Malware Analysis Report

2024-09-22 07:21

Sample ID 240531-rcpanabd75
Target https://mega.nz/folder/4mt2gBxJ#fWfK0Iq3reFnKllqfjdrWw
Tags
asyncrat default rat
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

Threat Level: Known bad

The file https://mega.nz/folder/4mt2gBxJ#fWfK0Iq3reFnKllqfjdrWw was found to be: Known bad.

Malicious Activity Summary

asyncrat default rat

AsyncRat

Suspicious use of WriteProcessMemory

Enumerates system info in registry

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: GetForegroundWindowSpam

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

Suspicious use of SetWindowsHookEx

Modifies registry class

Suspicious use of AdjustPrivilegeToken

MITRE ATT&CK Matrix V13

Analysis: static1

Detonation Overview

Reported

2024-05-31 14:03

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-31 14:03

Reported

2024-05-31 14:05

Platform

win10v2004-20240426-en

Max time kernel

150s

Max time network

150s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://mega.nz/folder/4mt2gBxJ#fWfK0Iq3reFnKllqfjdrWw

Signatures

AsyncRat

rat asyncrat

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (data) \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202 C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\0\0\NodeSlot = "3" C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1 C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0 C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\0\0 C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 0100000000000000ffffffff C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0 = 50003100000000009a58e66e100041646d696e003c0009000400efbe9a586864bf5866702e00000080e10100000001000000000000000000000000000000dbee4b00410064006d0069006e00000014000000 C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\MRUListEx = 00000000ffffffff C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\0 C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\0\MRUListEx = 00000000ffffffff C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1 = 19002f433a5c000000000000000000000000000000000000000000 C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\Shell\SniffedFolderType = "Generic" C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\MRUListEx = 00000000ffffffff C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202 C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0 C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\MRUListEx = 00000000ffffffff C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\0\0\MRUListEx = ffffffff C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0000000001000000ffffffff C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0 = 78003100000000009a5868641100557365727300640009000400efbe874f7748bf5866702e000000c70500000000010000000000000000003a00000000003c960a0055007300650072007300000040007300680065006c006c00330032002e0064006c006c002c002d0032003100380031003300000014000000 C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\Shell C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\0 = 7e00310000000000bf58897011004465736b746f7000680009000400efbe9a586864bf5889702e0000008ae101000000010000000000000000003e0000000000c712ad004400650073006b0074006f007000000040007300680065006c006c00330032002e0064006c006c002c002d0032003100370036003900000016000000 C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0\0\0 = 8200310000000000bf58a170100056454e4f4d527e312e375a00680009000400efbebf588970bf58a1702e000000090700000000030000000000000000000000000000004095a600560065006e006f006d005200410054002000760036002e0030002e0033002000280053004f00550052004300450029002e0037007a0000001a000000 C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3 C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Client.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Client.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Client.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Client.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Client.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A
N/A N/A C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4532 wrote to memory of 2740 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 2740 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 1512 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 3176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 3176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4532 wrote to memory of 5200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://mega.nz/folder/4mt2gBxJ#fWfK0Iq3reFnKllqfjdrWw

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa682d46f8,0x7ffa682d4708,0x7ffa682d4718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,10066558553438121916,9432722583271196413,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2060 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2056,10066558553438121916,9432722583271196413,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2328 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2056,10066558553438121916,9432722583271196413,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2720 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,10066558553438121916,9432722583271196413,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,10066558553438121916,9432722583271196413,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2056,10066558553438121916,9432722583271196413,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5024 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x404 0x328

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,10066558553438121916,9432722583271196413,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5684 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,10066558553438121916,9432722583271196413,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5684 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,10066558553438121916,9432722583271196413,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5712 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,10066558553438121916,9432722583271196413,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5316 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,10066558553438121916,9432722583271196413,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,10066558553438121916,9432722583271196413,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5788 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2056,10066558553438121916,9432722583271196413,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5200 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,10066558553438121916,9432722583271196413,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2128 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2056,10066558553438121916,9432722583271196413,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6076 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Client.exe

"C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Client.exe"

C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe

"C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\Venom RAT + HVNC + Stealer + Grabber.exe"

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\DevExpress.WinRTPresenter.Launcher.exe

"C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\DevExpress.WinRTPresenter.Launcher.exe"

C:\Windows\system32\wbem\WmiApSrv.exe

C:\Windows\system32\wbem\WmiApSrv.exe

C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\DevExpress.WinRTPresenter.Launcher.exe

"C:\Users\Admin\Desktop\VenomRAT v6.0.3 (SOURCE).7z\DevExpress.WinRTPresenter.Launcher.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,10066558553438121916,9432722583271196413,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4848 /prefetch:2

Network

Country Destination Domain Proto
US 8.8.8.8:53 mega.nz udp
LU 31.216.145.5:443 mega.nz tcp
LU 31.216.145.5:443 mega.nz tcp
US 8.8.8.8:53 eu.static.mega.co.nz udp
LU 89.44.169.132:443 eu.static.mega.co.nz tcp
LU 89.44.169.132:443 eu.static.mega.co.nz tcp
US 8.8.8.8:53 28.118.140.52.in-addr.arpa udp
US 8.8.8.8:53 5.145.216.31.in-addr.arpa udp
US 8.8.8.8:53 136.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 160.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 g.api.mega.co.nz udp
LU 66.203.125.14:443 g.api.mega.co.nz tcp
US 8.8.8.8:53 132.169.44.89.in-addr.arpa udp
US 8.8.8.8:53 14.125.203.66.in-addr.arpa udp
US 8.8.8.8:53 241.150.49.20.in-addr.arpa udp
LU 89.44.169.132:443 eu.static.mega.co.nz tcp
LU 31.216.145.5:443 mega.nz tcp
LU 66.203.125.14:443 g.api.mega.co.nz tcp
N/A 127.0.0.1:6341 tcp
N/A 127.0.0.1:6341 tcp
N/A 127.0.0.1:6341 tcp
N/A 127.0.0.1:6341 tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
US 8.8.8.8:53 gfs206n115.userstorage.mega.co.nz udp
BE 94.24.37.25:443 gfs206n115.userstorage.mega.co.nz tcp
BE 94.24.37.25:443 gfs206n115.userstorage.mega.co.nz tcp
BE 94.24.37.25:443 gfs206n115.userstorage.mega.co.nz tcp
BE 94.24.37.25:443 gfs206n115.userstorage.mega.co.nz tcp
US 8.8.8.8:53 25.37.24.94.in-addr.arpa udp
BE 94.24.37.25:443 gfs206n115.userstorage.mega.co.nz tcp
BE 94.24.37.25:443 gfs206n115.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs206n129.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs208n179.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs204n181.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs270n308.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs214n169.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs262n374.userstorage.mega.co.nz udp
BE 94.24.37.39:443 gfs206n129.userstorage.mega.co.nz tcp
BE 94.24.37.39:443 gfs206n129.userstorage.mega.co.nz tcp
BE 94.24.37.39:443 gfs206n129.userstorage.mega.co.nz tcp
BE 94.24.37.39:443 gfs206n129.userstorage.mega.co.nz tcp
LU 89.44.168.18:443 gfs270n308.userstorage.mega.co.nz tcp
LU 89.44.168.18:443 gfs270n308.userstorage.mega.co.nz tcp
LU 89.44.168.18:443 gfs270n308.userstorage.mega.co.nz tcp
LU 89.44.168.18:443 gfs270n308.userstorage.mega.co.nz tcp
NL 185.206.24.134:443 gfs204n181.userstorage.mega.co.nz tcp
NL 185.206.24.134:443 gfs204n181.userstorage.mega.co.nz tcp
NL 185.206.24.134:443 gfs204n181.userstorage.mega.co.nz tcp
NL 185.206.24.134:443 gfs204n181.userstorage.mega.co.nz tcp
ES 185.206.27.79:443 gfs214n169.userstorage.mega.co.nz tcp
ES 185.206.27.79:443 gfs214n169.userstorage.mega.co.nz tcp
ES 185.206.27.79:443 gfs214n169.userstorage.mega.co.nz tcp
ES 185.206.27.79:443 gfs214n169.userstorage.mega.co.nz tcp
FR 185.206.26.89:443 gfs208n179.userstorage.mega.co.nz tcp
FR 185.206.26.89:443 gfs208n179.userstorage.mega.co.nz tcp
FR 185.206.26.89:443 gfs208n179.userstorage.mega.co.nz tcp
FR 185.206.26.89:443 gfs208n179.userstorage.mega.co.nz tcp
DE 94.24.36.84:443 gfs262n374.userstorage.mega.co.nz tcp
DE 94.24.36.84:443 gfs262n374.userstorage.mega.co.nz tcp
DE 94.24.36.84:443 gfs262n374.userstorage.mega.co.nz tcp
DE 94.24.36.84:443 gfs262n374.userstorage.mega.co.nz tcp
DE 94.24.36.84:443 gfs262n374.userstorage.mega.co.nz tcp
NL 185.206.24.134:443 gfs204n181.userstorage.mega.co.nz tcp
LU 89.44.168.18:443 gfs270n308.userstorage.mega.co.nz tcp
DE 94.24.36.84:443 gfs262n374.userstorage.mega.co.nz tcp
BE 94.24.37.39:443 gfs206n129.userstorage.mega.co.nz tcp
NL 185.206.24.134:443 gfs204n181.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs204n140.userstorage.mega.co.nz udp
LU 89.44.168.18:443 gfs270n308.userstorage.mega.co.nz tcp
ES 185.206.27.79:443 gfs214n169.userstorage.mega.co.nz tcp
NL 185.206.24.64:443 gfs204n140.userstorage.mega.co.nz tcp
NL 185.206.24.64:443 gfs204n140.userstorage.mega.co.nz tcp
NL 185.206.24.64:443 gfs204n140.userstorage.mega.co.nz tcp
NL 185.206.24.64:443 gfs204n140.userstorage.mega.co.nz tcp
NL 185.206.24.64:443 gfs204n140.userstorage.mega.co.nz tcp
NL 185.206.24.64:443 gfs204n140.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs206n112.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs204n009.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs208n134.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs270n409.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs214n134.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs262n328.userstorage.mega.co.nz udp
US 8.8.8.8:53 39.37.24.94.in-addr.arpa udp
US 8.8.8.8:53 134.24.206.185.in-addr.arpa udp
US 8.8.8.8:53 89.26.206.185.in-addr.arpa udp
US 8.8.8.8:53 18.168.44.89.in-addr.arpa udp
US 8.8.8.8:53 84.36.24.94.in-addr.arpa udp
US 8.8.8.8:53 79.27.206.185.in-addr.arpa udp
US 8.8.8.8:53 64.24.206.185.in-addr.arpa udp
BE 94.24.37.22:443 gfs206n112.userstorage.mega.co.nz tcp
FR 185.206.26.44:443 gfs208n134.userstorage.mega.co.nz tcp
LU 89.44.168.154:443 gfs270n409.userstorage.mega.co.nz tcp
NL 185.206.24.36:443 gfs204n009.userstorage.mega.co.nz tcp
ES 185.206.27.44:443 gfs214n134.userstorage.mega.co.nz tcp
DE 94.24.36.38:443 gfs262n328.userstorage.mega.co.nz tcp
BE 94.24.37.22:443 gfs206n112.userstorage.mega.co.nz tcp
FR 185.206.26.44:443 gfs208n134.userstorage.mega.co.nz tcp
NL 185.206.24.36:443 gfs204n009.userstorage.mega.co.nz tcp
LU 89.44.168.154:443 gfs270n409.userstorage.mega.co.nz tcp
ES 185.206.27.44:443 gfs214n134.userstorage.mega.co.nz tcp
DE 94.24.36.38:443 gfs262n328.userstorage.mega.co.nz tcp
BE 94.24.37.22:443 gfs206n112.userstorage.mega.co.nz tcp
FR 185.206.26.44:443 gfs208n134.userstorage.mega.co.nz tcp
NL 185.206.24.36:443 gfs204n009.userstorage.mega.co.nz tcp
LU 89.44.168.154:443 gfs270n409.userstorage.mega.co.nz tcp
ES 185.206.27.44:443 gfs214n134.userstorage.mega.co.nz tcp
DE 94.24.36.38:443 gfs262n328.userstorage.mega.co.nz tcp
BE 94.24.37.22:443 gfs206n112.userstorage.mega.co.nz tcp
FR 185.206.26.44:443 gfs208n134.userstorage.mega.co.nz tcp
NL 185.206.24.36:443 gfs204n009.userstorage.mega.co.nz tcp
LU 89.44.168.154:443 gfs270n409.userstorage.mega.co.nz tcp
ES 185.206.27.44:443 gfs214n134.userstorage.mega.co.nz tcp
DE 94.24.36.38:443 gfs262n328.userstorage.mega.co.nz tcp
BE 94.24.37.22:443 gfs206n112.userstorage.mega.co.nz tcp
FR 185.206.26.44:443 gfs208n134.userstorage.mega.co.nz tcp
NL 185.206.24.36:443 gfs204n009.userstorage.mega.co.nz tcp
LU 89.44.168.154:443 gfs270n409.userstorage.mega.co.nz tcp
ES 185.206.27.44:443 gfs214n134.userstorage.mega.co.nz tcp
DE 94.24.36.38:443 gfs262n328.userstorage.mega.co.nz tcp
BE 94.24.37.22:443 gfs206n112.userstorage.mega.co.nz tcp
FR 185.206.26.44:443 gfs208n134.userstorage.mega.co.nz tcp
NL 185.206.24.36:443 gfs204n009.userstorage.mega.co.nz tcp
LU 89.44.168.154:443 gfs270n409.userstorage.mega.co.nz tcp
ES 185.206.27.44:443 gfs214n134.userstorage.mega.co.nz tcp
DE 94.24.36.38:443 gfs262n328.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs206n451.userstorage.mega.co.nz udp
BE 94.24.37.151:443 gfs206n451.userstorage.mega.co.nz tcp
BE 94.24.37.151:443 gfs206n451.userstorage.mega.co.nz tcp
BE 94.24.37.151:443 gfs206n451.userstorage.mega.co.nz tcp
BE 94.24.37.151:443 gfs206n451.userstorage.mega.co.nz tcp
BE 94.24.37.151:443 gfs206n451.userstorage.mega.co.nz tcp
BE 94.24.37.151:443 gfs206n451.userstorage.mega.co.nz tcp
US 8.8.8.8:53 44.26.206.185.in-addr.arpa udp
US 8.8.8.8:53 22.37.24.94.in-addr.arpa udp
US 8.8.8.8:53 36.24.206.185.in-addr.arpa udp
US 8.8.8.8:53 154.168.44.89.in-addr.arpa udp
US 8.8.8.8:53 38.36.24.94.in-addr.arpa udp
US 8.8.8.8:53 44.27.206.185.in-addr.arpa udp
US 8.8.8.8:53 151.37.24.94.in-addr.arpa udp
NL 185.206.24.36:443 gfs204n009.userstorage.mega.co.nz tcp
NL 185.206.24.36:443 gfs204n009.userstorage.mega.co.nz tcp
DE 94.24.36.38:443 gfs262n328.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs240n111.userstorage.mega.co.nz udp
SE 69.30.89.21:443 gfs240n111.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs214n153.userstorage.mega.co.nz udp
SE 69.30.89.21:443 gfs240n111.userstorage.mega.co.nz tcp
SE 69.30.89.21:443 gfs240n111.userstorage.mega.co.nz tcp
SE 69.30.89.21:443 gfs240n111.userstorage.mega.co.nz tcp
SE 69.30.89.21:443 gfs240n111.userstorage.mega.co.nz tcp
SE 69.30.89.21:443 gfs240n111.userstorage.mega.co.nz tcp
ES 185.206.27.63:443 gfs214n153.userstorage.mega.co.nz tcp
ES 185.206.27.63:443 gfs214n153.userstorage.mega.co.nz tcp
ES 185.206.27.63:443 gfs214n153.userstorage.mega.co.nz tcp
ES 185.206.27.63:443 gfs214n153.userstorage.mega.co.nz tcp
ES 185.206.27.63:443 gfs214n153.userstorage.mega.co.nz tcp
ES 185.206.27.63:443 gfs214n153.userstorage.mega.co.nz tcp
ES 185.206.27.44:443 gfs214n134.userstorage.mega.co.nz tcp
DE 94.24.36.38:443 gfs262n328.userstorage.mega.co.nz tcp
NL 185.206.24.36:443 gfs204n009.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs204n301.userstorage.mega.co.nz udp
US 8.8.8.8:53 21.89.30.69.in-addr.arpa udp
US 8.8.8.8:53 63.27.206.185.in-addr.arpa udp
NL 185.206.24.101:443 gfs204n301.userstorage.mega.co.nz tcp
NL 185.206.24.101:443 gfs204n301.userstorage.mega.co.nz tcp
NL 185.206.24.101:443 gfs204n301.userstorage.mega.co.nz tcp
NL 185.206.24.101:443 gfs204n301.userstorage.mega.co.nz tcp
NL 185.206.24.101:443 gfs204n301.userstorage.mega.co.nz tcp
NL 185.206.24.101:443 gfs204n301.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs214n188.userstorage.mega.co.nz udp
ES 185.206.27.98:443 gfs214n188.userstorage.mega.co.nz tcp
ES 185.206.27.98:443 gfs214n188.userstorage.mega.co.nz tcp
ES 185.206.27.98:443 gfs214n188.userstorage.mega.co.nz tcp
ES 185.206.27.98:443 gfs214n188.userstorage.mega.co.nz tcp
ES 185.206.27.98:443 gfs214n188.userstorage.mega.co.nz tcp
ES 185.206.27.98:443 gfs214n188.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs214n167.userstorage.mega.co.nz udp
US 8.8.8.8:53 101.24.206.185.in-addr.arpa udp
US 8.8.8.8:53 98.27.206.185.in-addr.arpa udp
ES 185.206.27.77:443 gfs214n167.userstorage.mega.co.nz tcp
ES 185.206.27.77:443 gfs214n167.userstorage.mega.co.nz tcp
ES 185.206.27.77:443 gfs214n167.userstorage.mega.co.nz tcp
ES 185.206.27.77:443 gfs214n167.userstorage.mega.co.nz tcp
ES 185.206.27.77:443 gfs214n167.userstorage.mega.co.nz tcp
ES 185.206.27.77:443 gfs214n167.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs208n183.userstorage.mega.co.nz udp
US 8.8.8.8:53 77.27.206.185.in-addr.arpa udp
US 8.8.8.8:53 gfs262n342.userstorage.mega.co.nz udp
DE 94.24.36.52:443 gfs262n342.userstorage.mega.co.nz tcp
DE 94.24.36.52:443 gfs262n342.userstorage.mega.co.nz tcp
DE 94.24.36.52:443 gfs262n342.userstorage.mega.co.nz tcp
DE 94.24.36.52:443 gfs262n342.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs270n364.userstorage.mega.co.nz udp
LU 89.44.168.74:443 gfs270n364.userstorage.mega.co.nz tcp
LU 89.44.168.74:443 gfs270n364.userstorage.mega.co.nz tcp
LU 89.44.168.74:443 gfs270n364.userstorage.mega.co.nz tcp
LU 89.44.168.74:443 gfs270n364.userstorage.mega.co.nz tcp
FR 185.206.26.93:443 gfs208n183.userstorage.mega.co.nz tcp
FR 185.206.26.93:443 gfs208n183.userstorage.mega.co.nz tcp
FR 185.206.26.93:443 gfs208n183.userstorage.mega.co.nz tcp
FR 185.206.26.93:443 gfs208n183.userstorage.mega.co.nz tcp
FR 185.206.26.93:443 gfs208n183.userstorage.mega.co.nz tcp
LU 89.44.168.74:443 gfs270n364.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs262n301.userstorage.mega.co.nz udp
DE 94.24.36.11:443 gfs262n301.userstorage.mega.co.nz tcp
DE 94.24.36.11:443 gfs262n301.userstorage.mega.co.nz tcp
DE 94.24.36.11:443 gfs262n301.userstorage.mega.co.nz tcp
DE 94.24.36.11:443 gfs262n301.userstorage.mega.co.nz tcp
DE 94.24.36.11:443 gfs262n301.userstorage.mega.co.nz tcp
DE 94.24.36.11:443 gfs262n301.userstorage.mega.co.nz tcp
US 8.8.8.8:53 52.36.24.94.in-addr.arpa udp
US 8.8.8.8:53 93.26.206.185.in-addr.arpa udp
US 8.8.8.8:53 74.168.44.89.in-addr.arpa udp
US 8.8.8.8:53 11.36.24.94.in-addr.arpa udp
US 8.8.8.8:53 gfs206n152.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs208n161.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs270n310.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs214n145.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs204n152.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs262n344.userstorage.mega.co.nz udp
LU 89.44.168.20:443 gfs270n310.userstorage.mega.co.nz tcp
LU 89.44.168.20:443 gfs270n310.userstorage.mega.co.nz tcp
LU 89.44.168.20:443 gfs270n310.userstorage.mega.co.nz tcp
NL 185.206.24.80:443 gfs204n152.userstorage.mega.co.nz tcp
NL 185.206.24.80:443 gfs204n152.userstorage.mega.co.nz tcp
NL 185.206.24.80:443 gfs204n152.userstorage.mega.co.nz tcp
NL 185.206.24.80:443 gfs204n152.userstorage.mega.co.nz tcp
LU 89.44.168.20:443 gfs270n310.userstorage.mega.co.nz tcp
NL 185.206.24.80:443 gfs204n152.userstorage.mega.co.nz tcp
LU 89.44.168.20:443 gfs270n310.userstorage.mega.co.nz tcp
NL 185.206.24.80:443 gfs204n152.userstorage.mega.co.nz tcp
LU 89.44.168.20:443 gfs270n310.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs206n452.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs240n116.userstorage.mega.co.nz udp
ES 185.206.27.55:443 gfs214n145.userstorage.mega.co.nz tcp
ES 185.206.27.55:443 gfs214n145.userstorage.mega.co.nz tcp
ES 185.206.27.55:443 gfs214n145.userstorage.mega.co.nz tcp
ES 185.206.27.55:443 gfs214n145.userstorage.mega.co.nz tcp
ES 185.206.27.55:443 gfs214n145.userstorage.mega.co.nz tcp
ES 185.206.27.55:443 gfs214n145.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs208n197.userstorage.mega.co.nz udp
DE 94.24.36.54:443 gfs262n344.userstorage.mega.co.nz tcp
DE 94.24.36.54:443 gfs262n344.userstorage.mega.co.nz tcp
DE 94.24.36.54:443 gfs262n344.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs214n191.userstorage.mega.co.nz udp
DE 94.24.36.54:443 gfs262n344.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs270n452.userstorage.mega.co.nz udp
DE 94.24.36.54:443 gfs262n344.userstorage.mega.co.nz tcp
DE 94.24.36.54:443 gfs262n344.userstorage.mega.co.nz tcp
FR 185.206.26.71:443 gfs208n161.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs204n191.userstorage.mega.co.nz udp
FR 185.206.26.71:443 gfs208n161.userstorage.mega.co.nz tcp
FR 185.206.26.71:443 gfs208n161.userstorage.mega.co.nz tcp
FR 185.206.26.71:443 gfs208n161.userstorage.mega.co.nz tcp
FR 185.206.26.71:443 gfs208n161.userstorage.mega.co.nz tcp
FR 185.206.26.71:443 gfs208n161.userstorage.mega.co.nz tcp
BE 94.24.37.62:443 gfs206n152.userstorage.mega.co.nz tcp
BE 94.24.37.62:443 gfs206n152.userstorage.mega.co.nz tcp
BE 94.24.37.62:443 gfs206n152.userstorage.mega.co.nz tcp
BE 94.24.37.62:443 gfs206n152.userstorage.mega.co.nz tcp
BE 94.24.37.62:443 gfs206n152.userstorage.mega.co.nz tcp
BE 94.24.37.62:443 gfs206n152.userstorage.mega.co.nz tcp
SE 69.30.89.26:443 gfs240n116.userstorage.mega.co.nz tcp
SE 69.30.89.26:443 gfs240n116.userstorage.mega.co.nz tcp
SE 69.30.89.26:443 gfs240n116.userstorage.mega.co.nz tcp
SE 69.30.89.26:443 gfs240n116.userstorage.mega.co.nz tcp
SE 69.30.89.26:443 gfs240n116.userstorage.mega.co.nz tcp
SE 69.30.89.26:443 gfs240n116.userstorage.mega.co.nz tcp
FR 185.206.26.117:443 gfs208n197.userstorage.mega.co.nz tcp
FR 185.206.26.117:443 gfs208n197.userstorage.mega.co.nz tcp
FR 185.206.26.117:443 gfs208n197.userstorage.mega.co.nz tcp
FR 185.206.26.117:443 gfs208n197.userstorage.mega.co.nz tcp
FR 185.206.26.117:443 gfs208n197.userstorage.mega.co.nz tcp
FR 185.206.26.117:443 gfs208n197.userstorage.mega.co.nz tcp
BE 94.24.37.152:443 gfs206n452.userstorage.mega.co.nz tcp
BE 94.24.37.152:443 gfs206n452.userstorage.mega.co.nz tcp
BE 94.24.37.152:443 gfs206n452.userstorage.mega.co.nz tcp
BE 94.24.37.152:443 gfs206n452.userstorage.mega.co.nz tcp
BE 94.24.37.152:443 gfs206n452.userstorage.mega.co.nz tcp
BE 94.24.37.152:443 gfs206n452.userstorage.mega.co.nz tcp
NL 185.206.24.145:443 gfs204n191.userstorage.mega.co.nz tcp
NL 185.206.24.145:443 gfs204n191.userstorage.mega.co.nz tcp
NL 185.206.24.145:443 gfs204n191.userstorage.mega.co.nz tcp
NL 185.206.24.145:443 gfs204n191.userstorage.mega.co.nz tcp
NL 185.206.24.145:443 gfs204n191.userstorage.mega.co.nz tcp
NL 185.206.24.145:443 gfs204n191.userstorage.mega.co.nz tcp
LU 31.216.148.35:443 gfs270n452.userstorage.mega.co.nz tcp
LU 31.216.148.35:443 gfs270n452.userstorage.mega.co.nz tcp
LU 31.216.148.35:443 gfs270n452.userstorage.mega.co.nz tcp
LU 31.216.148.35:443 gfs270n452.userstorage.mega.co.nz tcp
LU 31.216.148.35:443 gfs270n452.userstorage.mega.co.nz tcp
LU 31.216.148.35:443 gfs270n452.userstorage.mega.co.nz tcp
ES 185.206.27.103:443 gfs214n191.userstorage.mega.co.nz tcp
ES 185.206.27.103:443 gfs214n191.userstorage.mega.co.nz tcp
ES 185.206.27.103:443 gfs214n191.userstorage.mega.co.nz tcp
ES 185.206.27.103:443 gfs214n191.userstorage.mega.co.nz tcp
ES 185.206.27.103:443 gfs214n191.userstorage.mega.co.nz tcp
ES 185.206.27.103:443 gfs214n191.userstorage.mega.co.nz tcp
US 8.8.8.8:53 80.24.206.185.in-addr.arpa udp
US 8.8.8.8:53 20.168.44.89.in-addr.arpa udp
US 8.8.8.8:53 71.26.206.185.in-addr.arpa udp
US 8.8.8.8:53 62.37.24.94.in-addr.arpa udp
US 8.8.8.8:53 54.36.24.94.in-addr.arpa udp
US 8.8.8.8:53 55.27.206.185.in-addr.arpa udp
ES 185.206.27.55:443 gfs214n145.userstorage.mega.co.nz tcp
ES 185.206.27.55:443 gfs214n145.userstorage.mega.co.nz tcp
NL 185.206.24.80:443 gfs204n152.userstorage.mega.co.nz tcp
US 8.8.8.8:53 145.24.206.185.in-addr.arpa udp
US 8.8.8.8:53 117.26.206.185.in-addr.arpa udp
US 8.8.8.8:53 152.37.24.94.in-addr.arpa udp
US 8.8.8.8:53 35.148.216.31.in-addr.arpa udp
US 8.8.8.8:53 26.89.30.69.in-addr.arpa udp
US 8.8.8.8:53 103.27.206.185.in-addr.arpa udp
US 8.8.8.8:53 gfs270n382.userstorage.mega.co.nz udp
LU 89.44.168.98:443 gfs270n382.userstorage.mega.co.nz tcp
LU 89.44.168.98:443 gfs270n382.userstorage.mega.co.nz tcp
LU 89.44.168.98:443 gfs270n382.userstorage.mega.co.nz tcp
LU 89.44.168.98:443 gfs270n382.userstorage.mega.co.nz tcp
LU 89.44.168.98:443 gfs270n382.userstorage.mega.co.nz tcp
LU 89.44.168.98:443 gfs270n382.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs270n080.userstorage.mega.co.nz udp
LU 89.44.168.221:443 gfs270n080.userstorage.mega.co.nz tcp
LU 89.44.168.221:443 gfs270n080.userstorage.mega.co.nz tcp
LU 89.44.168.221:443 gfs270n080.userstorage.mega.co.nz tcp
LU 89.44.168.221:443 gfs270n080.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs206n422.userstorage.mega.co.nz udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
BE 94.24.37.242:443 gfs206n422.userstorage.mega.co.nz tcp
BE 94.24.37.242:443 gfs206n422.userstorage.mega.co.nz tcp
BE 94.24.37.242:443 gfs206n422.userstorage.mega.co.nz tcp
BE 94.24.37.242:443 gfs206n422.userstorage.mega.co.nz tcp
BE 94.24.37.242:443 gfs206n422.userstorage.mega.co.nz tcp
ES 185.206.27.44:443 gfs214n134.userstorage.mega.co.nz tcp
ES 185.206.27.44:443 gfs214n134.userstorage.mega.co.nz tcp
ES 185.206.27.44:443 gfs214n134.userstorage.mega.co.nz tcp
US 8.8.8.8:53 98.168.44.89.in-addr.arpa udp
US 8.8.8.8:53 221.168.44.89.in-addr.arpa udp
US 8.8.8.8:53 gfs270n135.userstorage.mega.co.nz udp
LU 89.44.168.195:443 gfs270n135.userstorage.mega.co.nz tcp
LU 89.44.168.195:443 gfs270n135.userstorage.mega.co.nz tcp
LU 89.44.168.195:443 gfs270n135.userstorage.mega.co.nz tcp
LU 89.44.168.195:443 gfs270n135.userstorage.mega.co.nz tcp
LU 89.44.168.195:443 gfs270n135.userstorage.mega.co.nz tcp
LU 89.44.168.195:443 gfs270n135.userstorage.mega.co.nz tcp
US 8.8.8.8:53 242.37.24.94.in-addr.arpa udp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
US 8.8.8.8:53 gfs270n065.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs206n301.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs214n301.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs208n300.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs262n500.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs204n300.userstorage.mega.co.nz udp
FR 185.206.26.100:443 gfs208n300.userstorage.mega.co.nz tcp
FR 185.206.26.100:443 gfs208n300.userstorage.mega.co.nz tcp
NL 185.206.24.100:443 gfs204n300.userstorage.mega.co.nz tcp
NL 185.206.24.100:443 gfs204n300.userstorage.mega.co.nz tcp
DE 94.24.36.110:443 gfs262n500.userstorage.mega.co.nz tcp
DE 94.24.36.110:443 gfs262n500.userstorage.mega.co.nz tcp
ES 185.206.27.101:443 gfs214n301.userstorage.mega.co.nz tcp
ES 185.206.27.101:443 gfs214n301.userstorage.mega.co.nz tcp
LU 89.44.168.168:443 gfs270n065.userstorage.mega.co.nz tcp
LU 89.44.168.168:443 gfs270n065.userstorage.mega.co.nz tcp
BE 94.24.37.211:443 gfs206n301.userstorage.mega.co.nz tcp
BE 94.24.37.211:443 gfs206n301.userstorage.mega.co.nz tcp
LU 89.44.168.168:443 gfs270n065.userstorage.mega.co.nz tcp
BE 94.24.37.211:443 gfs206n301.userstorage.mega.co.nz tcp
ES 185.206.27.101:443 gfs214n301.userstorage.mega.co.nz tcp
FR 185.206.26.100:443 gfs208n300.userstorage.mega.co.nz tcp
DE 94.24.36.110:443 gfs262n500.userstorage.mega.co.nz tcp
NL 185.206.24.100:443 gfs204n300.userstorage.mega.co.nz tcp
LU 89.44.168.168:443 gfs270n065.userstorage.mega.co.nz tcp
ES 185.206.27.101:443 gfs214n301.userstorage.mega.co.nz tcp
LU 89.44.168.168:443 gfs270n065.userstorage.mega.co.nz tcp
BE 94.24.37.211:443 gfs206n301.userstorage.mega.co.nz tcp
ES 185.206.27.101:443 gfs214n301.userstorage.mega.co.nz tcp
FR 185.206.26.100:443 gfs208n300.userstorage.mega.co.nz tcp
DE 94.24.36.110:443 gfs262n500.userstorage.mega.co.nz tcp
NL 185.206.24.100:443 gfs204n300.userstorage.mega.co.nz tcp
LU 89.44.168.168:443 gfs270n065.userstorage.mega.co.nz tcp
BE 94.24.37.211:443 gfs206n301.userstorage.mega.co.nz tcp
ES 185.206.27.101:443 gfs214n301.userstorage.mega.co.nz tcp
FR 185.206.26.100:443 gfs208n300.userstorage.mega.co.nz tcp
DE 94.24.36.110:443 gfs262n500.userstorage.mega.co.nz tcp
NL 185.206.24.100:443 gfs204n300.userstorage.mega.co.nz tcp
BE 94.24.37.211:443 gfs206n301.userstorage.mega.co.nz tcp
FR 185.206.26.100:443 gfs208n300.userstorage.mega.co.nz tcp
DE 94.24.36.110:443 gfs262n500.userstorage.mega.co.nz tcp
NL 185.206.24.100:443 gfs204n300.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs206n161.userstorage.mega.co.nz udp
BE 94.24.37.71:443 gfs206n161.userstorage.mega.co.nz tcp
US 8.8.8.8:53 100.26.206.185.in-addr.arpa udp
US 8.8.8.8:53 195.168.44.89.in-addr.arpa udp
US 8.8.8.8:53 100.24.206.185.in-addr.arpa udp
US 8.8.8.8:53 110.36.24.94.in-addr.arpa udp
US 8.8.8.8:53 211.37.24.94.in-addr.arpa udp
US 8.8.8.8:53 168.168.44.89.in-addr.arpa udp
US 8.8.8.8:53 101.27.206.185.in-addr.arpa udp
BE 94.24.37.71:443 gfs206n161.userstorage.mega.co.nz tcp
BE 94.24.37.71:443 gfs206n161.userstorage.mega.co.nz tcp
BE 94.24.37.71:443 gfs206n161.userstorage.mega.co.nz tcp
BE 94.24.37.71:443 gfs206n161.userstorage.mega.co.nz tcp
BE 94.24.37.71:443 gfs206n161.userstorage.mega.co.nz tcp
US 8.8.8.8:53 71.37.24.94.in-addr.arpa udp
US 8.8.8.8:53 gfs270n082.userstorage.mega.co.nz udp
LU 89.44.168.229:443 gfs270n082.userstorage.mega.co.nz tcp
LU 89.44.168.229:443 gfs270n082.userstorage.mega.co.nz tcp
LU 89.44.168.229:443 gfs270n082.userstorage.mega.co.nz tcp
LU 89.44.168.229:443 gfs270n082.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs262n375.userstorage.mega.co.nz udp
LU 66.203.125.14:443 g.api.mega.co.nz tcp
DE 94.24.36.85:443 gfs262n375.userstorage.mega.co.nz tcp
DE 94.24.36.85:443 gfs262n375.userstorage.mega.co.nz tcp
DE 94.24.36.85:443 gfs262n375.userstorage.mega.co.nz tcp
DE 94.24.36.85:443 gfs262n375.userstorage.mega.co.nz tcp
DE 94.24.36.85:443 gfs262n375.userstorage.mega.co.nz tcp
DE 94.24.36.85:443 gfs262n375.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs270n081.userstorage.mega.co.nz udp
LU 89.44.168.213:443 gfs270n081.userstorage.mega.co.nz tcp
US 8.8.8.8:53 229.168.44.89.in-addr.arpa udp
US 8.8.8.8:53 85.36.24.94.in-addr.arpa udp
LU 89.44.168.213:443 gfs270n081.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs206n162.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs208n154.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs204n161.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs270n418.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs214n154.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs240n109.userstorage.mega.co.nz udp
BE 94.24.37.72:443 gfs206n162.userstorage.mega.co.nz tcp
BE 94.24.37.72:443 gfs206n162.userstorage.mega.co.nz tcp
BE 94.24.37.72:443 gfs206n162.userstorage.mega.co.nz tcp
LU 89.44.168.194:443 gfs270n418.userstorage.mega.co.nz tcp
LU 89.44.168.194:443 gfs270n418.userstorage.mega.co.nz tcp
LU 89.44.168.194:443 gfs270n418.userstorage.mega.co.nz tcp
BE 94.24.37.72:443 gfs206n162.userstorage.mega.co.nz tcp
LU 89.44.168.194:443 gfs270n418.userstorage.mega.co.nz tcp
BE 94.24.37.72:443 gfs206n162.userstorage.mega.co.nz tcp
LU 89.44.168.194:443 gfs270n418.userstorage.mega.co.nz tcp
BE 94.24.37.72:443 gfs206n162.userstorage.mega.co.nz tcp
LU 89.44.168.194:443 gfs270n418.userstorage.mega.co.nz tcp
SE 69.30.89.19:443 gfs240n109.userstorage.mega.co.nz tcp
SE 69.30.89.19:443 gfs240n109.userstorage.mega.co.nz tcp
SE 69.30.89.19:443 gfs240n109.userstorage.mega.co.nz tcp
SE 69.30.89.19:443 gfs240n109.userstorage.mega.co.nz tcp
SE 69.30.89.19:443 gfs240n109.userstorage.mega.co.nz tcp
SE 69.30.89.19:443 gfs240n109.userstorage.mega.co.nz tcp
NL 185.206.24.98:443 gfs204n161.userstorage.mega.co.nz tcp
NL 185.206.24.98:443 gfs204n161.userstorage.mega.co.nz tcp
NL 185.206.24.98:443 gfs204n161.userstorage.mega.co.nz tcp
NL 185.206.24.98:443 gfs204n161.userstorage.mega.co.nz tcp
NL 185.206.24.98:443 gfs204n161.userstorage.mega.co.nz tcp
NL 185.206.24.98:443 gfs204n161.userstorage.mega.co.nz tcp
FR 185.206.26.64:443 gfs208n154.userstorage.mega.co.nz tcp
FR 185.206.26.64:443 gfs208n154.userstorage.mega.co.nz tcp
FR 185.206.26.64:443 gfs208n154.userstorage.mega.co.nz tcp
FR 185.206.26.64:443 gfs208n154.userstorage.mega.co.nz tcp
FR 185.206.26.64:443 gfs208n154.userstorage.mega.co.nz tcp
FR 185.206.26.64:443 gfs208n154.userstorage.mega.co.nz tcp
ES 185.206.27.64:443 gfs214n154.userstorage.mega.co.nz tcp
ES 185.206.27.64:443 gfs214n154.userstorage.mega.co.nz tcp
ES 185.206.27.64:443 gfs214n154.userstorage.mega.co.nz tcp
ES 185.206.27.64:443 gfs214n154.userstorage.mega.co.nz tcp
ES 185.206.27.64:443 gfs214n154.userstorage.mega.co.nz tcp
ES 185.206.27.64:443 gfs214n154.userstorage.mega.co.nz tcp
US 8.8.8.8:53 213.168.44.89.in-addr.arpa udp
US 8.8.8.8:53 72.37.24.94.in-addr.arpa udp
US 8.8.8.8:53 194.168.44.89.in-addr.arpa udp
US 8.8.8.8:53 98.24.206.185.in-addr.arpa udp
US 8.8.8.8:53 64.26.206.185.in-addr.arpa udp
US 8.8.8.8:53 19.89.30.69.in-addr.arpa udp
US 8.8.8.8:53 64.27.206.185.in-addr.arpa udp
US 8.8.8.8:53 gfs214n175.userstorage.mega.co.nz udp
ES 185.206.27.85:443 gfs214n175.userstorage.mega.co.nz tcp
ES 185.206.27.85:443 gfs214n175.userstorage.mega.co.nz tcp
ES 185.206.27.85:443 gfs214n175.userstorage.mega.co.nz tcp
ES 185.206.27.85:443 gfs214n175.userstorage.mega.co.nz tcp
ES 185.206.27.85:443 gfs214n175.userstorage.mega.co.nz tcp
N/A 127.0.0.1:6341 tcp
ES 185.206.27.85:443 gfs214n175.userstorage.mega.co.nz tcp
US 8.8.8.8:53 85.27.206.185.in-addr.arpa udp
BE 94.24.37.72:443 gfs206n162.userstorage.mega.co.nz tcp
ES 185.206.27.64:443 gfs214n154.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs270n370.userstorage.mega.co.nz udp
LU 89.44.168.80:443 gfs270n370.userstorage.mega.co.nz tcp
LU 89.44.168.80:443 gfs270n370.userstorage.mega.co.nz tcp
LU 89.44.168.80:443 gfs270n370.userstorage.mega.co.nz tcp
LU 89.44.168.80:443 gfs270n370.userstorage.mega.co.nz tcp
LU 89.44.168.80:443 gfs270n370.userstorage.mega.co.nz tcp
LU 89.44.168.80:443 gfs270n370.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs270n384.userstorage.mega.co.nz udp
LU 89.44.168.100:443 gfs270n384.userstorage.mega.co.nz tcp
LU 89.44.168.100:443 gfs270n384.userstorage.mega.co.nz tcp
LU 89.44.168.100:443 gfs270n384.userstorage.mega.co.nz tcp
LU 89.44.168.100:443 gfs270n384.userstorage.mega.co.nz tcp
LU 89.44.168.100:443 gfs270n384.userstorage.mega.co.nz tcp
LU 89.44.168.100:443 gfs270n384.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs302n510.userstorage.mega.co.nz udp
CA 185.206.25.20:443 gfs302n510.userstorage.mega.co.nz tcp
CA 185.206.25.20:443 gfs302n510.userstorage.mega.co.nz tcp
CA 185.206.25.20:443 gfs302n510.userstorage.mega.co.nz tcp
CA 185.206.25.20:443 gfs302n510.userstorage.mega.co.nz tcp
N/A 127.0.0.1:6341 tcp
CA 185.206.25.20:443 gfs302n510.userstorage.mega.co.nz tcp
US 8.8.8.8:53 80.168.44.89.in-addr.arpa udp
US 8.8.8.8:53 gfs270n070.userstorage.mega.co.nz udp
LU 31.216.148.27:443 gfs270n070.userstorage.mega.co.nz tcp
LU 31.216.148.27:443 gfs270n070.userstorage.mega.co.nz tcp
LU 31.216.148.27:443 gfs270n070.userstorage.mega.co.nz tcp
LU 31.216.148.27:443 gfs270n070.userstorage.mega.co.nz tcp
US 8.8.8.8:53 20.25.206.185.in-addr.arpa udp
US 8.8.8.8:53 100.168.44.89.in-addr.arpa udp
US 8.8.8.8:53 gfs270n141.userstorage.mega.co.nz udp
LU 89.44.168.207:443 gfs270n141.userstorage.mega.co.nz tcp
LU 89.44.168.207:443 gfs270n141.userstorage.mega.co.nz tcp
LU 89.44.168.207:443 gfs270n141.userstorage.mega.co.nz tcp
LU 89.44.168.207:443 gfs270n141.userstorage.mega.co.nz tcp
LU 89.44.168.207:443 gfs270n141.userstorage.mega.co.nz tcp
LU 89.44.168.207:443 gfs270n141.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs270n360.userstorage.mega.co.nz udp
LU 89.44.168.70:443 gfs270n360.userstorage.mega.co.nz tcp
LU 89.44.168.70:443 gfs270n360.userstorage.mega.co.nz tcp
LU 89.44.168.70:443 gfs270n360.userstorage.mega.co.nz tcp
LU 89.44.168.70:443 gfs270n360.userstorage.mega.co.nz tcp
LU 89.44.168.70:443 gfs270n360.userstorage.mega.co.nz tcp
LU 89.44.168.70:443 gfs270n360.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs208n182.userstorage.mega.co.nz udp
US 8.8.8.8:53 27.148.216.31.in-addr.arpa udp
US 8.8.8.8:53 207.168.44.89.in-addr.arpa udp
US 8.8.8.8:53 70.168.44.89.in-addr.arpa udp
FR 185.206.26.92:443 gfs208n182.userstorage.mega.co.nz tcp
FR 185.206.26.92:443 gfs208n182.userstorage.mega.co.nz tcp
FR 185.206.26.92:443 gfs208n182.userstorage.mega.co.nz tcp
FR 185.206.26.92:443 gfs208n182.userstorage.mega.co.nz tcp
FR 185.206.26.92:443 gfs208n182.userstorage.mega.co.nz tcp
FR 185.206.26.92:443 gfs208n182.userstorage.mega.co.nz tcp
NL 185.206.24.101:443 gfs204n301.userstorage.mega.co.nz tcp
NL 185.206.24.101:443 gfs204n301.userstorage.mega.co.nz tcp
NL 185.206.24.101:443 gfs204n301.userstorage.mega.co.nz tcp
US 8.8.8.8:53 92.26.206.185.in-addr.arpa udp
BE 94.24.37.25:443 gfs206n115.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs270n451.userstorage.mega.co.nz udp
BE 94.24.37.25:443 gfs206n115.userstorage.mega.co.nz tcp
BE 94.24.37.25:443 gfs206n115.userstorage.mega.co.nz tcp
BE 94.24.37.25:443 gfs206n115.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs206n408.userstorage.mega.co.nz udp
LU 31.216.148.34:443 gfs270n451.userstorage.mega.co.nz tcp
LU 31.216.148.34:443 gfs270n451.userstorage.mega.co.nz tcp
LU 31.216.148.34:443 gfs270n451.userstorage.mega.co.nz tcp
LU 31.216.148.34:443 gfs270n451.userstorage.mega.co.nz tcp
LU 31.216.148.34:443 gfs270n451.userstorage.mega.co.nz tcp
LU 31.216.148.34:443 gfs270n451.userstorage.mega.co.nz tcp
BE 94.24.37.228:443 gfs206n408.userstorage.mega.co.nz tcp
BE 94.24.37.228:443 gfs206n408.userstorage.mega.co.nz tcp
BE 94.24.37.228:443 gfs206n408.userstorage.mega.co.nz tcp
BE 94.24.37.228:443 gfs206n408.userstorage.mega.co.nz tcp
BE 94.24.37.228:443 gfs206n408.userstorage.mega.co.nz tcp
BE 94.24.37.228:443 gfs206n408.userstorage.mega.co.nz tcp
US 8.8.8.8:53 34.148.216.31.in-addr.arpa udp
US 8.8.8.8:53 228.37.24.94.in-addr.arpa udp
US 8.8.8.8:53 gfs262n312.userstorage.mega.co.nz udp
DE 94.24.36.22:443 gfs262n312.userstorage.mega.co.nz tcp
DE 94.24.36.22:443 gfs262n312.userstorage.mega.co.nz tcp
DE 94.24.36.22:443 gfs262n312.userstorage.mega.co.nz tcp
DE 94.24.36.22:443 gfs262n312.userstorage.mega.co.nz tcp
DE 94.24.36.22:443 gfs262n312.userstorage.mega.co.nz tcp
DE 94.24.36.22:443 gfs262n312.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs270n316.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs206n127.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs214n184.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs208n190.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs262n343.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs204n109.userstorage.mega.co.nz udp
ES 185.206.27.94:443 gfs214n184.userstorage.mega.co.nz tcp
ES 185.206.27.94:443 gfs214n184.userstorage.mega.co.nz tcp
ES 185.206.27.94:443 gfs214n184.userstorage.mega.co.nz tcp
ES 185.206.27.94:443 gfs214n184.userstorage.mega.co.nz tcp
FR 185.206.26.110:443 gfs208n190.userstorage.mega.co.nz tcp
FR 185.206.26.110:443 gfs208n190.userstorage.mega.co.nz tcp
FR 185.206.26.110:443 gfs208n190.userstorage.mega.co.nz tcp
FR 185.206.26.110:443 gfs208n190.userstorage.mega.co.nz tcp
ES 185.206.27.94:443 gfs214n184.userstorage.mega.co.nz tcp
FR 185.206.26.110:443 gfs208n190.userstorage.mega.co.nz tcp
US 8.8.8.8:53 22.36.24.94.in-addr.arpa udp
NL 185.206.24.11:443 gfs204n109.userstorage.mega.co.nz tcp
NL 185.206.24.11:443 gfs204n109.userstorage.mega.co.nz tcp
NL 185.206.24.11:443 gfs204n109.userstorage.mega.co.nz tcp
NL 185.206.24.11:443 gfs204n109.userstorage.mega.co.nz tcp
NL 185.206.24.11:443 gfs204n109.userstorage.mega.co.nz tcp
ES 185.206.27.94:443 gfs214n184.userstorage.mega.co.nz tcp
FR 185.206.26.110:443 gfs208n190.userstorage.mega.co.nz tcp
NL 185.206.24.11:443 gfs204n109.userstorage.mega.co.nz tcp
DE 94.24.36.53:443 gfs262n343.userstorage.mega.co.nz tcp
DE 94.24.36.53:443 gfs262n343.userstorage.mega.co.nz tcp
DE 94.24.36.53:443 gfs262n343.userstorage.mega.co.nz tcp
DE 94.24.36.53:443 gfs262n343.userstorage.mega.co.nz tcp
DE 94.24.36.53:443 gfs262n343.userstorage.mega.co.nz tcp
DE 94.24.36.53:443 gfs262n343.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs206n114.userstorage.mega.co.nz udp
BE 94.24.37.24:443 gfs206n114.userstorage.mega.co.nz tcp
BE 94.24.37.24:443 gfs206n114.userstorage.mega.co.nz tcp
BE 94.24.37.24:443 gfs206n114.userstorage.mega.co.nz tcp
BE 94.24.37.24:443 gfs206n114.userstorage.mega.co.nz tcp
BE 94.24.37.24:443 gfs206n114.userstorage.mega.co.nz tcp
BE 94.24.37.24:443 gfs206n114.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs270n077.userstorage.mega.co.nz udp
LU 89.44.168.218:443 gfs270n077.userstorage.mega.co.nz tcp
LU 89.44.168.218:443 gfs270n077.userstorage.mega.co.nz tcp
LU 89.44.168.218:443 gfs270n077.userstorage.mega.co.nz tcp
LU 89.44.168.218:443 gfs270n077.userstorage.mega.co.nz tcp
US 8.8.8.8:53 94.27.206.185.in-addr.arpa udp
US 8.8.8.8:53 110.26.206.185.in-addr.arpa udp
US 8.8.8.8:53 11.24.206.185.in-addr.arpa udp
US 8.8.8.8:53 53.36.24.94.in-addr.arpa udp
US 8.8.8.8:53 24.37.24.94.in-addr.arpa udp
US 8.8.8.8:53 218.168.44.89.in-addr.arpa udp
BE 94.24.37.37:443 gfs206n127.userstorage.mega.co.nz tcp
BE 94.24.37.37:443 gfs206n127.userstorage.mega.co.nz tcp
BE 94.24.37.37:443 gfs206n127.userstorage.mega.co.nz tcp
BE 94.24.37.37:443 gfs206n127.userstorage.mega.co.nz tcp
BE 94.24.37.37:443 gfs206n127.userstorage.mega.co.nz tcp
BE 94.24.37.37:443 gfs206n127.userstorage.mega.co.nz tcp
LU 89.44.168.26:443 gfs270n316.userstorage.mega.co.nz tcp
LU 89.44.168.26:443 gfs270n316.userstorage.mega.co.nz tcp
LU 89.44.168.26:443 gfs270n316.userstorage.mega.co.nz tcp
LU 89.44.168.26:443 gfs270n316.userstorage.mega.co.nz tcp
LU 89.44.168.26:443 gfs270n316.userstorage.mega.co.nz tcp
LU 89.44.168.26:443 gfs270n316.userstorage.mega.co.nz tcp
BE 94.24.37.151:443 gfs206n451.userstorage.mega.co.nz tcp
BE 94.24.37.151:443 gfs206n451.userstorage.mega.co.nz tcp
BE 94.24.37.151:443 gfs206n451.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs204n071.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs270n386.userstorage.mega.co.nz udp
NL 185.206.24.31:443 gfs204n071.userstorage.mega.co.nz tcp
NL 185.206.24.31:443 gfs204n071.userstorage.mega.co.nz tcp
LU 89.44.168.102:443 gfs270n386.userstorage.mega.co.nz tcp
LU 89.44.168.102:443 gfs270n386.userstorage.mega.co.nz tcp
LU 89.44.168.102:443 gfs270n386.userstorage.mega.co.nz tcp
LU 89.44.168.102:443 gfs270n386.userstorage.mega.co.nz tcp
LU 89.44.168.102:443 gfs270n386.userstorage.mega.co.nz tcp
LU 89.44.168.102:443 gfs270n386.userstorage.mega.co.nz tcp
ES 185.206.27.55:443 gfs214n145.userstorage.mega.co.nz tcp
ES 185.206.27.55:443 gfs214n145.userstorage.mega.co.nz tcp
ES 185.206.27.55:443 gfs214n145.userstorage.mega.co.nz tcp
ES 185.206.27.55:443 gfs214n145.userstorage.mega.co.nz tcp
ES 185.206.27.55:443 gfs214n145.userstorage.mega.co.nz tcp
ES 185.206.27.55:443 gfs214n145.userstorage.mega.co.nz tcp
LU 89.44.168.213:443 gfs270n081.userstorage.mega.co.nz tcp
LU 89.44.168.213:443 gfs270n081.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs208n160.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs270n072.userstorage.mega.co.nz udp
FR 185.206.26.70:443 gfs208n160.userstorage.mega.co.nz tcp
FR 185.206.26.70:443 gfs208n160.userstorage.mega.co.nz tcp
FR 185.206.26.70:443 gfs208n160.userstorage.mega.co.nz tcp
FR 185.206.26.70:443 gfs208n160.userstorage.mega.co.nz tcp
FR 185.206.26.70:443 gfs208n160.userstorage.mega.co.nz tcp
LU 89.44.168.239:443 gfs270n072.userstorage.mega.co.nz tcp
LU 89.44.168.239:443 gfs270n072.userstorage.mega.co.nz tcp
LU 89.44.168.239:443 gfs270n072.userstorage.mega.co.nz tcp
US 8.8.8.8:53 37.37.24.94.in-addr.arpa udp
US 8.8.8.8:53 26.168.44.89.in-addr.arpa udp
US 8.8.8.8:53 31.24.206.185.in-addr.arpa udp
US 8.8.8.8:53 102.168.44.89.in-addr.arpa udp
LU 89.44.168.213:443 gfs270n081.userstorage.mega.co.nz tcp
LU 89.44.168.213:443 gfs270n081.userstorage.mega.co.nz tcp
US 8.8.8.8:53 70.26.206.185.in-addr.arpa udp
US 8.8.8.8:53 239.168.44.89.in-addr.arpa udp
BE 94.24.37.151:443 gfs206n451.userstorage.mega.co.nz tcp
BE 94.24.37.151:443 gfs206n451.userstorage.mega.co.nz tcp
BE 94.24.37.151:443 gfs206n451.userstorage.mega.co.nz tcp
NL 185.206.24.31:443 gfs204n071.userstorage.mega.co.nz tcp
FR 185.206.26.117:443 gfs208n197.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs204n070.userstorage.mega.co.nz udp
FR 185.206.26.117:443 gfs208n197.userstorage.mega.co.nz tcp
NL 185.206.24.30:443 gfs204n070.userstorage.mega.co.nz tcp
NL 185.206.24.30:443 gfs204n070.userstorage.mega.co.nz tcp
NL 185.206.24.30:443 gfs204n070.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs270n073.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs204n187.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs240n112.userstorage.mega.co.nz udp
NL 185.206.24.30:443 gfs204n070.userstorage.mega.co.nz tcp
NL 185.206.24.30:443 gfs204n070.userstorage.mega.co.nz tcp
NL 185.206.24.30:443 gfs204n070.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs270n074.userstorage.mega.co.nz udp
US 8.8.8.8:53 gfs206n449.userstorage.mega.co.nz udp
LU 89.44.168.214:443 gfs270n073.userstorage.mega.co.nz tcp
SE 69.30.89.22:443 gfs240n112.userstorage.mega.co.nz tcp
NL 185.206.24.141:443 gfs204n187.userstorage.mega.co.nz tcp
NL 185.206.24.141:443 gfs204n187.userstorage.mega.co.nz tcp
NL 185.206.24.141:443 gfs204n187.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs270n075.userstorage.mega.co.nz udp
BE 94.24.37.149:443 gfs206n449.userstorage.mega.co.nz tcp
BE 94.24.37.149:443 gfs206n449.userstorage.mega.co.nz tcp
LU 89.44.168.241:443 gfs270n074.userstorage.mega.co.nz tcp
LU 89.44.168.241:443 gfs270n074.userstorage.mega.co.nz tcp
LU 89.44.168.241:443 gfs270n074.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs270n078.userstorage.mega.co.nz udp
LU 89.44.168.242:443 gfs270n075.userstorage.mega.co.nz tcp
LU 89.44.168.242:443 gfs270n075.userstorage.mega.co.nz tcp
NL 185.206.24.145:443 gfs204n191.userstorage.mega.co.nz tcp
NL 185.206.24.145:443 gfs204n191.userstorage.mega.co.nz tcp
LU 89.44.168.241:443 gfs270n074.userstorage.mega.co.nz tcp
LU 89.44.168.219:443 gfs270n078.userstorage.mega.co.nz tcp
LU 89.44.168.242:443 gfs270n075.userstorage.mega.co.nz tcp
LU 89.44.168.219:443 gfs270n078.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs270n071.userstorage.mega.co.nz udp
NL 185.206.24.31:443 gfs204n071.userstorage.mega.co.nz tcp
LU 89.44.168.212:443 gfs270n071.userstorage.mega.co.nz tcp
LU 89.44.168.212:443 gfs270n071.userstorage.mega.co.nz tcp
US 8.8.8.8:53 30.24.206.185.in-addr.arpa udp
US 8.8.8.8:53 141.24.206.185.in-addr.arpa udp
US 8.8.8.8:53 214.168.44.89.in-addr.arpa udp
US 8.8.8.8:53 149.37.24.94.in-addr.arpa udp
US 8.8.8.8:53 22.89.30.69.in-addr.arpa udp
US 8.8.8.8:53 242.168.44.89.in-addr.arpa udp
US 8.8.8.8:53 241.168.44.89.in-addr.arpa udp
US 8.8.8.8:53 219.168.44.89.in-addr.arpa udp
LU 89.44.168.219:443 gfs270n078.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs270n170.userstorage.mega.co.nz udp
LU 89.44.168.211:443 gfs270n170.userstorage.mega.co.nz tcp
LU 89.44.168.211:443 gfs270n170.userstorage.mega.co.nz tcp
LU 89.44.168.211:443 gfs270n170.userstorage.mega.co.nz tcp
LU 89.44.168.211:443 gfs270n170.userstorage.mega.co.nz tcp
LU 89.44.168.211:443 gfs270n170.userstorage.mega.co.nz tcp
BE 94.24.37.62:443 gfs206n152.userstorage.mega.co.nz tcp
FR 185.206.26.71:443 gfs208n161.userstorage.mega.co.nz tcp
NL 185.206.24.80:443 gfs204n152.userstorage.mega.co.nz tcp
BE 94.24.37.62:443 gfs206n152.userstorage.mega.co.nz tcp
FR 185.206.26.71:443 gfs208n161.userstorage.mega.co.nz tcp
NL 185.206.24.80:443 gfs204n152.userstorage.mega.co.nz tcp
ES 185.206.27.55:443 gfs214n145.userstorage.mega.co.nz tcp
LU 89.44.168.211:443 gfs270n170.userstorage.mega.co.nz tcp
BE 94.24.37.62:443 gfs206n152.userstorage.mega.co.nz tcp
FR 185.206.26.71:443 gfs208n161.userstorage.mega.co.nz tcp
NL 185.206.24.80:443 gfs204n152.userstorage.mega.co.nz tcp
ES 185.206.27.55:443 gfs214n145.userstorage.mega.co.nz tcp
BE 94.24.37.62:443 gfs206n152.userstorage.mega.co.nz tcp
FR 185.206.26.71:443 gfs208n161.userstorage.mega.co.nz tcp
NL 185.206.24.80:443 gfs204n152.userstorage.mega.co.nz tcp
ES 185.206.27.55:443 gfs214n145.userstorage.mega.co.nz tcp
BE 94.24.37.39:443 gfs206n129.userstorage.mega.co.nz tcp
FR 185.206.26.89:443 gfs208n179.userstorage.mega.co.nz tcp
NL 185.206.24.134:443 gfs204n181.userstorage.mega.co.nz tcp
ES 185.206.27.79:443 gfs214n169.userstorage.mega.co.nz tcp
SE 69.30.89.22:443 gfs240n112.userstorage.mega.co.nz tcp
BE 94.24.37.39:443 gfs206n129.userstorage.mega.co.nz tcp
FR 185.206.26.89:443 gfs208n179.userstorage.mega.co.nz tcp
NL 185.206.24.134:443 gfs204n181.userstorage.mega.co.nz tcp
ES 185.206.27.79:443 gfs214n169.userstorage.mega.co.nz tcp
BE 94.24.37.39:443 gfs206n129.userstorage.mega.co.nz tcp
FR 185.206.26.89:443 gfs208n179.userstorage.mega.co.nz tcp
NL 185.206.24.134:443 gfs204n181.userstorage.mega.co.nz tcp
ES 185.206.27.79:443 gfs214n169.userstorage.mega.co.nz tcp
BE 94.24.37.39:443 gfs206n129.userstorage.mega.co.nz tcp
FR 185.206.26.89:443 gfs208n179.userstorage.mega.co.nz tcp
NL 185.206.24.134:443 gfs204n181.userstorage.mega.co.nz tcp
ES 185.206.27.79:443 gfs214n169.userstorage.mega.co.nz tcp
US 8.8.8.8:53 212.168.44.89.in-addr.arpa udp
SE 69.30.89.22:443 gfs240n112.userstorage.mega.co.nz tcp
NL 185.206.24.30:443 gfs204n070.userstorage.mega.co.nz tcp
NL 185.206.24.30:443 gfs204n070.userstorage.mega.co.nz tcp
NL 185.206.24.31:443 gfs204n071.userstorage.mega.co.nz tcp
NL 185.206.24.31:443 gfs204n071.userstorage.mega.co.nz tcp
LU 89.44.168.239:443 gfs270n072.userstorage.mega.co.nz tcp
NL 185.206.24.30:443 gfs204n070.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs204n192.userstorage.mega.co.nz udp
NL 185.206.24.146:443 gfs204n192.userstorage.mega.co.nz tcp
LU 89.44.168.239:443 gfs270n072.userstorage.mega.co.nz tcp
US 8.8.8.8:53 211.168.44.89.in-addr.arpa udp
NL 185.206.24.30:443 gfs204n070.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs270n076.userstorage.mega.co.nz udp
NL 185.206.24.31:443 gfs204n071.userstorage.mega.co.nz tcp
NL 185.206.24.31:443 gfs204n071.userstorage.mega.co.nz tcp
LU 89.44.168.240:443 gfs270n076.userstorage.mega.co.nz tcp
LU 89.44.168.240:443 gfs270n076.userstorage.mega.co.nz tcp
LU 89.44.168.240:443 gfs270n076.userstorage.mega.co.nz tcp
LU 89.44.168.240:443 gfs270n076.userstorage.mega.co.nz tcp
LU 89.44.168.221:443 gfs270n080.userstorage.mega.co.nz tcp
NL 185.206.24.30:443 gfs204n070.userstorage.mega.co.nz tcp
LU 89.44.168.240:443 gfs270n076.userstorage.mega.co.nz tcp
LU 89.44.168.212:443 gfs270n071.userstorage.mega.co.nz tcp
LU 89.44.168.240:443 gfs270n076.userstorage.mega.co.nz tcp
LU 89.44.168.212:443 gfs270n071.userstorage.mega.co.nz tcp
US 8.8.8.8:53 146.24.206.185.in-addr.arpa udp
US 8.8.8.8:53 240.168.44.89.in-addr.arpa udp
LU 89.44.168.212:443 gfs270n071.userstorage.mega.co.nz tcp
LU 89.44.168.212:443 gfs270n071.userstorage.mega.co.nz tcp
LU 89.44.168.221:443 gfs270n080.userstorage.mega.co.nz tcp
NL 185.206.24.30:443 gfs204n070.userstorage.mega.co.nz tcp
NL 185.206.24.30:443 gfs204n070.userstorage.mega.co.nz tcp
NL 185.206.24.31:443 gfs204n071.userstorage.mega.co.nz tcp
NL 185.206.24.30:443 gfs204n070.userstorage.mega.co.nz tcp
NL 185.206.24.30:443 gfs204n070.userstorage.mega.co.nz tcp
NL 185.206.24.31:443 gfs204n071.userstorage.mega.co.nz tcp
LU 89.44.168.219:443 gfs270n078.userstorage.mega.co.nz tcp
LU 89.44.168.219:443 gfs270n078.userstorage.mega.co.nz tcp
NL 185.206.24.31:443 gfs204n071.userstorage.mega.co.nz tcp
NL 185.206.24.31:443 gfs204n071.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs270n369.userstorage.mega.co.nz udp
LU 89.44.168.79:443 gfs270n369.userstorage.mega.co.nz tcp
LU 89.44.168.79:443 gfs270n369.userstorage.mega.co.nz tcp
LU 89.44.168.79:443 gfs270n369.userstorage.mega.co.nz tcp
LU 89.44.168.79:443 gfs270n369.userstorage.mega.co.nz tcp
LU 89.44.168.79:443 gfs270n369.userstorage.mega.co.nz tcp
US 8.8.8.8:53 gfs206n150.userstorage.mega.co.nz udp
BE 94.24.37.60:443 gfs206n150.userstorage.mega.co.nz tcp
BE 94.24.37.60:443 gfs206n150.userstorage.mega.co.nz tcp
BE 94.24.37.60:443 gfs206n150.userstorage.mega.co.nz tcp
US 8.8.8.8:53 79.168.44.89.in-addr.arpa udp
US 8.8.8.8:53 60.37.24.94.in-addr.arpa udp
LU 66.203.125.14:443 g.api.mega.co.nz tcp
N/A 127.0.0.1:6341 tcp
N/A 127.0.0.1:6341 tcp
LU 66.203.125.14:443 g.api.mega.co.nz tcp
US 8.8.8.8:53 29.243.111.52.in-addr.arpa udp
FI 95.216.52.21:7575 tcp
N/A 127.0.0.1:6341 tcp
N/A 127.0.0.1:6341 tcp
FI 95.216.52.21:7575 tcp
N/A 127.0.0.1:6341 tcp
N/A 127.0.0.1:6341 tcp
FI 95.216.52.21:7575 tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 8b167567021ccb1a9fdf073fa9112ef0
SHA1 3baf293fbfaa7c1e7cdacb5f2975737f4ef69898
SHA256 26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513
SHA512 726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54

\??\pipe\LOCAL\crashpad_4532_OZGZZWQEROILKSCD

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 537815e7cc5c694912ac0308147852e4
SHA1 2ccdd9d9dc637db5462fe8119c0df261146c363c
SHA256 b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f
SHA512 63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 697b47669fb0a20a9e9bbf6ac9ec82a2
SHA1 ab8d2a2c0c3ba0678efaa87e4d322c1ef149878d
SHA256 814a3ba7c3dd577ee79a1b2789ac047fc5b385fefe2ae47acb22a27261c91e11
SHA512 d91a728dda3a5c735b5e0f0da7fd5ae4bd33ef795365e352f3f9eb2052c562beabff528e8d06cea2ad2fd2c441b1e32d0bf0c2bb4ae8a4924ed53f4eaf73817d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 9bafe2d493d3b180bd7630c7052dbef0
SHA1 3a47eeae763d2bfd9f88eaf11272c1fe9969bb35
SHA256 b504e1d5e9fbafd66782e22fbe649429e5d573846efe251e67f39bec49599d20
SHA512 ac4e43245d5c3e82237f3493f09b1d98461685222fe91f04aca506a054f470aca095ed38c59052b97066fe6109f3a8d07332d85d55854cb2afeab5ad554449a9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 61443d94e2f4ce3de9a1e9cd3c0de449
SHA1 3045c248790e153838874849c2b09081ccb8021f
SHA256 24431482a0aca5e2d110b5b6c19c07b32777498d80d5092d84914f8287cee940
SHA512 29cd2356d1d2b95d674301f61f71c5f5be6080caaeae02bb38dcadad19de9dc6bb981065f96ea9dea2aed55855c0661103c1425b93b311a51f9349d71ae287d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 827e60e1753fb2086637fac3d2070fb9
SHA1 6b04ff57a7643ddcda1160707bc0f8fe005ddc51
SHA256 e7e43f7304100cb0fd3be6be25b0e74e01471dcbd3f35026a3c59d9fcffc6af5
SHA512 fda56cc2327c14a9c260f3b570a8f02967d890802a554b338cda989e5afd095b5bc5de9d36a969513c163c155cb4613286e083dbe5543502dfcdd4c49b5fd1b6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000025

MD5 950eca48e414acbe2c3b5d046dcb8521
SHA1 1731f264e979f18cdf08c405c7b7d32789a6fb59
SHA256 c0bbe530abfce19e06697bc4358eb426e076ccdb9113e22df4a6f32085da67a2
SHA512 27e55525ade4d099a6881011f6e2e0d5d3a9ca7181f4f014dc231d40b3b1907d0d437b0c44d336c25dd7b73209cd773b8563675ac260c43c7752e2d2d694d4d9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 080ff1c0c4a470ddaffdd269915b38db
SHA1 6d43277158028a47c88b1f417dfacafbb93a8546
SHA256 fde47996dda26ef6c79db00ec056ea52803d9ffbcfbd58899d21818068bfe6c0
SHA512 2d2696b645b61a8c8783aaf26678f5a3b1af8a0b56d36d01f0cc43e0a62ada433bfd41e915be0a4247cddaed7a6e23ccd5c24005310f9010c3e59cbe42e036a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe578f5f.TMP

MD5 784cc7ea9fa197c7b45b89c477478e35
SHA1 2a5d4e69582b552db71b4c076e494792c03a152f
SHA256 0eefab4a2fdc828ad4816406a10a387a9befbacb1e3e2de45bf2893e49384b03
SHA512 b07f2ea9bbe15862abd93cea0a23e04a790cde0006e57654be4f94256d7149cc4847317db8e412a3f30627ccd657df7c8b207b89f3905b6793f45057f8c55099

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ec6e685d4535a08b7ee0e0e9a603e72d
SHA1 0c8950cd83f01c4064fefeb8acae4799621461f5
SHA256 14f3881c20698f11b434681cbdc2f7a699da829b09c1521462253d09308e9605
SHA512 14f4e8c35738ab37a03ee8984e5022131f7961765e29314c58984aad46a92b733896b7728aa6a63acf05bd59f8fbc638fbfb17f068916570fb659c59ad4f6ae7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ede0b4731ad1bbb82c50b3067ad787ec
SHA1 2e3f63125e880d66283235d2f7090e924e064c39
SHA256 73b60413ba723f159d37a6a2203b5e694b2bcf35f7b0740be9bf601af39da144
SHA512 b0abb68f479eae17bd9f253e889f531dbed93845fcee9496de25523109a6d03364049f49f4ccb37a7d3568ab94366c316ccc17d00cfff95c563657526a6d9512

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 e08735d8d04f386ff229cfdd8a901096
SHA1 e90c5ea41031dec6fee120cc3dff12883d030394
SHA256 dc42a69331760dd72e43c530f6bfe4baeaf1e8ac68edd7e6ac80d131afe9c0d0
SHA512 a1459dfe83ad0ce30a3c50bd9de00e56a57f66b6b96eda248288d5de02cb0bc5c22797e0a33188bfc09a66a0695e6b3c57ba5f0d743abf2c6e5a4b66bfd75386

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 299b2e0051a20265e105449972a9ec8c
SHA1 575e9d5b20ef987a5b9ceb3c335e70178eb7395d
SHA256 9bb7b695a6b2a5968249bded37cabb17cd7505d59810190dd3ee62b98acb9428
SHA512 ef744979e5b8fe1042bd059f595d5fd783e97e2f544865b0124cccdfb410fd39330f6cc73e7b6413a650f1237fec389a5a2c0b4da2cb45e0a92b81ff849c26f3

memory/760-444-0x0000000000E20000-0x0000000000E36000-memory.dmp

memory/3268-445-0x0000024208BC0000-0x00000242099F4000-memory.dmp

memory/3268-446-0x0000024225390000-0x0000024226794000-memory.dmp

memory/3268-447-0x00000242245A0000-0x0000024224AB2000-memory.dmp

memory/3268-448-0x00000242242E0000-0x0000024224532000-memory.dmp

memory/3268-449-0x0000024224BD0000-0x0000024224CA8000-memory.dmp

memory/3268-450-0x00000242241C0000-0x0000024224210000-memory.dmp

memory/3268-451-0x00000242282A0000-0x0000024228A5E000-memory.dmp

memory/3268-452-0x0000024228A60000-0x00000242290F2000-memory.dmp

memory/3268-453-0x0000024227E80000-0x000002422821C000-memory.dmp

memory/3268-454-0x0000024229590000-0x0000024229A14000-memory.dmp

memory/3268-455-0x000002420B730000-0x000002420B750000-memory.dmp

memory/3268-456-0x0000024229320000-0x0000024229532000-memory.dmp

memory/4136-457-0x0000000000580000-0x000000000058A000-memory.dmp

memory/3268-459-0x0000024226B50000-0x0000024226BFA000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\DevExpress.WinRTPresenter.Launcher.exe.log

MD5 28d7fcc2b910da5e67ebb99451a5f598
SHA1 a5bf77a53eda1208f4f37d09d82da0b9915a6747
SHA256 2391511d0a66ed9f84ae54254f51c09e43be01ad685db80da3201ec880abd49c
SHA512 2d8eb65cbf04ca506f4ef3b9ae13ccf05ebefab702269ba70ffd1ce9e6c615db0a3ee3ac0e81a06f546fc3250b7b76155dd51241c41b507a441b658c8e761df6

memory/3268-463-0x0000024224E60000-0x0000024224E6A000-memory.dmp

memory/3268-481-0x0000024A2E6C0000-0x0000024A2E7E4000-memory.dmp