Malware Analysis Report

2025-01-02 06:55

Sample ID 241201-vzw6ka1qak
Target ff71371de6f84438d30f0938494562c034945611509c952d6fec63ab4aa39458
SHA256 ff71371de6f84438d30f0938494562c034945611509c952d6fec63ab4aa39458
Tags
r77
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

ff71371de6f84438d30f0938494562c034945611509c952d6fec63ab4aa39458

Threat Level: Known bad

The file ff71371de6f84438d30f0938494562c034945611509c952d6fec63ab4aa39458 was found to be: Known bad.

Malicious Activity Summary

r77

R77 family

r77 rootkit payload

Unsigned PE

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2024-12-01 17:26

Signatures

R77 family

r77

r77 rootkit payload

Description Indicator Process Target
N/A N/A N/A N/A

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-12-01 17:26

Reported

2024-12-01 17:28

Platform

win7-20240903-en

Max time kernel

150s

Max time network

121s

Command Line

"C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe"

Signatures

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe

"C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 flingtrainer.com udp
US 104.26.14.72:443 flingtrainer.com tcp
US 8.8.8.8:53 c.pki.goog udp
GB 142.250.200.3:80 c.pki.goog tcp
US 8.8.8.8:53 crl.microsoft.com udp
GB 2.19.252.143:80 crl.microsoft.com tcp
US 8.8.8.8:53 www.microsoft.com udp
GB 95.100.245.144:80 www.microsoft.com tcp

Files

memory/2648-0-0x000007FEF4D23000-0x000007FEF4D24000-memory.dmp

memory/2648-1-0x0000000000240000-0x0000000000274000-memory.dmp

memory/2648-2-0x000007FEF4D20000-0x000007FEF570C000-memory.dmp

memory/2648-3-0x000007FEF4D20000-0x000007FEF570C000-memory.dmp

memory/2648-4-0x000007FEF4D20000-0x000007FEF570C000-memory.dmp

memory/2648-5-0x000007FEF4D20000-0x000007FEF570C000-memory.dmp

memory/2648-7-0x0000000000290000-0x000000000029A000-memory.dmp

memory/2648-8-0x000007FEF4D20000-0x000007FEF570C000-memory.dmp

memory/2648-6-0x0000000000290000-0x000000000029A000-memory.dmp

memory/2648-12-0x000007FEF4D20000-0x000007FEF570C000-memory.dmp

memory/2648-31-0x000007FEF4D20000-0x000007FEF570C000-memory.dmp

memory/2648-32-0x000007FEF4D23000-0x000007FEF4D24000-memory.dmp

memory/2648-33-0x000007FEF4D20000-0x000007FEF570C000-memory.dmp

memory/2648-34-0x000007FEF4D20000-0x000007FEF570C000-memory.dmp

memory/2648-35-0x000007FEF4D20000-0x000007FEF570C000-memory.dmp

memory/2648-36-0x0000000000290000-0x000000000029A000-memory.dmp

memory/2648-37-0x0000000000290000-0x000000000029A000-memory.dmp

memory/2648-38-0x000007FEF4D20000-0x000007FEF570C000-memory.dmp

memory/2648-39-0x000007FEF4D20000-0x000007FEF570C000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-12-01 17:26

Reported

2024-12-01 17:28

Platform

win10v2004-20241007-en

Max time kernel

150s

Max time network

137s

Command Line

"C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe"

Signatures

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe

"C:\Users\Admin\AppData\Local\Temp\修改器\Dave the Diver v1.0 Plus 18 Trainer.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 104.219.191.52.in-addr.arpa udp
US 8.8.8.8:53 flingtrainer.com udp
US 104.26.14.72:443 flingtrainer.com tcp
US 8.8.8.8:53 c.pki.goog udp
US 8.8.8.8:53 83.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 72.14.26.104.in-addr.arpa udp
GB 142.250.200.3:80 c.pki.goog tcp
US 8.8.8.8:53 3.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 138.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 196.249.167.52.in-addr.arpa udp
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
US 8.8.8.8:53 50.23.12.20.in-addr.arpa udp
US 8.8.8.8:53 241.42.69.40.in-addr.arpa udp
US 8.8.8.8:53 92.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 22.236.111.52.in-addr.arpa udp

Files

memory/3988-0-0x00007FF80F383000-0x00007FF80F385000-memory.dmp

memory/3988-1-0x00000275FD7E0000-0x00000275FD814000-memory.dmp

memory/3988-2-0x00007FF80F380000-0x00007FF80FE41000-memory.dmp

memory/3988-3-0x00007FF80F380000-0x00007FF80FE41000-memory.dmp

memory/3988-4-0x00007FF80F380000-0x00007FF80FE41000-memory.dmp

memory/3988-5-0x00007FF80F380000-0x00007FF80FE41000-memory.dmp

memory/3988-6-0x00000275FFF50000-0x00000275FFF58000-memory.dmp

memory/3988-9-0x00000275FFF60000-0x00000275FFF6E000-memory.dmp

memory/3988-8-0x00007FF80F380000-0x00007FF80FE41000-memory.dmp

memory/3988-7-0x00000275FFFA0000-0x00000275FFFD8000-memory.dmp

memory/3988-22-0x00007FF80F380000-0x00007FF80FE41000-memory.dmp

memory/3988-23-0x00007FF80F383000-0x00007FF80F385000-memory.dmp

memory/3988-24-0x00007FF80F380000-0x00007FF80FE41000-memory.dmp

memory/3988-25-0x00007FF80F380000-0x00007FF80FE41000-memory.dmp

memory/3988-26-0x00007FF80F380000-0x00007FF80FE41000-memory.dmp