SmartHawk

5.8

高危

该样本未表现出任何异常！

重新分析

下载样本

7d3b6e318be443e856754fbcc3ef3197a8b4257d8bcde41dd3c10a4ae432a2f7

414329b0e1d40315f5ab1e9bda8fecd5.exe

分析耗时

91s

最近分析

文件大小

296.0KB

静态报毒动态报毒

未检测暂无鹰眼引擎检测结果

未检测暂无反病毒引擎检测结果

Queries for the computername (1 个事件)

Time & API	Arguments	Status	Return	Repeated
1619397514.593124 GetComputerNameA	computer_name: OSKAR-PC	success	1	0

Uses Windows APIs to generate a cryptographic key (5 个事件)

Time & API	Arguments	Status	Return
1619397502.233124 CryptGenKey	crypto_handle: 0x005d7ab0 algorithm_identifier: 0x0000660e () provider_handle: 0x005d7468 flags: 1 key: fmAÅÿË¾·ú7TR	success	1
1619397514.640124 CryptExportKey	crypto_handle: 0x005d7ab0 crypto_export_handle: 0x005d7530 buffer: f¤z.òì[%J>Xh]¾ÇÃýª9°oÁå H_W¢3lOf!«n.Yt¼Óþ´®¬¤°Þ8èÁZ§+w45°Å±ªu\|Ðãí/ñ3¤îÆl blob_type: 1 flags: 64	success	1
1619397543.015124 CryptExportKey	crypto_handle: 0x005d7ab0 crypto_export_handle: 0x005d7530 buffer: f¤GB1º*?PÅ3º«##¾£¶¬wÙÿwÁ÷ì>@ßK#2V]¿`]ÕúåB¾áhV¦¡(=sI³¡S"dÝyìcBé\|Óí=ê;íQ8®G blob_type: 1 flags: 64	success	1
1619397547.390124 CryptExportKey	crypto_handle: 0x005d7ab0 crypto_export_handle: 0x005d7530 buffer: f¤yæ9`6½=ÈzqÊå ã405Ú1IGgn`ß"c÷ñÙ]%jô4a»D×Â{¡Ònm!T%?wzn Õè6k[[ÔpYåð\°¢~~ÖöË blob_type: 1 flags: 64	success	1
1619397552.108124 CryptExportKey	crypto_handle: 0x005d7ab0 crypto_export_handle: 0x005d7530 buffer: f¤^/ÐlµúeÂ.CÀó&¢¾¬Ð×\|¤ëzýá)]b9ÚyL!W«Ó_ää¢ÅkýA³â§ªô,ÓXD(ò2K£g[ÂÐ^{×Á^3»Mb%Z blob_type: 1 flags: 64	success	1

The executable uses a known packer (1 个事件)

packer

Armadillo v1.71

Allocates read-write-execute memory (usually to unpack itself) (1 个事件)

Time & API	Arguments	Status	Return	Repeated
1619397501.546124 NtAllocateVirtualMemory	process_identifier: 2860 region_size: 36864 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) process_handle: 0xffffffff allocation_type: 12289 (MEM_COMMIT\|MEM_RESERVE) base_address: 0x00510000	success	0	0

Foreign language identified in PE resource (3 个事件)

name

RT_ICON

language

LANG_CHINESE

offset

0x000478c8

filetype

GLS_BINARY_LSB_FIRST

sublanguage

SUBLANG_CHINESE_SIMPLIFIED

size

0x00000128

name

RT_ICON

language

LANG_CHINESE

offset

0x000478c8

filetype

GLS_BINARY_LSB_FIRST

sublanguage

SUBLANG_CHINESE_SIMPLIFIED

size

0x00000128

name

RT_GROUP_ICON

language

LANG_CHINESE

offset

0x000479f0

filetype

data

sublanguage

SUBLANG_CHINESE_SIMPLIFIED

size

0x00000022

Checks adapter addresses which can be used to detect virtual network interfaces (1 个事件)

Time & API	Arguments	Status	Return	Repeated
1619397516.968124 GetAdaptersAddresses	flags: 0 family: 0	failed	111	0

The binary likely contains encrypted or compressed data indicative of a packer (1 个事件)

entropy

7.316609454351607

section

{'size_of_data': '0x0000c000', 'virtual_address': '0x00037000', 'entropy': 7.316609454351607, 'name': '.data', 'virtual_size': '0x0000fc08'}

description

A section with a high entropy has been found

Expresses interest in specific running processes (1 个事件)

process

414329b0e1d40315f5ab1e9bda8fecd5.exe

Reads the systems User Agent and subsequently performs requests (1 个事件)

Time & API	Arguments	Status	Return	Repeated
1619397515.015124 InternetOpenW	proxy_bypass: access_type: 0 proxy_name: flags: 0 user_agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)	success	13369348	0

Communicates with host for which no DNS query was performed (6 个事件)

host	113.108.239.196
host	172.217.24.14
host	181.167.96.215
host	185.94.252.13
host	217.199.160.224
host	71.50.31.38

Sets or modifies WPAD proxy autoconfiguration file for traffic interception (8 个事件)

Time & API	Arguments	Status
1619397519.515124 RegSetValueExA	key_handle: 0x000003c4 value: 1 regkey_r: WpadDecisionReason reg_type: 4 (REG_DWORD) regkey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{40112ABE-63B3-43C3-BE93-1440EE3AF106}\WpadDecisionReason	success
1619397519.515124 RegSetValueExA	key_handle: 0x000003c4 value: °V ÷9× regkey_r: WpadDecisionTime reg_type: 3 (REG_BINARY) regkey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{40112ABE-63B3-43C3-BE93-1440EE3AF106}\WpadDecisionTime	success
1619397519.515124 RegSetValueExA	key_handle: 0x000003c4 value: 3 regkey_r: WpadDecision reg_type: 4 (REG_DWORD) regkey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{40112ABE-63B3-43C3-BE93-1440EE3AF106}\WpadDecision	success
1619397519.515124 RegSetValueExW	key_handle: 0x000003c4 value: 网络 2 regkey_r: WpadNetworkName reg_type: 1 (REG_SZ) regkey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{40112ABE-63B3-43C3-BE93-1440EE3AF106}\WpadNetworkName	success
1619397519.530124 RegSetValueExA	key_handle: 0x000003dc value: 1 regkey_r: WpadDecisionReason reg_type: 4 (REG_DWORD) regkey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\0a-00-27-00-00-00\WpadDecisionReason	success
1619397519.530124 RegSetValueExA	key_handle: 0x000003dc value: °V ÷9× regkey_r: WpadDecisionTime reg_type: 3 (REG_BINARY) regkey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\0a-00-27-00-00-00\WpadDecisionTime	success
1619397519.530124 RegSetValueExA	key_handle: 0x000003dc value: 3 regkey_r: WpadDecision reg_type: 4 (REG_DWORD) regkey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\0a-00-27-00-00-00\WpadDecision	success
1619397519.546124 RegSetValueExW	key_handle: 0x000003c0 value: {40112ABE-63B3-43C3-BE93-1440EE3AF106} regkey_r: WpadLastNetwork reg_type: 1 (REG_SZ) regkey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\WpadLastNetwork	success

Connects to IP addresses that are no longer responding to requests (legitimate services will remain up-and-running usually) (9 个事件)

dead_host	192.168.56.101:49181
dead_host	172.217.160.110:443
dead_host	172.217.24.14:443
dead_host	216.58.200.238:443
dead_host	217.199.160.224:7080
dead_host	185.94.252.13:443
dead_host	71.50.31.38:80
dead_host	192.168.56.101:49182
dead_host	181.167.96.215:80

暂无二进制图像该样本未生成二进制可视化图像

暂无运行截图该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析

⚡ 行为特征

🛡️ 防护建议

🔧 技术手段

🎯 检测方法

🤖

Static Analysis
Strings

PE Compile Time

2020-07-27 16:15:22

Imports

Library KERNEL32.dll:

• 0x42c0dc GetCommandLineA

• 0x42c0e0 ExitProcess

• 0x42c0e4 TerminateProcess

• 0x42c0e8 HeapFree

• 0x42c0ec HeapAlloc

• 0x42c0f0 RaiseException

• 0x42c0f4 HeapReAlloc

• 0x42c0f8 HeapSize

• 0x42c0fc GetACP

• 0x42c100 GetTimeZoneInformation

• 0x42c104 UnhandledExceptionFilter

• 0x42c108 FreeEnvironmentStringsA

• 0x42c10c FreeEnvironmentStringsW

• 0x42c110 GetEnvironmentStrings

• 0x42c114 GetEnvironmentStringsW

• 0x42c118 SetHandleCount

• 0x42c11c GetStdHandle

• 0x42c120 GetFileType

• 0x42c124 HeapDestroy

• 0x42c128 HeapCreate

• 0x42c12c VirtualFree

• 0x42c130 GetStartupInfoA

• 0x42c134 VirtualAlloc

• 0x42c138 IsBadWritePtr

• 0x42c13c SetUnhandledExceptionFilter

• 0x42c140 LCMapStringA

• 0x42c144 LCMapStringW

• 0x42c148 GetStringTypeA

• 0x42c14c GetStringTypeW

• 0x42c150 Sleep

• 0x42c154 IsBadReadPtr

• 0x42c158 IsBadCodePtr

• 0x42c15c SetStdHandle

• 0x42c160 CompareStringA

• 0x42c164 CompareStringW

• 0x42c168 SetEnvironmentVariableA

• 0x42c16c RtlUnwind

• 0x42c170 GetTickCount

• 0x42c174 GetProfileStringA

• 0x42c178 InterlockedExchange

• 0x42c17c FileTimeToLocalFileTime

• 0x42c180 FileTimeToSystemTime

• 0x42c184 SetErrorMode

• 0x42c188 GetFileTime

• 0x42c18c GetFileSize

• 0x42c190 GetFileAttributesA

• 0x42c194 GetFullPathNameA

• 0x42c198 GetVolumeInformationA

• 0x42c19c FindFirstFileA

• 0x42c1a0 FindClose

• 0x42c1a4 SetEndOfFile

• 0x42c1a8 UnlockFile

• 0x42c1ac LockFile

• 0x42c1b0 FlushFileBuffers

• 0x42c1b4 SetFilePointer

• 0x42c1b8 WriteFile

• 0x42c1bc ReadFile

• 0x42c1c0 CreateFileA

• 0x42c1c4 DuplicateHandle

• 0x42c1c8 GetOEMCP

• 0x42c1cc GetCPInfo

• 0x42c1d0 GetThreadLocale

• 0x42c1d4 SizeofResource

• 0x42c1d8 GetProcessVersion

• 0x42c1dc GetLastError

• 0x42c1e0 WritePrivateProfileStringA

• 0x42c1e4 GlobalFlags

• 0x42c1e8 TlsGetValue

• 0x42c1ec LocalReAlloc

• 0x42c1f0 TlsSetValue

• 0x42c1f4 EnterCriticalSection

• 0x42c1f8 LeaveCriticalSection

• 0x42c1fc TlsFree

• 0x42c200 GlobalHandle

• 0x42c204 DeleteCriticalSection

• 0x42c208 TlsAlloc

• 0x42c20c InitializeCriticalSection

• 0x42c210 LocalAlloc

• 0x42c214 GlobalReAlloc

• 0x42c218 FormatMessageA

• 0x42c21c LocalFree

• 0x42c220 MultiByteToWideChar

• 0x42c224 WideCharToMultiByte

• 0x42c228 lstrlenA

• 0x42c22c InterlockedIncrement

• 0x42c230 InterlockedDecrement

• 0x42c234 GetVersion

• 0x42c238 GlobalGetAtomNameA

• 0x42c23c GlobalAddAtomA

• 0x42c240 GlobalFindAtomA

• 0x42c244 lstrcpyA

• 0x42c248 GetModuleHandleA

• 0x42c24c SetLastError

• 0x42c250 lstrcpynA

• 0x42c254 MulDiv

• 0x42c258 GlobalUnlock

• 0x42c25c GlobalFree

• 0x42c260 LockResource

• 0x42c264 FindResourceA

• 0x42c268 LoadResource

• 0x42c26c CloseHandle

• 0x42c270 GetModuleFileNameA

• 0x42c274 GlobalLock

• 0x42c278 GlobalAlloc

• 0x42c27c GlobalDeleteAtom

• 0x42c280 lstrcmpA

• 0x42c284 lstrcmpiA

• 0x42c288 GetCurrentThread

• 0x42c28c GetCurrentThreadId

• 0x42c290 lstrcatA

• 0x42c294 CreateProcessA

• 0x42c298 GetWindowsDirectoryA

• 0x42c29c LoadLibraryA

• 0x42c2a0 FreeLibrary

• 0x42c2a4 WinExec

• 0x42c2a8 LoadLibraryExW

• 0x42c2ac LoadLibraryExA

• 0x42c2b0 GetProcAddress

• 0x42c2b4 GetCurrentProcess

Library USER32.dll:

• 0x42c2f4 GetSysColorBrush

• 0x42c2f8 CharNextA

• 0x42c2fc CopyAcceleratorTableA

• 0x42c300 SetRect

• 0x42c304 GetNextDlgGroupItem

• 0x42c308 CharUpperA

• 0x42c30c RegisterClipboardFormatA

• 0x42c310 PostThreadMessageA

• 0x42c314 RegisterClassA

• 0x42c318 GetMenu

• 0x42c31c GetMenuItemCount

• 0x42c320 GetSubMenu

• 0x42c324 GetMenuItemID

• 0x42c328 GetWindowTextLengthA

• 0x42c32c GetWindowTextA

• 0x42c330 GetDlgCtrlID

• 0x42c334 DefWindowProcA

• 0x42c338 CreateWindowExA

• 0x42c33c GetClassLongA

• 0x42c340 SetPropA

• 0x42c344 UnhookWindowsHookEx

• 0x42c348 GetPropA

• 0x42c34c CallWindowProcA

• 0x42c350 RemovePropA

• 0x42c354 GetMessageTime

• 0x42c358 GetMessagePos

• 0x42c35c GetForegroundWindow

• 0x42c360 SetForegroundWindow

• 0x42c364 RegisterWindowMessageA

• 0x42c368 OffsetRect

• 0x42c36c SystemParametersInfoA

• 0x42c370 GetWindowPlacement

• 0x42c374 GrayStringA

• 0x42c378 DrawTextA

• 0x42c37c TabbedTextOutA

• 0x42c380 EndPaint

• 0x42c384 BeginPaint

• 0x42c388 GetWindowDC

• 0x42c38c ClientToScreen

• 0x42c390 ScreenToClient

• 0x42c394 CopyRect

• 0x42c398 IntersectRect

• 0x42c39c MapDialogRect

• 0x42c3a0 SetWindowPos

• 0x42c3a4 GetWindow

• 0x42c3a8 SetWindowContextHelpId

• 0x42c3ac EndDialog

• 0x42c3b0 CreateDialogIndirectParamA

• 0x42c3b4 DestroyWindow

• 0x42c3b8 GetMenuCheckMarkDimensions

• 0x42c3bc LoadBitmapA

• 0x42c3c0 GetMenuState

• 0x42c3c4 ModifyMenuA

• 0x42c3c8 SetMenuItemBitmaps

• 0x42c3cc CheckMenuItem

• 0x42c3d0 EnableMenuItem

• 0x42c3d4 GetFocus

• 0x42c3d8 GetNextDlgTabItem

• 0x42c3dc GetMessageA

• 0x42c3e0 TranslateMessage

• 0x42c3e4 DispatchMessageA

• 0x42c3e8 GetActiveWindow

• 0x42c3ec GetKeyState

• 0x42c3f0 LoadStringA

• 0x42c3f4 ValidateRect

• 0x42c3f8 IsWindowVisible

• 0x42c3fc PeekMessageA

• 0x42c400 GetCursorPos

• 0x42c404 SetWindowsHookExA

• 0x42c408 GetLastActivePopup

• 0x42c40c IsWindowEnabled

• 0x42c410 GetWindowLongA

• 0x42c414 MessageBoxA

• 0x42c418 PostQuitMessage

• 0x42c41c PostMessageA

• 0x42c420 LoadCursorA

• 0x42c424 CopyIcon

• 0x42c428 GetParent

• 0x42c42c GetDC

• 0x42c430 ReleaseDC

• 0x42c434 InflateRect

• 0x42c438 IsWindow

• 0x42c43c SetWindowLongA

• 0x42c440 SetCursor

• 0x42c444 ReleaseCapture

• 0x42c448 RedrawWindow

• 0x42c44c SetRectEmpty

• 0x42c450 LoadIconA

• 0x42c454 GetSystemMenu

• 0x42c458 UnregisterClassA

• 0x42c45c HideCaret

• 0x42c460 ShowCaret

• 0x42c464 ExcludeUpdateRgn

• 0x42c468 DrawFocusRect

• 0x42c46c SetCapture

• 0x42c470 MessageBeep

• 0x42c474 DestroyCursor

• 0x42c478 GetSysColor

• 0x42c47c EnableWindow

• 0x42c480 OpenClipboard

• 0x42c484 SetClipboardData

• 0x42c488 CloseClipboard

• 0x42c48c PtInRect

• 0x42c490 InvalidateRect

• 0x42c494 IsIconic

• 0x42c498 GetSystemMetrics

• 0x42c49c GetClientRect

• 0x42c4a0 GetClassNameA

• 0x42c4a4 GetDesktopWindow

• 0x42c4a8 WindowFromPoint

• 0x42c4ac SetActiveWindow

• 0x42c4b0 DestroyMenu

• 0x42c4b4 DrawIcon

• 0x42c4b8 AppendMenuA

• 0x42c4bc DefDlgProcA

• 0x42c4c0 IsWindowUnicode

• 0x42c4c4 GetWindowRect

• 0x42c4c8 SendMessageA

• 0x42c4cc ShowWindow

• 0x42c4d0 MoveWindow

• 0x42c4d4 SetWindowTextA

• 0x42c4d8 IsDialogMessageA

• 0x42c4dc UpdateWindow

• 0x42c4e0 SendDlgItemMessageA

• 0x42c4e4 MapWindowPoints

• 0x42c4e8 SetFocus

• 0x42c4ec AdjustWindowRectEx

• 0x42c4f0 GetClassInfoA

• 0x42c4f4 GetTopWindow

• 0x42c4f8 CallNextHookEx

• 0x42c4fc IsChild

• 0x42c500 GetCapture

• 0x42c504 WinHelpA

• 0x42c508 GetDlgItem

• 0x42c50c wsprintfA

Library GDI32.dll:

• 0x42c024 ExtTextOutA

• 0x42c028 SetBkColor

• 0x42c02c DPtoLP

• 0x42c030 DeleteDC

• 0x42c034 SaveDC

• 0x42c038 RestoreDC

• 0x42c03c SelectObject

• 0x42c040 SetBkMode

• 0x42c044 SetTextColor

• 0x42c048 SetMapMode

• 0x42c04c SetViewportOrgEx

• 0x42c050 OffsetViewportOrgEx

• 0x42c054 SetViewportExtEx

• 0x42c058 ScaleViewportExtEx

• 0x42c05c SetWindowExtEx

• 0x42c060 ScaleWindowExtEx

• 0x42c064 GetClipBox

• 0x42c068 IntersectClipRect

• 0x42c06c MoveToEx

• 0x42c070 LineTo

• 0x42c074 GetViewportExtEx

• 0x42c078 GetWindowExtEx

• 0x42c07c CreateSolidBrush

• 0x42c080 PtVisible

• 0x42c084 RectVisible

• 0x42c088 TextOutA

• 0x42c08c Escape

• 0x42c090 GetTextColor

• 0x42c094 GetBkColor

• 0x42c098 LPtoDP

• 0x42c09c PatBlt

• 0x42c0a0 DeleteObject

• 0x42c0a4 GetMapMode

• 0x42c0a8 GetDeviceCaps

• 0x42c0ac GetTextExtentPoint32A

• 0x42c0b0 GetObjectA

• 0x42c0b4 CreateFontIndirectA

• 0x42c0b8 GetStockObject

• 0x42c0bc Rectangle

• 0x42c0c0 CreateBitmap

• 0x42c0c4 CreateDIBitmap

• 0x42c0c8 GetTextExtentPointA

• 0x42c0cc BitBlt

• 0x42c0d0 CreateCompatibleDC

• 0x42c0d4 CreateBrushIndirect

Library comdlg32.dll:

• 0x42c524 GetFileTitleA

Library WINSPOOL.DRV:

• 0x42c514 ClosePrinter

• 0x42c518 DocumentPropertiesA

• 0x42c51c OpenPrinterA

Library ADVAPI32.dll:

• 0x42c000 RegCloseKey

• 0x42c004 RegSetValueExA

• 0x42c008 RegCreateKeyExA

• 0x42c00c RegQueryValueA

• 0x42c010 RegOpenKeyExA

• 0x42c014 RegQueryValueExA

Library SHELL32.dll:

• 0x42c2ec ShellExecuteA

Library COMCTL32.dll:

• 0x42c01c

Library oledlg.dll:

• 0x42c56c

Library ole32.dll:

• 0x42c52c CoFreeUnusedLibraries

• 0x42c530 OleInitialize

• 0x42c534 CoTaskMemAlloc

• 0x42c538 CoTaskMemFree

• 0x42c53c CreateILockBytesOnHGlobal

• 0x42c540 StgCreateDocfileOnILockBytes

• 0x42c544 StgOpenStorageOnILockBytes

• 0x42c548 CoGetClassObject

• 0x42c54c CLSIDFromString

• 0x42c550 CLSIDFromProgID

• 0x42c554 CoRegisterMessageFilter

• 0x42c558 CoRevokeClassObject

• 0x42c55c OleFlushClipboard

• 0x42c560 OleIsCurrentClipboard

• 0x42c564 OleUninitialize

Library OLEPRO32.DLL:

• 0x42c2e4

Library OLEAUT32.dll:

• 0x42c2bc VariantCopy

• 0x42c2c0 VariantClear

• 0x42c2c4 SysAllocStringLen

• 0x42c2c8 SysFreeString

• 0x42c2cc VariantChangeType

• 0x42c2d0 SysAllocString

• 0x42c2d4 SysAllocStringByteLen

• 0x42c2d8 SysStringLen

• 0x42c2dc VariantTimeToSystemTime

Hosts

No hosts contacted.

DNS

Name	Response	Post-Analysis Lookup
dns.msftncsi.com	AAAA fd3e:4f5a:5b81::1	131.107.255.255
time.windows.com	A 20.189.79.72 CNAME time.microsoft.akadns.net
clients2.google.com	CNAME clients.l.google.com A 216.58.200.238 A 172.217.160.110	172.217.160.78
dns.msftncsi.com	A 131.107.255.255	131.107.255.255
teredo.ipv6.microsoft.com		127.0.0.1

TCP

No TCP connections recorded.

UDP

Source	Source Port	Destination	Destination Port
192.168.56.101	49235	114.114.114.114	53
192.168.56.101	53237	114.114.114.114	53
192.168.56.101	54178	114.114.114.114	53
192.168.56.101	56539	114.114.114.114	53
192.168.56.101	60123	114.114.114.114	53
192.168.56.101	63429	114.114.114.114	53
192.168.56.101	65004	114.114.114.114	53
192.168.56.101	137	192.168.56.255	137
192.168.56.101	138	192.168.56.255	138
192.168.56.101	123	20.189.79.72 time.windows.com	123
192.168.56.101	49713	224.0.0.252	5355
192.168.56.101	50568	224.0.0.252	5355
192.168.56.101	53210	224.0.0.252	5355
192.168.56.101	53657	224.0.0.252	5355
192.168.56.101	55368	224.0.0.252	5355
192.168.56.101	56804	224.0.0.252	5355
192.168.56.101	57874	224.0.0.252	5355
192.168.56.101	58367	224.0.0.252	5355
192.168.56.101	60221	224.0.0.252	5355
192.168.56.101	62191	224.0.0.252	5355

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.

Sorry! No dropped buffers.