1.0
低危
DACN
0.12
FACILE
1.00
IMCLNet
0.69
MFGraph
0.00
反病毒引擎
| 查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
|---|---|---|---|
| Alibaba | None | 20190527 | 0.3.0.5 |
| Avast | Win32:Downloader-TH [Trj] | 20200605 | 18.4.3895.0 |
| Baidu | None | 20190318 | 1.0.0.2 |
| CrowdStrike | win/malicious_confidence_100% (D) | 20190702 | 1.0 |
| Kingsoft | None | 20200605 | 2013.8.14.323 |
| McAfee | GenericRXHK-DY!882BB2A4C1D4 | 20200605 | 6.0.6.653 |
| Tencent | Malware.Win32.Gencirc.10b0a0d2 | 20200605 | 1.0.0.1 |
静态指标
可执行文件包含未知的 PE 段名称，可能指示打包器（可能是误报）
(1 个事件)
| section | .flat |
动态指标
网络通信
与未执行 DNS 查询的主机进行通信
(1 个事件)
| host | 114.114.114.114 | |||
文件已被 VirusTotal 上 58 个反病毒引擎识别为恶意
(50 out of 58 个事件)
| ALYac | Gen:Variant.Fugrafa.2889 |
| APEX | Malicious |
| AVG | Win32:Downloader-TH [Trj] |
| Acronis | suspicious |
| Ad-Aware | Gen:Variant.Fugrafa.2889 |
| AhnLab-V3 | Trojan/Win32.Downloader.C73461 |
| Antiy-AVL | Trojan[Backdoor]/Win32.Small |
| Arcabit | Trojan.Fugrafa.DB49 |
| Avast | Win32:Downloader-TH [Trj] |
| Avira | TR/Dldr.Mondo.Gen |
| BitDefender | Gen:Variant.Fugrafa.2889 |
| BitDefenderTheta | AI:Packer.1A482BFB1E |
| CAT-QuickHeal | Backdoor.SmallPMF.S6644088 |
| ClamAV | Win.Downloader.92-4 |
| Comodo | TrojWare.Win32.Agent.UY@1mel |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.4c1d44 |
| Cylance | Unsafe |
| Cyren | W32/Backdoor.XUEI-3199 |
| DrWeb | Trojan.DownLoader.15706 |
| ESET-NOD32 | Win32/Agent.UY |
| Emsisoft | Gen:Variant.Fugrafa.2889 (B) |
| Endgame | malicious (high confidence) |
| F-Prot | W32/Backdoor.VZS |
| F-Secure | Trojan.TR/Dldr.Mondo.Gen |
| FireEye | Generic.mg.882bb2a4c1d442d5 |
| Fortinet | W32/Agent.U!tr |
| GData | Gen:Variant.Fugrafa.2889 |
| Ikarus | Trojan-Downloader.Win32.Small |
| Invincea | heuristic |
| Jiangmin | Backdoor/Small.e |
| K7AntiVirus | Trojan ( 005326ea1 ) |
| K7GW | Trojan ( 005326ea1 ) |
| Kaspersky | Backdoor.Win32.Small.ml |
| MAX | malware (ai score=80) |
| Malwarebytes | Backdoor.Agent |
| McAfee | GenericRXHK-DY!882BB2A4C1D4 |
| McAfee-GW-Edition | BehavesLike.Win32.Upatre.mm |
| MicroWorld-eScan | Gen:Variant.Fugrafa.2889 |
| Microsoft | Backdoor:Win32/Small |
| NANO-Antivirus | Trojan.Win32.Small.csixus |
| Panda | Trj/Genetic.gen |
| Qihoo-360 | HEUR/QVM19.1.B245.Malware.Gen |
| Rising | Backdoor.Small.hot (RDMK:cmRtazqmyKwgPN7ZSFOW6WEhwBVG) |
| Sangfor | Malware |
| SentinelOne | DFI - Malicious PE |
| Sophos | Troj/Mondo-Gen |
| Symantec | Downloader |
| Tencent | Malware.Win32.Gencirc.10b0a0d2 |
| TrendMicro | TROJ_MONDO.AF |
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
2006-12-07 21:46:57
PE Imphash
ab015834f3e86347ca49c19f25f215f6
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .text | 0x00001000 | 0x00010806 | 0x00010a00 | 5.807763622536522 |
| .data | 0x00012000 | 0x00004018 | 0x00003400 | 4.386396072715676 |
| .flat | 0x00017000 | 0x00000269 | 0x00000400 | 4.05363689391456 |
Imports
Library CRTDLL.dll:
• 0x41473c memset
• 0x414740 strlen
• 0x414744 _strnicmp
• 0x414748 strncmp
• 0x41474c strncpy
• 0x414750 strcpy
• 0x414754 atof
• 0x414758 strcat
• 0x41475c localtime
• 0x414760 mktime
• 0x414764 gmtime
Library USER32.dll:
• 0x41476c wsprintfA
• 0x414770 GetWindowThreadProcessId
• 0x414774 KillTimer
• 0x414778 SetTimer
• 0x41477c wvsprintfA
• 0x414780 MessageBoxA
• 0x414784 IsWindowVisible
• 0x414788 IsWindowEnabled
• 0x41478c GetForegroundWindow
• 0x414790 EnableWindow
• 0x414794 EnumWindows
• 0x414798 GetWindowLongA
• 0x41479c CallWindowProcA
• 0x4147a0 DefWindowProcA
• 0x4147a4 SetWindowLongA
• 0x4147a8 SetWindowTextA
• 0x4147ac DestroyWindow
• 0x4147b0 SendMessageA
• 0x4147b4 CreateWindowExA
• 0x4147b8 LoadCursorA
• 0x4147bc LoadIconA
• 0x4147c0 RegisterClassA
• 0x4147c4 GetSysColor
• 0x4147c8 PeekMessageA
• 0x4147cc GetActiveWindow
• 0x4147d0 TranslateAcceleratorA
• 0x4147d4 TranslateMessage
• 0x4147d8 DispatchMessageA
• 0x4147dc AdjustWindowRect
• 0x4147e0 GetSystemMetrics
• 0x4147e4 GetWindowRect
• 0x4147e8 ShowWindow
• 0x4147ec GetMessageA
• 0x4147f0 GetClassNameA
• 0x4147f4 PostMessageA
• 0x4147f8 GetParent
• 0x4147fc GetWindow
• 0x414800 SetWindowPos
• 0x414804 SetFocus
• 0x414808 SetActiveWindow
• 0x41480c UnregisterClassA
• 0x414810 DestroyAcceleratorTable
• 0x414814 GetFocus
• 0x414818 IsChild
• 0x41481c EnumChildWindows
• 0x414820 GetKeyState
• 0x414824 CreateAcceleratorTableA
• 0x414828 SetCursorPos
• 0x41482c LoadImageA
• 0x414830 SetCursor
• 0x414834 SystemParametersInfoA
• 0x414838 SetCapture
• 0x41483c GetCursorPos
• 0x414840 MapWindowPoints
• 0x414844 ReleaseCapture
• 0x414848 MoveWindow
Library WININET.dll:
• 0x414860 DeleteUrlCacheEntryA
• 0x414864 InternetOpenA
• 0x414868 InternetOpenUrlA
• 0x41486c InternetReadFile
• 0x414870 InternetCloseHandle
Library OLEAUT32.dll:
• 0x414878 SysAllocStringLen
• 0x41487c SysFreeString
• 0x414880 SysAllocString
Library urlmon.dll:
• 0x414898 URLDownloadToFileA
Library COMCTL32.dll:
• 0x4148ac InitCommonControls
Library KERNEL32.DLL:
• 0x4148b4 GetModuleHandleA
• 0x4148b8 GetCommandLineA
• 0x4148bc ExitProcess
• 0x4148c0 HeapCreate
• 0x4148c4 GetSystemDirectoryA
• 0x4148c8 GetModuleFileNameA
• 0x4148cc LoadLibraryA
• 0x4148d0 GetProcAddress
• 0x4148d4 GlobalAlloc
• 0x4148d8 OpenProcess
• 0x4148dc CloseHandle
• 0x4148e0 GetLastError
• 0x4148e4 GetEnvironmentVariableA
• 0x4148e8 GetCurrentDirectoryA
• 0x4148ec SystemTimeToFileTime
• 0x4148f0 GetFileAttributesA
• 0x4148f4 SetFileAttributesA
• 0x4148f8 CreateFileA
• 0x4148fc SetFileTime
• 0x414900 GetFileTime
• 0x414904 HeapDestroy
• 0x414908 HeapReAlloc
• 0x41490c FreeLibrary
• 0x414910 HeapAlloc
• 0x414914 IsBadReadPtr
• 0x414918 HeapFree
• 0x41491c GlobalFree
• 0x414920 MultiByteToWideChar
• 0x414924 WideCharToMultiByte
• 0x414928 SetUnhandledExceptionFilter
• 0x41492c GetVersionExA
• 0x414930 GetCurrentThreadId
• 0x414934 GetCurrentProcessId
• 0x414938 WaitForSingleObject
• 0x41493c GetTickCount
• 0x414940 Sleep
• 0x414944 FindClose
• 0x414948 FindFirstFileA
• 0x41494c FindNextFileA
• 0x414950 ReadFile
• 0x414954 SetFilePointer
• 0x414958 GetFileSize
• 0x41495c WriteFile
• 0x414960 GetLocalTime
Library SHELL32.DLL:
• 0x414968 ShellExecuteExA
L!This program cannot be run in DOS mode.
`.data
SQUVWD
D$ h A
D$,h A
D$0|$0
D$4h A
D$@1D_^]Y[
ISQUVW
SQUVWh"A
1_^]Y[
SQUVW1_^]Y[
SQUVWt
\$(cj_
u#T$(5#A
L$,ZTg
L$0Z:g
XL$8Zed
L$hZBd
;D$h|]5#A
t$pD$p\
T$45#A
XL$8Zc
T$4L$dc
T$p5#A
t_^]Y[
SQUVWP
;D$4|]5#A
t$<D$<US
t$05SA
D$@|$@
\$P.<Q
\$Te(Q
XL$LZY
P_^]Y[
SQUVWX
;D$0|\5#A
t$8D$8{N
t$,5SA
D$<|$<
\$L.dL
\$TdPL
\$Xl;L
\$Xl&L
XL$HZT
t$L5#A
D$T\$<
1T$,'U
X_^]Y[e
SQUVWt$
\$$S6J
L$0Z-Q
;D$0|\5#A
t$8D$8I
D$8D$8
D$8t$,5SA
D$@|$@
L$HZ7P
\$P.}G
\$XdiG
\$\lTG
\$\l?G
XL$LZO
t$P5#A
L$\Z}O
t$Pt$du
L$\Z[O
D$<\$<;\$8|"t$Xm
T$X5#A
\_^]Y[0
SQUVW<
l$(XfE
PD$(PY
D$8\$8
PD$ PD$$Pt$D
<_^]Y[
SQUVWt$
D$ 4$h
T$85#A
<_^]Y[
_^]Y["
SQUVWt$
T$ 5#A
\$ +\$
XL$(ZtA
XL$,Zj@
\$ +\$
L$$Z/@
T$ 5#A
XL$0Z=
;D$\|]5#A
t$dD$d
L$dZJ=
T$,5#A
T$,L$XN=
T$X5#A
d_^]Y[
SQUVWt$
_^]Y[5
_^]Y[:
SQUVW0
t$ t$
u#T$ 5#A
L$$Zh5
L$(ZN5
L$,Z"5
0_^]Y[
SQUVWt$
_^]Y[M
\$(k|
\$4ig
\$(nR
\$(.=
\$(p(
XL$ Z#(
\$8&v
\$(pb
\$(aM
\$(i8
\$(s#
XL$4Z'
XL$<Z&
L$@Zp&
;D$D|55#A
t$Lt$HL
XL$<Z>#
XL$dZ "
XL$lZ!
XL$pZQ!
XL$tZ
XL$xZ
XL$|Z:
t$XT$lY
tHt$\(
t$XT$pY.
t$XT$tY
t$XT$xY
t$XT$|Y
t$XT$dY
_^]Y[5#A
/~A5#A
H8 t@S
XGH=0#A
[^_1ZXR=u
Z)R@Ph
uZ)R@Ph
PG?u%1
?uX_^[]
SQUVWt$
SQUVWt$
D$"XL$
$$_^]Y[
SQUVWt$
_^]Y[SQUVW
SQUVW
$ _^]Y[
9u=,TA
_^]Y[SQUVWh#A
1_^]Y[SQUVW
SQUVWh
1_^]Y[SQUVW
1_^]Y[SW\$
@y1SQUVW'A
_^]Y[SQUVW6A
u%h)BA
1SQUVWP
[UPX__^]Y[
UQPSVW}
u"W5#A
u+E)RP5#A
UQPVW}
u9uDW0
UQSVW}
u)PS5#A
?\u9v2
X}ZXR=
XZPR6,
ZXRPhr@
UQSWju
UQSVW=#A
P9=P\A
t=hxCA
t)hhCA
uuh<CA
EPh,CA
WjjlhT\A
SysDu*]A
SysMu*]A
Listu1=d]A
td=l]A
u =T^A
]USVW]
_]Wh^A
UQW19=
_^]ST$
_^]UQW1}
_UQVW}
EUQP]=
EUQPfE
EUQPW19=
U\SVWu
UQVW1E
UQVW1E
UQVW1E
UQVW1E
UQVW1E
UQVW1E
UTSVWu
psapi.dll
EnumProcesses
EnumProcessModules
GetModuleBaseNameA
GetModuleFileNameExA
EnumDeviceDrivers
GetDeviceDriverBaseNameA
GetDeviceDriverFileNameA
GetProcessMemoryInfo
EmptyWorkingSet
kernel32.dll
CreateToolhelp32Snapshot
Thread32First
Thread32Next
OpenThread
NdeONaAzZx e
sGS N pQB G
ckj u ev q K
Xu mk VjIV wOM
XJOU os NSXV B
ROtcLmKK fh t
hKHt v WkmWw W
wu FrQbz VSV
Iaxo f zPg X
C qY evJTMMtW
JZi dRGT RSFn
SpbckX DUp VX
DZ smNands
n eQsxI ieXOwN
axH xb iZqEqi
koax MBTMhC TE
xMF q oiLdvwiK
OQNYlTCdy w Mv
dosA Bs lBtme
UCXCfxOg BV wp
A IOFU gOePkDP
X CvCFuuLo n
O F r D jUyVB
nMvZYKkSK N tk
NinLXf wQItE
dH J TYgb a
OQ Q FsPkYh
w Xb ZXEWSU
jUEvABN ysglf
w Hriq qnbxe g
/c del "
explorer
Opera 6.01
kernel32.dll
)BOUND
YENTER
9LOOPNE
9LOOPE
LOADALL
SETNBE
SETNLE
CMPXCHG
CMPXCHG
CMPXCHG8B
(BSWAP
(BSWAP
(BSWAP
(BSWAP
(BSWAP
(BSWAP
(BSWAP
(BSWAP
IFLDENV
IFLDCW
IFSTENV
IFSTCW
FICOMP
FISUBR
FIDIVR
FUCOMPP
FSETPM
IFRSTOR
IFSAVE
IFSTSW
FUCOMP
FICOMP
FISUBR
FIDIVR
FCOMPP
FSUBRP
FDIVRP
FLDL2T
FLDL2E
FLDLG2
FLDLN2
FRATAN
FXTRACT
FPREM1
FDECSTP
FINCSTP
FYL2XP1
FSINCOS
FRNDINT
FSCALE
ecsdfgalcldlblahchdhbhaxcxdxbxspbpsidibx+si
dword
qword
tbyte
fword
FNSTSW
FSTSW
LLDT word
LMSW word
LTR word
SLDT word
SMSW word
STR word
VERR word
VERW word
db 67h
db 66h
Error Information
There was a general Exception-Error
The program will now be terminated!
OnAtlAxWin
Shell.Explorer.1
Mozilla.Browser.1
AtlAxGetControl
AtlAxWinInit
ATL.DLL
WindowClass_%ld
TemplateClass
memset
CRTDLL.dll
wsprintfA
GetWindowThreadProcessId
KillTimer
SetTimer
wvsprintfA
USER32.dll
RegCreateKeyA
RegSetValueExA
RegCloseKey
ADVAPI32.dll
DeleteUrlCacheEntryA
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
WININET.dll
SysAllocStringLen
SysFreeString
SysAllocString
OLEAUT32.dll
CoInitialize
CoCreateInstance
CoUninitialize
ole32.dll
URLDownloadToFileA
urlmon.dll
strlen
_strnicmp
strncmp
strncpy
strcpy
strcat
localtime
mktime
gmtime
MessageBoxA
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows
GetWindowLongA
CallWindowProcA
DefWindowProcA
SetWindowLongA
SetWindowTextA
DestroyWindow
SendMessageA
CreateWindowExA
LoadCursorA
LoadIconA
RegisterClassA
GetSysColor
PeekMessageA
GetActiveWindow
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
AdjustWindowRect
GetSystemMetrics
GetWindowRect
ShowWindow
GetMessageA
GetClassNameA
PostMessageA
GetParent
GetWindow
SetWindowPos
SetFocus
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
GetFocus
IsChild
EnumChildWindows
GetKeyState
CreateAcceleratorTableA
SetCursorPos
LoadImageA
SetCursor
SystemParametersInfoA
SetCapture
GetCursorPos
MapWindowPoints
ReleaseCapture
MoveWindow
GetStockObject
CreateBrushIndirect
GDI32.dll
InitCommonControls
COMCTL32.dll
GetModuleHandleA
GetCommandLineA
ExitProcess
HeapCreate
GetSystemDirectoryA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GlobalAlloc
OpenProcess
CloseHandle
GetLastError
GetEnvironmentVariableA
GetCurrentDirectoryA
SystemTimeToFileTime
GetFileAttributesA
SetFileAttributesA
CreateFileA
SetFileTime
GetFileTime
HeapDestroy
HeapReAlloc
FreeLibrary
HeapAlloc
IsBadReadPtr
HeapFree
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
SetUnhandledExceptionFilter
GetVersionExA
GetCurrentThreadId
GetCurrentProcessId
WaitForSingleObject
GetTickCount
FindClose
FindFirstFileA
FindNextFileA
ReadFile
SetFilePointer
GetFileSize
WriteFile
GetLocalTime
KERNEL32.DLL
ShellExecuteExA
SHELL32.DLL
*x*x*x#$#$21r12061025cymalxx*x*x*x#$#$5y419162240etlflwo*x*x*x#$#$27r41910265ikqxkale*x*x*x#$#$8i5194312jjngjok*x*x*x#$#$8t5194314qpgxqwh*x*x*x#$#$8u5194315elnblft*x*x*x#$#$8v5194315utasaxt*x*x*x#$#$8n5194316dfcdxxw*x*x*x#$#$8j51912726cvxbhwk*x*x*x#$#$8r5191508tywsiyxn*x*x*x#$#$8k51963450twocemw*x*x*x#$#$10w51924556cuxqwcl*x*x*x#$#$10a5195023vmqbpts*x*x*x#$#$10j519181930dmqmgfs*x*x*x#$#$16j51910139myrlxjh*x*x*x#$#$16e51910741ejlftqh*x*x*x#$#$16g51910950ueqytwh*x*x*x#$#$16g519101710mxchbsr*x*x*x#$#$16s519165618ayuchbf*x*x*x#$#$20q51962151fhltruy*x*x*x#$#$24e51916623hqixwuf*x*x*x#$#$27e5197434fmilage*x*x*x#$#$20c51962151bdhduvx*x*x*x#$#$28x519135832ypxmgte*x*x*x#$#$28t51915126tebrjwc*x*x*x#$#$26l419113144ktnxemx*x*x*x#$#$28h519185734gyyfixk*x*x*x#$#$29y51912108apmaplbl*x*x*x#$#$1f619215911aamdtod*x*x*x#$#$7q61915408xbmbkutv*x*x*x#$#$7i51911028civqwwy*x*x*x#$#$18p619201152eixewea*x*x*x#$#$24e51982955fmilage*x*x*x#$#$20k619192713evpertg*x*x*x#$#$20l619233331vlflury*x*x*x#$#$26c419124926kkdmauv*x*x*x#$#$21s61923934bxlyjgl*x*x*x#$#$21k719162735evrdcpi*x*x*x#$#$26r719164039dffxqfb*x*x*x#$#$26s719164350nbbuoct*x*x*x#$#$26b719164847dugldir*x*x*x#$#$27v71931820qsecvtgKISA*x*x*x#$#$13i32032454gslnaei*x*x*x#$#$12i32020448ftnvcpn*x*x*x#$#$13u32010107aqcxrlwh*x*x*x#$#$13x320175938cdfuuyd*x*x*x#$#$13j32019316kssdpxl*x*x*x#$#$13c320202518fhbxtsq*x*x*x#$#$13p320225841xgfnqda*x*x*x#$#$18m320142342ypxasqr*x*x*x#$#$18j3202015ddvlxol*x*x*x#$#$18l320114436hxemwhi*x*x*x#$#$18a320114359xmmdvtv*x*x*x#$#$18k32011445ntlcrswy*x*x*x#$#$18f320114410aefxegi*x*x*x#$#$18y320114416tjfsbqt*x*x*x#$#$18n320114421dspucpg*x*x*x#$#$18h320114425nswqjby*x*x*x#$#$18u320114431spwecei*x*x*x#$#$18n320114437msmswib*x*x*x#$#$18f320114444qrbkcfx*x*x*x#$#$18m320114450sjsreay*x*x*x#$#$18q320114457xjsaisa*x*x*x#$#$18h32011452nwotkyxs*x*x*x#$#$18d32011459mbhtbjpd*x*x*x#$#$18q320114514gqcachu*x*x*x#$#$18u320114520jdsowce*x*x*x#$#$18k320114530vxkdknk*x*x*x#$#$18u320114537mjrfdrj*x*x*x#$#$18k320114542skrfyba*x*x*x#$#$18p320114547uiefvpf*x*x*x#$#$18c320114553fsovciy*x*x*x#$#$18g320114558fruiudy*x*x*x#$#$18d32011464fqimfcpt*x*x*x#$#$18q320114610kvnkhnk*x*x*x#$#$18o320114616egxbddm*x*x*x#$#$18y320114622exaaogg*x*x*x#$#$18v320114628nffbmea*x*x*x#$#$18q320114634tovolxs*x*x*x#$#$18r320114641nxwvhem*x*x*x#$#$18b320114652pdoqyew*x*x*x#$#$18g32011471hjvdhcaj*x*x*x#$#$18k32011477qypvshrj*x*x*x#$#$18j320114718umimnyv*x*x*x#$#$18d320114729gpvfxct*x*x*x#$#$18j320114743ejdqqil*x*x*x#$#$18u320114750fnnavqj*x*x*x#$#$18y320114756bekoyxp*x*x*x#$#$18d32011481leraxkjr*x*x*x#$#$18h32011489ivafmdnf*x*x*x#$#$18s320114814wcvbtpa*x*x*x#$#$18r320114822rgpwpii*x*x*x#$#$18d320114835eqhtavy*x*x*x#$#$18h320114841lcilchd*x*x*x#$#$18s320114848tdhokup*x*x*x#$#$18c32011492umycavdu*x*x*x#$#$18o32011499tillyqnc*x*x*x#$#$23q320193857abyrswx*x*x*x#$#$28n32085733cpawfqp*x*x*x#$#$28p32085738advjcyw*x*x*x#$#$28f32085744ofvytrg*x*x*x#$#$2s4204733jnsojhq*x*x*x#$#$7c42035932ojlxtoc*x*x*x#$#$24c520194457hrjpmwr*x*x*x#$#$28i520185430eviairi*x*x*x#$#$4u620152949bqiasfi*x*x*x#$#$5k62065434sdvugwr*x*x*x#$#$5j62065525mqfqsdc*x*x*x#$#$5m62065557mehbjug
Z D Q T C R S E : [ ]
x 0 1 2 3 4 5 6 7 8 9 A B C D E F
Hosts
| IP |
|---|
| 114.114.114.114 |
DNS
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| dns.msftncsi.com | A 131.107.255.255 | |
| dns.msftncsi.com | AAAA fd3e:4f5a:5b81::1 |
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 56933 | 114.114.114.114 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
Sorry! No dropped files.
Sorry! No dropped buffers.