Port 30102

An FTP service is run at TCP port 30102 in order to download screen captures.

RAT: NetSphere (TCP)