auvfmitnvdnxq.co.uk
    IN A
    Response
  • flag-us
    DNS
    byqiknntkqckp.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    byqiknntkqckp.info
    IN A
    Response
  • flag-us
    DNS
    byqiknntkqckp.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    byqiknntkqckp.info
    IN A
    Response
  • flag-us
    DNS
    bvgfgrolpleyq.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    bvgfgrolpleyq.com
    IN A
    Response
  • flag-us
    DNS
    bvgfgrolpleyq.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    bvgfgrolpleyq.com
    IN A
    Response
  • flag-us
    DNS
    cabiewireysly.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    cabiewireysly.net
    IN A
    Response
  • flag-us
    DNS
    cabiewireysly.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    cabiewireysly.net
    IN A
    Response
  • flag-us
    DNS
    qlxwkouutvhyq.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    qlxwkouutvhyq.biz
    IN A
    Response
  • flag-us
    DNS
    qlxwkouutvhyq.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    qlxwkouutvhyq.biz
    IN A
  • flag-us
    DNS
    ebsfwwhpwgllq.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    ebsfwwhpwgllq.ru
    IN A
    Response
  • flag-us
    DNS
    ebsfwwhpwgllq.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    ebsfwwhpwgllq.ru
    IN A
    Response
  • flag-us
    DNS
    spiavxpfltnms.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    spiavxpfltnms.org
    IN A
    Response
  • flag-us
    DNS
    spiavxpfltnms.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    spiavxpfltnms.org
    IN A
    Response
  • flag-us
    DNS
    gfdiigcaoeryj.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    gfdiigcaoeryj.co.uk
    IN A
    Response
  • flag-us
    DNS
    gfdiigcaoeryj.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    gfdiigcaoeryj.co.uk
    IN A
    Response
  • flag-us
    DNS
    odckavxdddmfq.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    odckavxdddmfq.info
    IN A
    Response
  • flag-us
    DNS
    odckavxdddmfq.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    odckavxdddmfq.info
    IN A
    Response
  • flag-us
    DNS
    cswsmekxgnqrq.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    cswsmekxgnqrq.com
    IN A
    Response
  • flag-us
    DNS
    cswsmekxgnqrq.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    cswsmekxgnqrq.com
    IN A
    Response
  • flag-us
    DNS
    qhmnlfsnubssa.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    qhmnlfsnubssa.net
    IN A
    Response
  • flag-us
    DNS
    qhmnlfsnubssa.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    qhmnlfsnubssa.net
    IN A
    Response
  • flag-us
    DNS
    ewhvxnfixlwfq.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    ewhvxnfixlwfq.biz
    IN A
    Response
  • flag-us
    DNS
    ewhvxnfixlwfq.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    ewhvxnfixlwfq.biz
    IN A
    Response
  • flag-us
    DNS
    ucgknaqqoypjq.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    ucgknaqqoypjq.ru
    IN A
    Response
  • flag-us
    DNS
    ucgknaqqoypjq.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    ucgknaqqoypjq.ru
    IN A
    Response
  • flag-us
    DNS
    vgbnlibtrgvry.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    vgbnlibtrgvry.org
    IN A
    Response
  • flag-us
    DNS
    vgbnlibtrgvry.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    vgbnlibtrgvry.org
    IN A
    Response
  • flag-us
    DNS
    wgqnyjlbgwvws.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    wgqnyjlbgwvws.co.uk
    IN A
    Response
  • flag-us
    DNS
    wgqnyjlbgwvws.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    wgqnyjlbgwvws.co.uk
    IN A
    Response
  • flag-us
    DNS
    xklqwrvejecfr.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    xklqwrvejecfr.info
    IN A
    Response
  • flag-us
    DNS
    xklqwrvejecfr.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    xklqwrvejecfr.info
    IN A
    Response
  • flag-us
    DNS
    stkxdhtyxgupf.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    stkxdhtyxgupf.com
    IN A
    Response
  • flag-us
    DNS
    stkxdhtyxgupf.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    stkxdhtyxgupf.com
    IN A
    Response
  • flag-us
    DNS
    txfbbpecbnbxn.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    txfbbpecbnbxn.net
    IN A
    Response
  • flag-us
    DNS
    txfbbpecbnbxn.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    txfbbpecbnbxn.net
    IN A
    Response
  • flag-us
    DNS
    uxuboqojpebdo.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    uxuboqojpebdo.biz
    IN A
    Response
  • flag-us
    DNS
    uxuboqojpebdo.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    uxuboqojpebdo.biz
    IN A
    Response
  • flag-us
    DNS
    vcpemyymslhln.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    vcpemyymslhln.ru
    IN A
    Response
  • flag-us
    DNS
    vcpemyymslhln.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    vcpemyymslhln.ru
    IN A
    Response
  • flag-us
    DNS
    dwdavidtikvfw.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    dwdavidtikvfw.org
    IN A
    Response
  • flag-us
    DNS
    dwdavidtikvfw.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    dwdavidtikvfw.org
    IN A
    Response
  • flag-us
    DNS
    qmxiinyuwbrnn.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    qmxiinyuwbrnn.co.uk
    IN A
    Response
  • flag-us
    DNS
    qmxiinyuwbrnn.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    qmxiinyuwbrnn.co.uk
    IN A
    Response
  • flag-us
    DNS
    exnapxqljdvow.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    exnapxqljdvow.info
    IN A
    Response
  • flag-us
    DNS
    exnapxqljdvow.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    exnapxqljdvow.info
    IN A
    Response
  • flag-us
    DNS
    rniicdmmxtrww.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    rniicdmmxtrww.com
    IN A
    Response
  • flag-us
    DNS
    rniicdmmxtrww.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    rniicdmmxtrww.com
    IN A
    Response
  • flag-us
    DNS
    yuhsvpeovfyce.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    yuhsvpeovfyce.net
    IN A
    Response
  • flag-us
    DNS
    yuhsvpeovfyce.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    yuhsvpeovfyce.net
    IN A
    Response
  • flag-us
    DNS
    mkcbiuapkvuku.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    mkcbiuapkvuku.biz
    IN A
    Response
  • flag-us
    DNS
    mkcbiuapkvuku.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    mkcbiuapkvuku.biz
    IN A
    Response
  • flag-us
    DNS
    avrspfrgwxylw.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    avrspfrgwxylw.ru
    IN A
    Response
  • flag-us
    DNS
    avrspfrgwxylw.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    avrspfrgwxylw.ru
    IN A
    Response
  • flag-us
    DNS
    nlmbcknhloutw.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    nlmbcknhloutw.org
    IN A
    Response
  • flag-us
    DNS
    nlmbcknhloutw.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    nlmbcknhloutw.org
    IN A
    Response
  • flag-us
    DNS
    hnlnytyednvla.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    hnlnytyednvla.co.uk
    IN A
    Response
  • flag-us
    DNS
    hnlnytyednvla.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    hnlnytyednvla.co.uk
    IN A
    Response
  • flag-us
    DNS
    irgqwyskrbkxy.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    irgqwyskrbkxy.info
    IN A
    Response
  • flag-us
    DNS
    irgqwyskrbkxy.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    irgqwyskrbkxy.info
    IN A
    Response
  • flag-us
    DNS
    iovnsjmvegvua.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    iovnsjmvegvua.com
    IN A
    Response
  • flag-us
    DNS
    iovnsjmvegvua.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    iovnsjmvegvua.com
    IN A
    Response
  • flag-us
    DNS
    jsqqqogcstkhi.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    jsqqqogcstkhi.net
    IN A
    Response
  • flag-us
    DNS
    jsqqqogcstkhi.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    jsqqqogcstkhi.net
    IN A
    Response
  • flag-us
    DNS
    dlpgybayqiyiv.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    dlpgybayqiyiv.biz
    IN A
    Response
  • flag-us
    DNS
    dlpgybayqiyiv.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    dlpgybayqiyiv.biz
    IN A
    Response
  • flag-us
    DNS
    epkjwgtffvnuu.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    epkjwgtffvnuu.ru
    IN A
    Response
  • flag-us
    DNS
    epkjwgtffvnuu.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    epkjwgtffvnuu.ru
    IN A
    Response
  • flag-us
    DNS
    emagsqnqrbyro.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    emagsqnqrbyro.org
    IN A
    Response
  • flag-us
    DNS
    emagsqnqrbyro.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    emagsqnqrbyro.org
    IN A
    Response
  • flag-us
    DNS
    fqujqvhwgonew.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    fqujqvhwgonew.co.uk
    IN A
    Response
  • flag-us
    DNS
    fqujqvhwgonew.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    fqujqvhwgonew.co.uk
    IN A
    Response
  • flag-us
    DNS
    vvrsmhdwkledq.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    vvrsmhdwkledq.info
    IN A
    Response
  • flag-us
    DNS
    vvrsmhdwkledq.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    vvrsmhdwkledq.info
    IN A
    Response
  • flag-us
    DNS
    jlmbypprnvipq.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    jlmbypprnvipq.com
    IN A
    Response
  • flag-us
    DNS
    jlmbypprnvipq.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    jlmbypprnvipq.com
    IN A
    Response
  • flag-us
    DNS
    xacvxwqujxbia.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    xacvxwqujxbia.net
    IN A
    Response
  • flag-us
    DNS
    xacvxwqujxbia.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    xacvxwqujxbia.net
    IN A
    Response
  • flag-us
    DNS
    lpwekfdpmifuq.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    lpwekfdpmifuq.biz
    IN A
    Response
  • flag-us
    DNS
    lpwekfdpmifuq.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    lpwekfdpmifuq.biz
    IN A
    Response
  • flag-us
    DNS
    rtvlmoerxghax.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    rtvlmoerxghax.ru
    IN A
    Response
  • flag-us
    DNS
    rtvlmoerxghax.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    rtvlmoerxghax.ru
    IN A
    Response
  • flag-us
    DNS
    fjqtywqmbqlmx.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    fjqtywqmbqlmx.org
    IN A
    Response
  • flag-us
    DNS
    fjqtywqmbqlmx.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    fjqtywqmbqlmx.org
    IN A
    Response
  • flag-us
    DNS
    txgoxerpwsefa.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    txgoxerpwsefa.co.uk
    IN A
    Response
  • flag-us
    DNS
    txgoxerpwsefa.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    txgoxerpwsefa.co.uk
    IN A
    Response
  • flag-us
    DNS
    hnbwkmekadirq.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    hnbwkmekadirq.info
    IN A
    Response
  • flag-us
    DNS
    hnbwkmekadirq.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    hnbwkmekadirq.info
    IN A
    Response
  • flag-us
    DNS
    amagpsysfomnq.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    amagpsysfomnq.com
    IN A
    Response
  • flag-us
    DNS
    amagpsysfomnq.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    amagpsysfomnq.com
    IN A
    Response
  • flag-us
    DNS
    bqujnbjvivsvy.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    bqujnbjvivsvy.net
    IN A
    Response
  • flag-us
    DNS
    bqujnbjvivsvy.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    bqujnbjvivsvy.net
    IN A
    Response
  • flag-us
    DNS
    cqkjbimqebjsa.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    cqkjbimqebjsa.biz
    IN A
    Response
  • flag-us
    DNS
    cqkjbimqebjsa.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    cqkjbimqebjsa.biz
    IN A
    Response
  • flag-us
    DNS
    dufmyqwthipby.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    dufmyqwthipby.ru
    IN A
    Response
  • flag-us
    DNS
    dufmyqwthipby.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    dufmyqwthipby.ru
    IN A
    Response
  • flag-us
    DNS
    vkeypaansjpkm.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    vkeypaansjpkm.org
    IN A
    Response
  • flag-us
    DNS
    vkeypaansjpkm.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    vkeypaansjpkm.org
    IN A
    Response
  • flag-us
    DNS
    woycnikqvqvsu.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    woycnikqvqvsu.co.uk
    IN A
    Response
  • flag-us
    DNS
    woycnikqvqvsu.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    woycnikqvqvsu.co.uk
    IN A
    Response
  • flag-us
    DNS
    xoocbpnlrvmpo.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    xoocbpnlrvmpo.info
    IN A
    Response
  • flag-us
    DNS
    xoocbpnlrvmpo.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    xoocbpnlrvmpo.info
    IN A
    Response
  • flag-us
    DNS
    ysjfyxxoudsxn.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    ysjfyxxoudsxn.com
    IN A
    Response
  • flag-us
    DNS
    ysjfyxxoudsxn.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    ysjfyxxoudsxn.com
    IN A
    Response
  • flag-us
    DNS
    iqfqijaibxuv.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    iqfqijaibxuv.net
    IN A
    Response
  • flag-us
    DNS
    iqfqijaibxuv.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    iqfqijaibxuv.net
    IN A
    Response
  • flag-us
    DNS
    vegfcovuodbj.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    vegfcovuodbj.biz
    IN A
    Response
  • flag-us
    DNS
    vegfcovuodbj.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    vegfcovuodbj.biz
    IN A
    Response
  • flag-us
    DNS
    jvdicsujhavm.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    jvdicsujhavm.ru
    IN A
    Response
  • flag-us
    DNS
    jvdicsujhavm.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    jvdicsujhavm.ru
    IN A
    Response
  • flag-us
    DNS
    wjewvxqvufca.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    wjewvxqvufca.org
    IN A
    Response
  • flag-us
    DNS
    wjewvxqvufca.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    wjewvxqvufca.org
    IN A
    Response
  • flag-us
    DNS
    gakuaepdmhjs.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    gakuaepdmhjs.co.uk
    IN A
    Response
  • flag-us
    DNS
    gakuaepdmhjs.co.uk
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    gakuaepdmhjs.co.uk
    IN A
    Response
  • flag-us
    DNS
    ralitdntpltc.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    ralitdntpltc.org
    IN A
    Response
  • flag-us
    DNS
    ralitdntpltc.org
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    ralitdntpltc.org
    IN A
    Response
  • flag-us
    DNS
    tnljtjlpampg.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    tnljtjlpampg.info
    IN A
    Response
  • flag-us
    DNS
    tnljtjlpampg.info
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    tnljtjlpampg.info
    IN A
    Response
  • flag-us
    DNS
    hfimtnkesjkj.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    hfimtnkesjkj.com
    IN A
    Response
  • flag-us
    DNS
    hfimtnkesjkj.com
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    hfimtnkesjkj.com
    IN A
    Response
  • flag-us
    DNS
    usjbnsgqgoqw.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    usjbnsgqgoqw.net
    IN A
    Response
  • flag-us
    DNS
    usjbnsgqgoqw.net
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    usjbnsgqgoqw.net
    IN A
    Response
  • flag-us
    DNS
    qunqatssjjsl.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    qunqatssjjsl.biz
    IN A
    Response
  • flag-us
    DNS
    qunqatssjjsl.biz
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    qunqatssjjsl.biz
    IN A
    Response
  • flag-us
    DNS
    rworeymnwacd.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    rworeymnwacd.ru
    IN A
    Response
  • flag-us
    DNS
    rworeymnwacd.ru
    Wawbmdknpbal.exe
    Remote address:
    8.8.8.8:53
    Request
    rworeymnwacd.ru
    IN A
    Response
  • flag-us
    DNS
    175.117.168.52.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    175.117.168.52.in-addr.arpa
    IN PTR
No results found
  • 8.8.8.8:53
    149.220.183.52.in-addr.arpa
    dns
    73 B
     147 B
     1
    1

    DNS Request

    149.220.183.52.in-addr.arpa

  • 8.8.8.8:53
    8.8.8.8.in-addr.arpa
    dns
    66 B
     90 B
     1
    1

    DNS Request

    8.8.8.8.in-addr.arpa

  • 8.8.8.8:53
    172.214.232.199.in-addr.arpa
    dns
    74 B
     128 B
     1
    1

    DNS Request

    172.214.232.199.in-addr.arpa

  • 8.8.8.8:53
    71.31.126.40.in-addr.arpa
    dns
    71 B
     157 B
     1
    1

    DNS Request

    71.31.126.40.in-addr.arpa

  • 8.8.8.8:53
    95.221.229.192.in-addr.arpa
    dns
    73 B
     144 B
     1
    1

    DNS Request

    95.221.229.192.in-addr.arpa

  • 8.8.8.8:53
    uxeswjdsqvyin.co.uk
    dns
    Wawbmdknpbal.exe
    65 B
     133 B
     1
    1

    DNS Request

    uxeswjdsqvyin.co.uk

  • 8.8.8.8:53
    uwntgneksrtwo.info
    dns
    Wawbmdknpbal.exe
    64 B
     143 B
     1
    1

    DNS Request

    uwntgneksrtwo.info

  • 8.8.8.8:53
    196.249.167.52.in-addr.arpa
    dns
    73 B
     147 B
     1
    1

    DNS Request

    196.249.167.52.in-addr.arpa

  • 8.8.8.8:53
    vyosqsxqkepjw.com
    dns
    Wawbmdknpbal.exe
    63 B
     136 B
     1
    1

    DNS Request

    vyosqsxqkepjw.com

  • 8.8.8.8:53
    gyfyvwtfttqoo.net
    dns
    Wawbmdknpbal.exe
    63 B
     136 B
     1
    1

    DNS Request

    gyfyvwtfttqoo.net

  • 8.8.8.8:53
    tmglvfgamjtbo.biz
    dns
    Wawbmdknpbal.exe
    63 B
     125 B
     1
    1

    DNS Request

    tmglvfgamjtbo.biz

  • 8.8.8.8:53
    idpchgoplrwcq.ru
    dns
    Wawbmdknpbal.exe
    62 B
     123 B
     1
    1

    DNS Request

    idpchgoplrwcq.ru

  • 8.8.8.8:53
    vqqohobkehaoh.org
    dns
    Wawbmdknpbal.exe
    63 B
     145 B
     1
    1

    DNS Request

    vqqohobkehaoh.org

  • 8.8.8.8:53
    eqjmlrjargdtd.co.uk
    dns
    Wawbmdknpbal.exe
    65 B
     133 B
     1
    1

    DNS Request

    eqjmlrjargdtd.co.uk

  • 8.8.8.8:53
    rekylavukvggd.info
    dns
    Wawbmdknpbal.exe
    64 B
     143 B
     1
    1

    DNS Request

    rekylavukvggd.info

  • 8.8.8.8:53
    gutpwbekjejhm.com
    dns
    Wawbmdknpbal.exe
    63 B
     136 B
     1
    1

    DNS Request

    gutpwbekjejhm.com

  • 8.8.8.8:53
    tiucwjqfctmtd.net
    dns
    Wawbmdknpbal.exe
    63 B
     136 B
     1
    1

    DNS Request

    tiucwjqfctmtd.net

  • 8.8.8.8:53
    odnynitdwhrkd.biz
    dns
    Wawbmdknpbal.exe
    63 B
     125 B
     1
    1

    DNS Request

    odnynitdwhrkd.biz

  • 8.8.8.8:53
    pfoxxqegpyrol.ru
    dns
    Wawbmdknpbal.exe
    62 B
     123 B
     1
    1

    DNS Request

    pfoxxqegpyrol.ru

  • 8.8.8.8:53
    qhxcyronofxxf.org
    dns
    Wawbmdknpbal.exe
    63 B
     145 B
     1
    1

    DNS Request

    qhxcyronofxxf.org

  • 8.8.8.8:53
    rjybjayqhwxce.co.uk
    dns
    Wawbmdknpbal.exe
    65 B
     133 B
     1
    1

    DNS Request

    rjybjayqhwxce.co.uk

  • 8.8.8.8:53
    murmddjxutepd.info
    dns
    Wawbmdknpbal.exe
    64 B
     143 B
     1
    1

    DNS Request

    murmddjxutepd.info

  • 8.8.8.8:53
    nwslnltbnletl.com
    dns
    Wawbmdknpbal.exe
    63 B
     136 B
     1
    1

    DNS Request

    nwslnltbnletl.com

  • 8.8.8.8:53
    oycpomeimrkdm.net
    dns
    Wawbmdknpbal.exe
    63 B
     136 B
     1
    1

    DNS Request

    oycpomeimrkdm.net

  • 8.8.8.8:53
    56.163.245.4.in-addr.arpa
    dns
    71 B
     157 B
     1
    1

    DNS Request

    56.163.245.4.in-addr.arpa

  • 8.8.8.8:53
    pbdoyuolfjkhl.biz
    dns
    Wawbmdknpbal.exe
    126 B
     250 B
     2
    2

    DNS Request

    pbdoyuolfjkhl.biz

    DNS Request

    pbdoyuolfjkhl.biz

  • 8.8.8.8:53
    241.42.69.40.in-addr.arpa
    dns
    71 B
     145 B
     1
    1

    DNS Request

    241.42.69.40.in-addr.arpa

  • 8.8.8.8:53
    skkchqaxofgrq.ru
    dns
    Wawbmdknpbal.exe
    62 B
     123 B
     1
    1

    DNS Request

    skkchqaxofgrq.ru

  • 8.8.8.8:53
    gxlohvvygpnvh.org
    dns
    Wawbmdknpbal.exe
    63 B
     145 B
     1
    1

    DNS Request

    gxlohvvygpnvh.org

  • 8.8.8.8:53
    tlucbgnppxgbq.co.uk
    dns
    Wawbmdknpbal.exe
    65 B
     133 B
     1
    1

    DNS Request

    tlucbgnppxgbq.co.uk

  • 8.8.8.8:53
    hyvobljqhinfq.info
    dns
    Wawbmdknpbal.exe
    64 B
     143 B
     1
    1

    DNS Request

    hyvobljqhinfq.info

  • 8.8.8.8:53
    oiouhlrrqwcpm.com
    dns
    Wawbmdknpbal.exe
    63 B
     136 B
     1
    1

    DNS Request

    oiouhlrrqwcpm.com

  • 8.8.8.8:53
    cvphhqnsihjtd.net
    dns
    Wawbmdknpbal.exe
    63 B
     136 B
     1
    1

    DNS Request

    cvphhqnsihjtd.net

  • 8.8.8.8:53
    pjyubbfjrpcyf.biz
    dns
    Wawbmdknpbal.exe
    63 B
     125 B
     1
    1

    DNS Request

    pjyubbfjrpcyf.biz

  • 8.8.8.8:53
    dwahbgbkjajdf.ru
    dns
    Wawbmdknpbal.exe
    62 B
     123 B
     1
    1

    DNS Request

    dwahbgbkjajdf.ru

  • 8.8.8.8:53
    boscycakrslfi.org
    dns
    Wawbmdknpbal.exe
    63 B
     145 B
     1
    1

    DNS Request

    boscycakrslfi.org

  • 8.8.8.8:53
    cqtbjhtqjfhrh.co.uk
    dns
    Wawbmdknpbal.exe
    65 B
     133 B
     1
    1

    DNS Request

    cqtbjhtqjfhrh.co.uk

  • 8.8.8.8:53
    cpdcsrncslloi.info
    dns
    Wawbmdknpbal.exe
    64 B
     143 B
     1
    1

    DNS Request

    cpdcsrncslloi.info

  • 8.8.8.8:53
    drebdwhikxhbq.com
    dns
    Wawbmdknpbal.exe
    63 B
     136 B
     1
    1

    DNS Request

    drebdwhikxhbq.com

  • 8.8.8.8:53
    wmwuywretkhdp.net
    dns
    Wawbmdknpbal.exe
    63 B
     136 B
     1
    1

    DNS Request

    wmwuywretkhdp.net

  • 8.8.8.8:53
    xoxtjclklwdpo.biz
    dns
    Wawbmdknpbal.exe
    126 B
     250 B
     2
    2

    DNS Request

    xoxtjclklwdpo.biz

    DNS Request

    xoxtjclklwdpo.biz

  • 8.8.8.8:53
    xnhusmfvudhmi.ru
    dns
    Wawbmdknpbal.exe
    124 B
     246 B
     2
    2

    DNS Request

    xnhusmfvudhmi.ru

    DNS Request

    xnhusmfvudhmi.ru

  • 8.8.8.8:53
    ypitdrycmpdyq.org
    dns
    Wawbmdknpbal.exe
    126 B
     290 B
     2
    2

    DNS Request

    ypitdrycmpdyq.org

    DNS Request

    ypitdrycmpdyq.org

  • 8.8.8.8:53
    ljyuxpabknunk.co.uk
    dns
    Wawbmdknpbal.exe
    130 B
     266 B
     2
    2

    DNS Request

    ljyuxpabknunk.co.uk

    DNS Request

    ljyuxpabknunk.co.uk

  • 8.8.8.8:53
    ywahxxmvddxak.info
    dns
    Wawbmdknpbal.exe
    128 B
     286 B
     2
    2

    DNS Request

    ywahxxmvddxak.info

    DNS Request

    ywahxxmvddxak.info

  • 8.8.8.8:53
    nnjxjfnyjarst.com
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    nnjxjfnyjarst.com

    DNS Request

    nnjxjfnyjarst.com

  • 8.8.8.8:53
    bbkkjnatcpufk.net
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    bbkkjnatcpufk.net

    DNS Request

    bbkkjnatcpufk.net

  • 8.8.8.8:53
    hhdnxkrumfqlg.biz
    dns
    Wawbmdknpbal.exe
    126 B
     250 B
     2
    2

    DNS Request

    hhdnxkrumfqlg.biz

    DNS Request

    hhdnxkrumfqlg.biz

  • 8.8.8.8:53
    uueaxsepfutxg.ru
    dns
    Wawbmdknpbal.exe
    124 B
     246 B
     2
    2

    DNS Request

    uueaxsepfutxg.ru

    DNS Request

    uueaxsepfutxg.ru

  • 8.8.8.8:53
    jlnqjafslrnqi.org
    dns
    Wawbmdknpbal.exe
    126 B
     290 B
     2
    2

    DNS Request

    jlnqjafslrnqi.org

    DNS Request

    jlnqjafslrnqi.org

  • 8.8.8.8:53
    wyodjirnehqdy.co.uk
    dns
    Wawbmdknpbal.exe
    130 B
     266 B
     2
    2

    DNS Request

    wyodjirnehqdy.co.uk

    DNS Request

    wyodjirnehqdy.co.uk

  • 8.8.8.8:53
    tnhupbaynbvjy.info
    dns
    Wawbmdknpbal.exe
    128 B
     286 B
     2
    2

    DNS Request

    tnhupbaynbvjy.info

    DNS Request

    tnhupbaynbvjy.info

  • 8.8.8.8:53
    upitajkcgsvnh.com
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    upitajkcgsvnh.com

    DNS Request

    upitajkcgsvnh.com

  • 8.8.8.8:53
    85.49.80.91.in-addr.arpa
    dns
    140 B
     290 B
     2
    2

    DNS Request

    85.49.80.91.in-addr.arpa

    DNS Request

    85.49.80.91.in-addr.arpa

  • 8.8.8.8:53
    vrrxbqnwmnsoi.net
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    vrrxbqnwmnsoi.net

    DNS Request

    vrrxbqnwmnsoi.net

  • 8.8.8.8:53
    wtswlyxaffssh.biz
    dns
    Wawbmdknpbal.exe
    126 B
     250 B
     2
    2

    DNS Request

    wtswlyxaffssh.biz

    DNS Request

    wtswlyxaffssh.biz

  • 8.8.8.8:53
    pllnpvrspsrhg.ru
    dns
    Wawbmdknpbal.exe
    124 B
     246 B
     2
    2

    DNS Request

    pllnpvrspsrhg.ru

    DNS Request

    pllnpvrspsrhg.ru

  • 8.8.8.8:53
    qnmmaecvikrlo.org
    dns
    Wawbmdknpbal.exe
    126 B
     290 B
     2
    2

    DNS Request

    qnmmaecvikrlo.org

    DNS Request

    qnmmaecvikrlo.org

  • 8.8.8.8:53
    rpvqblfqofomi.co.uk
    dns
    Wawbmdknpbal.exe
    130 B
     266 B
     2
    2

    DNS Request

    rpvqblfqofomi.co.uk

    DNS Request

    rpvqblfqofomi.co.uk

  • 8.8.8.8:53
    srwpltpthwoqh.info
    dns
    Wawbmdknpbal.exe
    128 B
     286 B
     2
    2

    DNS Request

    srwpltpthwoqh.info

    DNS Request

    srwpltpthwoqh.info

  • 8.8.8.8:53
    xmjetpuursily.com
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    xmjetpuursily.com

    DNS Request

    xmjetpuursily.com

  • 8.8.8.8:53
    lcemguqvgjetp.net
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    lcemguqvgjetp.net

    DNS Request

    lcemguqvgjetp.net

  • 8.8.8.8:53
    yntenypslbymr.biz
    dns
    Wawbmdknpbal.exe
    126 B
     250 B
     2
    2

    DNS Request

    yntenypslbymr.biz

    DNS Request

    yntenypslbymr.biz

  • 8.8.8.8:53
    mdomaeltaruur.ru
    dns
    Wawbmdknpbal.exe
    124 B
     246 B
     2
    2

    DNS Request

    mdomaeltaruur.ru

    DNS Request

    mdomaeltaruur.ru

  • 8.8.8.8:53
    venrjwxdbanry.org
    dns
    Wawbmdknpbal.exe
    126 B
     290 B
     2
    2

    DNS Request

    venrjwxdbanry.org

    DNS Request

    venrjwxdbanry.org

  • 8.8.8.8:53
    jtiavctepqjap.co.uk
    dns
    Wawbmdknpbal.exe
    130 B
     266 B
     2
    2

    DNS Request

    jtiavctepqjap.co.uk

    DNS Request

    jtiavctepqjap.co.uk

  • 8.8.8.8:53
    wfxrdgsbuiesy.info
    dns
    Wawbmdknpbal.exe
    128 B
     286 B
     2
    2

    DNS Request

    wfxrdgsbuiesy.info

    DNS Request

    wfxrdgsbuiesy.info

  • 8.8.8.8:53
    kusaplocjyaby.com
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    kusaplocjyaby.com

    DNS Request

    kusaplocjyaby.com

  • 8.8.8.8:53
    cdrrwbqfmvirc.net
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    cdrrwbqfmvirc.net

    DNS Request

    cdrrwbqfmvirc.net

  • 8.8.8.8:53
    dhmuugklbjweb.biz
    dns
    Wawbmdknpbal.exe
    126 B
     250 B
     2
    2

    DNS Request

    dhmuugklbjweb.biz

    DNS Request

    dhmuugklbjweb.biz

  • 8.8.8.8:53
    decrqkldgeysu.ru
    dns
    Wawbmdknpbal.exe
    124 B
     246 B
     2
    2

    DNS Request

    decrqkldgeysu.ru

    DNS Request

    decrqkldgeysu.ru

  • 8.8.8.8:53
    eiwuopfjurnfd.org
    dns
    Wawbmdknpbal.exe
    126 B
     290 B
     2
    2

    DNS Request

    eiwuopfjurnfd.org

    DNS Request

    eiwuopfjurnfd.org

  • 8.8.8.8:53
    auvfmitnvdnxq.co.uk
    dns
    Wawbmdknpbal.exe
    130 B
     266 B
     2
    2

    DNS Request

    auvfmitnvdnxq.co.uk

    DNS Request

    auvfmitnvdnxq.co.uk

  • 8.8.8.8:53
    byqiknntkqckp.info
    dns
    Wawbmdknpbal.exe
    128 B
     286 B
     2
    2

    DNS Request

    byqiknntkqckp.info

    DNS Request

    byqiknntkqckp.info

  • 8.8.8.8:53
    bvgfgrolpleyq.com
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    bvgfgrolpleyq.com

    DNS Request

    bvgfgrolpleyq.com

  • 8.8.8.8:53
    cabiewireysly.net
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    cabiewireysly.net

    DNS Request

    cabiewireysly.net

  • 8.8.8.8:53
    qlxwkouutvhyq.biz
    dns
    Wawbmdknpbal.exe
    126 B
     125 B
     2
    1

    DNS Request

    qlxwkouutvhyq.biz

    DNS Request

    qlxwkouutvhyq.biz

  • 8.8.8.8:53
    ebsfwwhpwgllq.ru
    dns
    Wawbmdknpbal.exe
    124 B
     246 B
     2
    2

    DNS Request

    ebsfwwhpwgllq.ru

    DNS Request

    ebsfwwhpwgllq.ru

  • 8.8.8.8:53
    spiavxpfltnms.org
    dns
    Wawbmdknpbal.exe
    126 B
     290 B
     2
    2

    DNS Request

    spiavxpfltnms.org

    DNS Request

    spiavxpfltnms.org

  • 8.8.8.8:53
    gfdiigcaoeryj.co.uk
    dns
    Wawbmdknpbal.exe
    130 B
     266 B
     2
    2

    DNS Request

    gfdiigcaoeryj.co.uk

    DNS Request

    gfdiigcaoeryj.co.uk

  • 8.8.8.8:53
    odckavxdddmfq.info
    dns
    Wawbmdknpbal.exe
    128 B
     286 B
     2
    2

    DNS Request

    odckavxdddmfq.info

    DNS Request

    odckavxdddmfq.info

  • 8.8.8.8:53
    cswsmekxgnqrq.com
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    cswsmekxgnqrq.com

    DNS Request

    cswsmekxgnqrq.com

  • 8.8.8.8:53
    qhmnlfsnubssa.net
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    qhmnlfsnubssa.net

    DNS Request

    qhmnlfsnubssa.net

  • 8.8.8.8:53
    ewhvxnfixlwfq.biz
    dns
    Wawbmdknpbal.exe
    126 B
     250 B
     2
    2

    DNS Request

    ewhvxnfixlwfq.biz

    DNS Request

    ewhvxnfixlwfq.biz

  • 8.8.8.8:53
    ucgknaqqoypjq.ru
    dns
    Wawbmdknpbal.exe
    124 B
     246 B
     2
    2

    DNS Request

    ucgknaqqoypjq.ru

    DNS Request

    ucgknaqqoypjq.ru

  • 8.8.8.8:53
    vgbnlibtrgvry.org
    dns
    Wawbmdknpbal.exe
    126 B
     290 B
     2
    2

    DNS Request

    vgbnlibtrgvry.org

    DNS Request

    vgbnlibtrgvry.org

  • 8.8.8.8:53
    wgqnyjlbgwvws.co.uk
    dns
    Wawbmdknpbal.exe
    130 B
     266 B
     2
    2

    DNS Request

    wgqnyjlbgwvws.co.uk

    DNS Request

    wgqnyjlbgwvws.co.uk

  • 8.8.8.8:53
    xklqwrvejecfr.info
    dns
    Wawbmdknpbal.exe
    128 B
     286 B
     2
    2

    DNS Request

    xklqwrvejecfr.info

    DNS Request

    xklqwrvejecfr.info

  • 8.8.8.8:53
    stkxdhtyxgupf.com
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    stkxdhtyxgupf.com

    DNS Request

    stkxdhtyxgupf.com

  • 8.8.8.8:53
    txfbbpecbnbxn.net
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    txfbbpecbnbxn.net

    DNS Request

    txfbbpecbnbxn.net

  • 8.8.8.8:53
    uxuboqojpebdo.biz
    dns
    Wawbmdknpbal.exe
    126 B
     250 B
     2
    2

    DNS Request

    uxuboqojpebdo.biz

    DNS Request

    uxuboqojpebdo.biz

  • 8.8.8.8:53
    vcpemyymslhln.ru
    dns
    Wawbmdknpbal.exe
    124 B
     246 B
     2
    2

    DNS Request

    vcpemyymslhln.ru

    DNS Request

    vcpemyymslhln.ru

  • 8.8.8.8:53
    dwdavidtikvfw.org
    dns
    Wawbmdknpbal.exe
    126 B
     290 B
     2
    2

    DNS Request

    dwdavidtikvfw.org

    DNS Request

    dwdavidtikvfw.org

  • 8.8.8.8:53
    qmxiinyuwbrnn.co.uk
    dns
    Wawbmdknpbal.exe
    130 B
     266 B
     2
    2

    DNS Request

    qmxiinyuwbrnn.co.uk

    DNS Request

    qmxiinyuwbrnn.co.uk

  • 8.8.8.8:53
    exnapxqljdvow.info
    dns
    Wawbmdknpbal.exe
    128 B
     286 B
     2
    2

    DNS Request

    exnapxqljdvow.info

    DNS Request

    exnapxqljdvow.info

  • 8.8.8.8:53
    rniicdmmxtrww.com
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    rniicdmmxtrww.com

    DNS Request

    rniicdmmxtrww.com

  • 8.8.8.8:53
    yuhsvpeovfyce.net
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    yuhsvpeovfyce.net

    DNS Request

    yuhsvpeovfyce.net

  • 8.8.8.8:53
    mkcbiuapkvuku.biz
    dns
    Wawbmdknpbal.exe
    126 B
     250 B
     2
    2

    DNS Request

    mkcbiuapkvuku.biz

    DNS Request

    mkcbiuapkvuku.biz

  • 8.8.8.8:53
    avrspfrgwxylw.ru
    dns
    Wawbmdknpbal.exe
    124 B
     246 B
     2
    2

    DNS Request

    avrspfrgwxylw.ru

    DNS Request

    avrspfrgwxylw.ru

  • 8.8.8.8:53
    nlmbcknhloutw.org
    dns
    Wawbmdknpbal.exe
    126 B
     290 B
     2
    2

    DNS Request

    nlmbcknhloutw.org

    DNS Request

    nlmbcknhloutw.org

  • 8.8.8.8:53
    hnlnytyednvla.co.uk
    dns
    Wawbmdknpbal.exe
    130 B
     266 B
     2
    2

    DNS Request

    hnlnytyednvla.co.uk

    DNS Request

    hnlnytyednvla.co.uk

  • 8.8.8.8:53
    irgqwyskrbkxy.info
    dns
    Wawbmdknpbal.exe
    128 B
     286 B
     2
    2

    DNS Request

    irgqwyskrbkxy.info

    DNS Request

    irgqwyskrbkxy.info

  • 8.8.8.8:53
    iovnsjmvegvua.com
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    iovnsjmvegvua.com

    DNS Request

    iovnsjmvegvua.com

  • 8.8.8.8:53
    jsqqqogcstkhi.net
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    jsqqqogcstkhi.net

    DNS Request

    jsqqqogcstkhi.net

  • 8.8.8.8:53
    dlpgybayqiyiv.biz
    dns
    Wawbmdknpbal.exe
    126 B
     250 B
     2
    2

    DNS Request

    dlpgybayqiyiv.biz

    DNS Request

    dlpgybayqiyiv.biz

  • 8.8.8.8:53
    epkjwgtffvnuu.ru
    dns
    Wawbmdknpbal.exe
    124 B
     246 B
     2
    2

    DNS Request

    epkjwgtffvnuu.ru

    DNS Request

    epkjwgtffvnuu.ru

  • 8.8.8.8:53
    emagsqnqrbyro.org
    dns
    Wawbmdknpbal.exe
    126 B
     290 B
     2
    2

    DNS Request

    emagsqnqrbyro.org

    DNS Request

    emagsqnqrbyro.org

  • 8.8.8.8:53
    fqujqvhwgonew.co.uk
    dns
    Wawbmdknpbal.exe
    130 B
     266 B
     2
    2

    DNS Request

    fqujqvhwgonew.co.uk

    DNS Request

    fqujqvhwgonew.co.uk

  • 8.8.8.8:53
    vvrsmhdwkledq.info
    dns
    Wawbmdknpbal.exe
    128 B
     286 B
     2
    2

    DNS Request

    vvrsmhdwkledq.info

    DNS Request

    vvrsmhdwkledq.info

  • 8.8.8.8:53
    jlmbypprnvipq.com
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    jlmbypprnvipq.com

    DNS Request

    jlmbypprnvipq.com

  • 8.8.8.8:53
    xacvxwqujxbia.net
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    xacvxwqujxbia.net

    DNS Request

    xacvxwqujxbia.net

  • 8.8.8.8:53
    lpwekfdpmifuq.biz
    dns
    Wawbmdknpbal.exe
    126 B
     250 B
     2
    2

    DNS Request

    lpwekfdpmifuq.biz

    DNS Request

    lpwekfdpmifuq.biz

  • 8.8.8.8:53
    rtvlmoerxghax.ru
    dns
    Wawbmdknpbal.exe
    124 B
     246 B
     2
    2

    DNS Request

    rtvlmoerxghax.ru

    DNS Request

    rtvlmoerxghax.ru

  • 8.8.8.8:53
    fjqtywqmbqlmx.org
    dns
    Wawbmdknpbal.exe
    126 B
     290 B
     2
    2

    DNS Request

    fjqtywqmbqlmx.org

    DNS Request

    fjqtywqmbqlmx.org

  • 8.8.8.8:53
    txgoxerpwsefa.co.uk
    dns
    Wawbmdknpbal.exe
    130 B
     266 B
     2
    2

    DNS Request

    txgoxerpwsefa.co.uk

    DNS Request

    txgoxerpwsefa.co.uk

  • 8.8.8.8:53
    hnbwkmekadirq.info
    dns
    Wawbmdknpbal.exe
    128 B
     286 B
     2
    2

    DNS Request

    hnbwkmekadirq.info

    DNS Request

    hnbwkmekadirq.info

  • 8.8.8.8:53
    amagpsysfomnq.com
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    amagpsysfomnq.com

    DNS Request

    amagpsysfomnq.com

  • 8.8.8.8:53
    bqujnbjvivsvy.net
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    bqujnbjvivsvy.net

    DNS Request

    bqujnbjvivsvy.net

  • 8.8.8.8:53
    cqkjbimqebjsa.biz
    dns
    Wawbmdknpbal.exe
    126 B
     250 B
     2
    2

    DNS Request

    cqkjbimqebjsa.biz

    DNS Request

    cqkjbimqebjsa.biz

  • 8.8.8.8:53
    dufmyqwthipby.ru
    dns
    Wawbmdknpbal.exe
    124 B
     246 B
     2
    2

    DNS Request

    dufmyqwthipby.ru

    DNS Request

    dufmyqwthipby.ru

  • 8.8.8.8:53
    vkeypaansjpkm.org
    dns
    Wawbmdknpbal.exe
    126 B
     290 B
     2
    2

    DNS Request

    vkeypaansjpkm.org

    DNS Request

    vkeypaansjpkm.org

  • 8.8.8.8:53
    woycnikqvqvsu.co.uk
    dns
    Wawbmdknpbal.exe
    130 B
     266 B
     2
    2

    DNS Request

    woycnikqvqvsu.co.uk

    DNS Request

    woycnikqvqvsu.co.uk

  • 8.8.8.8:53
    xoocbpnlrvmpo.info
    dns
    Wawbmdknpbal.exe
    128 B
     286 B
     2
    2

    DNS Request

    xoocbpnlrvmpo.info

    DNS Request

    xoocbpnlrvmpo.info

  • 8.8.8.8:53
    ysjfyxxoudsxn.com
    dns
    Wawbmdknpbal.exe
    126 B
     272 B
     2
    2

    DNS Request

    ysjfyxxoudsxn.com

    DNS Request

    ysjfyxxoudsxn.com

  • 8.8.8.8:53
    iqfqijaibxuv.net
    dns
    Wawbmdknpbal.exe
    124 B
     270 B
     2
    2

    DNS Request

    iqfqijaibxuv.net

    DNS Request

    iqfqijaibxuv.net

  • 8.8.8.8:53
    vegfcovuodbj.biz
    dns
    Wawbmdknpbal.exe
    124 B
     248 B
     2
    2

    DNS Request

    vegfcovuodbj.biz

    DNS Request

    vegfcovuodbj.biz

  • 8.8.8.8:53
    jvdicsujhavm.ru
    dns
    Wawbmdknpbal.exe
    122 B
     244 B
     2
    2

    DNS Request

    jvdicsujhavm.ru

    DNS Request

    jvdicsujhavm.ru

  • 8.8.8.8:53
    wjewvxqvufca.org
    dns
    Wawbmdknpbal.exe
    124 B
     288 B
     2
    2

    DNS Request

    wjewvxqvufca.org

    DNS Request

    wjewvxqvufca.org

  • 8.8.8.8:53
    gakuaepdmhjs.co.uk
    dns
    Wawbmdknpbal.exe
    252 B
     552 B
     4
    4

    DNS Request

    gakuaepdmhjs.co.uk

    DNS Request

    gakuaepdmhjs.co.uk

    DNS Request

    ralitdntpltc.org

    DNS Request

    ralitdntpltc.org

  • 8.8.8.8:53
    tnljtjlpampg.info
    dns
    Wawbmdknpbal.exe
    126 B
     284 B
     2
    2

    DNS Request

    tnljtjlpampg.info

    DNS Request

    tnljtjlpampg.info

  • 8.8.8.8:53
    hfimtnkesjkj.com
    dns
    Wawbmdknpbal.exe
    124 B
     270 B
     2
    2

    DNS Request

    hfimtnkesjkj.com

    DNS Request

    hfimtnkesjkj.com

  • 8.8.8.8:53
    usjbnsgqgoqw.net
    dns
    Wawbmdknpbal.exe
    124 B
     270 B
     2
    2

    DNS Request

    usjbnsgqgoqw.net

    DNS Request

    usjbnsgqgoqw.net

  • 8.8.8.8:53
    qunqatssjjsl.biz
    dns
    Wawbmdknpbal.exe
    124 B
     248 B
     2
    2

    DNS Request

    qunqatssjjsl.biz

    DNS Request

    qunqatssjjsl.biz

  • 8.8.8.8:53
    rworeymnwacd.ru
    dns
    Wawbmdknpbal.exe
    122 B
     244 B
     2
    2

    DNS Request

    rworeymnwacd.ru

    DNS Request

    rworeymnwacd.ru

  • 8.8.8.8:53
    175.117.168.52.in-addr.arpa
    dns
    73 B
     1

    DNS Request

    175.117.168.52.in-addr.arpa

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Wawbmdknpbal.exe
    Filesize

    837KB

    MD5

    fec5a0d4dea87955c124f2eaa1f759f5

    SHA1

    ea2e50e16448ac8131391e5322663660ef0a5632

    SHA256

    4f3220da017e7be3e0b168a958134aae6dc96458cb12118e849465e2af752629

    SHA512

    2d52122e66c2239dff9186c3d91c036ba5a3ab3645bcdaba58157c5e2712b0b15131eee44b6760bfb45506f2f7155202c3cca141585c20e1f1333ddba07038b9

    Download Submit

  • memory/324-0-0x00000000004D2000-0x00000000004D4000-memory.dmp

    Filesize

    8KB

    Download

  • memory/324-1-0x0000000000400000-0x00000000004DC000-memory.dmp

    Filesize

    880KB

    Download

  • memory/324-2-0x0000000000400000-0x00000000004DC000-memory.dmp

    Filesize

    880KB

    Download

  • memory/324-11-0x0000000000400000-0x00000000004DC000-memory.dmp

    Filesize

    880KB

    Download

  • memory/1208-19-0x0000000000400000-0x00000000004DC000-memory.dmp

    Filesize

    880KB

    Download

  • memory/1208-18-0x0000000000400000-0x00000000004DC000-memory.dmp

    Filesize

    880KB

    Download

  • memory/1208-21-0x0000000000400000-0x00000000004DC000-memory.dmp

    Filesize

    880KB

    Download

  • memory/1208-24-0x0000000000400000-0x00000000004DC000-memory.dmp

    Filesize

    880KB

    Download

  • memory/2956-12-0x0000000000400000-0x00000000004DC000-memory.dmp

    Filesize

    880KB

    Download

  • memory/2956-14-0x0000000000400000-0x00000000004DC000-memory.dmp

    Filesize

    880KB

    Download

  • memory/2956-13-0x0000000000400000-0x00000000004DC000-memory.dmp

    Filesize

    880KB

    Download

  • memory/2956-23-0x0000000000400000-0x00000000004DC000-memory.dmp

    Filesize

    880KB

    Download

  • memory/2956-25-0x0000000000400000-0x00000000004DC000-memory.dmp

    Filesize

    880KB

    Download

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.