Report - ZeroBOX

ScreenShot

Info
Location map


Created	2021.04.26 15:16	Machine	s1_win7_x6401
Filename	mg20201223-1.exe
Type	PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
AI Score	1	Behavior Score	3.2
ZERO API	file : malware
VT API (file)	57 detected (FsysnaAgentPTE, malicious, high confidence, SpyBot, GenericKD, Windigo, Ranumbot, Unsafe, BCOB, Attribute, HighConfidence, a variant of WinGo, ihpkmp, trAI, Gencirc, R + Troj, Steal, Malware@#29k7207sblpub, SYFV, GoCloudnet2, arvsg, kcloud, Wacatac, Phonzy, score, R359997, GenericRXMW, ai score=80, TrojanSpyBot, CLOUD, 9whGXmiAsl8, susgen, confidence, 100%)
md5	0a13d106fa3997a0c911edd5aa0e147a
sha256	5e46ecffcff9440e97bf4f0a85ad34132407f925b27a8759f5a01de5ea4da6af
ssdeep	49152:jLqvVZ/eGM+wK8XY/IsL1i3dX5DJEe9kbTvbfGj4JF1P3KNsmewuuwEtJPcT3Vvq:jW9Re7qISi3dpDJMDF1P6/iF
imphash	93a138801d9601e4c36e6274c8b9d111
impfuzzy	24:UbVjhNwO+VuTnvYzoLtXOr6kwmDruMztir6UP:KwO+VIc+XOmG8nP

Network IP location

Signature (6cnts)

Level	Description
danger	File has been identified by 57 AntiVirus engines on VirusTotal as malicious
watch	Communicates with host for which no DNS query was performed
watch	Detects the presence of Wine emulator
notice	The binary likely contains encrypted or compressed data indicative of a packer
info	Command line console output was observed
info	The executable contains unknown PE section names indicative of a packer (could be a false positive)

Rules (14cnts)

Level	Name	Description	Collection
danger	Trojan_Ranumbot_Zero	Win Ranumbot	binaries (upload)
info	IsPE32	(no description)	binaries (upload)
info	OS_Processor_Check_Zero	OS Processor Check Signature Zero	binaries (upload)
info	PE_Header_Zero	PE File Signature Zero	binaries (upload)
info	escalate_priv	Escalade priviledges	binaries (upload)
info	IsConsole	(no description)	binaries (upload)
info	network_dns	Communications use DNS	binaries (upload)
info	network_tcp_listen	Listen for incoming communication	binaries (upload)
info	network_tcp_socket	Communications over RAW socket	binaries (upload)
info	network_udp_sock	Communications over UDP network	binaries (upload)
info	Str_Win32_Winsock2_Library	Match Winsock 2 API library declaration	binaries (upload)
info	win_files_operation	Affect private profile	binaries (upload)
info	win_registry	Affect system registries	binaries (upload)
info	win_token	Affect system token	binaries (upload)

Network (896cnts) ?

Request	IP4	ZERO ?
140.95.1.190 whois	140.95.1.190	clean
140.95.1.191 whois	140.95.1.191	clean
140.95.1.192 whois	140.95.1.192	clean
140.95.1.193 whois	140.95.1.193	clean
140.95.1.194 whois	140.95.1.194	clean
140.95.1.195 whois	140.95.1.195	clean
140.95.1.196 whois	140.95.1.196	clean
140.95.1.197 whois	140.95.1.197	clean
140.95.1.198 whois	140.95.1.198	clean
140.95.1.199 whois	140.95.1.199	clean
140.95.3.114 whois	140.95.3.114	clean
140.95.3.115 whois	140.95.3.115	clean
140.95.3.112 whois	140.95.3.112	clean
140.95.3.113 whois	140.95.3.113	clean
140.95.3.110 whois	140.95.3.110	clean
140.95.3.111 whois	140.95.3.111	clean
140.95.1.58 whois	140.95.1.58	clean
140.95.1.59 whois	140.95.1.59	clean
140.95.1.52 whois	140.95.1.52	clean
140.95.1.53 whois	140.95.1.53	clean
140.95.1.50 whois	140.95.1.50	clean
140.95.1.51 whois	140.95.1.51	clean
140.95.1.56 whois	140.95.1.56	clean
140.95.1.57 whois	140.95.1.57	clean
140.95.1.54 whois	140.95.1.54	clean
140.95.1.55 whois	140.95.1.55	clean
140.95.2.226 whois	140.95.2.226	clean
140.95.1.169 whois	140.95.1.169	clean
140.95.1.168 whois	140.95.1.168	clean
140.95.1.165 whois	140.95.1.165	clean
140.95.1.164 whois	140.95.1.164	clean
140.95.1.167 whois	140.95.1.167	clean
140.95.1.166 whois	140.95.1.166	clean
140.95.1.161 whois	140.95.1.161	clean
140.95.1.160 whois	140.95.1.160	clean
140.95.1.163 whois	140.95.1.163	clean
140.95.1.162 whois	140.95.1.162	clean
140.95.3.116 whois	140.95.3.116	clean
140.95.3.117 whois	140.95.3.117	clean
140.95.2.230 whois	140.95.2.230	clean
140.95.3.118 whois	140.95.3.118	clean
140.95.2.220 whois	140.95.2.220	clean
140.95.1.66 whois	140.95.1.66	clean
140.95.0.142 whois	140.95.0.142	clean
140.95.0.143 whois	140.95.0.143	clean
140.95.0.140 whois	140.95.0.140	clean
140.95.0.141 whois	140.95.0.141	clean
140.95.0.146 whois	140.95.0.146	clean
140.95.0.147 whois	140.95.0.147	clean
140.95.0.144 whois	140.95.0.144	clean
140.95.0.145 whois	140.95.0.145	clean
140.95.2.140 whois	140.95.2.140	clean
140.95.2.141 whois	140.95.2.141	clean
140.95.0.148 whois	140.95.0.148	clean
140.95.0.149 whois	140.95.0.149	clean
140.95.2.144 whois	140.95.2.144	clean
140.95.2.145 whois	140.95.2.145	clean
140.95.2.146 whois	140.95.2.146	clean
140.95.2.147 whois	140.95.2.147	clean
140.95.2.158 whois	140.95.2.158	clean
140.95.2.71 whois	140.95.2.71	clean
140.95.0.128 whois	140.95.0.128	clean
140.95.2.18 whois	140.95.2.18	clean
140.95.2.72 whois	140.95.2.72	clean
140.95.2.75 whois	140.95.2.75	clean
140.95.2.74 whois	140.95.2.74	clean
140.95.2.77 whois	140.95.2.77	clean
140.95.0.129 whois	140.95.0.129	clean
140.95.2.79 whois	140.95.2.79	clean
140.95.2.78 whois	140.95.2.78	clean
140.95.2.153 whois	140.95.2.153	clean
140.95.1.228 whois	140.95.1.228	clean
140.95.1.229 whois	140.95.1.229	clean
140.95.1.226 whois	140.95.1.226	clean
140.95.1.150 whois	140.95.1.150	clean
140.95.1.224 whois	140.95.1.224	clean
140.95.1.225 whois	140.95.1.225	clean
140.95.1.222 whois	140.95.1.222	clean
140.95.1.223 whois	140.95.1.223	clean
140.95.1.220 whois	140.95.1.220	clean
140.95.1.151 whois	140.95.1.151	clean
140.95.2.99 whois	140.95.2.99	clean
140.95.2.150 whois	140.95.2.150	clean
140.95.2.93 whois	140.95.2.93	clean
140.95.2.157 whois	140.95.2.157	clean
140.95.2.91 whois	140.95.2.91	clean
140.95.2.90 whois	140.95.2.90	clean
140.95.2.97 whois	140.95.2.97	clean
140.95.2.96 whois	140.95.2.96	clean
140.95.2.95 whois	140.95.2.95	clean
140.95.2.156 whois	140.95.2.156	clean
140.95.2.243 whois	140.95.2.243	clean
140.95.0.120 whois	140.95.0.120	clean
140.95.2.241 whois	140.95.2.241	clean
140.95.2.240 whois	140.95.2.240	clean
140.95.2.247 whois	140.95.2.247	clean
140.95.2.155 whois	140.95.2.155	clean
140.95.2.245 whois	140.95.2.245	clean
140.95.0.121 whois	140.95.0.121	clean
140.95.2.249 whois	140.95.2.249	clean
140.95.2.154 whois	140.95.2.154	clean
140.95.3.18 whois	140.95.3.18	clean
140.95.3.19 whois	140.95.3.19	clean
140.95.3.14 whois	140.95.3.14	clean
140.95.0.91 whois	140.95.0.91	clean
140.95.3.16 whois	140.95.3.16	clean
140.95.3.17 whois	140.95.3.17	clean
140.95.3.10 whois	140.95.3.10	clean
140.95.3.11 whois	140.95.3.11	clean
140.95.3.12 whois	140.95.3.12	clean
140.95.0.90 whois	140.95.0.90	clean
140.95.1.16 whois	140.95.1.16	clean
140.95.1.17 whois	140.95.1.17	clean
140.95.1.14 whois	140.95.1.14	clean
140.95.1.15 whois	140.95.1.15	clean
140.95.1.12 whois	140.95.1.12	clean
140.95.1.13 whois	140.95.1.13	clean
140.95.1.10 whois	140.95.1.10	clean
140.95.1.11 whois	140.95.1.11	clean
140.95.1.18 whois	140.95.1.18	clean
140.95.1.19 whois	140.95.1.19	clean
140.95.1.121 whois	140.95.1.121	clean
140.95.1.120 whois	140.95.1.120	clean
140.95.1.123 whois	140.95.1.123	clean
140.95.1.122 whois	140.95.1.122	clean
140.95.1.125 whois	140.95.1.125	clean
140.95.1.124 whois	140.95.1.124	clean
140.95.1.127 whois	140.95.1.127	clean
140.95.0.27 whois	140.95.0.27	clean
140.95.1.129 whois	140.95.1.129	clean
140.95.1.128 whois	140.95.1.128	clean
140.95.1.136 whois	140.95.1.136	clean
140.95.0.32 whois	140.95.0.32	clean
140.95.1.134 whois	140.95.1.134	clean
140.95.1.135 whois	140.95.1.135	clean
140.95.0.37 whois	140.95.0.37	clean
140.95.1.133 whois	140.95.1.133	clean
140.95.1.63 whois	140.95.1.63	clean
140.95.1.62 whois	140.95.1.62	clean
140.95.1.61 whois	140.95.1.61	clean
140.95.1.60 whois	140.95.1.60	clean
140.95.1.67 whois	140.95.1.67	clean
140.95.1.130 whois	140.95.1.130	clean
140.95.1.65 whois	140.95.1.65	clean
140.95.1.64 whois	140.95.1.64	clean
140.95.1.69 whois	140.95.1.69	clean
140.95.1.131 whois	140.95.1.131	clean
140.95.1.154 whois	140.95.1.154	clean
140.95.1.155 whois	140.95.1.155	clean
140.95.1.156 whois	140.95.1.156	clean
140.95.1.157 whois	140.95.1.157	clean
140.95.0.99 whois	140.95.0.99	clean
140.95.0.98 whois	140.95.0.98	clean
140.95.1.152 whois	140.95.1.152	clean
140.95.1.153 whois	140.95.1.153	clean
140.95.0.95 whois	140.95.0.95	clean
140.95.0.94 whois	140.95.0.94	clean
140.95.0.97 whois	140.95.0.97	clean
140.95.0.96 whois	140.95.0.96	clean
140.95.1.158 whois	140.95.1.158	clean
140.95.1.159 whois	140.95.1.159	clean
140.95.0.93 whois	140.95.0.93	clean
140.95.0.92 whois	140.95.0.92	clean
140.95.3.87 whois	140.95.3.87	clean
140.95.3.86 whois	140.95.3.86	clean
140.95.2.3 whois	140.95.2.3	clean
140.95.3.85 whois	140.95.3.85	clean
140.95.3.84 whois	140.95.3.84	clean
140.95.2.215 whois	140.95.2.215	clean
140.95.3.83 whois	140.95.3.83	clean
140.95.2.37 whois	140.95.2.37	clean
140.95.3.81 whois	140.95.3.81	clean
140.95.3.80 whois	140.95.3.80	clean
140.95.2.213 whois	140.95.2.213	clean
140.95.2.36 whois	140.95.2.36	clean
140.95.0.212 whois	140.95.0.212	clean
140.95.0.213 whois	140.95.0.213	clean
140.95.0.210 whois	140.95.0.210	clean
140.95.0.211 whois	140.95.0.211	clean
140.95.0.216 whois	140.95.0.216	clean
140.95.0.217 whois	140.95.0.217	clean
140.95.0.214 whois	140.95.0.214	clean
140.95.0.215 whois	140.95.0.215	clean
140.95.0.191 whois	140.95.0.191	clean
140.95.0.190 whois	140.95.0.190	clean
140.95.0.218 whois	140.95.0.218	clean
140.95.0.219 whois	140.95.0.219	clean
140.95.0.195 whois	140.95.0.195	clean
140.95.0.194 whois	140.95.0.194	clean
140.95.0.197 whois	140.95.0.197	clean
140.95.0.196 whois	140.95.0.196	clean
140.95.2.117 whois	140.95.2.117	clean
140.95.2.116 whois	140.95.2.116	clean
140.95.2.115 whois	140.95.2.115	clean
140.95.2.114 whois	140.95.2.114	clean
140.95.2.113 whois	140.95.2.113	clean
140.95.2.112 whois	140.95.2.112	clean
140.95.2.111 whois	140.95.2.111	clean
140.95.2.110 whois	140.95.2.110	clean
140.95.2.119 whois	140.95.2.119	clean
140.95.2.118 whois	140.95.2.118	clean
140.95.2.225 whois	140.95.2.225	clean
140.95.2.0 whois	140.95.2.0	clean
140.95.2.29 whois	140.95.2.29	clean
140.95.2.2 whois	140.95.2.2	clean
140.95.2.22 whois	140.95.2.22	clean
140.95.2.23 whois	140.95.2.23	clean
140.95.2.20 whois	140.95.2.20	clean
140.95.2.21 whois	140.95.2.21	clean
140.95.2.26 whois	140.95.2.26	clean
140.95.2.1 whois	140.95.2.1	clean
140.95.2.24 whois	140.95.2.24	clean
140.95.2.25 whois	140.95.2.25	clean
140.95.0.106 whois	140.95.0.106	clean
140.95.0.107 whois	140.95.0.107	clean
140.95.0.104 whois	140.95.0.104	clean
140.95.0.105 whois	140.95.0.105	clean
140.95.0.102 whois	140.95.0.102	clean
140.95.0.103 whois	140.95.0.103	clean
140.95.0.100 whois	140.95.0.100	clean
140.95.0.101 whois	140.95.0.101	clean
140.95.2.221 whois	140.95.2.221	clean
140.95.0.108 whois	140.95.0.108	clean
140.95.0.109 whois	140.95.0.109	clean
140.95.2.7 whois	140.95.2.7	clean
140.95.2.223 whois	140.95.2.223	clean
140.95.2.89 whois	140.95.2.89	clean
140.95.2.222 whois	140.95.2.222	clean
140.95.2.238 whois	140.95.2.238	clean
140.95.2.239 whois	140.95.2.239	clean
140.95.0.68 whois	140.95.0.68	clean
140.95.0.69 whois	140.95.0.69	clean
140.95.0.64 whois	140.95.0.64	clean
140.95.0.65 whois	140.95.0.65	clean
140.95.0.66 whois	140.95.0.66	clean
140.95.0.67 whois	140.95.0.67	clean
140.95.0.60 whois	140.95.0.60	clean
140.95.0.61 whois	140.95.0.61	clean
140.95.0.62 whois	140.95.0.62	clean
140.95.0.63 whois	140.95.0.63	clean
140.95.3.65 whois	140.95.3.65	clean
140.95.3.64 whois	140.95.3.64	clean
140.95.3.67 whois	140.95.3.67	clean
140.95.3.66 whois	140.95.3.66	clean
140.95.3.61 whois	140.95.3.61	clean
140.95.3.60 whois	140.95.3.60	clean
140.95.3.63 whois	140.95.3.63	clean
140.95.3.62 whois	140.95.3.62	clean
140.95.2.5 whois	140.95.2.5	clean
140.95.3.68 whois	140.95.3.68	clean
140.95.1.183 whois	140.95.1.183	clean
140.95.1.182 whois	140.95.1.182	clean
140.95.1.181 whois	140.95.1.181	clean
140.95.1.180 whois	140.95.1.180	clean
140.95.1.187 whois	140.95.1.187	clean
140.95.1.186 whois	140.95.1.186	clean
140.95.1.185 whois	140.95.1.185	clean
140.95.1.184 whois	140.95.1.184	clean
140.95.3.101 whois	140.95.3.101	clean
140.95.3.100 whois	140.95.3.100	clean
140.95.1.189 whois	140.95.1.189	clean
140.95.1.188 whois	140.95.1.188	clean
140.95.3.105 whois	140.95.3.105	clean
140.95.3.102 whois	140.95.3.102	clean
140.95.3.107 whois	140.95.3.107	clean
140.95.3.106 whois	140.95.3.106	clean
140.95.1.29 whois	140.95.1.29	clean
140.95.1.28 whois	140.95.1.28	clean
140.95.1.27 whois	140.95.1.27	clean
140.95.1.26 whois	140.95.1.26	clean
140.95.1.25 whois	140.95.1.25	clean
140.95.1.24 whois	140.95.1.24	clean
140.95.1.23 whois	140.95.1.23	clean
140.95.1.22 whois	140.95.1.22	clean
140.95.1.21 whois	140.95.1.21	clean
140.95.1.20 whois	140.95.1.20	clean
140.95.1.118 whois	140.95.1.118	clean
140.95.1.119 whois	140.95.1.119	clean
140.95.1.110 whois	140.95.1.110	clean
140.95.1.111 whois	140.95.1.111	clean
140.95.1.112 whois	140.95.1.112	clean
140.95.1.113 whois	140.95.1.113	clean
140.95.1.114 whois	140.95.1.114	clean
140.95.1.115 whois	140.95.1.115	clean
140.95.1.116 whois	140.95.1.116	clean
140.95.1.117 whois	140.95.1.117	clean
140.95.0.199 whois	140.95.0.199	clean
140.95.0.198 whois	140.95.0.198	clean
140.95.3.15 whois	140.95.3.15	clean
140.95.2.224 whois	140.95.2.224	clean
140.95.0.193 whois	140.95.0.193	clean
140.95.2.159 whois	140.95.2.159	clean
140.95.0.192 whois	140.95.0.192	clean
140.95.1.248 whois	140.95.1.248	clean
140.95.1.249 whois	140.95.1.249	clean
140.95.1.244 whois	140.95.1.244	clean
140.95.1.245 whois	140.95.1.245	clean
140.95.1.246 whois	140.95.1.246	clean
140.95.1.247 whois	140.95.1.247	clean
140.95.1.240 whois	140.95.1.240	clean
140.95.1.241 whois	140.95.1.241	clean
140.95.1.242 whois	140.95.1.242	clean
140.95.1.243 whois	140.95.1.243	clean
140.95.2.66 whois	140.95.2.66	clean
140.95.1.126 whois	140.95.1.126	clean
140.95.2.64 whois	140.95.2.64	clean
140.95.2.65 whois	140.95.2.65	clean
140.95.2.62 whois	140.95.2.62	clean
140.95.2.63 whois	140.95.2.63	clean
140.95.2.60 whois	140.95.2.60	clean
140.95.2.61 whois	140.95.2.61	clean
140.95.2.68 whois	140.95.2.68	clean
140.95.2.69 whois	140.95.2.69	clean
140.95.1.239 whois	140.95.1.239	clean
140.95.1.238 whois	140.95.1.238	clean
140.95.3.28 whois	140.95.3.28	clean
140.95.1.231 whois	140.95.1.231	clean
140.95.1.230 whois	140.95.1.230	clean
140.95.1.233 whois	140.95.1.233	clean
140.95.1.232 whois	140.95.1.232	clean
140.95.1.235 whois	140.95.1.235	clean
140.95.1.234 whois	140.95.1.234	clean
140.95.1.237 whois	140.95.1.237	clean
140.95.1.236 whois	140.95.1.236	clean
140.95.2.88 whois	140.95.2.88	clean
140.95.2.148 whois	140.95.2.148	clean
140.95.2.149 whois	140.95.2.149	clean
140.95.2.80 whois	140.95.2.80	clean
140.95.2.81 whois	140.95.2.81	clean
140.95.2.82 whois	140.95.2.82	clean
140.95.2.83 whois	140.95.2.83	clean
140.95.2.84 whois	140.95.2.84	clean
140.95.2.85 whois	140.95.2.85	clean
140.95.2.86 whois	140.95.2.86	clean
140.95.2.87 whois	140.95.2.87	clean
140.95.3.119 whois	140.95.3.119	clean
140.95.3.21 whois	140.95.3.21	clean
140.95.3.20 whois	140.95.3.20	clean
140.95.3.23 whois	140.95.3.23	clean
140.95.3.22 whois	140.95.3.22	clean
140.95.3.25 whois	140.95.3.25	clean
140.95.3.24 whois	140.95.3.24	clean
140.95.3.27 whois	140.95.3.27	clean
140.95.3.26 whois	140.95.3.26	clean
140.95.3.29 whois	140.95.3.29	clean
140.95.2.151 whois	140.95.2.151	clean
140.95.2.11 whois	140.95.2.11	clean
140.95.2.13 whois	140.95.2.13	clean
140.95.2.12 whois	140.95.2.12	clean
140.95.0.254 whois	140.95.0.254	clean
140.95.0.255 whois	140.95.0.255	clean
140.95.0.252 whois	140.95.0.252	clean
140.95.0.253 whois	140.95.0.253	clean
140.95.0.250 whois	140.95.0.250	clean
140.95.0.251 whois	140.95.0.251	clean
140.95.0.155 whois	140.95.0.155	clean
140.95.0.159 whois	140.95.0.159	clean
140.95.0.157 whois	140.95.0.157	clean
140.95.0.156 whois	140.95.0.156	clean
140.95.0.151 whois	140.95.0.151	clean
140.95.0.150 whois	140.95.0.150	clean
140.95.0.153 whois	140.95.0.153	clean
140.95.0.158 whois	140.95.0.158	clean
140.95.2.143 whois	140.95.2.143	clean
140.95.2.15 whois	140.95.2.15	clean
140.95.2.227 whois	140.95.2.227	clean
140.95.2.14 whois	140.95.2.14	clean
140.95.2.28 whois	140.95.2.28	clean
140.95.2.6 whois	140.95.2.6	clean
140.95.0.154 whois	140.95.0.154	clean
140.95.2.19 whois	140.95.2.19	clean
140.95.0.15 whois	140.95.0.15	clean
140.95.0.14 whois	140.95.0.14	clean
140.95.0.17 whois	140.95.0.17	clean
140.95.0.16 whois	140.95.0.16	clean
140.95.0.11 whois	140.95.0.11	clean
140.95.0.10 whois	140.95.0.10	clean
140.95.0.13 whois	140.95.0.13	clean
140.95.0.12 whois	140.95.0.12	clean
140.95.0.19 whois	140.95.0.19	clean
140.95.0.18 whois	140.95.0.18	clean
140.95.0.152 whois	140.95.0.152	clean
140.95.2.231 whois	140.95.2.231	clean
140.95.2.27 whois	140.95.2.27	clean
140.95.2.236 whois	140.95.2.236	clean
140.95.1.70 whois	140.95.1.70	clean
140.95.1.71 whois	140.95.1.71	clean
140.95.1.72 whois	140.95.1.72	clean
140.95.1.73 whois	140.95.1.73	clean
140.95.1.74 whois	140.95.1.74	clean
140.95.1.75 whois	140.95.1.75	clean
140.95.1.76 whois	140.95.1.76	clean
140.95.1.77 whois	140.95.1.77	clean
140.95.1.78 whois	140.95.1.78	clean
140.95.1.79 whois	140.95.1.79	clean
140.95.2.152 whois	140.95.2.152	clean
140.95.1.147 whois	140.95.1.147	clean
140.95.1.146 whois	140.95.1.146	clean
140.95.0.80 whois	140.95.0.80	clean
140.95.1.144 whois	140.95.1.144	clean
140.95.1.143 whois	140.95.1.143	clean
140.95.1.142 whois	140.95.1.142	clean
140.95.1.141 whois	140.95.1.141	clean
140.95.1.140 whois	140.95.1.140	clean
140.95.0.88 whois	140.95.0.88	clean
140.95.0.89 whois	140.95.0.89	clean
140.95.2.237 whois	140.95.2.237	clean
140.95.1.149 whois	140.95.1.149	clean
140.95.1.148 whois	140.95.1.148	clean
140.95.1.200 whois	140.95.1.200	clean
140.95.1.201 whois	140.95.1.201	clean
140.95.1.202 whois	140.95.1.202	clean
140.95.1.203 whois	140.95.1.203	clean
140.95.1.204 whois	140.95.1.204	clean
140.95.1.205 whois	140.95.1.205	clean
140.95.1.206 whois	140.95.1.206	clean
140.95.1.207 whois	140.95.1.207	clean
140.95.1.208 whois	140.95.1.208	clean
140.95.1.209 whois	140.95.1.209	clean
140.95.2.73 whois	140.95.2.73	clean
140.95.2.76 whois	140.95.2.76	clean
140.95.0.164 whois	140.95.0.164	clean
140.95.0.165 whois	140.95.0.165	clean
140.95.0.166 whois	140.95.0.166	clean
140.95.0.167 whois	140.95.0.167	clean
140.95.0.160 whois	140.95.0.160	clean
140.95.0.161 whois	140.95.0.161	clean
140.95.0.162 whois	140.95.0.162	clean
140.95.0.163 whois	140.95.0.163	clean
140.95.0.168 whois	140.95.0.168	clean
140.95.0.169 whois	140.95.0.169	clean
140.95.2.122 whois	140.95.2.122	clean
140.95.2.123 whois	140.95.2.123	clean
140.95.2.120 whois	140.95.2.120	clean
140.95.2.121 whois	140.95.2.121	clean
140.95.2.126 whois	140.95.2.126	clean
140.95.2.127 whois	140.95.2.127	clean
140.95.2.124 whois	140.95.2.124	clean
140.95.2.125 whois	140.95.2.125	clean
140.95.2.128 whois	140.95.2.128	clean
140.95.2.129 whois	140.95.2.129	clean
140.95.2.59 whois	140.95.2.59	clean
140.95.2.58 whois	140.95.2.58	clean
140.95.2.57 whois	140.95.2.57	clean
140.95.2.56 whois	140.95.2.56	clean
140.95.2.55 whois	140.95.2.55	clean
140.95.2.54 whois	140.95.2.54	clean
140.95.2.53 whois	140.95.2.53	clean
140.95.2.52 whois	140.95.2.52	clean
140.95.2.51 whois	140.95.2.51	clean
140.95.2.50 whois	140.95.2.50	clean
140.95.0.111 whois	140.95.0.111	clean
140.95.0.110 whois	140.95.0.110	clean
140.95.0.113 whois	140.95.0.113	clean
140.95.0.112 whois	140.95.0.112	clean
140.95.0.115 whois	140.95.0.115	clean
140.95.0.114 whois	140.95.0.114	clean
140.95.0.117 whois	140.95.0.117	clean
140.95.0.116 whois	140.95.0.116	clean
140.95.0.119 whois	140.95.0.119	clean
140.95.0.118 whois	140.95.0.118	clean
140.95.0.1 whois	140.95.0.1	clean
140.95.0.0 whois	140.95.0.0	clean
140.95.0.3 whois	140.95.0.3	clean
140.95.0.2 whois	140.95.0.2	clean
140.95.0.5 whois	140.95.0.5	clean
140.95.0.4 whois	140.95.0.4	clean
140.95.0.7 whois	140.95.0.7	clean
140.95.0.6 whois	140.95.0.6	clean
140.95.0.9 whois	140.95.0.9	clean
140.95.0.8 whois	140.95.0.8	clean
140.95.3.89 whois	140.95.3.89	clean
140.95.3.88 whois	140.95.3.88	clean
140.95.0.51 whois	140.95.0.51	clean
140.95.0.50 whois	140.95.0.50	clean
140.95.0.53 whois	140.95.0.53	clean
140.95.0.52 whois	140.95.0.52	clean
140.95.0.55 whois	140.95.0.55	clean
140.95.0.54 whois	140.95.0.54	clean
140.95.0.57 whois	140.95.0.57	clean
140.95.0.56 whois	140.95.0.56	clean
140.95.0.59 whois	140.95.0.59	clean
140.95.0.58 whois	140.95.0.58	clean
140.95.2.9 whois	140.95.2.9	clean
140.95.2.8 whois	140.95.2.8	clean
140.95.2.229 whois	140.95.2.229	clean
140.95.2.228 whois	140.95.2.228	clean
140.95.3.78 whois	140.95.3.78	clean
140.95.3.79 whois	140.95.3.79	clean
140.95.3.72 whois	140.95.3.72	clean
140.95.3.73 whois	140.95.3.73	clean
140.95.3.70 whois	140.95.3.70	clean
140.95.3.71 whois	140.95.3.71	clean
140.95.3.76 whois	140.95.3.76	clean
140.95.3.77 whois	140.95.3.77	clean
140.95.3.74 whois	140.95.3.74	clean
140.95.3.75 whois	140.95.3.75	clean
140.95.0.209 whois	140.95.0.209	clean
140.95.0.208 whois	140.95.0.208	clean
140.95.0.205 whois	140.95.0.205	clean
140.95.0.204 whois	140.95.0.204	clean
140.95.0.207 whois	140.95.0.207	clean
140.95.0.206 whois	140.95.0.206	clean
140.95.0.201 whois	140.95.0.201	clean
140.95.0.200 whois	140.95.0.200	clean
140.95.0.203 whois	140.95.0.203	clean
140.95.0.202 whois	140.95.0.202	clean
140.95.2.232 whois	140.95.2.232	clean
140.95.2.98 whois	140.95.2.98	clean
140.95.1.38 whois	140.95.1.38	clean
140.95.1.39 whois	140.95.1.39	clean
140.95.2.233 whois	140.95.2.233	clean
140.95.1.34 whois	140.95.1.34	clean
140.95.1.35 whois	140.95.1.35	clean
140.95.1.36 whois	140.95.1.36	clean
140.95.1.37 whois	140.95.1.37	clean
140.95.1.30 whois	140.95.1.30	clean
140.95.1.31 whois	140.95.1.31	clean
140.95.1.32 whois	140.95.1.32	clean
140.95.1.33 whois	140.95.1.33	clean
140.95.1.109 whois	140.95.1.109	clean
140.95.1.108 whois	140.95.1.108	clean
140.95.3.8 whois	140.95.3.8	clean
140.95.1.103 whois	140.95.1.103	clean
140.95.1.102 whois	140.95.1.102	clean
140.95.1.101 whois	140.95.1.101	clean
140.95.1.100 whois	140.95.1.100	clean
140.95.1.107 whois	140.95.1.107	clean
140.95.1.106 whois	140.95.1.106	clean
140.95.1.105 whois	140.95.1.105	clean
140.95.1.104 whois	140.95.1.104	clean
140.95.2.234 whois	140.95.2.234	clean
140.95.2.92 whois	140.95.2.92	clean
140.95.2.235 whois	140.95.2.235	clean
140.95.2.94 whois	140.95.2.94	clean
140.95.1.89 whois	140.95.1.89	clean
140.95.1.88 whois	140.95.1.88	clean
140.95.2.242 whois	140.95.2.242	clean
140.95.1.81 whois	140.95.1.81	clean
140.95.1.80 whois	140.95.1.80	clean
140.95.1.83 whois	140.95.1.83	clean
140.95.1.82 whois	140.95.1.82	clean
140.95.1.85 whois	140.95.1.85	clean
140.95.1.84 whois	140.95.1.84	clean
140.95.1.87 whois	140.95.1.87	clean
140.95.1.86 whois	140.95.1.86	clean
140.95.2.246 whois	140.95.2.246	clean
140.95.2.166 whois	140.95.2.166	clean
140.95.2.167 whois	140.95.2.167	clean
140.95.2.164 whois	140.95.2.164	clean
140.95.2.165 whois	140.95.2.165	clean
140.95.2.162 whois	140.95.2.162	clean
140.95.2.163 whois	140.95.2.163	clean
140.95.2.160 whois	140.95.2.160	clean
140.95.2.161 whois	140.95.2.161	clean
140.95.1.255 whois	140.95.1.255	clean
140.95.1.254 whois	140.95.1.254	clean
140.95.1.253 whois	140.95.1.253	clean
140.95.1.252 whois	140.95.1.252	clean
140.95.1.251 whois	140.95.1.251	clean
140.95.1.250 whois	140.95.1.250	clean
140.95.2.248 whois	140.95.2.248	clean
140.95.0.188 whois	140.95.0.188	clean
140.95.0.189 whois	140.95.0.189	clean
140.95.2.192 whois	140.95.2.192	clean
140.95.0.234 whois	140.95.0.234	clean
140.95.0.235 whois	140.95.0.235	clean
140.95.0.236 whois	140.95.0.236	clean
140.95.0.237 whois	140.95.0.237	clean
140.95.0.230 whois	140.95.0.230	clean
140.95.0.231 whois	140.95.0.231	clean
140.95.0.232 whois	140.95.0.232	clean
140.95.0.233 whois	140.95.0.233	clean
140.95.0.238 whois	140.95.0.238	clean
140.95.0.239 whois	140.95.0.239	clean
140.95.0.180 whois	140.95.0.180	clean
140.95.0.181 whois	140.95.0.181	clean
140.95.3.36 whois	140.95.3.36	clean
140.95.3.37 whois	140.95.3.37	clean
140.95.3.34 whois	140.95.3.34	clean
140.95.3.35 whois	140.95.3.35	clean
140.95.3.32 whois	140.95.3.32	clean
140.95.3.33 whois	140.95.3.33	clean
140.95.3.30 whois	140.95.3.30	clean
140.95.3.31 whois	140.95.3.31	clean
140.95.3.69 whois	140.95.3.69	clean
140.95.3.38 whois	140.95.3.38	clean
140.95.3.39 whois	140.95.3.39	clean
140.95.0.241 whois	140.95.0.241	clean
140.95.0.240 whois	140.95.0.240	clean
140.95.0.243 whois	140.95.0.243	clean
140.95.0.242 whois	140.95.0.242	clean
140.95.0.245 whois	140.95.0.245	clean
140.95.0.244 whois	140.95.0.244	clean
140.95.0.247 whois	140.95.0.247	clean
140.95.0.246 whois	140.95.0.246	clean
140.95.0.249 whois	140.95.0.249	clean
140.95.0.248 whois	140.95.0.248	clean
140.95.0.122 whois	140.95.0.122	clean
140.95.0.123 whois	140.95.0.123	clean
140.95.0.124 whois	140.95.0.124	clean
140.95.0.125 whois	140.95.0.125	clean
140.95.0.126 whois	140.95.0.126	clean
140.95.0.127 whois	140.95.0.127	clean
140.95.3.109 whois	140.95.3.109	clean
140.95.3.108 whois	140.95.3.108	clean
140.95.2.244 whois	140.95.2.244	clean
140.95.2.218 whois	140.95.2.218	clean
140.95.2.219 whois	140.95.2.219	clean
140.95.2.214 whois	140.95.2.214	clean
140.95.2.139 whois	140.95.2.139	clean
140.95.2.216 whois	140.95.2.216	clean
140.95.2.217 whois	140.95.2.217	clean
140.95.2.210 whois	140.95.2.210	clean
140.95.2.211 whois	140.95.2.211	clean
140.95.2.212 whois	140.95.2.212	clean
140.95.2.138 whois	140.95.2.138	clean
140.95.2.188 whois	140.95.2.188	clean
140.95.2.189 whois	140.95.2.189	clean
140.95.2.184 whois	140.95.2.184	clean
140.95.2.185 whois	140.95.2.185	clean
140.95.2.186 whois	140.95.2.186	clean
140.95.2.187 whois	140.95.2.187	clean
140.95.2.180 whois	140.95.2.180	clean
140.95.2.181 whois	140.95.2.181	clean
140.95.2.182 whois	140.95.2.182	clean
140.95.2.183 whois	140.95.2.183	clean
140.95.3.43 whois	140.95.3.43	clean
140.95.3.42 whois	140.95.3.42	clean
140.95.3.41 whois	140.95.3.41	clean
140.95.3.40 whois	140.95.3.40	clean
140.95.3.47 whois	140.95.3.47	clean
140.95.3.46 whois	140.95.3.46	clean
140.95.3.45 whois	140.95.3.45	clean
140.95.3.44 whois	140.95.3.44	clean
140.95.3.49 whois	140.95.3.49	clean
140.95.3.48 whois	140.95.3.48	clean
140.95.3.103 whois	140.95.3.103	clean
140.95.2.136 whois	140.95.2.136	clean
140.95.3.126 whois	140.95.3.126	clean
140.95.3.104 whois	140.95.3.104	clean
140.95.3.123 whois	140.95.3.123	clean
140.95.3.122 whois	140.95.3.122	clean
140.95.3.121 whois	140.95.3.121	clean
140.95.3.120 whois	140.95.3.120	clean
140.95.3.127 whois	140.95.3.127	clean
140.95.2.133 whois	140.95.2.133	clean
140.95.3.125 whois	140.95.3.125	clean
140.95.3.124 whois	140.95.3.124	clean
140.95.2.132 whois	140.95.2.132	clean
140.95.1.45 whois	140.95.1.45	clean
140.95.1.44 whois	140.95.1.44	clean
140.95.1.47 whois	140.95.1.47	clean
140.95.1.46 whois	140.95.1.46	clean
140.95.1.41 whois	140.95.1.41	clean
140.95.1.40 whois	140.95.1.40	clean
140.95.1.43 whois	140.95.1.43	clean
140.95.1.42 whois	140.95.1.42	clean
140.95.2.70 whois	140.95.2.70	clean
140.95.1.49 whois	140.95.1.49	clean
140.95.1.48 whois	140.95.1.48	clean
140.95.1.172 whois	140.95.1.172	clean
140.95.1.173 whois	140.95.1.173	clean
140.95.1.170 whois	140.95.1.170	clean
140.95.1.171 whois	140.95.1.171	clean
140.95.1.176 whois	140.95.1.176	clean
140.95.1.177 whois	140.95.1.177	clean
140.95.1.174 whois	140.95.1.174	clean
140.95.1.175 whois	140.95.1.175	clean
140.95.1.178 whois	140.95.1.178	clean
140.95.1.179 whois	140.95.1.179	clean
140.95.1.213 whois	140.95.1.213	clean
140.95.1.212 whois	140.95.1.212	clean
140.95.1.211 whois	140.95.1.211	clean
140.95.1.210 whois	140.95.1.210	clean
140.95.1.217 whois	140.95.1.217	clean
140.95.1.216 whois	140.95.1.216	clean
140.95.1.215 whois	140.95.1.215	clean
140.95.1.214 whois	140.95.1.214	clean
140.95.1.219 whois	140.95.1.219	clean
140.95.1.218 whois	140.95.1.218	clean
140.95.2.203 whois	140.95.2.203	clean
140.95.3.13 whois	140.95.3.13	clean
140.95.1.68 whois	140.95.1.68	clean
140.95.0.82 whois	140.95.0.82	clean
140.95.0.83 whois	140.95.0.83	clean
140.95.2.202 whois	140.95.2.202	clean
140.95.1.145 whois	140.95.1.145	clean
140.95.0.81 whois	140.95.0.81	clean
140.95.2.142 whois	140.95.2.142	clean
140.95.0.86 whois	140.95.0.86	clean
140.95.0.87 whois	140.95.0.87	clean
140.95.0.177 whois	140.95.0.177	clean
140.95.0.176 whois	140.95.0.176	clean
140.95.0.175 whois	140.95.0.175	clean
140.95.0.174 whois	140.95.0.174	clean
140.95.0.173 whois	140.95.0.173	clean
140.95.0.172 whois	140.95.0.172	clean
140.95.0.171 whois	140.95.0.171	clean
140.95.0.170 whois	140.95.0.170	clean
140.95.2.135 whois	140.95.2.135	clean
140.95.2.134 whois	140.95.2.134	clean
140.95.2.137 whois	140.95.2.137	clean
140.95.0.85 whois	140.95.0.85	clean
140.95.2.131 whois	140.95.2.131	clean
140.95.2.130 whois	140.95.2.130	clean
140.95.0.179 whois	140.95.0.179	clean
140.95.0.178 whois	140.95.0.178	clean
140.95.2.168 whois	140.95.2.168	clean
140.95.2.169 whois	140.95.2.169	clean
140.95.2.48 whois	140.95.2.48	clean
140.95.2.49 whois	140.95.2.49	clean
140.95.2.44 whois	140.95.2.44	clean
140.95.2.39 whois	140.95.2.39	clean
140.95.2.46 whois	140.95.2.46	clean
140.95.2.47 whois	140.95.2.47	clean
140.95.2.40 whois	140.95.2.40	clean
140.95.2.41 whois	140.95.2.41	clean
140.95.2.42 whois	140.95.2.42	clean
140.95.2.38 whois	140.95.2.38	clean
140.95.2.45 whois	140.95.2.45	clean
140.95.3.94 whois	140.95.3.94	clean
140.95.3.95 whois	140.95.3.95	clean
140.95.3.96 whois	140.95.3.96	clean
140.95.3.97 whois	140.95.3.97	clean
140.95.3.90 whois	140.95.3.90	clean
140.95.3.91 whois	140.95.3.91	clean
140.95.3.92 whois	140.95.3.92	clean
140.95.3.93 whois	140.95.3.93	clean
140.95.3.98 whois	140.95.3.98	clean
140.95.3.99 whois	140.95.3.99	clean
140.95.0.46 whois	140.95.0.46	clean
140.95.0.47 whois	140.95.0.47	clean
140.95.0.44 whois	140.95.0.44	clean
140.95.0.45 whois	140.95.0.45	clean
140.95.0.42 whois	140.95.0.42	clean
140.95.0.43 whois	140.95.0.43	clean
140.95.0.40 whois	140.95.0.40	clean
140.95.0.41 whois	140.95.0.41	clean
140.95.3.0 whois	140.95.3.0	clean
140.95.2.10 whois	140.95.2.10	clean
140.95.2.43 whois	140.95.2.43	clean
140.95.0.48 whois	140.95.0.48	clean
140.95.0.49 whois	140.95.0.49	clean
140.95.3.1 whois	140.95.3.1	clean
140.95.2.17 whois	140.95.2.17	clean
140.95.0.20 whois	140.95.0.20	clean
140.95.2.4 whois	140.95.2.4	clean
140.95.0.21 whois	140.95.0.21	clean
140.95.0.22 whois	140.95.0.22	clean
140.95.0.23 whois	140.95.0.23	clean
140.95.2.16 whois	140.95.2.16	clean
140.95.0.24 whois	140.95.0.24	clean
140.95.0.25 whois	140.95.0.25	clean
140.95.0.33 whois	140.95.0.33	clean
140.95.1.137 whois	140.95.1.137	clean
140.95.0.31 whois	140.95.0.31	clean
140.95.0.30 whois	140.95.0.30	clean
140.95.1.132 whois	140.95.1.132	clean
140.95.0.36 whois	140.95.0.36	clean
140.95.0.35 whois	140.95.0.35	clean
140.95.0.34 whois	140.95.0.34	clean
140.95.0.39 whois	140.95.0.39	clean
140.95.0.38 whois	140.95.0.38	clean
140.95.1.138 whois	140.95.1.138	clean
140.95.1.139 whois	140.95.1.139	clean
140.95.0.28 whois	140.95.0.28	clean
140.95.0.29 whois	140.95.0.29	clean
140.95.0.26 whois	140.95.0.26	clean
140.95.2.209 whois	140.95.2.209	clean
140.95.2.208 whois	140.95.2.208	clean
140.95.2.67 whois	140.95.2.67	clean
140.95.2.207 whois	140.95.2.207	clean
140.95.2.206 whois	140.95.2.206	clean
140.95.2.205 whois	140.95.2.205	clean
140.95.2.204 whois	140.95.2.204	clean
140.95.1.98 whois	140.95.1.98	clean
140.95.1.99 whois	140.95.1.99	clean
140.95.1.96 whois	140.95.1.96	clean
140.95.1.97 whois	140.95.1.97	clean
140.95.1.94 whois	140.95.1.94	clean
140.95.1.95 whois	140.95.1.95	clean
140.95.1.92 whois	140.95.1.92	clean
140.95.1.93 whois	140.95.1.93	clean
140.95.1.90 whois	140.95.1.90	clean
140.95.1.91 whois	140.95.1.91	clean
140.95.2.201 whois	140.95.2.201	clean
140.95.1.227 whois	140.95.1.227	clean
140.95.2.200 whois	140.95.2.200	clean
140.95.2.171 whois	140.95.2.171	clean
140.95.2.170 whois	140.95.2.170	clean
140.95.2.173 whois	140.95.2.173	clean
140.95.2.172 whois	140.95.2.172	clean
140.95.2.175 whois	140.95.2.175	clean
140.95.2.174 whois	140.95.2.174	clean
140.95.2.177 whois	140.95.2.177	clean
140.95.2.176 whois	140.95.2.176	clean
140.95.2.179 whois	140.95.2.179	clean
140.95.2.178 whois	140.95.2.178	clean
140.95.2.250 whois	140.95.2.250	clean
140.95.2.251 whois	140.95.2.251	clean
140.95.2.252 whois	140.95.2.252	clean
140.95.2.253 whois	140.95.2.253	clean
140.95.0.84 whois	140.95.0.84	clean
140.95.2.254 whois	140.95.2.254	clean
140.95.3.82 whois	140.95.3.82	clean
140.95.2.255 whois	140.95.2.255	clean
140.95.0.227 whois	140.95.0.227	clean
140.95.0.226 whois	140.95.0.226	clean
140.95.0.225 whois	140.95.0.225	clean
140.95.0.224 whois	140.95.0.224	clean
140.95.0.223 whois	140.95.0.223	clean
140.95.0.222 whois	140.95.0.222	clean
140.95.0.221 whois	140.95.0.221	clean
140.95.0.220 whois	140.95.0.220	clean
140.95.0.186 whois	140.95.0.186	clean
140.95.0.187 whois	140.95.0.187	clean
140.95.0.184 whois	140.95.0.184	clean
140.95.0.185 whois	140.95.0.185	clean
140.95.0.182 whois	140.95.0.182	clean
140.95.0.183 whois	140.95.0.183	clean
140.95.0.229 whois	140.95.0.229	clean
140.95.0.228 whois	140.95.0.228	clean
140.95.2.104 whois	140.95.2.104	clean
140.95.2.105 whois	140.95.2.105	clean
140.95.2.106 whois	140.95.2.106	clean
140.95.2.107 whois	140.95.2.107	clean
140.95.2.100 whois	140.95.2.100	clean
140.95.2.101 whois	140.95.2.101	clean
140.95.2.102 whois	140.95.2.102	clean
140.95.2.103 whois	140.95.2.103	clean
140.95.2.108 whois	140.95.2.108	clean
140.95.2.109 whois	140.95.2.109	clean
140.95.3.9 whois	140.95.3.9	clean
140.95.2.35 whois	140.95.2.35	clean
140.95.2.34 whois	140.95.2.34	clean
140.95.0.139 whois	140.95.0.139	clean
140.95.0.138 whois	140.95.0.138	clean
140.95.2.31 whois	140.95.2.31	clean
140.95.2.30 whois	140.95.2.30	clean
140.95.2.33 whois	140.95.2.33	clean
140.95.2.32 whois	140.95.2.32	clean
140.95.0.133 whois	140.95.0.133	clean
140.95.0.132 whois	140.95.0.132	clean
140.95.0.131 whois	140.95.0.131	clean
140.95.0.130 whois	140.95.0.130	clean
140.95.0.137 whois	140.95.0.137	clean
140.95.0.136 whois	140.95.0.136	clean
140.95.0.135 whois	140.95.0.135	clean
140.95.0.134 whois	140.95.0.134	clean
140.95.1.4 whois	140.95.1.4	clean
140.95.1.5 whois	140.95.1.5	clean
140.95.1.6 whois	140.95.1.6	clean
140.95.1.7 whois	140.95.1.7	clean
140.95.1.0 whois	140.95.1.0	clean
140.95.1.1 whois	140.95.1.1	clean
140.95.1.2 whois	140.95.1.2	clean
140.95.1.3 whois	140.95.1.3	clean
140.95.1.8 whois	140.95.1.8	clean
140.95.1.9 whois	140.95.1.9	clean
140.95.3.6 whois	140.95.3.6	clean
140.95.3.7 whois	140.95.3.7	clean
140.95.3.4 whois	140.95.3.4	clean
140.95.3.5 whois	140.95.3.5	clean
140.95.3.2 whois	140.95.3.2	clean
140.95.3.3 whois	140.95.3.3	clean
140.95.0.79 whois	140.95.0.79	clean
140.95.0.78 whois	140.95.0.78	clean
140.95.0.77 whois	140.95.0.77	clean
140.95.0.76 whois	140.95.0.76	clean
140.95.0.75 whois	140.95.0.75	clean
140.95.0.74 whois	140.95.0.74	clean
140.95.0.73 whois	140.95.0.73	clean
140.95.0.72 whois	140.95.0.72	clean
140.95.0.71 whois	140.95.0.71	clean
140.95.0.70 whois	140.95.0.70	clean
140.95.2.199 whois	140.95.2.199	clean
140.95.2.198 whois	140.95.2.198	clean
140.95.2.197 whois	140.95.2.197	clean
140.95.2.196 whois	140.95.2.196	clean
140.95.2.195 whois	140.95.2.195	clean
140.95.2.194 whois	140.95.2.194	clean
140.95.2.193 whois	140.95.2.193	clean
140.95.1.221 whois	140.95.1.221	clean
140.95.2.191 whois	140.95.2.191	clean
140.95.2.190 whois	140.95.2.190	clean
140.95.3.50 whois	140.95.3.50	clean
140.95.3.51 whois	140.95.3.51	clean
140.95.3.52 whois	140.95.3.52	clean
140.95.3.53 whois	140.95.3.53	clean
140.95.3.54 whois	140.95.3.54	clean
140.95.3.55 whois	140.95.3.55	clean
140.95.3.56 whois	140.95.3.56	clean
140.95.3.57 whois	140.95.3.57	clean
140.95.3.58 whois	140.95.3.58	clean
140.95.3.59 whois	140.95.3.59	clean

Suricata ids

PE API

IAT(Import Address Table) Library

kernel32.dll
0x673020 WriteFile
0x673024 WriteConsoleW
0x673028 WaitForMultipleObjects
0x67302c WaitForSingleObject
0x673030 VirtualQuery
0x673034 VirtualFree
0x673038 VirtualAlloc
0x67303c SwitchToThread
0x673040 SuspendThread
0x673044 SetWaitableTimer
0x673048 SetUnhandledExceptionFilter
0x67304c SetProcessPriorityBoost
0x673050 SetEvent
0x673054 SetErrorMode
0x673058 SetConsoleCtrlHandler
0x67305c ResumeThread
0x673060 QueryFullProcessImageNameA
0x673064 ProcessIdToSessionId
0x673068 PostQueuedCompletionStatus
0x67306c OpenProcess
0x673070 LoadLibraryA
0x673074 LoadLibraryW
0x673078 SetThreadContext
0x67307c GetThreadContext
0x673080 GetSystemInfo
0x673084 GetSystemDirectoryA
0x673088 GetStdHandle
0x67308c GetQueuedCompletionStatusEx
0x673090 GetProcessAffinityMask
0x673094 GetProcAddress
0x673098 GetEnvironmentStringsW
0x67309c GetConsoleMode
0x6730a0 FreeEnvironmentStringsW
0x6730a4 ExitProcess
0x6730a8 DuplicateHandle
0x6730ac CreateThread
0x6730b0 CreateIoCompletionPort
0x6730b4 CreateEventA
0x6730b8 CloseHandle
0x6730bc AddVectoredExceptionHandler

EAT(Export Address Table) is none

Report - mg20201223-1.exe

Signature (6cnts)

Rules (14cnts)

Network (896cnts) ?

Suricata ids

PE API

Similarity measure (PE file only) - Checking for service failure