16259526f1c906249b32f9c2102fdeff2056bbe2ed804256b9c8b1a69a5e820b
16259526f1c906249b32f9c2102fdeff2056bbe2ed804256b9c8b1a69a5e820b.exe
静态报毒
动态报毒
CVE
FAMILY
METATYPE
PLATFORM
TYPE
UNKNOWN
WIN32
TROJAN
BACKDOOR
DELF
DACN
0.12
FACILE
1.00
IMCLNet
0.82
MFGraph
0.00
引擎 |
描述 |
特征 |
威胁分数 |
可能家族 |
检测耗时 |
DACN
|
基于动态分析和胶囊网络的可视化恶意软件检测
|
API调用、DLL以及注册表的修改情况
|
0.12
|
Unknown
|
0.15s
|
FACILE
|
利用改进的层次胶囊网络对二进制恶意软件图像进行识别分类
|
二进制图像映射为的灰度图像
|
1.00
|
Unknown
|
0.03s
|
IMCLNet
|
轻量化深度卷积网络模型实现恶意软件家族检测
|
原始二进制映射而成的可视化图像
|
0.82
|
Unknown
|
0.21s
|
MFGraph
|
利用静态特征构建图网络以检测恶意软件
|
原始二进制PE文件的静态特征节点
|
0.00
|
Unknown
|
0.00s
|
查杀引擎 |
查杀结果 |
查杀时间 |
查杀版本 |
Alibaba
|
None
|
20190527
|
0.3.0.5
|
Avast
|
Win32:Evo-gen [Susp]
|
20200426
|
18.4.3895.0
|
Baidu
|
Win32.Trojan.Delf.j
|
20190318
|
1.0.0.2
|
CrowdStrike
|
win/malicious_confidence_100% (D)
|
20190702
|
1.0
|
Kingsoft
|
None
|
20200427
|
2013.8.14.323
|
McAfee
|
Generic BackDoor.ww
|
20200427
|
6.0.6.653
|
Tencent
|
Malware.Win32.Gencirc.10b07aad
|
20200427
|
1.0.0.1
|
该二进制文件可能包含加密或压缩数据,表明使用了打包工具
(6 个事件)
section |
{'name': 'CODE', 'virtual_address': '0x00001000', 'virtual_size': '0x0000a000', 'size_of_data': '0x00005600', 'entropy': 7.992235378339067} |
entropy |
7.992235378339067 |
description |
发现高熵的节 |
section |
{'name': 'DATA', 'virtual_address': '0x0000b000', 'virtual_size': '0x00001000', 'size_of_data': '0x00000200', 'entropy': 7.537443661508319} |
entropy |
7.537443661508319 |
description |
发现高熵的节 |
section |
{'name': '.idata', 'virtual_address': '0x0000e000', 'virtual_size': '0x00001000', 'size_of_data': '0x00000600', 'entropy': 7.871666928051274} |
entropy |
7.871666928051274 |
description |
发现高熵的节 |
section |
{'name': '.rdata', 'virtual_address': '0x00010000', 'virtual_size': '0x00002000', 'size_of_data': '0x00000200', 'entropy': 7.582096724860129} |
entropy |
7.582096724860129 |
description |
发现高熵的节 |
section |
{'name': '', 'virtual_address': '0x00013000', 'virtual_size': '0x00003000', 'size_of_data': '0x00002400', 'entropy': 7.596943615976609} |
entropy |
7.596943615976609 |
description |
发现高熵的节 |
entropy |
0.9705882352941176 |
description |
此PE文件的整体熵值较高 |
与未执行 DNS 查询的主机进行通信
(1 个事件)
文件已被 VirusTotal 上 59 个反病毒引擎识别为恶意
(50 out of 59 个事件)
ALYac |
Generic.Malware.Sdld.C44D850D |
APEX |
Malicious |
AVG |
Win32:Evo-gen [Susp] |
Acronis |
suspicious |
Ad-Aware |
Generic.Malware.Sdld.C44D850D |
AhnLab-V3 |
Backdoor/Win32.Delf.R257860 |
Antiy-AVL |
Trojan[Backdoor]/Win32.Delf |
Arcabit |
Generic.Malware.Sdld.C44D850D |
Avast |
Win32:Evo-gen [Susp] |
Avira |
TR/Dropper.Gen |
Baidu |
Win32.Trojan.Delf.j |
BitDefender |
Generic.Malware.Sdld.C44D850D |
BitDefenderTheta |
AI:Packer.3B2C2E2C21 |
Comodo |
Backdoor.Win32.Delf.ste@4wua2l |
CrowdStrike |
win/malicious_confidence_100% (D) |
Cybereason |
malicious.bb8661 |
Cylance |
Unsafe |
Cyren |
W32/HLL-SysDlrSharer!Eldorado |
DrWeb |
Trojan.Siggen3.61286 |
ESET-NOD32 |
a variant of Win32/LunaStorm.D |
Emsisoft |
Generic.Malware.Sdld.C44D850D (B) |
Endgame |
malicious (high confidence) |
F-Prot |
W32/HLL-SysDlrSharer!Eldorado |
F-Secure |
Trojan.TR/Dropper.Gen |
FireEye |
Generic.mg.7cdaf21bb866105b |
Fortinet |
W32/Delf.CST!tr |
GData |
Generic.Malware.Sdld.C44D850D |
Ikarus |
Worm.Win32.Lunastorm |
Invincea |
heuristic |
Jiangmin |
Backdoor.Delf.hzu |
K7AntiVirus |
Trojan ( 000010291 ) |
K7GW |
Trojan ( 000010291 ) |
Kaspersky |
Backdoor.Win32.Delf.cst |
MAX |
malware (ai score=82) |
Malwarebytes |
Trojan.Delf |
MaxSecure |
Trojan.Malware.300983.susgen |
McAfee |
Generic BackDoor.ww |
McAfee-GW-Edition |
BehavesLike.Win32.Backdoor.mc |
MicroWorld-eScan |
Generic.Malware.Sdld.C44D850D |
Microsoft |
Worm:Win32/Mydoom.PB!MTB |
NANO-Antivirus |
Trojan.Win32.Delf.fnpcbp |
Panda |
Trj/Genetic.gen |
Qihoo-360 |
HEUR/QVM18.1.D705.Malware.Gen |
Rising |
Backdoor.Delf!1.64C1 (RDMK:cmRtazqaALC9BQ6BQIxhGBAO8Kpz) |
Sangfor |
Malware |
SentinelOne |
DFI - Suspicious PE |
Sophos |
Troj/Agent-BBLI |
Symantec |
SMG.Heur!gen |
Tencent |
Malware.Win32.Gencirc.10b07aad |
TotalDefense |
Win32/Bosbot!generic |
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
👋 欢迎使用 ChatHawk
我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!
🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
PE Compile Time
1992-06-20 06:22:17
PE Imphash
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Sections
Name |
Virtual Address |
Virtual Size |
Size of Raw Data |
Entropy |
CODE |
0x00001000 |
0x0000a000 |
0x00005600 |
7.992235378339067 |
DATA |
0x0000b000 |
0x00001000 |
0x00000200 |
7.537443661508319 |
BSS |
0x0000c000 |
0x00002000 |
0x00000000 |
0.0 |
.idata |
0x0000e000 |
0x00001000 |
0x00000600 |
7.871666928051274 |
.tls |
0x0000f000 |
0x00001000 |
0x00000000 |
0.0 |
.rdata |
0x00010000 |
0x00002000 |
0x00000200 |
7.582096724860129 |
.rsrc |
0x00012000 |
0x00001000 |
0x00000400 |
6.753357619284395 |
|
0x00013000 |
0x00003000 |
0x00002400 |
7.596943615976609 |
Resources
Name |
Offset |
Size |
Language |
Sub-language |
File type |
RT_ICON |
0x000150be |
0x000002e8 |
LANG_ENGLISH |
SUBLANG_ENGLISH_PHILIPPINES |
None |
RT_RCDATA |
0x00012448 |
0x000000a8 |
LANG_NEUTRAL |
SUBLANG_NEUTRAL |
None |
RT_RCDATA |
0x00012448 |
0x000000a8 |
LANG_NEUTRAL |
SUBLANG_NEUTRAL |
None |
RT_GROUP_ICON |
0x000150aa |
0x00000014 |
LANG_ENGLISH |
SUBLANG_ENGLISH_PHILIPPINES |
None |
L!This program must be run under Win32
.idata
.rdata
8\plJ
{{~nZc
9HGuX+r)"
xT{5-l;^`
y.%mtB)DHV
5)VBdY
t;jj+iOi%
nj`.J[D
,"V:&Q>|KE`
nST(>v
!*QqM5#
]Wi[m.0P
PJ8Sn;La.v
3pyG(Tv;L=dxjp
rdK'p pQ
">nPccB
W?qK{_|
F<[Qg%
VTOoU}
r'a%=xF;
Nzv@UG~
/(>)Xod?T
/G@1w!K]@
Z{CDkZ$
37; WpA
&T;$c^_v>Bq
OdtG=yK
@w7ON2~7{
c&N1%4
B(N&U(gO.Q
xYb4~6Ys
1P\1S
sc~%Pa=A|94
G)Ek|u'8^/
YY &p!`e
;~c!,?y3_
%"L]GS[B
T n.AT
X\IkRl
Ko0X]ZH>K
$.a1X_w4'k.
:OgKcfp
@~3?rP+l/eE,
QZ_c}Wid@
<4fKN@h
;:.i%<FS
tv{%7/7vz
A/b'P<a:[AOL)>>0
(~)<.u
-%\UU8)
@'!Rfi
SiOIg'
RzP=\ ?o/T~P
w#6IBV^3f_
"(]x-@@P).,
4v&@m6IQ#
\mvD8+
:W~/>H,
`YJ"td3
3@'@{KFe:'Y#q_Q
^T"_z*
V#Sd:?rc
b{kZK<
NPcBsP
70eJ5X~{O-4J
$e([47t$
] >g2j
_p's;4*iG?mJNX
Td2Y9TN:v
z:lxXq
xj3eJ<IJ
9C_/W4m?+M<V"zJ
76(SY:
AG%%sO|;dm
$)8heVA
\dmY&0
NiG0[\s
]*}6K>j`g
^0t$DB;`6>l?-v%E$N U-tf
y-"'Z:
O,W6C'hF3|
{s5k){
)dh2]+
D .b[1fV
3>|X`NZdQF;?%>cWh,.9
}"P38*fO
ZeY,7JB
vt;vwHT
l (_\CV?
Xt%W,p
aHAkf,#
* !s2`WUmR
6j|f[gk)h
$G{!6y}g
b"7S#NaLr
Lv$9^
9.u2; zZS
_rtNCfa
$brI~u@2(q}')H
ZDFenI
`mZRj;
Bz:%E}
7n}@49
p,6Tl6eje
U2KWD^4
V!grHg
$`t|F6z:
: %kh<F}WAcTvcQg
0HiA<k`<rdp}G!j
p,.-ZE]
a3<_bw]&
qH\zn!x
*Mj=gK$U?/[j)
dKLot>GP_K9I2V
>H#T^=V9?ki
PbPhX
Cs" uuQ6+$K`t
gDvM\~
.MM[RMRG[~i;g
qUsVPEd/
r;zfk"Ye
K~#$18-q
M12;-
0)}P"N'T*NR-
$-vog|
,5Gvd#
8d`bl)!
!5{y9/-b
UCbPK1>bx
r2fh1q
FEg[8<#
~KW7%e19IN
^@|?7u!
H9IQl_N4
7s:R7NL,KS
,&Y '`E
$7lp5G9
aWJfJwp
_-yJ5tw
p'L*qpQ
6,K@|[l6Y
K]^|7R0=
l\fS6QIjdnr0!qQqHSW
K%LycGu
RK^f@{
TW7fKD
@]Z"-?
4gu[3u[vT$~
n:{gNMh
)W+M S
5'U.+_:k
.5?/ BA=.2M
3-+:cv[[M
f~@07i%v
S,dxnQJ
:\,P@Ccst
KQ-wzN#}vC
JmsxP1MX"b%
%iSmOU
vfuUt}^
+wtp(f]
pM@=p)&
~S1%%aQdV
)vbM,D
F;gB7}jy|T
MfybNS)i[H<+w
Dov)XE
4Od4,`[oc]b
TU#,-Z
]NO|j&
$Tjms_'h=4
'BTzL&].
l.5yX}VzpJeg
,ndn{%
IeE-Ibfe
D"=XCvbf4>m/x7}y8>
< fX1?k=79q
BMA^{LRG
N }~l;
],PfO_:c
qhM}`\
Y5q:+=
kB`k+}e
Thn"WN
E o`J$.
$pAOFtG
0Cp{@GW
#sVh"3'aq
(y?+r}d8$2
QriL~@
r#oE:SI%y(g@{
_s]7[G
v4f.XO
K`!A%
rz2L1!(E
r!Qp]iIx
fu.,[%RShFp66
#G/#W
4|f8\|5T?>b$X8
qDRcJ&DV
1C4 O;[K@
gWS=O.dctf+
\K#H#n veo
dJH5vY}&85%V
W~3 L'7G@(t
[NWaeK
#M8>hyt)[5
Q4kco!fOMta
<5BpDh=
b:rKi)6DZ,_+
3sNZ2@,a}S
xNqz1eF!BG
QlQX-Ee
d^X[
;g|I[V
=->X%J
/)|*qI8
*o@0nt
4#_NIP
(R;Lx
NZJ8qLU
9(0L,?3
'9Yt;W|LW
QqX9.8Q
{g#y9a:
;oGP1'-U:6gnpL:
t#/4Qw3
& 6HycW
nM'e7A
)jdhiIYo&
|3ih#^
@D}`;i-
o.6QpQmPE% cZlZu
70o/7B
<D?](UwtcrU "
{F8V/dVED'*
><Bck9
o4ju~vkK|
lwK'15|Wx
Ep4x8L _p
?F}OG_=
G!FK8=
a0I$@7oY_yiKM
op.TNL$/*/'b>f
s!$m!9P[`
{1.UM;
sAm-qLa6
=`|mgl
W,,RoI
x*Qx/4
^zCo;X
E%yU|r
_VC dy.8HH]
%d$pZ
HSW59CB
:,kC1?5A4m}
SH=N- , l
`$,">:
[!%!;+]z~
I_G{qf
?fCQgn@,9;d=
,/z/buX
}C)P')
FAc$t{)0Y{"(i
uLD|obeV
{|b]"d
|%-g2H
UC,[<qal
Y?d*||B
4\;;2$"
2[4zu;O2|
WDbj\u@\ib[t
*^vIs4}%N$
DKUdj*6
..<NRi
P&-'_z
ItN=\s
|?xCBP
H\gd96
'yaJEO"AAN
)!9<Bg
^+h7Cfw<G
7/HQ U&Rd
eLNUOa
[b,_K8
d~R#Frk6U6n
X"nH^|-<Tl71
EX>mA,rb>Kou9$G?0I
bDAm|O]
bi%w )7R'+!w
2%&Lc~
(#Cp$d
@~=ADZP}IF}KBD
FBD!%Q:Z<z
+x&h!W
HM&AgSQQ_^
AO!}w
lOm-eH&wkc
'?0?F2
@uGyJ:=bHw*0;:F5161s
X[+@O]b
|!g9UKgD|?
x (Pbv
jDiI6.&c8&
llz 0f7}Ooiv
?vR{98
qId\Jq4dg
*22\tJ
@&)k<-
nKKi2OT1
c4aQ_SG?KDV&f3
~y;cis
lODtUw%{CZ:Gl/<fk[tXIRG6oI
)>WTsRT
R{xT^`
6+i/+u~S
0dzshrOxut
_a[5P
OV]VM+H>
_~_9ElI?FmL
G`MvBIS
Q!w{yLQ*~
=d:GO9
a_9(cl3
v#C{}nD8
gY66@S
&\XJ$I
~FeEY#
RDL:_p
6E"2P9l
l|9[W
K@AnZ~
:tRr|\'
l&{_~F_9P40;x. ;w5zC'
txgI'0
,"!<`jrQ
g|3J$.
r1H.dZ7sg
A>teG~
q~^|)^A@ <
,j_<ui K}nRQF{;f!En-?
[89M;4&
V^*R(nk
h;uVR(2 Cm
2kobW"
L}e^iD
NHip$e
A|E7TGy7B@';@V
lb{FNmMC
+zT58O
OBt"`]9
{B2=Kx
VD%#!byC
iq`61R
gq~caF
{R8E`>]b
b9#dI+
?_BwtT
4>\q6-
)`f.K+
|a\V(,)
!?g&!+g
Y=Ip2:
;swl/;1)jVEm]q]
6v/G|2i
trO:mZ@-
gCgtd%b},
5S,GP=9
Hg)W:;o[+
#lP`KW
KYqfin
[/lq4cM
+bqyt;t
ipdl^djIx
>WN*ra
cal7K-s-
dX/$9
Hs%y\b
yR=@2Q
3ECUWV
!!$yzx
&W5II*@
Q^i ?h*
IK$if7;~(>
M*:wVY
~$^,EZJD.
/P|{j${w
3o2^,zZ+\M
R{<TN% sWbZXz
5.U2KcqGs%
E&W2V%SKf$XOa IL
SpSkZ`
Bt|q$|-
Cd{tts
rO<75s/P
U9z8Y@k/6&<
=q"$xB
(y&fK`
V|x[VT
HRKCLkR
t__C>eT%E
BPZAc+{
ixF:47Zr
S;>^`j
Qrt"CIh`
bxXQDJL
w&E4]#
q2txp[6O^
\.qd!#
1O[,x9e0
v@!#{Nf@@
:=d,=2Z
C d)3E
nGJctwdG
fu&X-o
q"<=HP,
]->Srljz/r
U<E5L\
q3Oul1z
PB1uaH
O6l{VC
h}Gjm
w$/t:TI1Q!=
,<+p4M_D
$]SGkNq
*&Bkd/E5Y
2T|gwP7H
_v?flM\`
CxuN;,Dsm
wuEPo[8
0+%.!r
b,]B4<SAW4[M
dHv9o+
z]7B5L
7bS`_&
T0kxeY
jQ=/i
n|?EWkal|m,?
.MqiiCk.
%=.).pxa2J
zZei3@6MSts9:Gb#
A%H>pI0
IF,fyN+T\
vWBFrn
[o*$;yt
UC[e~O
$ H|."
[N;bZ8:7;'9Rpl
8"no'C>Jc
k0k[[zm+fP%
*Z XS,
K9wD7|lY3sj
GiwMN-J< c
<BPck9
l^Nz>v
!2)3Ep
6h_ZG/)m2a4w
RY[6I'Zv*75"
g-Qt+]
i_*=_9kT
=YwvArX,tra
V>)4UYD?fE\t^y
ySJ>P5
u;*q!f>
;&&iQ$P/
uE9"w\
S@XVhS6
D";xO4u6cs
gvhF;0
Fu'm5o
|"+'kM
r@\h1m
Iro}HB
xe0tE}i
lf5Pu^2gw3,+
Fh@xn/(0Sc>]Jb%
5gH6T'
!n*{P!
[%eViJI'
U,=3c(
,T^AC`#v
sEx<>1;
tQRp^33gxGgXE
u'"N$Z51saJ%GwPVw
=^E00B
c{(T`a$
zPHb;4]
3-|QtLo>
3Q!rB{6gHKa
mSL}_Uz]
$ H\c0b<
BJJ-;+'
{2.Zdnz>T"
d]O!oT|D
|:roazX'[sfm4y
7LraH]j
dZt@'$2
Mz*M&{-Q]
8.J^7Gp!rL
S{eNgi[@
LCd'bg6#
{<:y&q
DI>nip
C*ShlAP7
+ockvpMY
aFu3nc
boV>!MyD>N
xBIO$fc=?&<W
X.b|2zUi{gG#lih!jP7]9j
33es#Lzy
Ac-YUEIA+YdeQNmw'
iA|8RtY#
+d!JS?
J0}UR
@8je9D<W
6r,&$l
[9}*UV<mXt08iP
DPGP?HrTrD
M{UouM
g!t]4{
vl+^LW^Yk
K66-Q\$J&vZ
A\#N2!
6{>=64
tBO\~|o/vjVSh8(#MnXVT1\
ATc@G:kg
:b'|vhtv&|
WRG1`v/
0KrFTSuU4
tM2u#vd.:ljGza N
T>5,BD
SJz'"6#
M.c\'"fG
!n+m1b,
y7LtB~s
RdVCQa"YmVVk
XZebx8
oIFv4d(TaX
"T:T. 286DV<VPBDJHVhNhbTV\ZJ
fLn5Q8x@.p\'~\?
@QgS6dXA
"-}"!Y;G_Y(&
H0JA=4dWZqr$04Bl
rC,-0fYG
e$9 Ff
m1&pLZDb_Ge
[ar6!j
gIi@|2
b`-bc'z
18>0?vHfjJf
hq<q%!?
Er}Ey\
c6mQTf
F%vU+R
,sOj=k
H)%~ji\
Me>nosj:+$1F&+%H^/
#qVEf(+k+*m!
[%G4d~Q>
lq-JWe
P]M[=7(e
S&s?'/
7q#7!QS[
%'c-jZq_-q
Mi_jtW
W~`v|Fx}
g56~^Q
&i]/F\[C
v=kT:[2oQ
=@DA+W~|)G>
>>:v!r2M$
MF<w:l}I
?Cx*rg,K~TM
=>#$h\
whVB=B
3&%._N5
E..if,hr
'h2c<1
%=1{~DvY
a=#IDU
$aQ*|'.D
Z=hylltY
F9fKL#
`f:]sa%n
d]NV>Cs7B0
_Vwt8z
^:5#tL
%Ej^@%TC
_2ugrW-l
6:MUiL{c})PW
5|4;28r?*2l<eY
k4E/Tf
FOXj[R
U})vly]
`KPStqG?NrFXhOr
#BLxn.*
`m64J{
C&f&r:
2 {.LXg>
ROt;{rC:H6v_-
k=/4OzK
KUE*EFMTZ
p(O!&1,Gi88$+
P? cQc
^qh7HM
&pL+B*26
Jw3TI|X1
dke!\eS@os
|1,Z5E'L:6
8;JdHm
v;"^c==
>GO$=!&
/vPR;0:
,LwA7'
Q^P_{pw!mG9
LaUKzK
z.~t7w
.6.,?B
N$AMjN]\ GCa6
8!C0$4ELj^
v1w'Sg
0xI:uf#V
u6Pr,;\~L
cE'UiCB
ox/+t[
>T.:x7
F.m q3X
D)-_rL8$P>r42
aF,lF,
=nky12
E0s'u{3eu
k?$J;=L{
qB>f5Y
?hswN-gS
kernel32.dll
user32.dll
GetModuleHandleA
MessageBoxA
uhPD;ywpY}&l>
i.BI{7<#v(nH"P
Z9Z<"sens\~
L==Qp*d[0
\;+Lw~sC~
tbjxNZ(
Mr![jm6O~2
6PI& $NZb~
bqdrRZ7
A=nMkx7.
zF&&Lfos@~
hcdxXU
Z7%Pj~e
|:=yho6F?^d`c=Q
>}I! Rcbb
<^!ubnO
F4-Vj+
t-H30"
Gggfv@
&vvggd
wwgbvt
1wwwr"gf@
1wwwr"vv@
wr""gf@
wr""&f@
ww"w""@
1wr'""@
3333;31
333333
sp`x`laE
jrYVK\~NA8XvC
W}vy_jmx
LL@GGNv
8Y>cPH
^.~_T@\|p
1qx0zi
-i7g~jw
.9'n#\{?
?" wBQ
?hD^v[Q
a{Hjev
jC?UQ67
lIb9oa
M'Jg%|
76r@q"-t,MiX
4LWN1D-N
$@-*{
>3uwZ6H7W
OzOXr4V|7i?Q
5';+FV
3jNqz2(X'!
_i0oT>`"SbXm
#vocUdi
@FS,_-*
:--KWrw
Ku'{q}L
)ye(Y)bVt
|qxf+0
K'(6*sq,*n
$cc6];A
Xw76>#w|
BoH^,_
u/?2~(
4ja74JLf:hT[H=/TZ
pu{,0CU:
p.9t"u\6x5vq
gTG(1@T[i/3
&>*[j:<G_1H%M
)x-e9|
?)6sUtP;n
rPfh/3Au
hx_iyd
WzfFIp]8s.`
/Ie8B}?}>F zCN"VCS
7YQ(GP
=14e('3p
EV[/k*u
6)2t=%
-]`F`E
u&oLz^:
FXozq^
Qt>aP"Sm8Du)uli99d
H4f>Mb
mfAL=F
n+8?J`S
0nM"W5Xz
^/SZoqM
:m*OsP
kZX2f.
<Oj@O.
@^;7"<hCX
G=^9FE
I;'l+r7
UeEfi,
K9yo1N.|.
\zZ)1V
;%\}y"4^
*XfP&[PN5
u&`1"hA%'
3~wpNb@
ElYrxsBgCQ0
Iw5Nya5
MO92mw
`#IW,W
eEa+Ge!
]<tHRU+%
Wk>0R]$<{
%@GaTmbD%fpJ'f9A}kH
B?R;b@
:jm/N%o?
D~:=h*
C+QyD8+!m
^2(A5I0E$[ Fk#[
U/xT)
%hKWCev
5J}NzHK+XL;[r
,b5"XO[vs1
jGWB]!0$h
}s._l"w
=:Sg:?
Y!As<saQ{"
e|H\*5
BSW-l(
`Y{.|f4F,$
_XNfFi;
y+m[kh
"h&?wby&M
gyD,):t0GF\-
-Noix;^5
'"0@"eI?l
ZLRC-bs
uxt.Ou$
+Bjt(uQDSc'2lw5
n sRPAmN_W
kZ0=jZI
Mrpn]v
9ueh"S
(K,v>_4Y
5y4Q#mP}
B#nJ01mT0
fF_M1=11
?4I/yJ&FR
2 +20D"
n0!kx7
&XBz!)O@FA~
j<Qj)T!:R
%bMk FkE
yYV YN_f8
@={\8Wv@_8$
g2jOl>q
.D]zl>Z!i \
5(DQ++1)s
fk9]2$hl4mV;
7D1$P
uD0A`y@#
xCqbQq
Y`.e"\Y
`9~DZPs
_nM@[.U
$tX`'yxy
G?(4TJ&xhr
eC+g*JM*
UB#t4nXY
37/4.M
kL9bjWO
PX\V2<-v
?N=LP0
*]YyZ)4q|n
ctQ$j,y
hU=%GBPh{v-=RKN
(V@y-Eq[[
ulMo<k
&g'%G=0$n6
&|`k2>Ih
sbHmfHX&+|
l-7VfDj
kdTO2nJfL-f3
c/X *7
7 7|u\[A
7$R}hq="
E/I6I%Kk
(s9y;%=
GBi!~8[@,
ip$|eO
Y!*kj^9 _
)Ap/%.O<f]
vt61z7X
q2zVpvSWVeI
w&TGv|
_`G_9k\v
'SlRBz5
$quv`\s$G
xgJ,RrR
uKUG{+O
gZ![)Ppz~Bd
."#t`XL
jX~5wP
4Ca,ne
,7>kt=E
e;Tg:])7_
"i?$aje4}hR`z[
PTdfw&NqV
UwQp7N_(c
Z8W:2T
%qZYOyG%{W
5oSG&\.P
nAl#kG$Kof
(/K}_(
?eCnc;
IImLrYk
AQK{7v
5%>@U$pit1
Ab Y{7
eMo-%m"
,iVM8
04\kW)wr-
q0IuMq'"q0
-_%mO}
ol0^#cWC.
n+XEU?}m~N
&y/5C*
(bU;P+Gm
@Fh(]#?er
.TNbl+
fSDw?:
"i?,y@2Qk"
n{>mR5
wHK]TZ}
32O{Kk%G
Q+0-I?
wqGe{X
1$G|[i
:)K|oN*wi1>
'{z0f<!u>
/Xcbo~
UX,N{P
MQj)A_8&\GWN6
]M>7WuQY
Mkqbd8SWcj
k:7B?"A
uQ0/ld
K"5{vK!l;g%SvJZQ3+
IdD;1yv
Atqgcj
izXT?[p!
{/$qgo-R
wT?zQKnI
pWvNndwD
#q#j]:
A+&9OC^
RYc\2<P
"3t9(=Wu
)F)+L!
%G<`tpPA}(x
a;g*)A
:)o&}b_86GQ
?8$Zp{
@#Rjy:8dU2Yjk
58yX!:.|4Z
b t?@i
od zd,}
zD52G%tp*8-
F$T_D8j)3`P
QNvxK`
"wp1=P-
fS4{[L2]uUG2\!
6G/E[wE
h -0w6Ut.'
Oe's[fZA
VStp4KE
)dJf{
bAK@IGE
m,4yvW
&6#)}#
UwF^ U
CXo<+q4
o4~SS(
XDcpJrudO_
HN0$Oi5@|`,
vUW=d<1
r@#Xv:*:3%"*-{l
t`\R3l9
5L8I7-c
IsGw2^Ot:
eh5^%b Q$}/)
3k)&Let#w/s
rP|1?9^Um
4uo~+a
f{mE@JY
PXU*k2fT;
$"\K`9a ;9&
"a[HSP_
<7~}c_%y@%K
i_r*JnSHQ=
0Ll@F`K
^]2;D{
w'q0nKJS^
i[D\]ze6AOBL
<d`W\bEY{-tq^cuQ
`-Kc5mv
d3^(isU
=wtP. |;xgN
jZ<JMjqmU]
,smF1>JH`nz
RGer76_
FeE.Ui=,%W$~yr%7\
K~gMW7
^)Wh75(%
`"=9`ijF
@{#o3F+
b}=B}NwUXX
Wr#ej
#KY3g;TWw
~aG`E)<3%jb
vgXY&r
{(/r*b
U*3.-Dr4
fB\vGs
zFK=T+X/
A'y7a%
N5U<cZDq%
wmCHTj/{{
XV4]f0
p-5ox!
xdgX-6
cKw1Ik
-/lH*9c
vFKn;n
2W~AZcUa9
g!6p+[
KEJWI}
Wga.(Y
Q)X9c,
cT\awZg:
ly@!hmS7p-'* !
pB|p20
5`%uEv:
cgJ4Sp
j02.|D
?zU;3W< ,
qs@u42@js%:Luf
Mo]',i
K%xj2yS3
.Fe3`[Y
vRX)Y.Bv'`
BgQ5<[
;h|7tUhR
o,f6c!
Vj~NfS!l{o3BRfPo2=S
#+n7I8
n;iZh!^GDcH(nl
y(S ! M(`
?(cO}r5{<
=|mm]"wkS
=!uB;~-x>2t
7~p|Mqv
oZE[LsTL:HDLk6$
R5J%=
8.9[ Zc;~
%+:9/c
+.d.OSz/]
3]!5*GL{>
:.l~R'
a[S[sJ9TG
2UlX2b;lD
DI1\&!
r_{Z`a
3Jbo;$hl-Du<:
YQUVy[
gJw+RPG[~q
*M6n]iXP+*
64b\_w> [4G.R1;o
F.MwW5J
I[[)!+[AB%>
wJR?~u|p#
E9v0^+N$.C%
x]lrcG,)arPcB"L
fF5m!04
k@(Rw>d
{YOLOs'
Y'hl/h,(z
v6L6l>0Uz]]
**p(h{v|#s"YO
+R|WJE
zoFNba
]n1cv|
=n*+:W
\_#f2r
sGS#]v
4CeWZy=
~mvzdZe\
Z<)0|4D7>a(7sjFU
YE1uhRA
oHOI\6*g
$'JLiU
@qg#cU
L- =+q
"qo!#QWTdE3
j.@#JV9:
-e;f|)Kwet
[8/=~%
G.[H*([cg}
HKVmupW6w:T'{v;s
Z1nJZ(qVX7?
RPKvw"M
'#.1 Jm
[Rg&D+
ns:s4{"
l6`j3%
j4g9qFrw0d
G*HyJhf
D"TZ9
?l#=1,Ll@I}
29sjLerSgkdb
B}mX`1X
C*e'?&_^z
NAe20C
m0BsgPT
@eDws=+%
^/@[8T*b>
bz=\vK
to1/Kc$
Lbow9\_
P".#*~f9ow
gW~QT-t
So+6fXZ{%
mSI(#f
PiPvHSVwzA
]"'zUQXz}f
Wg16W:Yk!ma
6RScpZb3
H7=+T,r
HuA,RI
RiKhNSD
VK&OxN#3)?S:3X
KDizb`(gt,}I<
=z_ZqJt
8<M9`J1
lYwKDj
o(1e6fDf
"aucMX?N?]
J_$\yn$
9_Dr$.qXC`wF
nbuE8,
0.(j,+
0wQ*G0
:wnO^#
ooRU$! _~_9a<z
1A]B2$h0
"|R`gf3
EGocnsq{
o<T*n$5
V$_;]A
Is'"0x0e+
~W[y/'X]C
24d\E:H_z>
;ue$wZuf,u
=d+kv;<x4a
JB#Ygo.7
K((]up
S5U9gomX
'KD)KW
8:I_9@NYo8[3
B}<J0G?Ae
pw9Q\.GtY\
Q.$x\KA53X
Wn-xq_I?}Dghw
A9cK}d
lGaG7B,8$YWE\M
pZ\sjXX
G7?@FlRX
b;<9!_LC
l+/,X`C_eHL
RJj[6qSI
l\n%p|X
.btNGH7vbT@
uw#GAQX$I
K^#!U-D
u8h>=@
4.'($")F
JAsadWWqz$wS]Z.gM
'e9Yv/6x
_U:9(K
nv/^xFp
7M&<gS
A[.~_vOk~k
_tSB:o\QwN
9[)=>q
JM{<}cpI
W5n"KJp0
HY:$`-o
+BE{%PV|
/)"S:V
rE2jW WkBap{:P
>QJ|FcQk
9Z?[:%
awmq*-[_
4\m[v4(g92iD7 (O61o94RMx2
9p#K^j
C(E7A
d%1%cU?
Pf6}}c
^[KfLoIE~$07}
xd)Hap
Do2lO,k
`Wswilvo'Q}u
o_TD2W*#!
Ar>sN\axF7[wQ;LaoJp
^?.x/?
CY~F&xb
\p9fsHJz
&e'?U/e{@E`{~D
CsO,g?
6&X^%7)1Ey9C
gf[c[r9)%
WzD{&^k%bV
('rU_`c
UHxhjo,|K
"Mq{"h
r9t;)!0"
sWCKR5SK[G
O.ep^ZZ
"4&aEs
g9,:r^
+8fh;ZU'v\
#5i+X`
*uo`Ayfb
o2(8k9
|Lwcm/
BM<F`P}l]y0c_f2JPg.
J-o}8+jY;U59
4%&y#{2
CK(TOoAGLL?
p]f8oQ!U3w
e-cQosLF
0k+Org
pJW@QF1jek
v;&2U(-4
B5o*SnqIz=
R~cRW'_9S
WSjT.o^H=:
J.U^NR,
_2{RFBus>y
'~D#A?
LQ_\*'tp
P)00[|v.q
_`F\|vJFV!ZH
ia)HCXd
\=DPd)
{S:BI&
q!*mm9;L
<80 !HK
g0U:v=8
}T\?"2`
;n8iCR]oNS
(nBo]'q8wF(
c:=?jY
9}4I$VH"R{
}I{{D}muHV"YG[s
3'V%q$7UP
~|br$\_#6vSfFv
)C$ILXJts1xY78V
v~;7O>B:'eBZb+I
P({yE5f)i_e]
:H:|5u
%t>08|
+7J]oG5v
'd@[$V
Eo!2@K
iVB<*jEKn5jqf
"x(fM
4guSt;`=]agX2
0;G~x5A$m
gMwnfk
*00AEJ3
DzqT3ZtY?.(w
L1+ezr_
#D1E&/
+)p) t
BE~"*zEwn
Cv^Y3Yc}
7g^V!O
F^c%g,
t%5j:n;+
1lk|BM$l&
9C3iD^[#
qzHl=@pPb_H
nmFI5TQZ=&dQ_4[tN=
!j\,JNl
s;^_S+Ce
4A~FwV-ch4
AA2kyD\
`?V.R9M
;x?K}^ceq
$Zg|?F>
^BnM88COupin*FWT
ax-gQ=
fgqh$vL
n3r8dY-QV04k{_sa
:`)Wv=&
_p;%)/0T
!L@F[qf
y{U*Q9R(
kYze N6umt+
gF0":a
u0 +VI
>dMTwQ+a;.-wu
'_~@e.1L>R
f->G;I`Z@Nh
C%VP b
-|BO5iT~2U^
X\~SO$
:8'LL@
g|L]p.
DLq*}skrT
yebB(\
`v-:ll,cXS
Ec4xHm
L=#jPA
U?m+@'
`@%646m
zz8h8(9M
]6XS.l|#o
HJhu|,c
7UE%YlJN<vIW
s8J1^d
HFrx,R
~FvJzy
Y'J)-`<V
y~c}d7|
G-su%eL
yAE.z7Y
pfNl9]
bTGfHLmQ@z[U'
$?*YY(a
T#DS6<=6M
-N^0J%C
5qRfoW1
08WpvA]
Qe)m,*gBlT`Z%
AO= ay
w9B+v,
"_jwOP
x3W-dV6!
x4EfP
8;o^n"4R
-& 1)GILl-9
ss,Q$F7'_]
p:K}!0a
gS[ )Fr0/y
/}<usgnIq/x=
#Z-#YN*BKT-&f*o3P.->+Vw.'oj
HV@i>S}
<1vP,|4^0_?~}
[4<u!(
rInPTOh4[;
TbE\9n(
Z<>R"(zoD
^bky~i%
:.wc:W
-ZFD htP)ymM/bh`oC$
RW#69A
Eo%w*{CoA3+}F7d=edHzPAY
`aD<q"
fA+m1as
`]Jlh>F7
lh!5%!V}4b
G.+Z}
*eIgDe&%J/
4H"%~4XuT
o"7\hHj
5?+g)QOgVq
DJ n).
h[q9$$
]1tlG7L8X
}@ NYF
n_#K@_
~.J\mlc8`>7E
hr@LakqV}AwZ,7s
h<v2.x~uFf`V5
_3dE(Q$
<dd;l*Mf
HQ~l]2Hqi6
Ll?<:\hgq
0_2&%z
Y&kU"S
5U;(8U2oy
>?9w\]X@
`e vf#h(Un+;^WC'qjc
M"cpZvmi>a
](Is.$
aWW9a:
q\C~@Y
0klm3c
8J|aD\vN;
Kx"O?jd"
w1:DSt;'Jf
</h9 1`h
E`fd=k
-4YYzuq
jU1+|ew>
HkNvq<t
^NcF>|
lo~nOn.
:g>S2mqwI77s
cFf"mi
nm|\#GS*\
WM`;p=
[)cbbIO
;;/V)>
~\u!"YIa
cN"8R1<
yUy_cNS
MO&:EJ
4H6@wA"&
&J4]Rn_%
@*=%!ozY|A+ws_W
Gra|>Ne>
$3~_l&u
uJpg~4
'e~eD;>J
zhiT>J
6N!oUyu6L
Hf0iWy5=(o
rp$P446
XjbNb(>@Py
#6a5LK^
-rK&o]Y0K
]Q#fKAX
#m`!-w&C;
h1#Dw{M |K
gQ,z,
T V}>!4q@!{~=y)o
NdK{=vj>
?g>I_I)
#+|u,j.
1YFtG]l+=a
kE$?o6e
2+w0MH
9<S}F5`
#\ #`X1h
)Bg,ULL0q3|Rj
Sp(He]eUk
--9"<rm
T!za`N
\\\nAC`*'t
$Ly(";
0fV`/i
$eSj'hh
_-Q%7i
']3ZNP
<X~c8v
i\V(W@oB
ESRlnjvKj
AV_=js
&V~Cr+JYV
LJq|B\_})
Gp73~&i&
:\_JHAqse
K.xW0;4
_TB/eZhqvo
&zKn~<?
nV[5q%!A
xy{=$,
Y}\E`.
En[.qQ
MI!zd9{!92Y
\AN:?(27
2^Aj7oO
)eb[?p6s:]
"U-5T)TX+}
[wI n;+
"Dvss&Q
<@R9*
h;{\?>E~K@K
B,muc>E
#aCwKk
/'X?&W@h
wsQW'X
YR*4&HcM
B%s._w
v@-5K4&E
QP5tvYyX(hc
Bjcg6]
6@;0ktbIMqH
Fa-|9zp=VIcu&9]/Q
C!Pr1jw
fBWN@^7<n
_9(>-$
4E$t#:"m>C>s
|E202QJ/+!
O0I.@sR
&=\W0e7^4M(txj
1!z}~JM[G,
k4uINT
}[ujsY
w\iA/-DP
9uz:*D
i,7HRR)
}J_)Z>
Zy=`O'8>[
i&/AEm>%?
0>^phR*K
$$r',o(1"
/0],sOu
"80/Q0<E_V
aF|mW
P0M~7n@*QLmvI5.o
sVK7v'^']wCGB
]b;zH*s.q.$Z
^_UgpDa9
ATB,[r
lRTUTtuh
A:Uftjh{93
d_$ -|&
:aT);z
!f1$*&
#7#&/M:
_o9*mW
<D2yJ/
H&:s$3SJP48
nl)"Vc:?g
O6L+3b*A*
[$]soh]wZ:
q}=n~)
ZBwXZ:;6
e~Hwgn%g
p$*:5]6Y'
1Jx#*1v!
giy*F%
;4I)\1gS+
AiCE_Ug
&Zzi .5
$'`|!n
t5c7gy4
J7$GT!'v
/(Wdcf:
KBNlhaFtn
t<e:WaF9[bHc*AYDN'2'C5~ta
X|/5L*{hE
/.4j |u
H%b"G\
YGM..-
S\LQA*{]
]g@7!Tv|G2
6gE5-3B>P=6?ASs
"N2,dTV^
4`Q^pw"
x+P'^SQQ
":5 &bOy
UHnVNO!F
\CX=}g
\Vm@PE]
i?uY#k
);gVPo
hV[g\[HMvjS-l
7Q0G679&Sz
D>:_vA{1F
Y"s;0_
{wPpC{|
d&s$%P]
m:6Z!d?
*f+az[
Csi?B*
xXz'8(yzz.PD6*I
U,EQGtx6<dc,:TP
^O=up"
D_tz)J|Ta;
~+YIn-
Y}TR`&
Wn)y2ZF
D1q61I
)nI0R6eV^
Gg5xLG
(3~e>#ey2
T0d`SOn+ #su~2wb
Yk>2ZPl
Y5//oKr
C8zV^2
v<'`<^P)
{ECDRp
^+z'gaF[+
/B\4jd`D<
rw1Hy|`Z&a
%]*f-EhN
fjZ,&P
OL#b=\8Y*
^dq `{(
[u+]5W_zZ5
{pHcy{-,
~S9~c:%R81
_bOhR"RlL
!wkP3jsX~~Q/3Ovt*
|z|ju,9uLSef9F
RayWZ@-
@xN0"5g2
j6ZlNkec4.j
4EyY&B)
$$ {5^U
'=/cj7r
mP*:[uiGo@
4tN<(B
IW46d$kDQ>
':WFK
*Ds%~)fO
/TcI!y+><v}Z
&k`1eS<u%
48RkJV
0*6\a5h
yKkB* U
x!B].0*1k
~1Nt(EbE
Y4S!%uR_yC.4
ynP4r89
c&~vc+p
YkaN?B3
%WEB`CNAu
gE)B`aPf
eLYb;$h[[lW;\^Lp
Q^c3="[g
6!)3S=9
E'TW:~\~$
q'#+jN>$
{[);-w
:26uG^F_`6{~Lx9
tS9sF1
"}&~@g
Bu,7=J`$
+% 0!1_Um6
w"F,#.
6$hEOqn
co5RoU:
>2^9o')
#XQ{ewo
&}+Qd*6
)~{e\4l
L>W|Y8v G
K8c(m3
%>uipx0$
Ivs |"
h)7{0i
*ZnQ~
)=IgiyR
W$CO,z_
(PMhP>C
(oNODi
O\0.jk
B>9rm/'/H
au}N-TDK{
_!k2k>-emr,,
^\_N ;
'>B*'$}
>!$;UL0
M>_,eP
Imx]S5
JV[^1zx^
Dk1WOT
|1.(W`2t^.
-=G:@oO
}.Szph}ihNbA*M>2
XA>5~b#?I
Uf^~*m7
:cZ4r~
A'qIH/Xl/l
<Q)|\[^
~_6;84 i!U;H
G`?|>mV
jBV3N6
![8KPc
Nb+HIn*-
M,M2KHs\;
u$K=JQ>
ErF;n#%
1Nc9sP@@U}|uy(E
%_DYV=]
tA0;Gz,
|%8xHMb<+ZU
a}2Gq_
Imb93b]#
E[U#T8
!`&4<piw~V837\R>
zdtM+0k|F8`]x
Y-'J*}
P<IW|Seh
yZ?c--
It2B'
vVth?[{$9f1'
HCiy^?<z
eCm,v(
)x>p_4
\ (\h+(c@9
sb<j5i|b
4V]h\uJ
;$xSPQ-8Mu
5'Refm
\#u+1]q
%Xgw7ub
A@C}0V*
CG><.[
QEQf8y&l
K62V|b5
.Br8&c
rn#I3
@g8i.";"Jcx
g?^b1.
aa1t}$y
;:`hop\q
bvI;wy.
.3$Y7GB3:I
^Lr0=/Af
O,P"jUdW=>
dde}5Jl]
c5`$4p.sr
|wEW+vFeq}E
*]6{l+yMi
`nTy(V;g_
,nPYy1X-y6uFZW"{E
{h{]?eax5
R^6@kLMz`gpD
~XHlZKg|
>0y<y6[
RZ(2,@i
-%H)@Y
}&.TgxB-w
?Z~,Hcgu
IFKavTQ
v9$P)+
&fM7#b1)3U
\z{hTC
UM+;qR(]
6!Z<{wLh0!
02s*<gt7
mC @#t#TI)/u
TKjMZ:b:
|*Pl4Xc4
y?Yv"H
ke%]KR7yV|\S
emnd`.31din
ci_VKs";
MX>cEaLYJJp
gwXCO9;Jv6
||aa&r
/ 3r`'am
HbDS6WZSd
I/(IjU! a
9adxD5A$X
TWfjVa?(5zIc"V
%5P8Yk,r\b$
TsWb32ABG-'
!r6XbHU_
f|bj=*
Q>wH$pH
L({ss*'k)
7`09$,vQy>
ex(i2x
)wY^tsPi
Nvn>%n
G3YXzGN[}Rr
10<.9*a;J$[J
!e:82g4OtW-d
wE=2m9Td'
Q4ZMiAZ~
N3ObBqW;
D V C L A L
P A C K A G E I N F O
M A I N I C O N
TCP
No TCP connections recorded.
UDP
Source |
Source Port |
Destination |
Destination Port |
192.168.56.101 |
53179 |
224.0.0.252 |
5355 |
192.168.56.101 |
49642 |
224.0.0.252 |
5355 |
192.168.56.101 |
137 |
192.168.56.255 |
137 |
192.168.56.101 |
61714 |
114.114.114.114 |
53 |
192.168.56.101 |
56933 |
114.114.114.114 |
53 |
192.168.56.101 |
138 |
192.168.56.255 |
138 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
Sorry! No dropped buffers.