PARA USUARIOS

Cerrar

Mi biblioteca
Mi biblioteca

+ Añadir a la biblioteca

Buscar
Buscar

Soporte
Soporte 24 horas | Normas de contactar

Escribir

una solicitud al rellenar un formulario

Llamar

+7 (495) 789-45-86

Foro

Sus solicitudes

Crear una nueva solicitud

Llamar

+7 (495) 789-45-86

Perfil

ES

RU CN DE EN ES FR IT JP KZ UZ PL BY
Cerrar
Servicios
Escáneres
Dr.Web vxCube
Demo
Peritaje de IIV
Biblioteca de virus
Base de conocimiento

Tecnologías

Términos

Formación y educación

Mitos

Noticias

Trojan.Fakealert.43879

Added to the Dr.Web virus database: 2013-10-14

Virus description added:

Technical Information

Malicious functions:
Creates and executes the following:
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 513 -l psiphon_ssh_4737411b506a593b -pw A178A77ED647E7499649C7A2D63522B32e52023b3e10781ef75e1c5dbd9f6ad732a0f589af3c68e697a0f879d5275216 -D 1080 -v -z -Z 7e4b7a1f7dde6d1ea5d9ea87c1986848eeacfc4c89808674baf6aa0e79e82d40 109.228.19.134
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_8d9be6ef12ead4bc -pw 0986681A64249C32214D45025C4760ABb76565f0588fa9ab3dc4f86e5732220834ed830418aa5a1e3a749bac1507f02d -D 1080 -v -z -Z d658242c973a2aa7ac931f1a07c68d170146b81308e68f7d5be6a3188378f248 109.228.16.83
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 547 -l psiphon_ssh_eb31fbedeb192cf5 -pw 4C7A8338DDB9B73F7D081F752252FB77620062265e45cfd850f5d9b65b51feed319d381c1a6d3947567617f36abc2c6c -D 1080 -v -z -Z 1d07531a725de0d56458826268b5f7c482b0e4d6c1bc756551a20ae7b49a605a 50.116.61.165
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_d532e381ce8afcc4 -pw 21AAF88C59145137E7E3A71D099FCC4D607bc73963cf72777ccfa65674b24c072d7a6ced1b8d7454064e59722e5d4cff -D 1080 -v -z -Z 2a936b11a11dd61fcdb1a69e29e236b5644b68b81daaa6ecc60bd428a4041f3c 88.208.221.86
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_bbca7f28d65f0c42 -pw 3B88E489B0AC4E5B4FA0E1143D141BE3e54f2e857f67134e22235fa47faf3849575e37b62820c247bc65ba8a34914c31 -D 1080 -v -z -Z b4487abc87e74a536b6d99a70ad7c8b2e1a7473f95e79be6a224d867c5a6197b 109.228.16.60
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_069dc48f62be08b0 -pw 08B1F7A2747ABF9AF4B0C170A414F2EFbefce5c78aa6016f1f3d587d2cb29340d885ca4e0bd9b53b13e2b51051339565 -D 1080 -v -z -Z b3a321c7210c9bc22a5a33a7579770534e24ef3236cdc17d86b49dcc41908df7 109.228.16.35
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_441183f9b80a017b -pw FA24CEC43AD2A62CDB4A58BD381871314be6a9aa0bb0b59a86455dfab21c470237a2ab1c5fc07ca2a24ad487f990fccc -D 1080 -v -z -Z ef0371d75ed04ce8304c4f5f2a1699867efdf96585fea800eb5f000d0c486adb 213.171.207.119
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_239411f4e723064b -pw C5B51B7AE24DFB65710F5C6A04E3DC87b4f5cc4ec201f4137671b21163f338ad8648c9fa36d13652a45f2606bece4463 -D 1080 -v -z -Z 3ae3e881e0606e19f7bd0c3ca6765f1cfd511c331ceb61e6fb37abb283272c16 213.171.196.51
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 993 -l psiphon_ssh_200a9cb66d8942ff -pw A4D077FC71C034DD8BDDCB994E8E9181b531b5fef510c2f39871146d97dcbb07ffe32f9d54bee0113f30785ff2283143 -D 1080 -v -z -Z 9ea0ea014a74149a620cf5e57ce7800f92275d5089f244d6c7110980259ae567 109.228.19.124
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_95a4a0f9d0a66005 -pw A912C50A34E40DAB850E7A281F90E16B201a155aad5fbd951fe89859e303964726a52dee36cf258f09d767207bca3377 -D 1080 -v -z -Z e5a6aeb323210e318d36c181a02cdf4759b299356b0fc21f0315b3ae941eca32 109.228.19.160
  • '%TEMP%\psiphon3-plonk.exe' /pid=3416
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_b589bf21758d4b8b -pw 85C496B2386EF4D2544225499ECA6B0Aa5d77d5fdc2a2e510d91406484c8f2a4d64da0607d1a0344771b13e03909b131 -D 1080 -v -z -Z 7fbf6b741a3990ecca5d0ed7d682c53759c49dfa32a53069ddf94dbecf51f2d2 213.171.207.70
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_ed2c53d2065a1433 -pw 91F1C6886D14161348D58ADF26B7A9FB560abff533336abcc67286408fab7919450d48786d39461cdfad8f2d0c19d3c8 -D 1080 -v -z -Z 2fe5d289c09d607d8ce86cb5fa3b354414c087551e840a0ef1682813a7f788e3 109.228.17.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 922 -l psiphon_ssh_6aa3a220950ea506 -pw DDE1FFDA28C966ACDD50C27F34D0D779ed41337529ad8a79d9031742cf429bbe5e9d561dda67a8864bb925a5514254b5 -D 1080 -v -z -Z 09b02054994c66fe4649440d8ad2ab2efca0648c863e27754a8b548c127a6152 213.171.207.94
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_ab00a6edcd942e62 -pw 7642E53EA14FFFCE2382BE7CD7CEC802641a7b1049177dc0a292131951a99f8c0441392418351394b344b330d7b23315 -D 1080 -v -z -Z 106d7e9abbb45c6b06275f773697fac1de810d3833559829a62e2ced7ac40d43 88.208.221.29
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_6a3fa0f1f1d38317 -pw 2869E1CAF6DF35AE71427D1C114CE8278dba9f488a9e4cae0115aca80de4cc35b4cfef33f2186d71a64d2d6839b49bca -D 1080 -v -z -Z 9f99e75488d0dd4cc45ee98292e21ca74e239b2e7c2d46b285d8ce4feb9d8682 109.228.19.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_c95ad082dd38da35 -pw C2728BEDB2C8C5E0CDDDF18AE16CFDC8b3ac8ce910058c47fe71d91c7e7b5a6dcce3834c6ddf367e6ba8182104ce3dcd -D 1080 -v -z -Z addf635286281612cabd741b5132122e5c49f58419fc03f8feb1bb0a5f5414e5 88.208.220.118
  • '%TEMP%\psiphon3-plonk.exe' /pid=3240
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_02505cd3155e800d -pw 2BEBED0651FCFF18C50BEB640F2C14C52e3c5fe0209a9a6cdc3dc2e142ac74e1dce02743ceb10200858178f2656dc443 -D 1080 -v -z -Z e3a111d6cda546263b2dcfa0026b4ec8daf676faa801c51d52e3ca9d26216ae2 109.228.17.68
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 280 -l psiphon_ssh_6775477dff3b0fb8 -pw 005106F0842EA8AC090A661FEF71DC55ac20442335ac25878da721841ac5a6bd6648cf65aac903329cdaed506a009bd7 -D 1080 -v -z -Z fe3fe939e81568dd155830395a57c55d16dfe7f034166c683225de5df7b2f25b 198.58.117.203
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_b589bf21758d4b8b -pw 24F59E60E7938481EF842FA904CB1972a5d77d5fdc2a2e510d91406484c8f2a4d64da0607d1a0344771b13e03909b131 -D 1080 -v -z -Z 7fbf6b741a3990ecca5d0ed7d682c53759c49dfa32a53069ddf94dbecf51f2d2 213.171.207.70
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 993 -l psiphon_ssh_200a9cb66d8942ff -pw A1C63C07C898920642E27A9CF3D887CBb531b5fef510c2f39871146d97dcbb07ffe32f9d54bee0113f30785ff2283143 -D 1080 -v -z -Z 9ea0ea014a74149a620cf5e57ce7800f92275d5089f244d6c7110980259ae567 109.228.19.124
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 748 -l psiphon_ssh_82ded20d2f4fc808 -pw D4B516585DB0556A1ED2DB02591F715F54789f8f04216f1d46c08dffd7b311fa94f7a83cf6123fb8dae865b31ace6d9d -D 1080 -v -z -Z 6dcc6ea0bad98023fa1871872005e0a737b40f63d6ece50ef29b0ff6ec6b2649 213.171.197.198
  • '%TEMP%\psiphon3-plonk.exe' /pid=3280
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_1fdfd36df723edc5 -pw BAF400FF33E74AAF9CB34CE18C5BBFD5ec3d0d741e44546b184164941a514fe50389808696fba4da428c76dc7bdea0df -D 1080 -v -z -Z 089fd025e795744aa44309e64ebd917ef698973eeb7e7a44d6ef0ec4e2aeb1d7 109.228.16.30
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 984 -l psiphon_ssh_386b186c93821d58 -pw D9DB8D1B847A21188538922549D23FE5f1cdafe751eaba45372fa15cfe0b58007c16855dc6103a0cd217b3297f6dc957 -D 1080 -v -z -Z d3b045accb5af6114005ae38210dfdbbe92bed7be7be6838270043e7212caec5 109.228.19.129
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 123 -l psiphon_ssh_b6b66e0b810bfa79 -pw 6F9DBB9BFB51BC0E353E25472087E51F496f75fd5aa6be7dc5942cd8d83bc33ca16e662e2f97fcb40c4f74527ff8780f -D 1080 -v -z -Z 406815c4d4c28bc4240a93a5ad9e3a07f169ae359f35ba5ef38370088c36cd4b 109.228.19.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_ade84e3d844e5077 -pw CAE81F31E0D241029A3ACC2C10AAECD98627a47fc0d76e05a2eb1589c0938bfa643d5a036bc3592014d7c6c3f62d1ca3 -D 1080 -v -z -Z 0de24746124593ddb00b457a77d55afdf4281a116c7458e43aa51d2b49edca85 213.171.206.26
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 261 -l psiphon_ssh_a92e312c6c8c96a3 -pw 93167EA9EB4C9992C4765951D4823E928a37f8e1862b3584d427d4a2b4d421ae10884bb698d9f172fc7c5b95d1dca359 -D 1080 -v -z -Z fb3bfc16c023b03fee6b09ddbf7a0972acce0b80f98d9333e59001f146f0d777 88.208.222.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_4dcd26c03a0606c4 -pw ECD495780B5C24B1A6FEDA11EBDE8379b733f9931e09732eae3a5fa867062ac087e62796244484780289c9750852abc6 -D 1080 -v -z -Z b7aa2658cdd06d009908e970deef5e8e7f0f758833436b2273e13fc77c7d251b 213.171.197.146
  • '%TEMP%\psiphon3-plonk.exe' /pid=1144
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_c7466b8ed0324498 -pw 51E77556E9561857D70E30ACFC4D89E39f03443e30cdffc3eba1dcec304c4d5c058a7b21e80cfcba9b1ad2be3e2f9566 -D 1080 -v -z -Z aeb4fce445d1aac89ecd376a6ca3d64d6137deb8a5e4b79384e54e37c61f3efe 213.171.199.170
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 748 -l psiphon_ssh_82ded20d2f4fc808 -pw AFCF4709FFD7443F7A87BEC78B0406FF54789f8f04216f1d46c08dffd7b311fa94f7a83cf6123fb8dae865b31ace6d9d -D 1080 -v -z -Z 6dcc6ea0bad98023fa1871872005e0a737b40f63d6ece50ef29b0ff6ec6b2649 213.171.197.198
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 922 -l psiphon_ssh_6aa3a220950ea506 -pw 47D954D8C96BDA1702C8999B1D952B51ed41337529ad8a79d9031742cf429bbe5e9d561dda67a8864bb925a5514254b5 -D 1080 -v -z -Z 09b02054994c66fe4649440d8ad2ab2efca0648c863e27754a8b548c127a6152 213.171.207.94
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 547 -l psiphon_ssh_eb31fbedeb192cf5 -pw 8E0C8513473A9C7A2291B815A30775F9620062265e45cfd850f5d9b65b51feed319d381c1a6d3947567617f36abc2c6c -D 1080 -v -z -Z 1d07531a725de0d56458826268b5f7c482b0e4d6c1bc756551a20ae7b49a605a 50.116.61.165
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_6a3fa0f1f1d38317 -pw 70ADE3A01D22AA7ED9275E28311BC7F28dba9f488a9e4cae0115aca80de4cc35b4cfef33f2186d71a64d2d6839b49bca -D 1080 -v -z -Z 9f99e75488d0dd4cc45ee98292e21ca74e239b2e7c2d46b285d8ce4feb9d8682 109.228.19.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_ed2c53d2065a1433 -pw 6D2C570711EDD65556A7D37212C45D32560abff533336abcc67286408fab7919450d48786d39461cdfad8f2d0c19d3c8 -D 1080 -v -z -Z 2fe5d289c09d607d8ce86cb5fa3b354414c087551e840a0ef1682813a7f788e3 109.228.17.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 513 -l psiphon_ssh_4737411b506a593b -pw B51B1C896113B6FC96DE5ABCD350D8232e52023b3e10781ef75e1c5dbd9f6ad732a0f589af3c68e697a0f879d5275216 -D 1080 -v -z -Z 7e4b7a1f7dde6d1ea5d9ea87c1986848eeacfc4c89808674baf6aa0e79e82d40 109.228.19.134
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_8d9be6ef12ead4bc -pw EA9B345EE27130078F95CEB7C9A1B322b76565f0588fa9ab3dc4f86e5732220834ed830418aa5a1e3a749bac1507f02d -D 1080 -v -z -Z d658242c973a2aa7ac931f1a07c68d170146b81308e68f7d5be6a3188378f248 109.228.16.83
  • '%TEMP%\psiphon3-plonk.exe' /pid=1432
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_d532e381ce8afcc4 -pw 161EAE45F226F05AE3E6269563745F55607bc73963cf72777ccfa65674b24c072d7a6ced1b8d7454064e59722e5d4cff -D 1080 -v -z -Z 2a936b11a11dd61fcdb1a69e29e236b5644b68b81daaa6ecc60bd428a4041f3c 88.208.221.86
  • '%TEMP%\psiphon3-plonk.exe' /pid=3516
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_b589bf21758d4b8b -pw 3431FF3F9F6EFEE97579FE3295EDAF86a5d77d5fdc2a2e510d91406484c8f2a4d64da0607d1a0344771b13e03909b131 -D 1080 -v -z -Z 7fbf6b741a3990ecca5d0ed7d682c53759c49dfa32a53069ddf94dbecf51f2d2 213.171.207.70
  • '%TEMP%\psiphon3-plonk.exe' /pid=3500
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 748 -l psiphon_ssh_82ded20d2f4fc808 -pw C8551CC0F68AC5933DDF67B02B09879F54789f8f04216f1d46c08dffd7b311fa94f7a83cf6123fb8dae865b31ace6d9d -D 1080 -v -z -Z 6dcc6ea0bad98023fa1871872005e0a737b40f63d6ece50ef29b0ff6ec6b2649 213.171.197.198
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_ab00a6edcd942e62 -pw D953B5F8994D0E4585D6BE9992E11FE0641a7b1049177dc0a292131951a99f8c0441392418351394b344b330d7b23315 -D 1080 -v -z -Z 106d7e9abbb45c6b06275f773697fac1de810d3833559829a62e2ced7ac40d43 88.208.221.29
  • '%TEMP%\psiphon3-plonk.exe' /pid=3840
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 993 -l psiphon_ssh_200a9cb66d8942ff -pw 8A5AB47D79A09B54C6B11D3713B0D896b531b5fef510c2f39871146d97dcbb07ffe32f9d54bee0113f30785ff2283143 -D 1080 -v -z -Z 9ea0ea014a74149a620cf5e57ce7800f92275d5089f244d6c7110980259ae567 109.228.19.124
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_95a4a0f9d0a66005 -pw 8641DA0ACA50FF4EBDDA6B999518D52C201a155aad5fbd951fe89859e303964726a52dee36cf258f09d767207bca3377 -D 1080 -v -z -Z e5a6aeb323210e318d36c181a02cdf4759b299356b0fc21f0315b3ae941eca32 109.228.19.160
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 261 -l psiphon_ssh_a92e312c6c8c96a3 -pw 0FB15A4261B73940E10A4B2785065B8D8a37f8e1862b3584d427d4a2b4d421ae10884bb698d9f172fc7c5b95d1dca359 -D 1080 -v -z -Z fb3bfc16c023b03fee6b09ddbf7a0972acce0b80f98d9333e59001f146f0d777 88.208.222.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_4dcd26c03a0606c4 -pw F0B207E667B90C625A303D8B61B083F6b733f9931e09732eae3a5fa867062ac087e62796244484780289c9750852abc6 -D 1080 -v -z -Z b7aa2658cdd06d009908e970deef5e8e7f0f758833436b2273e13fc77c7d251b 213.171.197.146
  • '%TEMP%\psiphon3-plonk.exe' /pid=3108
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_c7466b8ed0324498 -pw 47530A6E5755A8EB3ACA9FF38B8408139f03443e30cdffc3eba1dcec304c4d5c058a7b21e80cfcba9b1ad2be3e2f9566 -D 1080 -v -z -Z aeb4fce445d1aac89ecd376a6ca3d64d6137deb8a5e4b79384e54e37c61f3efe 213.171.199.170
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 280 -l psiphon_ssh_6775477dff3b0fb8 -pw 3240265BB62F2E7A75A8866F901B0657ac20442335ac25878da721841ac5a6bd6648cf65aac903329cdaed506a009bd7 -D 1080 -v -z -Z fe3fe939e81568dd155830395a57c55d16dfe7f034166c683225de5df7b2f25b 198.58.117.203
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_c95ad082dd38da35 -pw 20269812CC3BC6074DD1569052A73ED2b3ac8ce910058c47fe71d91c7e7b5a6dcce3834c6ddf367e6ba8182104ce3dcd -D 1080 -v -z -Z addf635286281612cabd741b5132122e5c49f58419fc03f8feb1bb0a5f5414e5 88.208.220.118
  • '%TEMP%\psiphon3-plonk.exe' /pid=888
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_02505cd3155e800d -pw 997F5C342DB5FA0BF8804D99721C02A72e3c5fe0209a9a6cdc3dc2e142ac74e1dce02743ceb10200858178f2656dc443 -D 1080 -v -z -Z e3a111d6cda546263b2dcfa0026b4ec8daf676faa801c51d52e3ca9d26216ae2 109.228.17.68
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_bbca7f28d65f0c42 -pw F5971E4722732DEE68D8DFD12321B8B4e54f2e857f67134e22235fa47faf3849575e37b62820c247bc65ba8a34914c31 -D 1080 -v -z -Z b4487abc87e74a536b6d99a70ad7c8b2e1a7473f95e79be6a224d867c5a6197b 109.228.16.60
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_069dc48f62be08b0 -pw EB5F41B46877BF5EC28EA05B6E9DEDF4befce5c78aa6016f1f3d587d2cb29340d885ca4e0bd9b53b13e2b51051339565 -D 1080 -v -z -Z b3a321c7210c9bc22a5a33a7579770534e24ef3236cdc17d86b49dcc41908df7 109.228.16.35
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_441183f9b80a017b -pw A946BD71D48882A92A07762E8C1FF2784be6a9aa0bb0b59a86455dfab21c470237a2ab1c5fc07ca2a24ad487f990fccc -D 1080 -v -z -Z ef0371d75ed04ce8304c4f5f2a1699867efdf96585fea800eb5f000d0c486adb 213.171.207.119
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_239411f4e723064b -pw 5601BEF2260E815F05681C1D964FF4ADb4f5cc4ec201f4137671b21163f338ad8648c9fa36d13652a45f2606bece4463 -D 1080 -v -z -Z 3ae3e881e0606e19f7bd0c3ca6765f1cfd511c331ceb61e6fb37abb283272c16 213.171.196.51
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_1fdfd36df723edc5 -pw 6F46A2C255AF1740E7949FABD374CB82ec3d0d741e44546b184164941a514fe50389808696fba4da428c76dc7bdea0df -D 1080 -v -z -Z 089fd025e795744aa44309e64ebd917ef698973eeb7e7a44d6ef0ec4e2aeb1d7 109.228.16.30
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 984 -l psiphon_ssh_386b186c93821d58 -pw E837B03A03AF031813B8160A1AEA5E97f1cdafe751eaba45372fa15cfe0b58007c16855dc6103a0cd217b3297f6dc957 -D 1080 -v -z -Z d3b045accb5af6114005ae38210dfdbbe92bed7be7be6838270043e7212caec5 109.228.19.129
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 123 -l psiphon_ssh_b6b66e0b810bfa79 -pw 9A6C42E0A3ED6BCCDCD677FB25E45133496f75fd5aa6be7dc5942cd8d83bc33ca16e662e2f97fcb40c4f74527ff8780f -D 1080 -v -z -Z 406815c4d4c28bc4240a93a5ad9e3a07f169ae359f35ba5ef38370088c36cd4b 109.228.19.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_ade84e3d844e5077 -pw 10136BE3C3E0556CDB2E2EBA45718D518627a47fc0d76e05a2eb1589c0938bfa643d5a036bc3592014d7c6c3f62d1ca3 -D 1080 -v -z -Z 0de24746124593ddb00b457a77d55afdf4281a116c7458e43aa51d2b49edca85 213.171.206.26
  • '%TEMP%\psiphon3-plonk.exe' /pid=2144
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_d532e381ce8afcc4 -pw 33D3B807C77FE1991E6127C87E3BB8F6607bc73963cf72777ccfa65674b24c072d7a6ced1b8d7454064e59722e5d4cff -D 1080 -v -z -Z 2a936b11a11dd61fcdb1a69e29e236b5644b68b81daaa6ecc60bd428a4041f3c 88.208.221.86
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 513 -l psiphon_ssh_4737411b506a593b -pw A29DF01F2F3619027CDE74D1B0F36C6A2e52023b3e10781ef75e1c5dbd9f6ad732a0f589af3c68e697a0f879d5275216 -D 1080 -v -z -Z 7e4b7a1f7dde6d1ea5d9ea87c1986848eeacfc4c89808674baf6aa0e79e82d40 109.228.19.134
  • '%TEMP%\psiphon3-plonk.exe' /pid=2652
  • '%TEMP%\psiphon3-plonk.exe' /pid=3268
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_239411f4e723064b -pw E461E7C3D11E587D346BEEDE445CB4B1b4f5cc4ec201f4137671b21163f338ad8648c9fa36d13652a45f2606bece4463 -D 1080 -v -z -Z 3ae3e881e0606e19f7bd0c3ca6765f1cfd511c331ceb61e6fb37abb283272c16 213.171.196.51
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_bbca7f28d65f0c42 -pw 21838712DE15B1059882AC77F5767018e54f2e857f67134e22235fa47faf3849575e37b62820c247bc65ba8a34914c31 -D 1080 -v -z -Z b4487abc87e74a536b6d99a70ad7c8b2e1a7473f95e79be6a224d867c5a6197b 109.228.16.60
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_8d9be6ef12ead4bc -pw 4B13B4D17D857A6C94E702B5D2120439b76565f0588fa9ab3dc4f86e5732220834ed830418aa5a1e3a749bac1507f02d -D 1080 -v -z -Z d658242c973a2aa7ac931f1a07c68d170146b81308e68f7d5be6a3188378f248 109.228.16.83
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_441183f9b80a017b -pw E33FAC781EF75AA24AC03898543D61954be6a9aa0bb0b59a86455dfab21c470237a2ab1c5fc07ca2a24ad487f990fccc -D 1080 -v -z -Z ef0371d75ed04ce8304c4f5f2a1699867efdf96585fea800eb5f000d0c486adb 213.171.207.119
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_6a3fa0f1f1d38317 -pw 1A68BF0C601E7422DD02768EA4B8EB208dba9f488a9e4cae0115aca80de4cc35b4cfef33f2186d71a64d2d6839b49bca -D 1080 -v -z -Z 9f99e75488d0dd4cc45ee98292e21ca74e239b2e7c2d46b285d8ce4feb9d8682 109.228.19.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_ed2c53d2065a1433 -pw FAE6E4EA4E460462C0613B5BB5660BA0560abff533336abcc67286408fab7919450d48786d39461cdfad8f2d0c19d3c8 -D 1080 -v -z -Z 2fe5d289c09d607d8ce86cb5fa3b354414c087551e840a0ef1682813a7f788e3 109.228.17.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_ab00a6edcd942e62 -pw 4A243A92798D9853F71B12E76178C4FA641a7b1049177dc0a292131951a99f8c0441392418351394b344b330d7b23315 -D 1080 -v -z -Z 106d7e9abbb45c6b06275f773697fac1de810d3833559829a62e2ced7ac40d43 88.208.221.29
  • '%TEMP%\psiphon3-plonk.exe' /pid=648
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 547 -l psiphon_ssh_eb31fbedeb192cf5 -pw BEB62B7D434926843F9FD516F756C848620062265e45cfd850f5d9b65b51feed319d381c1a6d3947567617f36abc2c6c -D 1080 -v -z -Z 1d07531a725de0d56458826268b5f7c482b0e4d6c1bc756551a20ae7b49a605a 50.116.61.165
  • '%TEMP%\psiphon3-plonk.exe' /pid=3080
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 922 -l psiphon_ssh_6aa3a220950ea506 -pw A55B7F632E021D9C6A5C1161691B9F08ed41337529ad8a79d9031742cf429bbe5e9d561dda67a8864bb925a5514254b5 -D 1080 -v -z -Z 09b02054994c66fe4649440d8ad2ab2efca0648c863e27754a8b548c127a6152 213.171.207.94
  • '%TEMP%\psiphon3-plonk.exe' /pid=3844
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 280 -l psiphon_ssh_6775477dff3b0fb8 -pw FB707189A79A736E2613AA2BF9A19B39ac20442335ac25878da721841ac5a6bd6648cf65aac903329cdaed506a009bd7 -D 1080 -v -z -Z fe3fe939e81568dd155830395a57c55d16dfe7f034166c683225de5df7b2f25b 198.58.117.203
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_c95ad082dd38da35 -pw BA4FAB6DBE1E1DFFCFC32D2A69B7EEF3b3ac8ce910058c47fe71d91c7e7b5a6dcce3834c6ddf367e6ba8182104ce3dcd -D 1080 -v -z -Z addf635286281612cabd741b5132122e5c49f58419fc03f8feb1bb0a5f5414e5 88.208.220.118
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_4dcd26c03a0606c4 -pw 67FD0810DACBD07BD51A23C7E11F7ECCb733f9931e09732eae3a5fa867062ac087e62796244484780289c9750852abc6 -D 1080 -v -z -Z b7aa2658cdd06d009908e970deef5e8e7f0f758833436b2273e13fc77c7d251b 213.171.197.146
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_02505cd3155e800d -pw 278DECC05294B054E80F5A4BB454EC322e3c5fe0209a9a6cdc3dc2e142ac74e1dce02743ceb10200858178f2656dc443 -D 1080 -v -z -Z e3a111d6cda546263b2dcfa0026b4ec8daf676faa801c51d52e3ca9d26216ae2 109.228.17.68
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 993 -l psiphon_ssh_200a9cb66d8942ff -pw B9F805160A375B681A1A40655F681229b531b5fef510c2f39871146d97dcbb07ffe32f9d54bee0113f30785ff2283143 -D 1080 -v -z -Z 9ea0ea014a74149a620cf5e57ce7800f92275d5089f244d6c7110980259ae567 109.228.19.124
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_95a4a0f9d0a66005 -pw 5B5F30110C9DB34765D9D318B67A49B6201a155aad5fbd951fe89859e303964726a52dee36cf258f09d767207bca3377 -D 1080 -v -z -Z e5a6aeb323210e318d36c181a02cdf4759b299356b0fc21f0315b3ae941eca32 109.228.19.160
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 748 -l psiphon_ssh_82ded20d2f4fc808 -pw E6E8F0723C286F55F3AC960E3C979E5354789f8f04216f1d46c08dffd7b311fa94f7a83cf6123fb8dae865b31ace6d9d -D 1080 -v -z -Z 6dcc6ea0bad98023fa1871872005e0a737b40f63d6ece50ef29b0ff6ec6b2649 213.171.197.198
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_b589bf21758d4b8b -pw 0C6A03416C063AB611355706CDEE2E91a5d77d5fdc2a2e510d91406484c8f2a4d64da0607d1a0344771b13e03909b131 -D 1080 -v -z -Z 7fbf6b741a3990ecca5d0ed7d682c53759c49dfa32a53069ddf94dbecf51f2d2 213.171.207.70
  • '%TEMP%\psiphon3-plonk.exe' /pid=2504
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_ade84e3d844e5077 -pw 9E79001AA7B5F486925FE314FB194F168627a47fc0d76e05a2eb1589c0938bfa643d5a036bc3592014d7c6c3f62d1ca3 -D 1080 -v -z -Z 0de24746124593ddb00b457a77d55afdf4281a116c7458e43aa51d2b49edca85 213.171.206.26
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_069dc48f62be08b0 -pw 2D1944E48D80892592AAA82A6087CAC2befce5c78aa6016f1f3d587d2cb29340d885ca4e0bd9b53b13e2b51051339565 -D 1080 -v -z -Z b3a321c7210c9bc22a5a33a7579770534e24ef3236cdc17d86b49dcc41908df7 109.228.16.35
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 123 -l psiphon_ssh_b6b66e0b810bfa79 -pw 9DCE069BC29643AD6C7B3427C7C2CE65496f75fd5aa6be7dc5942cd8d83bc33ca16e662e2f97fcb40c4f74527ff8780f -D 1080 -v -z -Z 406815c4d4c28bc4240a93a5ad9e3a07f169ae359f35ba5ef38370088c36cd4b 109.228.19.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_c7466b8ed0324498 -pw B4B90D557C7D4B6B9D472BD994E70DAD9f03443e30cdffc3eba1dcec304c4d5c058a7b21e80cfcba9b1ad2be3e2f9566 -D 1080 -v -z -Z aeb4fce445d1aac89ecd376a6ca3d64d6137deb8a5e4b79384e54e37c61f3efe 213.171.199.170
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 261 -l psiphon_ssh_a92e312c6c8c96a3 -pw DA9828AADA03CF9D4AFF00AAD31939F28a37f8e1862b3584d427d4a2b4d421ae10884bb698d9f172fc7c5b95d1dca359 -D 1080 -v -z -Z fb3bfc16c023b03fee6b09ddbf7a0972acce0b80f98d9333e59001f146f0d777 88.208.222.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_1fdfd36df723edc5 -pw A313E1CEF92D7226A11F8D6D891FBDBCec3d0d741e44546b184164941a514fe50389808696fba4da428c76dc7bdea0df -D 1080 -v -z -Z 089fd025e795744aa44309e64ebd917ef698973eeb7e7a44d6ef0ec4e2aeb1d7 109.228.16.30
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 984 -l psiphon_ssh_386b186c93821d58 -pw 42E0D4EFD20567576E53277AD57AA962f1cdafe751eaba45372fa15cfe0b58007c16855dc6103a0cd217b3297f6dc957 -D 1080 -v -z -Z d3b045accb5af6114005ae38210dfdbbe92bed7be7be6838270043e7212caec5 109.228.19.129
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_95a4a0f9d0a66005 -pw 96FD28D24B19B214504C9C5D6AFFB330201a155aad5fbd951fe89859e303964726a52dee36cf258f09d767207bca3377 -D 1080 -v -z -Z e5a6aeb323210e318d36c181a02cdf4759b299356b0fc21f0315b3ae941eca32 109.228.19.160
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 513 -l psiphon_ssh_4737411b506a593b -pw C6D857CF17179EF602829AD07972532B2e52023b3e10781ef75e1c5dbd9f6ad732a0f589af3c68e697a0f879d5275216 -D 1080 -v -z -Z 7e4b7a1f7dde6d1ea5d9ea87c1986848eeacfc4c89808674baf6aa0e79e82d40 109.228.19.134
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_8d9be6ef12ead4bc -pw D5A0A813102DF82863021DC3DE2F3FEDb76565f0588fa9ab3dc4f86e5732220834ed830418aa5a1e3a749bac1507f02d -D 1080 -v -z -Z d658242c973a2aa7ac931f1a07c68d170146b81308e68f7d5be6a3188378f248 109.228.16.83
  • '%TEMP%\psiphon3-plonk.exe' /pid=3952
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_d532e381ce8afcc4 -pw 30519CD3C28B65CACCE7C9EA653A1E76607bc73963cf72777ccfa65674b24c072d7a6ced1b8d7454064e59722e5d4cff -D 1080 -v -z -Z 2a936b11a11dd61fcdb1a69e29e236b5644b68b81daaa6ecc60bd428a4041f3c 88.208.221.86
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_bbca7f28d65f0c42 -pw CAA084E8C5DCAA9F8FAAB56B67757CD2e54f2e857f67134e22235fa47faf3849575e37b62820c247bc65ba8a34914c31 -D 1080 -v -z -Z b4487abc87e74a536b6d99a70ad7c8b2e1a7473f95e79be6a224d867c5a6197b 109.228.16.60
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_069dc48f62be08b0 -pw 46C754814244D51858C6407B327FCF9Ebefce5c78aa6016f1f3d587d2cb29340d885ca4e0bd9b53b13e2b51051339565 -D 1080 -v -z -Z b3a321c7210c9bc22a5a33a7579770534e24ef3236cdc17d86b49dcc41908df7 109.228.16.35
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_441183f9b80a017b -pw C9126A5F3C45EACCB6D18E7549E35C804be6a9aa0bb0b59a86455dfab21c470237a2ab1c5fc07ca2a24ad487f990fccc -D 1080 -v -z -Z ef0371d75ed04ce8304c4f5f2a1699867efdf96585fea800eb5f000d0c486adb 213.171.207.119
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_239411f4e723064b -pw A659EF4CADDEA49FCF6AADE29E267A9Fb4f5cc4ec201f4137671b21163f338ad8648c9fa36d13652a45f2606bece4463 -D 1080 -v -z -Z 3ae3e881e0606e19f7bd0c3ca6765f1cfd511c331ceb61e6fb37abb283272c16 213.171.196.51
  • '%TEMP%\psiphon3-plonk.exe' /pid=768
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_6a3fa0f1f1d38317 -pw C43A75CC5C3AEC8EC12948198D184CE18dba9f488a9e4cae0115aca80de4cc35b4cfef33f2186d71a64d2d6839b49bca -D 1080 -v -z -Z 9f99e75488d0dd4cc45ee98292e21ca74e239b2e7c2d46b285d8ce4feb9d8682 109.228.19.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_95a4a0f9d0a66005 -pw BB8B0A6BB67FB9793E892A38E569F57F201a155aad5fbd951fe89859e303964726a52dee36cf258f09d767207bca3377 -D 1080 -v -z -Z e5a6aeb323210e318d36c181a02cdf4759b299356b0fc21f0315b3ae941eca32 109.228.19.160
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_ab00a6edcd942e62 -pw EC06F1C6C9E39E067D7072A8B2A1E231641a7b1049177dc0a292131951a99f8c0441392418351394b344b330d7b23315 -D 1080 -v -z -Z 106d7e9abbb45c6b06275f773697fac1de810d3833559829a62e2ced7ac40d43 88.208.221.29
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 922 -l psiphon_ssh_6aa3a220950ea506 -pw E1140DD00F1A99E908CCB987BD96856Aed41337529ad8a79d9031742cf429bbe5e9d561dda67a8864bb925a5514254b5 -D 1080 -v -z -Z 09b02054994c66fe4649440d8ad2ab2efca0648c863e27754a8b548c127a6152 213.171.207.94
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 547 -l psiphon_ssh_eb31fbedeb192cf5 -pw 7D73DF917986AEA961B862FE345C8087620062265e45cfd850f5d9b65b51feed319d381c1a6d3947567617f36abc2c6c -D 1080 -v -z -Z 1d07531a725de0d56458826268b5f7c482b0e4d6c1bc756551a20ae7b49a605a 50.116.61.165
  • '%TEMP%\psiphon3-plonk.exe' /pid=3396
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_ed2c53d2065a1433 -pw 7BF2E06DB6334E337BE744C7F5ABDC20560abff533336abcc67286408fab7919450d48786d39461cdfad8f2d0c19d3c8 -D 1080 -v -z -Z 2fe5d289c09d607d8ce86cb5fa3b354414c087551e840a0ef1682813a7f788e3 109.228.17.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 280 -l psiphon_ssh_6775477dff3b0fb8 -pw 05E6266256C124FCED49DA49F80CE1B0ac20442335ac25878da721841ac5a6bd6648cf65aac903329cdaed506a009bd7 -D 1080 -v -z -Z fe3fe939e81568dd155830395a57c55d16dfe7f034166c683225de5df7b2f25b 198.58.117.203
  • '%TEMP%\psiphon3-plonk.exe' /pid=4028
  • '%TEMP%\psiphon3-plonk.exe' /pid=3372
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_02505cd3155e800d -pw 163AEEEDA0744CD02BAA0F4504BF92242e3c5fe0209a9a6cdc3dc2e142ac74e1dce02743ceb10200858178f2656dc443 -D 1080 -v -z -Z e3a111d6cda546263b2dcfa0026b4ec8daf676faa801c51d52e3ca9d26216ae2 109.228.17.68
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_b589bf21758d4b8b -pw C4EE5744EDF12825EAE3FB20052ADEF2a5d77d5fdc2a2e510d91406484c8f2a4d64da0607d1a0344771b13e03909b131 -D 1080 -v -z -Z 7fbf6b741a3990ecca5d0ed7d682c53759c49dfa32a53069ddf94dbecf51f2d2 213.171.207.70
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 993 -l psiphon_ssh_200a9cb66d8942ff -pw 5036237C71E13CA1C95F8900398BE864b531b5fef510c2f39871146d97dcbb07ffe32f9d54bee0113f30785ff2283143 -D 1080 -v -z -Z 9ea0ea014a74149a620cf5e57ce7800f92275d5089f244d6c7110980259ae567 109.228.19.124
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_c95ad082dd38da35 -pw ED347BAB560F03E83EFDEAE602E09E6Cb3ac8ce910058c47fe71d91c7e7b5a6dcce3834c6ddf367e6ba8182104ce3dcd -D 1080 -v -z -Z addf635286281612cabd741b5132122e5c49f58419fc03f8feb1bb0a5f5414e5 88.208.220.118
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 748 -l psiphon_ssh_82ded20d2f4fc808 -pw 148A1FFF3A4E42010F1592DDE575021254789f8f04216f1d46c08dffd7b311fa94f7a83cf6123fb8dae865b31ace6d9d -D 1080 -v -z -Z 6dcc6ea0bad98023fa1871872005e0a737b40f63d6ece50ef29b0ff6ec6b2649 213.171.197.198
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_1fdfd36df723edc5 -pw 200F4D7E6C894A6BD380FFFC1246C96Dec3d0d741e44546b184164941a514fe50389808696fba4da428c76dc7bdea0df -D 1080 -v -z -Z 089fd025e795744aa44309e64ebd917ef698973eeb7e7a44d6ef0ec4e2aeb1d7 109.228.16.30
  • '%TEMP%\psiphon3-plonk.exe' /pid=2992
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 123 -l psiphon_ssh_b6b66e0b810bfa79 -pw A094A2B56AC0425B2A360A97A99128F8496f75fd5aa6be7dc5942cd8d83bc33ca16e662e2f97fcb40c4f74527ff8780f -D 1080 -v -z -Z 406815c4d4c28bc4240a93a5ad9e3a07f169ae359f35ba5ef38370088c36cd4b 109.228.19.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_ade84e3d844e5077 -pw 5DB7BF8B8972FDA09623960BF3E331578627a47fc0d76e05a2eb1589c0938bfa643d5a036bc3592014d7c6c3f62d1ca3 -D 1080 -v -z -Z 0de24746124593ddb00b457a77d55afdf4281a116c7458e43aa51d2b49edca85 213.171.206.26
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 261 -l psiphon_ssh_a92e312c6c8c96a3 -pw E7310C04D6353EA43D11106FD4BE62FE8a37f8e1862b3584d427d4a2b4d421ae10884bb698d9f172fc7c5b95d1dca359 -D 1080 -v -z -Z fb3bfc16c023b03fee6b09ddbf7a0972acce0b80f98d9333e59001f146f0d777 88.208.222.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_4dcd26c03a0606c4 -pw ADF4DD70B63DDD067F7922248F26EF89b733f9931e09732eae3a5fa867062ac087e62796244484780289c9750852abc6 -D 1080 -v -z -Z b7aa2658cdd06d009908e970deef5e8e7f0f758833436b2273e13fc77c7d251b 213.171.197.146
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 984 -l psiphon_ssh_386b186c93821d58 -pw 39E9AB99FB220ECDA9D17248D6D58C18f1cdafe751eaba45372fa15cfe0b58007c16855dc6103a0cd217b3297f6dc957 -D 1080 -v -z -Z d3b045accb5af6114005ae38210dfdbbe92bed7be7be6838270043e7212caec5 109.228.19.129
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_c7466b8ed0324498 -pw 9E0BB41B9D751E25697ED0F8CBB857FC9f03443e30cdffc3eba1dcec304c4d5c058a7b21e80cfcba9b1ad2be3e2f9566 -D 1080 -v -z -Z aeb4fce445d1aac89ecd376a6ca3d64d6137deb8a5e4b79384e54e37c61f3efe 213.171.199.170
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_02505cd3155e800d -pw 24C2C9CD8BF38DE4FA18C407FE1A9FC32e3c5fe0209a9a6cdc3dc2e142ac74e1dce02743ceb10200858178f2656dc443 -D 1080 -v -z -Z e3a111d6cda546263b2dcfa0026b4ec8daf676faa801c51d52e3ca9d26216ae2 109.228.17.68
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 547 -l psiphon_ssh_eb31fbedeb192cf5 -pw 5D28DECC91E248F38E48EB91ACD06359620062265e45cfd850f5d9b65b51feed319d381c1a6d3947567617f36abc2c6c -D 1080 -v -z -Z 1d07531a725de0d56458826268b5f7c482b0e4d6c1bc756551a20ae7b49a605a 50.116.61.165
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 922 -l psiphon_ssh_6aa3a220950ea506 -pw 4E19D9B6A58F6AF73A3AD0EEDF5373A7ed41337529ad8a79d9031742cf429bbe5e9d561dda67a8864bb925a5514254b5 -D 1080 -v -z -Z 09b02054994c66fe4649440d8ad2ab2efca0648c863e27754a8b548c127a6152 213.171.207.94
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 748 -l psiphon_ssh_82ded20d2f4fc808 -pw F2BEC4BAD0413E73B51394BC45B8958054789f8f04216f1d46c08dffd7b311fa94f7a83cf6123fb8dae865b31ace6d9d -D 1080 -v -z -Z 6dcc6ea0bad98023fa1871872005e0a737b40f63d6ece50ef29b0ff6ec6b2649 213.171.197.198
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_c95ad082dd38da35 -pw 21EBC35A204C781470481B353D401CC8b3ac8ce910058c47fe71d91c7e7b5a6dcce3834c6ddf367e6ba8182104ce3dcd -D 1080 -v -z -Z addf635286281612cabd741b5132122e5c49f58419fc03f8feb1bb0a5f5414e5 88.208.220.118
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_4dcd26c03a0606c4 -pw 4C5A2FA290028BF9B47D861FBF94DCA9b733f9931e09732eae3a5fa867062ac087e62796244484780289c9750852abc6 -D 1080 -v -z -Z b7aa2658cdd06d009908e970deef5e8e7f0f758833436b2273e13fc77c7d251b 213.171.197.146
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 993 -l psiphon_ssh_200a9cb66d8942ff -pw 35F26FDD2A8C5B2B3AF011679C55B17Fb531b5fef510c2f39871146d97dcbb07ffe32f9d54bee0113f30785ff2283143 -D 1080 -v -z -Z 9ea0ea014a74149a620cf5e57ce7800f92275d5089f244d6c7110980259ae567 109.228.19.124
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 280 -l psiphon_ssh_6775477dff3b0fb8 -pw 0A53B88E0F805370CDCC2885D68D4748ac20442335ac25878da721841ac5a6bd6648cf65aac903329cdaed506a009bd7 -D 1080 -v -z -Z fe3fe939e81568dd155830395a57c55d16dfe7f034166c683225de5df7b2f25b 198.58.117.203
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_1fdfd36df723edc5 -pw 38729B159F656A873EEAB0C517626C60ec3d0d741e44546b184164941a514fe50389808696fba4da428c76dc7bdea0df -D 1080 -v -z -Z 089fd025e795744aa44309e64ebd917ef698973eeb7e7a44d6ef0ec4e2aeb1d7 109.228.16.30
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_ab00a6edcd942e62 -pw 193C7CBF2DCBB568A659E8ED66C4F3F4641a7b1049177dc0a292131951a99f8c0441392418351394b344b330d7b23315 -D 1080 -v -z -Z 106d7e9abbb45c6b06275f773697fac1de810d3833559829a62e2ced7ac40d43 88.208.221.29
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 123 -l psiphon_ssh_b6b66e0b810bfa79 -pw 164D7D975EC7BCF7E43D8FEC8F804B3E496f75fd5aa6be7dc5942cd8d83bc33ca16e662e2f97fcb40c4f74527ff8780f -D 1080 -v -z -Z 406815c4d4c28bc4240a93a5ad9e3a07f169ae359f35ba5ef38370088c36cd4b 109.228.19.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_ade84e3d844e5077 -pw 48649A8700F23BDB4F18D7B65BEAF23F8627a47fc0d76e05a2eb1589c0938bfa643d5a036bc3592014d7c6c3f62d1ca3 -D 1080 -v -z -Z 0de24746124593ddb00b457a77d55afdf4281a116c7458e43aa51d2b49edca85 213.171.206.26
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 984 -l psiphon_ssh_386b186c93821d58 -pw 131E0CF5C3CDAD42E200D42669E35880f1cdafe751eaba45372fa15cfe0b58007c16855dc6103a0cd217b3297f6dc957 -D 1080 -v -z -Z d3b045accb5af6114005ae38210dfdbbe92bed7be7be6838270043e7212caec5 109.228.19.129
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_b589bf21758d4b8b -pw 2C3CFA7E1E60B4280B7F99AC1B6BDCE5a5d77d5fdc2a2e510d91406484c8f2a4d64da0607d1a0344771b13e03909b131 -D 1080 -v -z -Z 7fbf6b741a3990ecca5d0ed7d682c53759c49dfa32a53069ddf94dbecf51f2d2 213.171.207.70
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_6a3fa0f1f1d38317 -pw 29BEE90F00CCC57FB0A6AAD4D0AE74EB8dba9f488a9e4cae0115aca80de4cc35b4cfef33f2186d71a64d2d6839b49bca -D 1080 -v -z -Z 9f99e75488d0dd4cc45ee98292e21ca74e239b2e7c2d46b285d8ce4feb9d8682 109.228.19.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_95a4a0f9d0a66005 -pw 1EA3AD5FA2972BC8413FD81A8522F4B6201a155aad5fbd951fe89859e303964726a52dee36cf258f09d767207bca3377 -D 1080 -v -z -Z e5a6aeb323210e318d36c181a02cdf4759b299356b0fc21f0315b3ae941eca32 109.228.19.160
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 123 -l psiphon_ssh_b6b66e0b810bfa79 -pw 45D998E67EAC0AC5876BBCAE71CE422C496f75fd5aa6be7dc5942cd8d83bc33ca16e662e2f97fcb40c4f74527ff8780f -D 1080 -v -z -Z 406815c4d4c28bc4240a93a5ad9e3a07f169ae359f35ba5ef38370088c36cd4b 109.228.19.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_ade84e3d844e5077 -pw F2C5AC2A7A9A040D4AF77B5B566D909E8627a47fc0d76e05a2eb1589c0938bfa643d5a036bc3592014d7c6c3f62d1ca3 -D 1080 -v -z -Z 0de24746124593ddb00b457a77d55afdf4281a116c7458e43aa51d2b49edca85 213.171.206.26
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_bbca7f28d65f0c42 -pw D3F53A6040CEB2CD14883CB88F1BE721e54f2e857f67134e22235fa47faf3849575e37b62820c247bc65ba8a34914c31 -D 1080 -v -z -Z b4487abc87e74a536b6d99a70ad7c8b2e1a7473f95e79be6a224d867c5a6197b 109.228.16.60
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_069dc48f62be08b0 -pw DED307201A1AEEBBA402F8B5D0100BF7befce5c78aa6016f1f3d587d2cb29340d885ca4e0bd9b53b13e2b51051339565 -D 1080 -v -z -Z b3a321c7210c9bc22a5a33a7579770534e24ef3236cdc17d86b49dcc41908df7 109.228.16.35
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_6a3fa0f1f1d38317 -pw A5E4C245CB5611B7434064418657CDAE8dba9f488a9e4cae0115aca80de4cc35b4cfef33f2186d71a64d2d6839b49bca -D 1080 -v -z -Z 9f99e75488d0dd4cc45ee98292e21ca74e239b2e7c2d46b285d8ce4feb9d8682 109.228.19.66
  • '%TEMP%\psiphon3-plonk.exe' /pid=2892
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_1fdfd36df723edc5 -pw 2F9CC67334C9A7284BB98874C3B1CD23ec3d0d741e44546b184164941a514fe50389808696fba4da428c76dc7bdea0df -D 1080 -v -z -Z 089fd025e795744aa44309e64ebd917ef698973eeb7e7a44d6ef0ec4e2aeb1d7 109.228.16.30
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_ab00a6edcd942e62 -pw D9F12204CD248F8424A556EEEB16554C641a7b1049177dc0a292131951a99f8c0441392418351394b344b330d7b23315 -D 1080 -v -z -Z 106d7e9abbb45c6b06275f773697fac1de810d3833559829a62e2ced7ac40d43 88.208.221.29
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_c7466b8ed0324498 -pw 77BAF0B66738F443D3933A31C1AD2C399f03443e30cdffc3eba1dcec304c4d5c058a7b21e80cfcba9b1ad2be3e2f9566 -D 1080 -v -z -Z aeb4fce445d1aac89ecd376a6ca3d64d6137deb8a5e4b79384e54e37c61f3efe 213.171.199.170
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_d532e381ce8afcc4 -pw A0D2B93684FE02A3579742D23B1D2406607bc73963cf72777ccfa65674b24c072d7a6ced1b8d7454064e59722e5d4cff -D 1080 -v -z -Z 2a936b11a11dd61fcdb1a69e29e236b5644b68b81daaa6ecc60bd428a4041f3c 88.208.221.86
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_ed2c53d2065a1433 -pw 7B19F94DAD4B3D78189856C4B6064366560abff533336abcc67286408fab7919450d48786d39461cdfad8f2d0c19d3c8 -D 1080 -v -z -Z 2fe5d289c09d607d8ce86cb5fa3b354414c087551e840a0ef1682813a7f788e3 109.228.17.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 261 -l psiphon_ssh_a92e312c6c8c96a3 -pw 0F1EF11675DC85929E4A89EA1529939D8a37f8e1862b3584d427d4a2b4d421ae10884bb698d9f172fc7c5b95d1dca359 -D 1080 -v -z -Z fb3bfc16c023b03fee6b09ddbf7a0972acce0b80f98d9333e59001f146f0d777 88.208.222.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_441183f9b80a017b -pw 09090720A2C3D452DD87ECE887A4738A4be6a9aa0bb0b59a86455dfab21c470237a2ab1c5fc07ca2a24ad487f990fccc -D 1080 -v -z -Z ef0371d75ed04ce8304c4f5f2a1699867efdf96585fea800eb5f000d0c486adb 213.171.207.119
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_239411f4e723064b -pw 749FD5E66AEEBD679FE1B14C38E6521Eb4f5cc4ec201f4137671b21163f338ad8648c9fa36d13652a45f2606bece4463 -D 1080 -v -z -Z 3ae3e881e0606e19f7bd0c3ca6765f1cfd511c331ceb61e6fb37abb283272c16 213.171.196.51
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 513 -l psiphon_ssh_4737411b506a593b -pw 5463F563D52D69F1DEC55F5F35BB40F72e52023b3e10781ef75e1c5dbd9f6ad732a0f589af3c68e697a0f879d5275216 -D 1080 -v -z -Z 7e4b7a1f7dde6d1ea5d9ea87c1986848eeacfc4c89808674baf6aa0e79e82d40 109.228.19.134
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_8d9be6ef12ead4bc -pw D3E877AFA91A9082A70A7F841BA69B3Db76565f0588fa9ab3dc4f86e5732220834ed830418aa5a1e3a749bac1507f02d -D 1080 -v -z -Z d658242c973a2aa7ac931f1a07c68d170146b81308e68f7d5be6a3188378f248 109.228.16.83
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_069dc48f62be08b0 -pw DAD8D131DF126F457A64134C22632E87befce5c78aa6016f1f3d587d2cb29340d885ca4e0bd9b53b13e2b51051339565 -D 1080 -v -z -Z b3a321c7210c9bc22a5a33a7579770534e24ef3236cdc17d86b49dcc41908df7 109.228.16.35
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_ab00a6edcd942e62 -pw 0416EB67699E5B644FAEF535040C8916641a7b1049177dc0a292131951a99f8c0441392418351394b344b330d7b23315 -D 1080 -v -z -Z 106d7e9abbb45c6b06275f773697fac1de810d3833559829a62e2ced7ac40d43 88.208.221.29
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_6a3fa0f1f1d38317 -pw C258C660A8F4C62B0618DCF743D997718dba9f488a9e4cae0115aca80de4cc35b4cfef33f2186d71a64d2d6839b49bca -D 1080 -v -z -Z 9f99e75488d0dd4cc45ee98292e21ca74e239b2e7c2d46b285d8ce4feb9d8682 109.228.19.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_ade84e3d844e5077 -pw EDBA27DA35ED7FB790F8A08111273F8E8627a47fc0d76e05a2eb1589c0938bfa643d5a036bc3592014d7c6c3f62d1ca3 -D 1080 -v -z -Z 0de24746124593ddb00b457a77d55afdf4281a116c7458e43aa51d2b49edca85 213.171.206.26
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_1fdfd36df723edc5 -pw 7916C0C7C7F374F0FDE6C1C8102B0E07ec3d0d741e44546b184164941a514fe50389808696fba4da428c76dc7bdea0df -D 1080 -v -z -Z 089fd025e795744aa44309e64ebd917ef698973eeb7e7a44d6ef0ec4e2aeb1d7 109.228.16.30
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_b589bf21758d4b8b -pw FD435A8DC5DB81B30D0AE820738DCC11a5d77d5fdc2a2e510d91406484c8f2a4d64da0607d1a0344771b13e03909b131 -D 1080 -v -z -Z 7fbf6b741a3990ecca5d0ed7d682c53759c49dfa32a53069ddf94dbecf51f2d2 213.171.207.70
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 922 -l psiphon_ssh_6aa3a220950ea506 -pw 767C2507BF317298385AF4757FE55D93ed41337529ad8a79d9031742cf429bbe5e9d561dda67a8864bb925a5514254b5 -D 1080 -v -z -Z 09b02054994c66fe4649440d8ad2ab2efca0648c863e27754a8b548c127a6152 213.171.207.94
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_95a4a0f9d0a66005 -pw BC931315F23F92CBAD85000950DC3404201a155aad5fbd951fe89859e303964726a52dee36cf258f09d767207bca3377 -D 1080 -v -z -Z e5a6aeb323210e318d36c181a02cdf4759b299356b0fc21f0315b3ae941eca32 109.228.19.160
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 984 -l psiphon_ssh_386b186c93821d58 -pw AAF4EF8902532CF9122C5183AC21497Df1cdafe751eaba45372fa15cfe0b58007c16855dc6103a0cd217b3297f6dc957 -D 1080 -v -z -Z d3b045accb5af6114005ae38210dfdbbe92bed7be7be6838270043e7212caec5 109.228.19.129
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_8d9be6ef12ead4bc -pw 75A8ADCBC782EC952D6E9EDA36A46D49b76565f0588fa9ab3dc4f86e5732220834ed830418aa5a1e3a749bac1507f02d -D 1080 -v -z -Z d658242c973a2aa7ac931f1a07c68d170146b81308e68f7d5be6a3188378f248 109.228.16.83
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_441183f9b80a017b -pw 9E53DB166AFD4E90F66149C7F190B6954be6a9aa0bb0b59a86455dfab21c470237a2ab1c5fc07ca2a24ad487f990fccc -D 1080 -v -z -Z ef0371d75ed04ce8304c4f5f2a1699867efdf96585fea800eb5f000d0c486adb 213.171.207.119
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_d532e381ce8afcc4 -pw B82EAA51CBF81DCF38650BA73C7033DA607bc73963cf72777ccfa65674b24c072d7a6ced1b8d7454064e59722e5d4cff -D 1080 -v -z -Z 2a936b11a11dd61fcdb1a69e29e236b5644b68b81daaa6ecc60bd428a4041f3c 88.208.221.86
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 513 -l psiphon_ssh_4737411b506a593b -pw B12EEC2565913C26BA8EB3C571A786CB2e52023b3e10781ef75e1c5dbd9f6ad732a0f589af3c68e697a0f879d5275216 -D 1080 -v -z -Z 7e4b7a1f7dde6d1ea5d9ea87c1986848eeacfc4c89808674baf6aa0e79e82d40 109.228.19.134
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_069dc48f62be08b0 -pw 19FABCD5EF69F8DF70A25381635B5B6Cbefce5c78aa6016f1f3d587d2cb29340d885ca4e0bd9b53b13e2b51051339565 -D 1080 -v -z -Z b3a321c7210c9bc22a5a33a7579770534e24ef3236cdc17d86b49dcc41908df7 109.228.16.35
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 123 -l psiphon_ssh_b6b66e0b810bfa79 -pw D6A164380CCD866B24F2870330CDCAD4496f75fd5aa6be7dc5942cd8d83bc33ca16e662e2f97fcb40c4f74527ff8780f -D 1080 -v -z -Z 406815c4d4c28bc4240a93a5ad9e3a07f169ae359f35ba5ef38370088c36cd4b 109.228.19.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_239411f4e723064b -pw 3D550A36194933C39774CD2CCAD2E3FFb4f5cc4ec201f4137671b21163f338ad8648c9fa36d13652a45f2606bece4463 -D 1080 -v -z -Z 3ae3e881e0606e19f7bd0c3ca6765f1cfd511c331ceb61e6fb37abb283272c16 213.171.196.51
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_bbca7f28d65f0c42 -pw 95143CD1C115C5A68578203F5857F8C1e54f2e857f67134e22235fa47faf3849575e37b62820c247bc65ba8a34914c31 -D 1080 -v -z -Z b4487abc87e74a536b6d99a70ad7c8b2e1a7473f95e79be6a224d867c5a6197b 109.228.16.60
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_d532e381ce8afcc4 -pw 81FF1342C65F9CFE5AE08147E8978133607bc73963cf72777ccfa65674b24c072d7a6ced1b8d7454064e59722e5d4cff -D 1080 -v -z -Z 2a936b11a11dd61fcdb1a69e29e236b5644b68b81daaa6ecc60bd428a4041f3c 88.208.221.86
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 513 -l psiphon_ssh_4737411b506a593b -pw 75FBF0CBF2A4D7403DCE061B1E67103E2e52023b3e10781ef75e1c5dbd9f6ad732a0f589af3c68e697a0f879d5275216 -D 1080 -v -z -Z 7e4b7a1f7dde6d1ea5d9ea87c1986848eeacfc4c89808674baf6aa0e79e82d40 109.228.19.134
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 261 -l psiphon_ssh_a92e312c6c8c96a3 -pw 4A153C89CE0E6F84BCEE684690EEC0738a37f8e1862b3584d427d4a2b4d421ae10884bb698d9f172fc7c5b95d1dca359 -D 1080 -v -z -Z fb3bfc16c023b03fee6b09ddbf7a0972acce0b80f98d9333e59001f146f0d777 88.208.222.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_c7466b8ed0324498 -pw FC598935CF15EBF7C40B0921D32857D79f03443e30cdffc3eba1dcec304c4d5c058a7b21e80cfcba9b1ad2be3e2f9566 -D 1080 -v -z -Z aeb4fce445d1aac89ecd376a6ca3d64d6137deb8a5e4b79384e54e37c61f3efe 213.171.199.170
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_239411f4e723064b -pw 98DD27702F3738AB44B15A7F3DF2C9BDb4f5cc4ec201f4137671b21163f338ad8648c9fa36d13652a45f2606bece4463 -D 1080 -v -z -Z 3ae3e881e0606e19f7bd0c3ca6765f1cfd511c331ceb61e6fb37abb283272c16 213.171.196.51
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_bbca7f28d65f0c42 -pw A4E50A78B0F7F3CA28AF959B6F6A7A97e54f2e857f67134e22235fa47faf3849575e37b62820c247bc65ba8a34914c31 -D 1080 -v -z -Z b4487abc87e74a536b6d99a70ad7c8b2e1a7473f95e79be6a224d867c5a6197b 109.228.16.60
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_8d9be6ef12ead4bc -pw 622B81ED27892D61C223DC814077A586b76565f0588fa9ab3dc4f86e5732220834ed830418aa5a1e3a749bac1507f02d -D 1080 -v -z -Z d658242c973a2aa7ac931f1a07c68d170146b81308e68f7d5be6a3188378f248 109.228.16.83
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_441183f9b80a017b -pw 50CF14D5C7FF4BB46A6C10C5C0842AEF4be6a9aa0bb0b59a86455dfab21c470237a2ab1c5fc07ca2a24ad487f990fccc -D 1080 -v -z -Z ef0371d75ed04ce8304c4f5f2a1699867efdf96585fea800eb5f000d0c486adb 213.171.207.119
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 547 -l psiphon_ssh_eb31fbedeb192cf5 -pw 26EEF5E6FFA1E7D4D946C8691687E480620062265e45cfd850f5d9b65b51feed319d381c1a6d3947567617f36abc2c6c -D 1080 -v -z -Z 1d07531a725de0d56458826268b5f7c482b0e4d6c1bc756551a20ae7b49a605a 50.116.61.165
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 993 -l psiphon_ssh_200a9cb66d8942ff -pw 7BB34B61E761842D6295306B9A3D7C8Eb531b5fef510c2f39871146d97dcbb07ffe32f9d54bee0113f30785ff2283143 -D 1080 -v -z -Z 9ea0ea014a74149a620cf5e57ce7800f92275d5089f244d6c7110980259ae567 109.228.19.124
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 748 -l psiphon_ssh_82ded20d2f4fc808 -pw 32EED64BBE0B334F4A9D3A91FB081CFB54789f8f04216f1d46c08dffd7b311fa94f7a83cf6123fb8dae865b31ace6d9d -D 1080 -v -z -Z 6dcc6ea0bad98023fa1871872005e0a737b40f63d6ece50ef29b0ff6ec6b2649 213.171.197.198
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_02505cd3155e800d -pw 8F70DE448EC96D4CB28B2BB9918275162e3c5fe0209a9a6cdc3dc2e142ac74e1dce02743ceb10200858178f2656dc443 -D 1080 -v -z -Z e3a111d6cda546263b2dcfa0026b4ec8daf676faa801c51d52e3ca9d26216ae2 109.228.17.68
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_4dcd26c03a0606c4 -pw 7BCED217C7B8EB94EB45C2877D647CFEb733f9931e09732eae3a5fa867062ac087e62796244484780289c9750852abc6 -D 1080 -v -z -Z b7aa2658cdd06d009908e970deef5e8e7f0f758833436b2273e13fc77c7d251b 213.171.197.146
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_ed2c53d2065a1433 -pw D6F6E118DFAE5EE1820E934108D1B85B560abff533336abcc67286408fab7919450d48786d39461cdfad8f2d0c19d3c8 -D 1080 -v -z -Z 2fe5d289c09d607d8ce86cb5fa3b354414c087551e840a0ef1682813a7f788e3 109.228.17.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 280 -l psiphon_ssh_6775477dff3b0fb8 -pw 5D926E22563485CA14FBA9DDA8EECDA7ac20442335ac25878da721841ac5a6bd6648cf65aac903329cdaed506a009bd7 -D 1080 -v -z -Z fe3fe939e81568dd155830395a57c55d16dfe7f034166c683225de5df7b2f25b 198.58.117.203
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_c95ad082dd38da35 -pw AD05ADF67102235A11187F62345BA24Db3ac8ce910058c47fe71d91c7e7b5a6dcce3834c6ddf367e6ba8182104ce3dcd -D 1080 -v -z -Z addf635286281612cabd741b5132122e5c49f58419fc03f8feb1bb0a5f5414e5 88.208.220.118
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_95a4a0f9d0a66005 -pw ACBAFBB79653F408728F8F89C9F0F4A5201a155aad5fbd951fe89859e303964726a52dee36cf258f09d767207bca3377 -D 1080 -v -z -Z e5a6aeb323210e318d36c181a02cdf4759b299356b0fc21f0315b3ae941eca32 109.228.19.160
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_4dcd26c03a0606c4 -pw 0B148FBA77129C6F04FF67FD68CFDA0Eb733f9931e09732eae3a5fa867062ac087e62796244484780289c9750852abc6 -D 1080 -v -z -Z b7aa2658cdd06d009908e970deef5e8e7f0f758833436b2273e13fc77c7d251b 213.171.197.146
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_ed2c53d2065a1433 -pw B7858A55040D0ACF93CEEBBE2BA4941F560abff533336abcc67286408fab7919450d48786d39461cdfad8f2d0c19d3c8 -D 1080 -v -z -Z 2fe5d289c09d607d8ce86cb5fa3b354414c087551e840a0ef1682813a7f788e3 109.228.17.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_c95ad082dd38da35 -pw AEA1F1DBF065B634DC676A8B1B6C43B7b3ac8ce910058c47fe71d91c7e7b5a6dcce3834c6ddf367e6ba8182104ce3dcd -D 1080 -v -z -Z addf635286281612cabd741b5132122e5c49f58419fc03f8feb1bb0a5f5414e5 88.208.220.118
  • '%TEMP%\psiphon3-plonk.exe' /pid=2940
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_d532e381ce8afcc4 -pw D69B86346A152D1EF5F8FCEBA1C04BA6607bc73963cf72777ccfa65674b24c072d7a6ced1b8d7454064e59722e5d4cff -D 1080 -v -z -Z 2a936b11a11dd61fcdb1a69e29e236b5644b68b81daaa6ecc60bd428a4041f3c 88.208.221.86
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 513 -l psiphon_ssh_4737411b506a593b -pw 2F381A283EC377B3A238D2E0B3AE2C222e52023b3e10781ef75e1c5dbd9f6ad732a0f589af3c68e697a0f879d5275216 -D 1080 -v -z -Z 7e4b7a1f7dde6d1ea5d9ea87c1986848eeacfc4c89808674baf6aa0e79e82d40 109.228.19.134
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 261 -l psiphon_ssh_a92e312c6c8c96a3 -pw 6245A97EFE6ED48D3BFF1D2ED568AC878a37f8e1862b3584d427d4a2b4d421ae10884bb698d9f172fc7c5b95d1dca359 -D 1080 -v -z -Z fb3bfc16c023b03fee6b09ddbf7a0972acce0b80f98d9333e59001f146f0d777 88.208.222.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_c7466b8ed0324498 -pw 05EC885833F33DC93D739D53E6246FE79f03443e30cdffc3eba1dcec304c4d5c058a7b21e80cfcba9b1ad2be3e2f9566 -D 1080 -v -z -Z aeb4fce445d1aac89ecd376a6ca3d64d6137deb8a5e4b79384e54e37c61f3efe 213.171.199.170
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 748 -l psiphon_ssh_82ded20d2f4fc808 -pw 6C4640566FBEBC5B138E2168EB4F2F2D54789f8f04216f1d46c08dffd7b311fa94f7a83cf6123fb8dae865b31ace6d9d -D 1080 -v -z -Z 6dcc6ea0bad98023fa1871872005e0a737b40f63d6ece50ef29b0ff6ec6b2649 213.171.197.198
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_02505cd3155e800d -pw 23988B70EC17A64887856EF288CC9DD22e3c5fe0209a9a6cdc3dc2e142ac74e1dce02743ceb10200858178f2656dc443 -D 1080 -v -z -Z e3a111d6cda546263b2dcfa0026b4ec8daf676faa801c51d52e3ca9d26216ae2 109.228.17.68
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_b589bf21758d4b8b -pw 068CEDCA8B4AB2821F83FCAD04129D22a5d77d5fdc2a2e510d91406484c8f2a4d64da0607d1a0344771b13e03909b131 -D 1080 -v -z -Z 7fbf6b741a3990ecca5d0ed7d682c53759c49dfa32a53069ddf94dbecf51f2d2 213.171.207.70
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 922 -l psiphon_ssh_6aa3a220950ea506 -pw AA241DFB4B1A7E0ED13BB4B2A05528A2ed41337529ad8a79d9031742cf429bbe5e9d561dda67a8864bb925a5514254b5 -D 1080 -v -z -Z 09b02054994c66fe4649440d8ad2ab2efca0648c863e27754a8b548c127a6152 213.171.207.94
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 993 -l psiphon_ssh_200a9cb66d8942ff -pw 9FFE2C47208B22ACBC84F0FE5E789934b531b5fef510c2f39871146d97dcbb07ffe32f9d54bee0113f30785ff2283143 -D 1080 -v -z -Z 9ea0ea014a74149a620cf5e57ce7800f92275d5089f244d6c7110980259ae567 109.228.19.124
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 280 -l psiphon_ssh_6775477dff3b0fb8 -pw 1620AAEEA0C1FA3DC87D003B4585F161ac20442335ac25878da721841ac5a6bd6648cf65aac903329cdaed506a009bd7 -D 1080 -v -z -Z fe3fe939e81568dd155830395a57c55d16dfe7f034166c683225de5df7b2f25b 198.58.117.203
  • '%TEMP%\psiphon3-plonk.exe' /pid=2816
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 547 -l psiphon_ssh_eb31fbedeb192cf5 -pw B95CDE4CCD14F124D3A05410357ABD39620062265e45cfd850f5d9b65b51feed319d381c1a6d3947567617f36abc2c6c -D 1080 -v -z -Z 1d07531a725de0d56458826268b5f7c482b0e4d6c1bc756551a20ae7b49a605a 50.116.61.165
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_c7466b8ed0324498 -pw 7531D95E1CFE828BD85C1D4DABB438B49f03443e30cdffc3eba1dcec304c4d5c058a7b21e80cfcba9b1ad2be3e2f9566 -D 1080 -v -z -Z aeb4fce445d1aac89ecd376a6ca3d64d6137deb8a5e4b79384e54e37c61f3efe 213.171.199.170
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 261 -l psiphon_ssh_a92e312c6c8c96a3 -pw 4FDA78FD00F2040666E3B516D80054B88a37f8e1862b3584d427d4a2b4d421ae10884bb698d9f172fc7c5b95d1dca359 -D 1080 -v -z -Z fb3bfc16c023b03fee6b09ddbf7a0972acce0b80f98d9333e59001f146f0d777 88.208.222.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_1fdfd36df723edc5 -pw 3C2E686F2E06E5417D237039E1D6D51Fec3d0d741e44546b184164941a514fe50389808696fba4da428c76dc7bdea0df -D 1080 -v -z -Z 089fd025e795744aa44309e64ebd917ef698973eeb7e7a44d6ef0ec4e2aeb1d7 109.228.16.30
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 984 -l psiphon_ssh_386b186c93821d58 -pw E8A4552590E382BFC324A91514770325f1cdafe751eaba45372fa15cfe0b58007c16855dc6103a0cd217b3297f6dc957 -D 1080 -v -z -Z d3b045accb5af6114005ae38210dfdbbe92bed7be7be6838270043e7212caec5 109.228.19.129
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 280 -l psiphon_ssh_6775477dff3b0fb8 -pw 0DC1F0BCA4A7FDCC83C89DE238F1AA31ac20442335ac25878da721841ac5a6bd6648cf65aac903329cdaed506a009bd7 -D 1080 -v -z -Z fe3fe939e81568dd155830395a57c55d16dfe7f034166c683225de5df7b2f25b 198.58.117.203
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_c95ad082dd38da35 -pw D9DC90157947B1321648F2EB6E5F7844b3ac8ce910058c47fe71d91c7e7b5a6dcce3834c6ddf367e6ba8182104ce3dcd -D 1080 -v -z -Z addf635286281612cabd741b5132122e5c49f58419fc03f8feb1bb0a5f5414e5 88.208.220.118
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_4dcd26c03a0606c4 -pw 03E63B306396C3102018260D6BAB2ED9b733f9931e09732eae3a5fa867062ac087e62796244484780289c9750852abc6 -D 1080 -v -z -Z b7aa2658cdd06d009908e970deef5e8e7f0f758833436b2273e13fc77c7d251b 213.171.197.146
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_02505cd3155e800d -pw F71C4735C3A4CE05AC5D977E043D595D2e3c5fe0209a9a6cdc3dc2e142ac74e1dce02743ceb10200858178f2656dc443 -D 1080 -v -z -Z e3a111d6cda546263b2dcfa0026b4ec8daf676faa801c51d52e3ca9d26216ae2 109.228.17.68
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_239411f4e723064b -pw 05034FE4B5AA2350C378825382DECE22b4f5cc4ec201f4137671b21163f338ad8648c9fa36d13652a45f2606bece4463 -D 1080 -v -z -Z 3ae3e881e0606e19f7bd0c3ca6765f1cfd511c331ceb61e6fb37abb283272c16 213.171.196.51
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_bbca7f28d65f0c42 -pw 84711D6BEDE1BD55D49D9B1F8D828E22e54f2e857f67134e22235fa47faf3849575e37b62820c247bc65ba8a34914c31 -D 1080 -v -z -Z b4487abc87e74a536b6d99a70ad7c8b2e1a7473f95e79be6a224d867c5a6197b 109.228.16.60
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_8d9be6ef12ead4bc -pw 4A2757710F9D40450999710F08883DF4b76565f0588fa9ab3dc4f86e5732220834ed830418aa5a1e3a749bac1507f02d -D 1080 -v -z -Z d658242c973a2aa7ac931f1a07c68d170146b81308e68f7d5be6a3188378f248 109.228.16.83
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_441183f9b80a017b -pw 19485BA94C61C4ADD54DE4F1AE67208A4be6a9aa0bb0b59a86455dfab21c470237a2ab1c5fc07ca2a24ad487f990fccc -D 1080 -v -z -Z ef0371d75ed04ce8304c4f5f2a1699867efdf96585fea800eb5f000d0c486adb 213.171.207.119
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 123 -l psiphon_ssh_b6b66e0b810bfa79 -pw 6F3F83EE1F013DF0AC3AFDCF25FC1B2B496f75fd5aa6be7dc5942cd8d83bc33ca16e662e2f97fcb40c4f74527ff8780f -D 1080 -v -z -Z 406815c4d4c28bc4240a93a5ad9e3a07f169ae359f35ba5ef38370088c36cd4b 109.228.19.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_ade84e3d844e5077 -pw 033F5AD7F46BF83A5242A685F0E14F588627a47fc0d76e05a2eb1589c0938bfa643d5a036bc3592014d7c6c3f62d1ca3 -D 1080 -v -z -Z 0de24746124593ddb00b457a77d55afdf4281a116c7458e43aa51d2b49edca85 213.171.206.26
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_069dc48f62be08b0 -pw DADDF30766949EF45E9FEA6C2B5D6A9Dbefce5c78aa6016f1f3d587d2cb29340d885ca4e0bd9b53b13e2b51051339565 -D 1080 -v -z -Z b3a321c7210c9bc22a5a33a7579770534e24ef3236cdc17d86b49dcc41908df7 109.228.16.35
  • '%TEMP%\psiphon3-plonk.exe' /pid=3168
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 984 -l psiphon_ssh_386b186c93821d58 -pw 384A30F48BF6D919DBB3298D242FEF8Df1cdafe751eaba45372fa15cfe0b58007c16855dc6103a0cd217b3297f6dc957 -D 1080 -v -z -Z d3b045accb5af6114005ae38210dfdbbe92bed7be7be6838270043e7212caec5 109.228.19.129
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 280 -l psiphon_ssh_6775477dff3b0fb8 -pw 6165327756E92E795886282D11250B9Cac20442335ac25878da721841ac5a6bd6648cf65aac903329cdaed506a009bd7 -D 1080 -v -z -Z fe3fe939e81568dd155830395a57c55d16dfe7f034166c683225de5df7b2f25b 198.58.117.203
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_c95ad082dd38da35 -pw 8A150AB1AE6EDB87614A2C11A3BB1FE9b3ac8ce910058c47fe71d91c7e7b5a6dcce3834c6ddf367e6ba8182104ce3dcd -D 1080 -v -z -Z addf635286281612cabd741b5132122e5c49f58419fc03f8feb1bb0a5f5414e5 88.208.220.118
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 547 -l psiphon_ssh_eb31fbedeb192cf5 -pw 2ACE92C13A161233AB6724CF8F112BA5620062265e45cfd850f5d9b65b51feed319d381c1a6d3947567617f36abc2c6c -D 1080 -v -z -Z 1d07531a725de0d56458826268b5f7c482b0e4d6c1bc756551a20ae7b49a605a 50.116.61.165
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 993 -l psiphon_ssh_200a9cb66d8942ff -pw 42E25ED32A5FEAAE1C2F306979745165b531b5fef510c2f39871146d97dcbb07ffe32f9d54bee0113f30785ff2283143 -D 1080 -v -z -Z 9ea0ea014a74149a620cf5e57ce7800f92275d5089f244d6c7110980259ae567 109.228.19.124
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_ed2c53d2065a1433 -pw 775D83DEB1446FD6B44B1A871AC8707F560abff533336abcc67286408fab7919450d48786d39461cdfad8f2d0c19d3c8 -D 1080 -v -z -Z 2fe5d289c09d607d8ce86cb5fa3b354414c087551e840a0ef1682813a7f788e3 109.228.17.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 261 -l psiphon_ssh_a92e312c6c8c96a3 -pw 8B5E57D000EC746D71D7671DEA638E418a37f8e1862b3584d427d4a2b4d421ae10884bb698d9f172fc7c5b95d1dca359 -D 1080 -v -z -Z fb3bfc16c023b03fee6b09ddbf7a0972acce0b80f98d9333e59001f146f0d777 88.208.222.174
  • '%TEMP%\psiphon3-plonk.exe' /pid=3212
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_4dcd26c03a0606c4 -pw F5C3740EDA3466566BC139DF199F3AD3b733f9931e09732eae3a5fa867062ac087e62796244484780289c9750852abc6 -D 1080 -v -z -Z b7aa2658cdd06d009908e970deef5e8e7f0f758833436b2273e13fc77c7d251b 213.171.197.146
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_b589bf21758d4b8b -pw A65803B2CE7165991B609D959CD96C7Fa5d77d5fdc2a2e510d91406484c8f2a4d64da0607d1a0344771b13e03909b131 -D 1080 -v -z -Z 7fbf6b741a3990ecca5d0ed7d682c53759c49dfa32a53069ddf94dbecf51f2d2 213.171.207.70
  • '%TEMP%\psiphon3-plonk.exe' /pid=2948
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 984 -l psiphon_ssh_386b186c93821d58 -pw A9D84681EBF85707924AA57CD2ED6FD5f1cdafe751eaba45372fa15cfe0b58007c16855dc6103a0cd217b3297f6dc957 -D 1080 -v -z -Z d3b045accb5af6114005ae38210dfdbbe92bed7be7be6838270043e7212caec5 109.228.19.129
  • '%TEMP%\psiphon3-plonk.exe' /pid=2980
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_02505cd3155e800d -pw 2F0A32842E76564BDDEF5AD1C2D47F072e3c5fe0209a9a6cdc3dc2e142ac74e1dce02743ceb10200858178f2656dc443 -D 1080 -v -z -Z e3a111d6cda546263b2dcfa0026b4ec8daf676faa801c51d52e3ca9d26216ae2 109.228.17.68
  • '%TEMP%\psiphon3-plonk.exe' /pid=2936
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 922 -l psiphon_ssh_6aa3a220950ea506 -pw 7F6146008DA4744DEC61776963B082D0ed41337529ad8a79d9031742cf429bbe5e9d561dda67a8864bb925a5514254b5 -D 1080 -v -z -Z 09b02054994c66fe4649440d8ad2ab2efca0648c863e27754a8b548c127a6152 213.171.207.94
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 748 -l psiphon_ssh_82ded20d2f4fc808 -pw 63C97BC134D0B418EA8B83B0368FDB6554789f8f04216f1d46c08dffd7b311fa94f7a83cf6123fb8dae865b31ace6d9d -D 1080 -v -z -Z 6dcc6ea0bad98023fa1871872005e0a737b40f63d6ece50ef29b0ff6ec6b2649 213.171.197.198
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 123 -l psiphon_ssh_b6b66e0b810bfa79 -pw C39C736F76CC21CC02B9231E0737101D496f75fd5aa6be7dc5942cd8d83bc33ca16e662e2f97fcb40c4f74527ff8780f -D 1080 -v -z -Z 406815c4d4c28bc4240a93a5ad9e3a07f169ae359f35ba5ef38370088c36cd4b 109.228.19.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_ade84e3d844e5077 -pw 3BD7AEE2FE98FC93029D54226AC0642F8627a47fc0d76e05a2eb1589c0938bfa643d5a036bc3592014d7c6c3f62d1ca3 -D 1080 -v -z -Z 0de24746124593ddb00b457a77d55afdf4281a116c7458e43aa51d2b49edca85 213.171.206.26
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_bbca7f28d65f0c42 -pw 69FF3D5762F38024CAEB985022F2AE68e54f2e857f67134e22235fa47faf3849575e37b62820c247bc65ba8a34914c31 -D 1080 -v -z -Z b4487abc87e74a536b6d99a70ad7c8b2e1a7473f95e79be6a224d867c5a6197b 109.228.16.60
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_069dc48f62be08b0 -pw C03ECFED04C175184A9E0E6BBF766AF1befce5c78aa6016f1f3d587d2cb29340d885ca4e0bd9b53b13e2b51051339565 -D 1080 -v -z -Z b3a321c7210c9bc22a5a33a7579770534e24ef3236cdc17d86b49dcc41908df7 109.228.16.35
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_6a3fa0f1f1d38317 -pw FF963632BB83B0BD518A357F5ADE687F8dba9f488a9e4cae0115aca80de4cc35b4cfef33f2186d71a64d2d6839b49bca -D 1080 -v -z -Z 9f99e75488d0dd4cc45ee98292e21ca74e239b2e7c2d46b285d8ce4feb9d8682 109.228.19.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_95a4a0f9d0a66005 -pw BF9F6D7135FA0CE57A4FD42CA92A6A10201a155aad5fbd951fe89859e303964726a52dee36cf258f09d767207bca3377 -D 1080 -v -z -Z e5a6aeb323210e318d36c181a02cdf4759b299356b0fc21f0315b3ae941eca32 109.228.19.160
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_1fdfd36df723edc5 -pw 71B119D2AB710F877A99DBE9584535C1ec3d0d741e44546b184164941a514fe50389808696fba4da428c76dc7bdea0df -D 1080 -v -z -Z 089fd025e795744aa44309e64ebd917ef698973eeb7e7a44d6ef0ec4e2aeb1d7 109.228.16.30
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_ab00a6edcd942e62 -pw AEC01205559053D4CB418FDE07BDACF1641a7b1049177dc0a292131951a99f8c0441392418351394b344b330d7b23315 -D 1080 -v -z -Z 106d7e9abbb45c6b06275f773697fac1de810d3833559829a62e2ced7ac40d43 88.208.221.29
  • '%TEMP%\psiphon3-plonk.exe' /pid=3760
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_d532e381ce8afcc4 -pw 1AA891D0B3E2F7C6235AE55D0E592F6B607bc73963cf72777ccfa65674b24c072d7a6ced1b8d7454064e59722e5d4cff -D 1080 -v -z -Z 2a936b11a11dd61fcdb1a69e29e236b5644b68b81daaa6ecc60bd428a4041f3c 88.208.221.86
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_c7466b8ed0324498 -pw 094B5F5B703AACC57E8D72A3B87F96739f03443e30cdffc3eba1dcec304c4d5c058a7b21e80cfcba9b1ad2be3e2f9566 -D 1080 -v -z -Z aeb4fce445d1aac89ecd376a6ca3d64d6137deb8a5e4b79384e54e37c61f3efe 213.171.199.170
  • '%TEMP%\psiphon3-plonk.exe' /pid=3364
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_441183f9b80a017b -pw 80B239D673E5110B7A6B7DEC4107A6B44be6a9aa0bb0b59a86455dfab21c470237a2ab1c5fc07ca2a24ad487f990fccc -D 1080 -v -z -Z ef0371d75ed04ce8304c4f5f2a1699867efdf96585fea800eb5f000d0c486adb 213.171.207.119
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_239411f4e723064b -pw 200CE640C082CD16B530C968C4F5AA86b4f5cc4ec201f4137671b21163f338ad8648c9fa36d13652a45f2606bece4463 -D 1080 -v -z -Z 3ae3e881e0606e19f7bd0c3ca6765f1cfd511c331ceb61e6fb37abb283272c16 213.171.196.51
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 513 -l psiphon_ssh_4737411b506a593b -pw 8BAD51B0940DFEC6E57268C771F219632e52023b3e10781ef75e1c5dbd9f6ad732a0f589af3c68e697a0f879d5275216 -D 1080 -v -z -Z 7e4b7a1f7dde6d1ea5d9ea87c1986848eeacfc4c89808674baf6aa0e79e82d40 109.228.19.134
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_8d9be6ef12ead4bc -pw 90325C09E68D3B1A0DACB5296154FCBFb76565f0588fa9ab3dc4f86e5732220834ed830418aa5a1e3a749bac1507f02d -D 1080 -v -z -Z d658242c973a2aa7ac931f1a07c68d170146b81308e68f7d5be6a3188378f248 109.228.16.83
Modifies file system :
Creates the following files:
  • %HOMEPATH%\PUTTY.RND
  • %WINDIR%\PUTTY.RND
  • %APPDATA%\PUTTY.RND
  • %TEMP%\psiphon3-plonk.exe
  • <LS_APPDATA>\PUTTY.RND
Network activity:
Connects to:
  • '50.##6.61.165':547
  • '10#.#28.19.124':993
  • '19#.#8.117.203':280
  • '10#.#28.17.68':995
  • '21#.#71.207.70':465
  • '21#.#71.207.94':922
  • '21#.#71.197.198':748
  • '21#.#71.199.170':587
  • 'localhost':1062
  • 's3.###zonaws.com':443
  • '88.##8.222.174':261
  • '88.##8.220.118':995
  • '21#.#71.197.146':465
  • '10#.#28.17.66':587
  • '10#.#28.19.129':984
  • '21#.#71.207.119':465
  • '21#.#71.196.51':465
  • '10#.#28.16.60':995
  • '10#.#28.16.83':465
  • 'localhost':1080
  • '88.##8.221.86':465
  • '10#.#28.19.134':513
  • '88.##8.221.29':995
  • '10#.#28.19.66':995
  • '10#.#28.19.160':995
  • '10#.#28.16.30':465
  • '10#.#28.16.35':995
  • '10#.#28.19.174':123
  • '21#.#71.206.26':465
UDP:
  • DNS ASK s3.###zonaws.com
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Free trial

 

Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

Free trial

 

Download Dr.Web

Download by serial number

Download on App Store

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

 

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android

Free trial

14 days

Download now
Get it on Google Play