22808e49be085d0edad697a85cdbe6b9f896edab7afe3b9f9d5a4becff88960f
22808e49be085d0edad697a85cdbe6b9f896edab7afe3b9f9d5a4becff88960f.exe
静态报毒
动态报毒
CVE
FAMILY
METATYPE
PLATFORM
TYPE
UNKNOWN
WIN32
RISKWARE
WORM
ALLAPLE
DACN
0.12
FACILE
1.00
IMCLNet
0.86
MFGraph
0.00
| 引擎 |
描述 |
特征 |
威胁分数 |
可能家族 |
检测耗时 |
|
DACN
|
基于动态分析和胶囊网络的可视化恶意软件检测
|
API调用、DLL以及注册表的修改情况
|
0.12
|
Unknown
|
0.07s
|
|
FACILE
|
利用改进的层次胶囊网络对二进制恶意软件图像进行识别分类
|
二进制图像映射为的灰度图像
|
1.00
|
Unknown
|
0.03s
|
|
IMCLNet
|
轻量化深度卷积网络模型实现恶意软件家族检测
|
原始二进制映射而成的可视化图像
|
0.86
|
Unknown
|
0.21s
|
|
MFGraph
|
利用静态特征构建图网络以检测恶意软件
|
原始二进制PE文件的静态特征节点
|
0.00
|
Unknown
|
0.00s
|
| 查杀引擎 |
查杀结果 |
查杀时间 |
查杀版本 |
|
Alibaba
|
None
|
20190527
|
0.3.0.5
|
|
Avast
|
Win32:Allaple [Wrm]
|
20191024
|
18.4.3895.0
|
|
Baidu
|
Win32.Trojan.Kryptik.gf
|
20190318
|
1.0.0.2
|
|
CrowdStrike
|
win/malicious_confidence_100% (D)
|
20190702
|
1.0
|
|
Kingsoft
|
Worm.AllApleT.cz.67868
|
20191024
|
2013.8.14.323
|
|
McAfee
|
W32/RAHack
|
20191024
|
6.0.6.653
|
|
Tencent
|
Worm.Win32.Allaple.e
|
20191024
|
1.0.0.1
|
该二进制文件可能包含加密或压缩数据,表明使用了打包工具
(2 个事件)
| section |
{'name': '.data', 'virtual_address': '0x00015000', 'virtual_size': '0x00011800', 'size_of_data': '0x0000ce00', 'entropy': 7.995791803850976} |
entropy |
7.995791803850976 |
description |
发现高熵的节 |
| entropy |
0.7923076923076923 |
description |
此PE文件的整体熵值较高 |
与未执行 DNS 查询的主机进行通信
(2 个事件)
| host |
114.114.114.114 |
| host |
8.8.8.8 |
文件已被 VirusTotal 上 63 个反病毒引擎识别为恶意
(50 out of 63 个事件)
| ALYac |
Win32.Worm.Allaple.Gen |
| APEX |
Malicious |
| AVG |
Win32:Allaple [Wrm] |
| Acronis |
suspicious |
| Ad-Aware |
Win32.Worm.Allaple.Gen |
| AhnLab-V3 |
Win-Trojan/Starman.Gen |
| Antiy-AVL |
Worm[Net]/Win32.Allaple.gen |
| Arcabit |
Win32.Worm.Allaple.Gen |
| Avast |
Win32:Allaple [Wrm] |
| Avira |
WORM/Allaple.Gen |
| Baidu |
Win32.Trojan.Kryptik.gf |
| BitDefender |
Win32.Worm.Allaple.Gen |
| Bkav |
W32.CrypticB.Trojan |
| CAT-QuickHeal |
I-Worm.Allaple.gen |
| CMC |
Net-Worm.Win32.Allaple.1!O |
| ClamAV |
Win.Worm.Allaple-315 |
| Comodo |
NetWorm.Win32.Allaple.GEN@1ei64a |
| CrowdStrike |
win/malicious_confidence_100% (D) |
| Cybereason |
malicious.01ac2f |
| Cylance |
Unsafe |
| Cyren |
W32/Allaple.E.gen!Eldorado |
| DrWeb |
Trojan.Starman.6712 |
| ESET-NOD32 |
a variant of Win32/Allaple.Gen |
| Emsisoft |
Win32.Worm.Allaple.Gen (B) |
| Endgame |
malicious (high confidence) |
| F-Prot |
W32/Allaple.A.gen!Eldorado |
| F-Secure |
Net-Worm:W32/Allaple.gen!B |
| FireEye |
Generic.mg.30d317d01ac2f335 |
| Fortinet |
W32/Allaple.gen!tr |
| GData |
Win32.Worm.Allaple.Gen |
| Ikarus |
Net-Worm.Win32.Allaple |
| Invincea |
heuristic |
| Jiangmin |
Worm/Allaple.Gen |
| K7AntiVirus |
NetWorm ( f10000041 ) |
| K7GW |
NetWorm ( f10000041 ) |
| Kaspersky |
Net-Worm.Win32.Allaple.a |
| Kingsoft |
Worm.AllApleT.cz.67868 |
| MAX |
malware (ai score=84) |
| Malwarebytes |
Worm.Allaple |
| McAfee |
W32/RAHack |
| McAfee-GW-Edition |
BehavesLike.Win32.RAHack.kc |
| MicroWorld-eScan |
Win32.Worm.Allaple.Gen |
| Microsoft |
Worm:Win32/Allaple.A |
| NANO-Antivirus |
Virus.Win32.Allaple.bkbmt |
| Panda |
W32/Rahack.gen.worm |
| Qihoo-360 |
Worm.Win32.Allaple.Z |
| Rising |
Worm.Allaple!1.AB29 (CLASSIC) |
| SentinelOne |
DFI - Malicious PE |
| Sophos |
W32/Allaple-F |
| Symantec |
W32.Rahack.H |
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
👋 欢迎使用 ChatHawk
我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!
🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
PE Compile Time
1990-04-14 15:46:08
PE Imphash
26290e56b0e344c6c537b3ca66573292
Sections
| Name |
Virtual Address |
Virtual Size |
Size of Raw Data |
Entropy |
| .text |
0x00001000 |
0x00003428 |
0x00003600 |
6.6058785932516635 |
| rdata |
0x00005000 |
0x00010000 |
0x00000000 |
0.0 |
| .data |
0x00015000 |
0x00011800 |
0x0000ce00 |
7.995791803850976 |
L!This program cannot be run in DOS mode.
FFFNFNFRichg
`rdata
E%1G*q
$Uy>q5$
Y=p/s{Zu4}\-FPIa
y|-\|jv
LO"g_WM3
}`O$'o$/K@AZ|D
*_Kd8':
VLA|M:VY9G
^PP(fo
gZg];p~
#t"B6Lm~Gg
gy};Jb
yS^|clNMk3|
}mJ)wXO+&'
6_0m#t}"B6Le~G
gy};Jb
yS^|clNMk3|
}mJ)wXO+&'
6_0m#t}"B6Le~G
gy};Jb
yS^|clNMk3|
}mJ)wXO+&'
6_0m#t}"B6Le~G
gy};Jb
yS^|clNMk3|
}mJ)wXO+&'
6_0m#t}"B6Le~G
gy};Jb
yS^|clNMk3|
}mJ)wXO+&'
6_0m#t}"B6Le~G
gy};Jb
ypjFAj4h
2we1oLB
mbAwm[E3gh
]{_5g_]f@B
`(IDM\5[=o
GjDX2)
x+f#D$
f3f#f#3
T$f#\$
L$#|$3
|$1)#f
|$hD$X#3
\$f+|$
\$+fL$
\$f+D$
T$f+D$
1ff+f3
D$f+D$
L$f#T$
DGf#+f
+#ff+3
\$f3\$
L$f#L$
\$f#fD$
|$\$ff+3
D$f+T$
L$+3#\$
T$f3D$
|${@#f3
T$f#|$
\f+f3f3
|$T$f+
|$f+}@
L$+3|$T$3f3
D$+fD$
D$f3\$
|$33fP
L$f+D$
T$f+D$
L$ff3|$Tf3
L$|$T$
8`#f++3
\$#f+L$
L$f3L$
D$|$@f3
D$#|$h@
D$f#D$
|$h5}XZ
|$hD$X_
L$f|$h3Xf33
|$h3X#f
D$#|$h3
D$f#D$
K+IQ)h1
A6gJ3:-
!sDK\
T:z(k`iO
bORo"'sF
Q*wg_=
$a0W2C{)m<
Kn"J>k
N<[qpf"'@
u1WTQ#
{Jp*|5 [
xNFfZee5*
&?cc9-sV
k?L"Ogu,,O'.
hUswAN
KERNEL32.dll
eMWideCharToMultiByte
CSetCPGlobal
heRtlCaptureContext
LeResetEvent
DeactivateActCtx
txHeap32ListFirst
eFHeapUsage
CBProcess32Next
atUnlockFileEx
eTRemoveDirectoryA
GetThreadTimes
ngSetConsoleCtrlHandler
]HCsU+Z
AA;Q '
&c?}y8p
YM5-6q.XIg$k
PCJ.@]$
{}t\2+
"DU/6.
iZdx*u
\[@7T@6`g?g3MI_=rQLLa
G2z9
c:pH*f+p
_ng!i-mE
TBpPDNP
*K}I~ d+Cr~#P!w
1@?h+i3"
`|i>mc|?
v<\jt{Lx%
x}xk>QM3
9+4ZL;7l??
:uH4oI>
U U5=Xj
^*B6E]
p#w$14'
\yc=#Y
1x}0I:G
#lAV2zjvK
KO#[c@<rU
k/;`0t
CK:pD>eT4O
WA[Zc2>
Sp6TUYu%
RkIX\n
P%%=7/)
_%#[j%5{i)7
NvX=[^q(A
_yhdf[%I
g&1AF+p<3P\
<A.OBD{
Af|: 0
&9/I[e
EGPjZWF!/4t`~+P
vVIP[B%~S
:dfG)Z<|
1ec:y
JMR6QH}
UIaxPGk
|zcE9d
n7\\+oK$^,4
o-ItLG3
y^e$^5o
$%:vVy,
;x*o%AB
@SMjr_=(m0
X$;~=t
n@u&(z)
G/ ie)K
@2=q!Hb
Rbg!X[4fO!Ff8^
P"Amk[
39flGc
)]C(HFI,_D$
%FK}_,
Xx^1ojO0pCrvJ
kzg'WK3NO|r
\0GRaUXukM
Fto+R.\YSh
CldQ@6\9Z
#=Z)l&1
t0hg6Q
a@@,O@h
sL=u^\
IT%T1Ol
3=j"7K#
0Cz)}k
a%K[wrk@2
C)f7^9c`8
*ffYTci"=^`
oE*FW
Abf[k1A
l?pD_}k
yNK1;LR/4
Q2j|c_
kKr|4IKs
erGWT ]
_GDc0or&#
&8&e@0u
GuWbV@\HM}5H^}f*56w
i r2B4+^-
_?m<Q"U#
xx>AXei
_U*O-!
ml7'Q4
[-2'mS
5xR8<n
!y.,+D
|1jj$0-/9EW
=(P[.4`e
JNMn'Et%
4/JS:|h
E&J0wq
zgM&-96H
)i1LU\
h5EPeX||
~KPsuLXw7!8
C'dGs)
F6kGgZG4
\[d(8RNBeBOIf
bd/)6{Dk
LRa)*-,^N
b#.aU*|@7CG^C(Wo'S
<OUBRWfH8s!' yrO
`*yy[}
h|]}$%]
T^i8@-LY|
LSq5g,G8U's]o
vvHi7A-
wb}\_~=
Mx`k?F3
_ tjCU))GVzc
i3R&g"aXe92t
8bhXF.>+k"Wu
<W9(d.a%
=uln8l|SW f
@iJ`GC
v.Zk`*
@-C#I@GY@
u|,dBx
cE[T[U
9rIhLh
VlzEEg
rhao^+;ze&
=S$Nc{Nb
'MHyP/KQI%
Cb\?K
b-X?;]=9o>X)Q,G#
o|v9uxJ{dl-B
dsXr]Y1g
JAvE]H(-n
3*S8==>.
|g3'K7N. lt=oPo
jsP)=W
_,~l0v #
JO4aXl")V4P6nv;
(oRJN4
68x%bU
X-BpC#
?<))WFRe
u?!5A!
@nvX8#ZQ6Z0qT_&6T
<T$)v3q|6K
X?;:djT
s=Lq:nV
(]OgS*C
6dVRs)_KI?3M:JRA
-QPwa!DE
JPKeFD
Q#s~WlGE
scDELC
7Poh5@f
VDSu&!*
}Hqx5l#{c?
A_&s:oEw
@}R'CR
MUa% K
RUWLih-Q
,4*E3@8
KMgl|]uw]
#E]%!L
ViY<k^"+Z
9$(E>U
mr@L(wh
{jF2c~Y
:l>+<9;(
ds)`t*P),B4O
[lRhg8A
F*bSu3Jz
.Fz>-J7k?)f8Z$
pqCysb?q
1>EhE]
Lsn<?A
<{Kg<QZF9
^|C!_za3fJ&
?&EGWMu
s$? Pi
|S,D)t.1u-|c
Jto8P-`BXA
ij1c$W(Ah
W12AT<dMt!n9>T(i
]<(:&U#X}dY
IYkOMol
YoyMCF'
AXf<L|6
yP%MA6
Pq0IJ6i
P}1akkG"'VJ},
!?jNOe
SEu4AO
+_< =!1R36S
.[ZF$k
rE )P6z"e3)Z\U
KuHaCmHi
4jJ|'"
,lu8{]_BU{dAc;
>3-F4g6
=\F9=ygvN*
ob tvCZ(
#\d*eLj.t)
=u8aWm
M|rCnuy
=+ORX$b&f
_6,q%n*zjO!
5mt^.U4v)
'xt?gY-W
MQnaOry"0!
.BNlMcx<>G/A
*K3P?z{d
/LoK=VEljt1
QZ_7n4`
20S\DW@#
xrmi80g
kTH5c?
Hz)(5,eh
Ri}2M=
`K(4i377&n!
|6`[:,\
<u]GHj*
>@Fii{Z
b,@-r^Z,[\Pz
iI;wfP6A
>v`eILU
/Xf9o~Wd:x^
L({cFU
{Q]h\2X.
BK2yyA
Vyc}KHi<.#iO
m_J q0
W"9%=A"t_Xg{`57bc!%;p
(iH@Z&@,
j)ae"[`m.
_zLk^_x
Ohp^r(
)IAYw&R7{#'x@%mfeUJB
,GF5{m7;\W
hhngQN&}
TnLM]<xT8c
57#5'\_
ayM'6O?
j/`G$[x;Ln;8
VL-lmn
D&9X&d[l
.P;l(J)
FVZ+)z~
pRs&k3KKb
sot;F?
12rO1f5e
?\.\MT
kIB!l
5t%fLjeFvN1(
|(sjz-aB.R0
^:cUSt_
1`6|sX#$&
.:94gm
BH{Ck6K
T_}1T{
$XwznX{I
6ubxuJ0
A? 3/!/
(Ts$ZT
|ZnG*mc_
]{BjCW9[=
cFw&c>{ZF`
v6qKq~
h$pYD@ MLg+
:|4'2\
czAl<tOlAb?
sqlbOXQ6T
=0fZ:?)bND[FFt7.zs#
F#%S6!0sn7
8l_Ma2u@|1
@Io]kra
p='tCM5X
G`xd(Y
q$SK~(_F9
ROP:"_/^
faY5Y
0m>&vJ+~6l
Q{~` S
3\Wq%5lUIN
pa`[Af1
DC8cTP`c
ox^E*"3
JN(uWi5gve))+B[
`@E*u*
0-OMx6,.gQ_
^_S1T!^?--*&7Z
o|>Z<JA*}
a5Rjl(F0
/d:{b8r{0pCrR
3?GzX0;
ubIQSYy[U
8ewvC(@='
|oUM<-@a:!@-B2wJ
\Un[$
G1J\V`
cp_XdXxrR@l%OX
~*x4s0M@Le
o2]NyzDGvD
zx\G4>_o
(s=2WT6wTK
8hzcqf5
w.>`aO)7px~rhqnF8
F.MN2dZ
=,ar*k
KH@P"'
BJpVe%dV
$T44#d{C|xp$
6h\lM4(x
sm;k"nzEC2\{
B#9S1"
^fG#*hF
/5Zzq0CB-EQ
x<0)$[
qKI?Ig#
>L4Naw6
}LdU;Rea
i2g]dhZTLK
=6xmQ,
e>xahj~q
jUwbkcF
OT"Xrh
8n9A}gIcfy^-{:
R[0J*
OYDp=jQ
y0w^}?kh29WQ
hS^#En
HC/>]mW*~@y);K
bD x-U
M-~=(="t*
7nXR~t
O9\!/PO]
<yQnegr}}
)VaKk8q+
N#SIWT
`'z0S/7)}
srpQn wA
(3JQu!P
LoG<DF
MmGv+JG|@C$
^_G7J^)h:5
OSzdiOeQl6!
J&Ph%0u
vF?RGM
:Qax`p
T\f0g7(In
>tTI$W=;?PVG
]q 2ypc
#:Q$-mw4
='uP*8&
7Zisx`my
joPFW8x
Qp(,F_y|
)*VWi|-
'1;`0[O`
vK8^mkQF
e5gjLN{K(B/\g&V 9
g!D\-+
B_]<dMoVw%m
y6n(A]
j}OWZ4]u.wL>
9?S%*$<)$[@h1
dBUUt9GBu4*
K(SZD[
c8{SWQD
+g<s8tL
[mo1w4P4<>
_M\\>
&$,!DH
t4_hEcA\\ho
v[8FwlZ
.9uJcQ
J-;E&[VgGujx
BsDv[m
tJ'5rz#.
](7]4~di$) 's
IC9<At
F,HiK=sR
Uu3L3@zbLCu
O!`j#B)
!%-#Bseh
N U|4t
7+u)7N(OAP
&,#kBbEI
W,,Fryua^`5
8FD4rADE
DW+h`TbD
oI1yvKegF`{gn7F[
RjU2SE
ie@a8u
wi)~KD
\1eDQ$
5"Gps/5%cy
^ul1#?P
`ZT"zP
1Ed0pI
D7P5{$x
>0c>b#O
*u$S*5
)Bk|_p
U3lDH4z
WZg(kywmiP
I.,Tq
UW}%uM
lVU9M&'E
M,9'W"6u[`O_"e_
ekfh^|
1}6y!"*
c$E#f_:
\ny !9Q
C]fD7aQ
<8/KTffO
xdK5Rz
X"jymh5
9/]dIn
n15@$H(&D
kq"{[3?d
}iZPW%T$*
j>k^]ZGc
uNg4pr
=&tsYa=5@z
0."bYs(i={
wQR KPm"^
tT0CH$"
sM]Cl{Q8
w.Nf@6
~X0n|TcPM
9L35&PD
q]>e5"
Sc+pU[W"
F/I)o;1J
[i_>TIG#a
(4#N'}]]
-_L\vaX>0B-|2
a8-U=k3
;~s41?
\f%/;<-
mT*y0
9M6A&]`t
&[(K@w
B8P_wIBY
gaJgoTw0
q6fWEL$!B'
X%Y84\
antRb@x\
&SW6zM4C;v
dGVG2Ao%VTu2N'
z\}SSn;
?M<,jn
zii(7d0G1L#}
3Q~D}R)w
JB^e=K
'-=Q/?\,[
T*}Y2_,h
1VD*{b
xbjR`./ <4
6F.'X`@
FGQ(Fok
VLRTXnu(]b
kh_!7$yc
tFG-)db+
Z<W'[(8
Xh+wPK
aN8sBli
6!3svM\]
ez,nAx
tkO[M,
a|"O5$]0
F]HUbB_
mG?%65S@>2:L8
nN&{?[\F
iIy4m9O-.J
S5eqnWoRpsvn
/-fg8
TJCk]/P
tAA.UUAf.Lb
5[<1bh$M^kn+l
P7xR``
NU1)@D2H_-
RUZqp?m
YNB}nT8
xy)I- s
?kL:;-^L%
;V1si%
eiWxK4t
RCQ8<$R
zIF%;LP]}
*vnb6M
l7P)G%
g`a7.
<QI6mk`6].=
lfUV TQW
kvi=[|
B_!yY&~!=4zP~99G]
)ER68jx
cF{s6[# pfp4~9
"|el>83=
4@!-FBM2
1jqvJet<l
c|!dhl
z(KEk,
WIb!<y
?xb#h5E[Y
I]!9:M;!qtiPi
'W&U3/U
I$30Qx
+pwO74\
2GFyj
B`$f-&
f'Y~mIFOyG*
"rblLcDBcVN5&\vE
P0\?bd*6<lc~
~}RpP66iXm<*
WCy4,y
XH',8<9[ZK
LT$'H+r>
=h/F``rn_%T
FG(dT[
"W[0@fc+
cUezC/N
_V`R=4*iP
P>/5@-CAT
"F;Ge]
,GFic&\K!_
;PyJ~(56$gK
z,M/$gg$
,j1dR39~
K6\&2wKGsAr
|tk_~Wq
a>c\C-Fpopp
2rkxd-
!0##GdN
B;}eFpP@
M!/p;wmEfl
:Sj(wW
*Ql-|e
R~K|n^#U
7:%[U@^#!
DS!|gv<P
%$9$G.=-
D2MWoh}S#FN5we
u,-]Gi3
yjqjtf
-vfV}66
^TGHwQlC
iH:y2$5Xc-P*
xtYb/*
;5>7Zi
dEfVN2
nH%H^)
}Xs^h.0J#[a
FRi_Phlu]xC7^
G#kr4Y?CH'L
DJ(-HTM$
30iMreidSc&
WY"("A
m[=Pfj.'
n}eF[I@bb
nGD&!X
YN'loM")
8s#/Q%p&Fa
|gb8ep
4o+G+/;MT{+_<Y'02ocW
Kd&Au|v;$skG
"C>mtC
r_wLfV2ujJ
;D)OfOh&
{1$an}`5GPN"E
~w7/msuP
jXCGcZ
6R;mB"#I8LK;q:g
*!"i2U4
S?T,1C.*k+
'5OpJ.L
=Q"N2e
ONl[2}Y
h!xCPI8CM
pD+L"Y
UM$b;[~7_Z9#\IG
)jg{*@(
I=_L>z
0yOZX[L
O-x?8Gd
<fKF}w6]U s
b9+1],
<SLro)B
F|]@u>^
l:93r-qd
P5!*s8*(HIw
-y\[6B
-oMnJwfK
`qT<x!
Av-^'b
8Swe4
'Fsjj]`(H
t@B4?b`'"
|Wh!!:L
qj~v|fyE1kNO
_f3q<jq[L\r[y=!
YHi5 r9_
Fipiav!3
!=g5QGD
@A<C{/?#jKh)C$F
iq!f`3
_PNsBN
DL)n/Xj<ll
zp$_y>~B)
R7*!ig797RN^
G^-#3N
;-+hPb
9:EMLa@
W7oUQ&G
vynFyo
tp3&`:w'BW
HV6!cB
&K%j.gl2)
]xq7~-u,
{0EhVvCe
pThhl !/
:^z[Xa
tNpp!i
l&XfTG
\3.ULV"4D
MyIG|CD?@\2n
QbQKI6V$kgVtpJn4P
JCibI
-fT(9O
6YVminW
EUC1pvr
i9.'PQ
Q\l??u
8"VY;qi
`4nBgk_>8n}9
^R[I~;&lg
}Lp8#,
a`m}FK$
+L?'lB(m,]
huP9)@
6ze_ukO
taM~co
jH;J *
xw[CWRn#
utH(n!
ZO;L<Ub7pR
(Lb7Q#
HDLb!&v4x#
^ubp5Fb)9*tm?
m")Qd[h
`QFX^zj/
Jes`=%*p[Q
Ky-.QB9|$
Ti09G20p,D
rzI:X1a[F
,fnb#ty1E"vE
`1f-Jq%J
`88aI^dUr
iZ,=9T
5RG9Qf
bay5Yf
C&M.#M
_M6'R'V"
w^v;:k
Lm7 0Ov
Hty"V_
.DbC]e
;x#!FlB6^JI.y
HlP4RQ8
[tu5BZh^9
RVzm2j 5>e!2
wZJciJ<ShjNcgGZKh^v
a-Nl!5
!!:H;=2
csFAN+/
FA['mpD\c
gkcw[J4
:(9t#m%
kW}r!-J
aI/3I}
|6HUVrug
XGz3n?
+}~ZW]
e9&>YrG
/B7,L'O]
SLG*6qoBcrU
8I>@NM(
iY%'I:
;~z}U&z
j'X[Q b
p@>[&WP*
c]Tmw:1
=zo(w,v
d!YI3g@Q^Ae=z
d4O,10<V:
JZ%@WoOh;5GEQ
?Iy@|O
Ac0%#L;i"
-={=)6h
z(p3V7\
HT9kmh
YH#!F"5
%.'l@Dj
7Ufb*W)D=
@c[&z0/bE8
&+=ZH=[&LI5y{I
=<P)kwW"
n$lJ?Ja
bVoQ}+?
h6[7[]K
%Pi@x
2nN!CBk
-8q9DZ
\<.3v
vcsm.*
o:)>G;BU"
^m:`4YSz
NKIr8Q
X (GkBi7ZP
0{cP|u e
l>TBX4M3
+^O`rA
"cuHkCI
jh4<Wc-D[2mP\n
qq|a{n-
3?A|mS
)[nTHU
Ll_"<C
m|TPTroZ?m&C
t6NS}(
<r!CBhK** g$
v1t_[cw64i
,<SH'>
?sk%=}
YhpG#]e"
rL\?4
fPvkKM
&h'a1q#=7
SBd5Gl
{T=AkjQ
uY9D9-
]JQ^|6wrZm
knu;ED
[oq-n)
}SOJa(]
}/ckB:G
)3s)9zG
~X|z:R
.?BBf_TZQ1
-t3:poy
X>pb]`Sr
6#t]!W(^
QB|J8" y]
%6x|G <W7/
GFn'P?jAR6cPX
-'@P(hqC
A[)MG4
XsEk#/@r
\"Yx<l
dDi)_I<dt
q22XNXA3
(^7ET`
JzLRxUff>[H:L
@HJf;v*
'|l!;^W>soy
@0x!k|JdHz;z!..
xZkcYD
-'@&Q7k
X+8\A8Nie:
xgy6IS|
UB`4wC?
b)Z6`Q8c
E/ulEw
m=0Yz\
5\o:L1D
e~}"T 8n'
E)]-A^
VNSJgZ
@M|W'$E)
m=0Yz\
5\o:L1D
e~}"T 8n'
E)]-A^
VNSJgZ
Fz%KE`
/u#dEzl
D:L1s~
F7arF;]
/P[nGZ
=Yz=p*
:?7%s}"
_+:\eMb
H_7MgGz(Yg
NI5un8!_s7-`_
-6s]A(
]Y.gtmX
{OQC]bm-
/4W$5cOr
pmh=08
_siz"@uGGP
p,:wwpW
GIQ*k%
KM$17=e
\T#/"[
`SH9@b+
sYT|(mX
BUHnl{
RxSf!
5.L^R(%M
&q5#1)8R`AB^|j
G2sfKTP"&IQR%U>
*B&ClNS,9F
6"v6|'/
cVa\ntG4
#<s<tVf
*>K\5l
6.~A~"9WM>
<k+iPe<<vv
4J5%.#.!Cl &eW2l
xY-n@(s9 :
+y]tK@
-o(54U
:.M&<P*
afR!v##
'fItH
k^)Enhpgu
+-l9>KvZ>
7$#A:aI
@ZidC"
e/[t);(^
U!bL:+ecu
[]+6K8V^
.ex;VZ
in,=GC*
$m4]HkC -[kO
SVlS/Z
f-s5\]Kt.X
H*|@Fv
3MB?]A
}AH@",e
l7{=\O=;=
`6"i'/]
ARcgb[
[jYdIhv}zM
v(Z>{vx/)|
lI&8fg
9g*`o
.f-9LnYD
SVC\Ko
AIgGxg
ELA<594|
n|vs+"PO
.1?Ih=#T<M
_I$/\C4D=
zQ4<\E\
6mV4<9K*
@q26'Q}\uyV
/Jq'yTII
Cb!lP:P,0%
"+31 + nn%
@dD_[]D
ui{6w:'F8j59&
Lc?IKfm
8J9Y\'
R6!%`
0)OZ3O
?CB&lCR,9F
fRKtI#
zOT1sd>kH-=[
C[. FLQ'eGjHkGXM[h5N
u3#=}2+
qOH818
#U~lHgG
.{68}d%.
ljo]JZofC9~)
*#dx(R]0
Fz}H%`If|h
J]14oX
M0'_u`
"LE|Vg
>lw]<-)
%VN'<V/p~
UNz0gf}|seL?"
ORWVo4y;r
OgbM4AV
AV.JKNPT)Me:
un@+ec[1
>SVQOTn
XrJIfRI
Hh,4S%r
5y<+YGD2
R'z:"Y
}u17b;=e3.
^-_}0e
_T%#]X
r}'QJb
L46t4406Q~m![(
Qo4gec\b
eU_tr#-1
]JZ/E^
f3:O/Pl~
YE|Hk?
Fhz"F3eU?}
V^XDx'5`
/J/I{$#*!#
yGz)t"
l!n(13
IVIS/2AHY.
pm=@<[
Y&/\:"\
`<Ds2W
~[>~t^
^Z>4Y}
:n87-sRb
,E64|h-;
!zg\|`j
&ol`~V`
6]>>-=3g
[n7G'M
zTYEgi:
}9-puY
<Z/xv=
iuuE*'AI&i8d
e9{8D*tN!
RFOgbWm
VQEhyY
SY~[IrF~jJ
o\dH3eV
!)sV\A5&N
XLacnj
F\dFHpc
fh=[MQ
V>{vxl)|(jqNm
8QM'\'
k7,hPwO]iG7UB
J3M><[
HQ&eqHk,
Q}>3vXL5_t`6'L
wwR,)3Zdvaw2T6
6n3=]
K@Oz~4tz
y/,%(N]]
Y/hQ poMKQ
!o`a'*=
rt)X),=fK
OHw51bE
;LlL;wj/4s-
m[hlX7
_hz"&H
o~^-(h
t>t[`fwS/&
k#'OwW
.v44:v
{vxLPE_[
N1<V/~U
p$>t|xpj>
Aev]>g
hKL}0(k
K#UDOe40AiD{H
I+/\kp&Iq%Uk5bYHi.<V/~?&g
].`|Vr>#S9}i?!JO
f'G0!7
'3e1u,]7?d8>
vu2#1)8R;
K^7MlkSc3'hkAN
EZLqAeBug
%&8P-A^
VNSJgZ
@M|W'$E)
m=0Yz\
5\o:L1D
e~}"T 8n'
E)]N8Ub5)g
VNSJgZ
TCP
No TCP connections recorded.
UDP
| Source |
Source Port |
Destination |
Destination Port |
| 192.168.56.101 |
53179 |
224.0.0.252 |
5355 |
| 192.168.56.101 |
49642 |
224.0.0.252 |
5355 |
| 192.168.56.101 |
137 |
192.168.56.255 |
137 |
| 192.168.56.101 |
61714 |
114.114.114.114 |
53 |
| 192.168.56.101 |
61714 |
8.8.8.8 |
53 |
| 192.168.56.101 |
56933 |
8.8.8.8 |
53 |
| 192.168.56.101 |
138 |
192.168.56.255 |
138 |
| 192.168.56.101 |
58485 |
114.114.114.114 |
53 |
| 192.168.56.101 |
58485 |
8.8.8.8 |
53 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
Sorry! No dropped buffers.