SmartHawk

5.2

中危

39 个模型检测该样本为恶意！

重新分析

下载样本

54aeed7bf619de17bf60b3d68b2659873e807f689eeb4221d472fb425aaf34b6

8b14dc111a128e25ce94ca5d556b923f.exe

分析耗时

98s

最近分析

文件大小

752.5KB

静态报毒动态报毒 AI SCORE=87 AIDETECTVM ATTRIBUTE BSCOPE CONFIDENCE DELF DROPPERX EADG FALSESIGN FAREIT FUERBOOS GDSDA GENERICKD HIGH CONFIDENCE HIGHCONFIDENCE HJQDK HSYKMC INVALIDSIG MALICIOUS PE MALWARE2 MALWAREX UNSAFE VGY@AYF9@OHI YMACCO ZELPHIF 更多

未检测暂无鹰眼引擎检测结果

查杀引擎	查杀结果	查杀时间	查杀版本
McAfee	Fareit-FZO!8B14DC111A12	20201027	6.0.6.653
Alibaba	TrojanDownloader:Win32/MalwareX.56c2ad32	20190527	0.3.0.5
CrowdStrike	win/malicious_confidence_90% (W)	20190702	1.0
Baidu		20190318	1.0.0.2
Avast	Win32:DropperX-gen [Drp]	20201027	18.4.3895.0
Kingsoft		20201027	2013.8.14.323
Tencent	Win32.Trojan.Falsesign.Eadg	20201027	1.0.0.1

This executable is signed

The executable contains unknown PE section names indicative of a packer (could be a false positive) (3 个事件)

section	CODE
section	DATA
section	BSS

The executable uses a known packer (1 个事件)

packer

BobSoft Mini Delphi -> BoB / BobSoft

Allocates read-write-execute memory (usually to unpack itself) (1 个事件)

Time & API	Arguments	Status	Return	Repeated
1620832814.511875 NtAllocateVirtualMemory	process_identifier: 3048 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) process_handle: 0xffffffff allocation_type: 4096 (MEM_COMMIT) base_address: 0x004d0000	success	0	0

Changes read-write memory protection to read-execute (probably to avoid detection when setting all RWX flags at the same time) (1 个事件)

Time & API	Arguments	Status	Return	Repeated
1620832832.495875 NtProtectVirtualMemory	process_identifier: 3048 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 40960 protection: 32 (PAGE_EXECUTE_READ) process_handle: 0xffffffff base_address: 0x020e1000	success	0	0

Communicates with host for which no DNS query was performed (1 个事件)

host

172.217.24.14

Disables proxy possibly for traffic interception (1 个事件)

Time & API	Arguments	Status	Return	Repeated
1620832852.667875 RegSetValueExA	key_handle: 0x000002e0 value: 0 regkey_r: ProxyEnable reg_type: 4 (REG_DWORD) regkey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable	success	0	0

File has been identified by 39 AntiVirus engines on VirusTotal as malicious (39 个事件)

Bkav	W32.AIDetectVM.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.43736640
FireEye	Trojan.GenericKD.43736640
McAfee	Fareit-FZO!8B14DC111A12
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan-Downloader ( 0056d32d1 )
Alibaba	TrojanDownloader:Win32/MalwareX.56c2ad32
K7GW	Trojan-Downloader ( 0056d32d1 )
CrowdStrike	win/malicious_confidence_90% (W)
Arcabit	Trojan.Generic.D29B5E40
BitDefenderTheta	Gen:NN.ZelphiF.34590.VGY@ayF9@Ohi
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:DropperX-gen [Drp]
BitDefender	Trojan.GenericKD.43736640
NANO-Antivirus	Trojan.Win32.Delf.hsykmc
Paloalto	generic.ml
Ad-Aware	Trojan.GenericKD.43736640
Emsisoft	Trojan.GenericKD.43736640 (B)
VIPRE	Trojan.Win32.Generic!BT
Invincea	Mal/Generic-S
Sophos	Mal/Generic-S
SentinelOne	DFI - Malicious PE
Avira	TR/Dldr.Delf.hjqdk
MAX	malware (ai score=87)
Microsoft	Trojan:Win32/Ymacco.AA54
AegisLab	Trojan.Win32.Delf.4!c
GData	Trojan.GenericKD.43736640
VBA32	BScope.Trojan.Fuerboos
ESET-NOD32	Win32/TrojanDownloader.Delf.CZT
Tencent	Win32.Trojan.Falsesign.Eadg
Ikarus	Trojan-Downloader.Win32.Delf
eGambit	PE.Heur.InvalidSig
Fortinet	W32/Delf.CZT!tr.dldr
AVG	Win32:DropperX-gen [Drp]
Panda	Trj/GdSda.A
Qihoo-360	Generic/Trojan.59b

Connects to IP addresses that are no longer responding to requests (legitimate services will remain up-and-running usually) (4 个事件)

dead_host	172.217.24.14:443
dead_host	172.217.160.110:443
dead_host	108.160.167.165:443
dead_host	216.58.200.46:443

暂无二进制图像该样本未生成二进制可视化图像

暂无运行截图该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析

⚡ 行为特征

🛡️ 防护建议

🔧 技术手段

🎯 检测方法

🤖

Static Analysis
Strings

PE Compile Time

1992-06-20 06:22:17

Imports

Library kernel32.dll:

• 0x498190 DeleteCriticalSection

• 0x498194 LeaveCriticalSection

• 0x498198 EnterCriticalSection

• 0x49819c InitializeCriticalSection

• 0x4981a0 VirtualFree

• 0x4981a4 VirtualAlloc

• 0x4981a8 LocalFree

• 0x4981ac LocalAlloc

• 0x4981b0 GetTickCount

• 0x4981b4 QueryPerformanceCounter

• 0x4981b8 GetVersion

• 0x4981bc GetCurrentThreadId

• 0x4981c0 InterlockedDecrement

• 0x4981c4 InterlockedIncrement

• 0x4981c8 VirtualQuery

• 0x4981cc WideCharToMultiByte

• 0x4981d0 MultiByteToWideChar

• 0x4981d4 lstrlenA

• 0x4981d8 lstrcpynA

• 0x4981dc LoadLibraryExA

• 0x4981e0 GetThreadLocale

• 0x4981e4 GetStartupInfoA

• 0x4981e8 GetProcAddress

• 0x4981ec GetModuleHandleA

• 0x4981f0 GetModuleFileNameA

• 0x4981f4 GetLocaleInfoA

• 0x4981f8 GetCommandLineA

• 0x4981fc FreeLibrary

• 0x498200 FindFirstFileA

• 0x498204 FindClose

• 0x498208 ExitProcess

• 0x49820c WriteFile

• 0x498210 UnhandledExceptionFilter

• 0x498214 RtlUnwind

• 0x498218 RaiseException

• 0x49821c GetStdHandle

Library user32.dll:

• 0x498224 GetKeyboardType

• 0x498228 LoadStringA

• 0x49822c MessageBoxA

• 0x498230 CharNextA

Library advapi32.dll:

• 0x498238 RegQueryValueExA

• 0x49823c RegOpenKeyExA

• 0x498240 RegCloseKey

Library oleaut32.dll:

• 0x498248 SysFreeString

• 0x49824c SysReAllocStringLen

• 0x498250 SysAllocStringLen

Library kernel32.dll:

• 0x498258 TlsSetValue

• 0x49825c TlsGetValue

• 0x498260 LocalAlloc

• 0x498264 GetModuleHandleA

Library advapi32.dll:

• 0x49826c RegQueryValueExA

• 0x498270 RegOpenKeyExA

• 0x498274 RegCloseKey

Library kernel32.dll:

• 0x49827c lstrcpyA

• 0x498280 lstrcmpiA

• 0x498284 WriteFile

• 0x498288 WaitForSingleObject

• 0x49828c VirtualQuery

• 0x498290 VirtualProtect

• 0x498294 VirtualAlloc

• 0x498298 Sleep

• 0x49829c SizeofResource

• 0x4982a0 SetThreadLocale

• 0x4982a4 SetFilePointer

• 0x4982a8 SetEvent

• 0x4982ac SetErrorMode

• 0x4982b0 SetEndOfFile

• 0x4982b4 ResetEvent

• 0x4982b8 ReadFile

• 0x4982bc MultiByteToWideChar

• 0x4982c0 MulDiv

• 0x4982c4 LockResource

• 0x4982c8 LoadResource

• 0x4982cc LoadLibraryA

• 0x4982d0 LeaveCriticalSection

• 0x4982d4 InitializeCriticalSection

• 0x4982d8 GlobalUnlock

• 0x4982dc GlobalReAlloc

• 0x4982e0 GlobalHandle

• 0x4982e4 GlobalLock

• 0x4982e8 GlobalFree

• 0x4982ec GlobalFindAtomA

• 0x4982f0 GlobalDeleteAtom

• 0x4982f4 GlobalAlloc

• 0x4982f8 GlobalAddAtomA

• 0x4982fc GetVersionExA

• 0x498300 GetVersion

• 0x498304 GetTickCount

• 0x498308 GetThreadLocale

• 0x49830c GetSystemInfo

• 0x498310 GetStringTypeExA

• 0x498314 GetStdHandle

• 0x498318 GetProcAddress

• 0x49831c GetModuleHandleA

• 0x498320 GetModuleFileNameA

• 0x498324 GetLocaleInfoA

• 0x498328 GetLocalTime

• 0x49832c GetLastError

• 0x498330 GetFullPathNameA

• 0x498334 GetDiskFreeSpaceA

• 0x498338 GetDateFormatA

• 0x49833c GetCurrentThreadId

• 0x498340 GetCurrentProcessId

• 0x498344 GetComputerNameA

• 0x498348 GetCPInfo

• 0x49834c GetACP

• 0x498350 FreeResource

• 0x498354 InterlockedExchange

• 0x498358 FreeLibrary

• 0x49835c FormatMessageA

• 0x498360 FindResourceA

• 0x498364 FindFirstFileA

• 0x498368 FindClose

• 0x49836c FileTimeToLocalFileTime

• 0x498370 FileTimeToDosDateTime

• 0x498374 EnumCalendarInfoA

• 0x498378 EnterCriticalSection

• 0x49837c DeleteFileA

• 0x498380 DeleteCriticalSection

• 0x498384 CreateThread

• 0x498388 CreateFileA

• 0x49838c CreateEventA

• 0x498390 CompareStringA

• 0x498394 CloseHandle

Library version.dll:

• 0x49839c VerQueryValueA

• 0x4983a0 GetFileVersionInfoSizeA

• 0x4983a4 GetFileVersionInfoA

Library gdi32.dll:

• 0x4983ac UnrealizeObject

• 0x4983b0 StretchBlt

• 0x4983b4 SetWindowOrgEx

• 0x4983b8 SetWinMetaFileBits

• 0x4983bc SetViewportOrgEx

• 0x4983c0 SetTextColor

• 0x4983c4 SetStretchBltMode

• 0x4983c8 SetROP2

• 0x4983cc SetPixel

• 0x4983d0 SetEnhMetaFileBits

• 0x4983d4 SetDIBColorTable

• 0x4983d8 SetBrushOrgEx

• 0x4983dc SetBkMode

• 0x4983e0 SetBkColor

• 0x4983e4 SelectPalette

• 0x4983e8 SelectObject

• 0x4983ec SaveDC

• 0x4983f0 RestoreDC

• 0x4983f4 Rectangle

• 0x4983f8 RectVisible

• 0x4983fc RealizePalette

• 0x498400 Polyline

• 0x498404 Polygon

• 0x498408 PlayEnhMetaFile

• 0x49840c PatBlt

• 0x498410 MoveToEx

• 0x498414 MaskBlt

• 0x498418 LineTo

• 0x49841c IntersectClipRect

• 0x498420 GetWindowOrgEx

• 0x498424 GetWinMetaFileBits

• 0x498428 GetTextMetricsA

• 0x49842c GetTextExtentPointA

• 0x498430 GetTextExtentPoint32A

• 0x498434 GetTextAlign

• 0x498438 GetSystemPaletteEntries

• 0x49843c GetStockObject

• 0x498440 GetROP2

• 0x498444 GetPolyFillMode

• 0x498448 GetPixelFormat

• 0x49844c GetPixel

• 0x498450 GetPaletteEntries

• 0x498454 GetObjectA

• 0x498458 GetMapMode

• 0x49845c GetGraphicsMode

• 0x498460 GetEnhMetaFilePaletteEntries

• 0x498464 GetEnhMetaFileHeader

• 0x498468 GetEnhMetaFileBits

• 0x49846c GetDeviceCaps

• 0x498470 GetDIBits

• 0x498474 GetDIBColorTable

• 0x498478 GetDCOrgEx

• 0x49847c GetDCPenColor

• 0x498480 GetDCBrushColor

• 0x498484 GetCurrentPositionEx

• 0x498488 GetClipBox

• 0x49848c GetBrushOrgEx

• 0x498490 GetBkMode

• 0x498494 GetBkColor

• 0x498498 GetBitmapBits

• 0x49849c GdiFlush

• 0x4984a0 ExcludeClipRect

• 0x4984a4 DeleteObject

• 0x4984a8 DeleteEnhMetaFile

• 0x4984ac DeleteDC

• 0x4984b0 CreateSolidBrush

• 0x4984b4 CreatePenIndirect

• 0x4984b8 CreatePalette

• 0x4984bc CreateHalftonePalette

• 0x4984c0 CreateFontIndirectA

• 0x4984c4 CreateDIBitmap

• 0x4984c8 CreateDIBSection

• 0x4984cc CreateCompatibleDC

• 0x4984d0 CreateCompatibleBitmap

• 0x4984d4 CreateBrushIndirect

• 0x4984d8 CreateBitmap

• 0x4984dc CopyEnhMetaFileA

• 0x4984e0 BitBlt

Library user32.dll:

• 0x4984e8 CreateWindowExA

• 0x4984ec WindowFromPoint

• 0x4984f0 WinHelpA

• 0x4984f4 WaitMessage

• 0x4984f8 UpdateWindow

• 0x4984fc UnregisterClassA

• 0x498500 UnhookWindowsHookEx

• 0x498504 TranslateMessage

• 0x498508 TranslateMDISysAccel

• 0x49850c TrackPopupMenu

• 0x498510 SystemParametersInfoA

• 0x498514 ShowWindow

• 0x498518 ShowScrollBar

• 0x49851c ShowOwnedPopups

• 0x498520 ShowCursor

• 0x498524 ShowCaret

• 0x498528 SetWindowsHookExA

• 0x49852c SetWindowPos

• 0x498530 SetWindowPlacement

• 0x498534 SetWindowLongA

• 0x498538 SetTimer

• 0x49853c SetScrollRange

• 0x498540 SetScrollPos

• 0x498544 SetScrollInfo

• 0x498548 SetRect

• 0x49854c SetPropA

• 0x498550 SetParent

• 0x498554 SetMenuItemInfoA

• 0x498558 SetMenu

• 0x49855c SetForegroundWindow

• 0x498560 SetFocus

• 0x498564 SetCursor

• 0x498568 SetClipboardData

• 0x49856c SetClassLongA

• 0x498570 SetCapture

• 0x498574 SetActiveWindow

• 0x498578 SendMessageA

• 0x49857c ScrollWindow

• 0x498580 ScreenToClient

• 0x498584 RemovePropA

• 0x498588 RemoveMenu

• 0x49858c ReleaseDC

• 0x498590 ReleaseCapture

• 0x498594 RegisterWindowMessageA

• 0x498598 RegisterClipboardFormatA

• 0x49859c RegisterClassA

• 0x4985a0 RedrawWindow

• 0x4985a4 PtInRect

• 0x4985a8 PostQuitMessage

• 0x4985ac PostMessageA

• 0x4985b0 PeekMessageA

• 0x4985b4 OpenClipboard

• 0x4985b8 OffsetRect

• 0x4985bc OemToCharA

• 0x4985c0 MessageBoxA

• 0x4985c4 MessageBeep

• 0x4985c8 MapWindowPoints

• 0x4985cc MapVirtualKeyA

• 0x4985d0 LoadStringA

• 0x4985d4 LoadKeyboardLayoutA

• 0x4985d8 LoadIconA

• 0x4985dc LoadCursorA

• 0x4985e0 LoadBitmapA

• 0x4985e4 KillTimer

• 0x4985e8 IsZoomed

• 0x4985ec IsWindowVisible

• 0x4985f0 IsWindowEnabled

• 0x4985f4 IsWindow

• 0x4985f8 IsRectEmpty

• 0x4985fc IsIconic

• 0x498600 IsDialogMessageA

• 0x498604 IsChild

• 0x498608 InvalidateRect

• 0x49860c IntersectRect

• 0x498610 InsertMenuItemA

• 0x498614 InsertMenuA

• 0x498618 InflateRect

• 0x49861c HideCaret

• 0x498620 GetWindowThreadProcessId

• 0x498624 GetWindowTextA

• 0x498628 GetWindowRect

• 0x49862c GetWindowPlacement

• 0x498630 GetWindowLongA

• 0x498634 GetWindowDC

• 0x498638 GetTopWindow

• 0x49863c GetSystemMetrics

• 0x498640 GetSystemMenu

• 0x498644 GetSysColorBrush

• 0x498648 GetSysColor

• 0x49864c GetSubMenu

• 0x498650 GetScrollRange

• 0x498654 GetScrollPos

• 0x498658 GetScrollInfo

• 0x49865c GetPropA

• 0x498660 GetParent

• 0x498664 GetWindow

• 0x498668 GetMenuStringA

• 0x49866c GetMenuState

• 0x498670 GetMenuItemInfoA

• 0x498674 GetMenuItemID

• 0x498678 GetMenuItemCount

• 0x49867c GetMenu

• 0x498680 GetLastActivePopup

• 0x498684 GetKeyboardState

• 0x498688 GetKeyboardLayoutList

• 0x49868c GetKeyboardLayout

• 0x498690 GetKeyState

• 0x498694 GetKeyNameTextA

• 0x498698 GetIconInfo

• 0x49869c GetForegroundWindow

• 0x4986a0 GetFocus

• 0x4986a4 GetDlgItem

• 0x4986a8 GetDesktopWindow

• 0x4986ac GetDCEx

• 0x4986b0 GetDC

• 0x4986b4 GetCursorPos

• 0x4986b8 GetCursor

• 0x4986bc GetClipboardData

• 0x4986c0 GetClientRect

• 0x4986c4 GetClassNameA

• 0x4986c8 GetClassInfoA

• 0x4986cc GetCapture

• 0x4986d0 GetActiveWindow

• 0x4986d4 FrameRect

• 0x4986d8 FindWindowA

• 0x4986dc FillRect

• 0x4986e0 EqualRect

• 0x4986e4 EnumWindows

• 0x4986e8 EnumThreadWindows

• 0x4986ec EndPaint

• 0x4986f0 EnableWindow

• 0x4986f4 EnableScrollBar

• 0x4986f8 EnableMenuItem

• 0x4986fc EmptyClipboard

• 0x498700 DrawTextA

• 0x498704 DrawStateA

• 0x498708 DrawMenuBar

• 0x49870c DrawIconEx

• 0x498710 DrawIcon

• 0x498714 DrawFrameControl

• 0x498718 DrawEdge

• 0x49871c DispatchMessageA

• 0x498720 DestroyWindow

• 0x498724 DestroyMenu

• 0x498728 DestroyIcon

• 0x49872c DestroyCursor

• 0x498730 DeleteMenu

• 0x498734 DefWindowProcA

• 0x498738 DefMDIChildProcA

• 0x49873c DefFrameProcA

• 0x498740 CreatePopupMenu

• 0x498744 CreateMenu

• 0x498748 CreateIcon

• 0x49874c CloseClipboard

• 0x498750 ClientToScreen

• 0x498754 CheckMenuItem

• 0x498758 CallWindowProcA

• 0x49875c CallNextHookEx

• 0x498760 BeginPaint

• 0x498764 CharNextA

• 0x498768 CharLowerBuffA

• 0x49876c CharLowerA

• 0x498770 CharUpperBuffA

• 0x498774 CharToOemA

• 0x498778 AdjustWindowRectEx

• 0x49877c ActivateKeyboardLayout

Library kernel32.dll:

• 0x498784 Sleep

Library oleaut32.dll:

• 0x49878c SafeArrayPtrOfIndex

• 0x498790 SafeArrayPutElement

• 0x498794 SafeArrayGetElement

• 0x498798 SafeArrayUnaccessData

• 0x49879c SafeArrayAccessData

• 0x4987a0 SafeArrayGetUBound

• 0x4987a4 SafeArrayGetLBound

• 0x4987a8 SafeArrayCreate

• 0x4987ac VariantChangeType

• 0x4987b0 VariantCopyInd

• 0x4987b4 VariantCopy

• 0x4987b8 VariantClear

• 0x4987bc VariantInit

Library ole32.dll:

• 0x4987c4 CoTaskMemFree

• 0x4987c8 ProgIDFromCLSID

• 0x4987cc StringFromCLSID

• 0x4987d0 CoCreateInstance

• 0x4987d4 CoUninitialize

• 0x4987d8 CoInitialize

• 0x4987dc IsEqualGUID

Library oleaut32.dll:

• 0x4987e4 GetErrorInfo

• 0x4987e8 GetActiveObject

• 0x4987ec SysFreeString

Library comctl32.dll:

• 0x4987f4 ImageList_SetIconSize

• 0x4987f8 ImageList_GetIconSize

• 0x4987fc ImageList_Write

• 0x498800 ImageList_Read

• 0x498804 ImageList_GetDragImage

• 0x498808 ImageList_DragShowNolock

• 0x49880c ImageList_SetDragCursorImage

• 0x498810 ImageList_DragMove

• 0x498814 ImageList_DragLeave

• 0x498818 ImageList_DragEnter

• 0x49881c ImageList_EndDrag

• 0x498820 ImageList_BeginDrag

• 0x498824 ImageList_Remove

• 0x498828 ImageList_DrawEx

• 0x49882c ImageList_Replace

• 0x498830 ImageList_Draw

• 0x498834 ImageList_GetBkColor

• 0x498838 ImageList_SetBkColor

• 0x49883c ImageList_ReplaceIcon

• 0x498840 ImageList_Add

• 0x498844 ImageList_SetImageCount

• 0x498848 ImageList_GetImageCount

• 0x49884c ImageList_Destroy

• 0x498850 ImageList_Create

Library comdlg32.dll:

• 0x498858 GetSaveFileNameA

• 0x49885c GetOpenFileNameA

Library advapi32.dll:

• 0x498864 QueryServiceStatus

• 0x498868 OpenServiceA

• 0x49886c OpenSCManagerA

• 0x498870 CloseServiceHandle

Library winmm.dll:

• 0x498878 sndPlaySoundA

Library UrL:

• 0x498880 InetIsOffline

Hosts

No hosts contacted.

DNS

Name	Response	Post-Analysis Lookup
time.windows.com	A 20.189.79.72 CNAME time.microsoft.akadns.net
discord.com	A 108.160.167.165	108.160.165.55
dns.msftncsi.com	A 131.107.255.255	131.107.255.255
clients2.google.com	A 172.217.160.110 CNAME clients.l.google.com A 216.58.200.46	142.250.66.110
dns.msftncsi.com	AAAA fd3e:4f5a:5b81::1	131.107.255.255
teredo.ipv6.microsoft.com

TCP

No TCP connections recorded.

UDP

Source	Source Port	Destination	Destination Port
192.168.56.101	49235	114.114.114.114	53
192.168.56.101	51963	114.114.114.114	53
192.168.56.101	53657	114.114.114.114	53
192.168.56.101	55368	114.114.114.114	53
192.168.56.101	57236	114.114.114.114	53
192.168.56.101	60215	114.114.114.114	53
192.168.56.101	62912	114.114.114.114	53
192.168.56.101	137	192.168.56.255	137
192.168.56.101	138	192.168.56.255	138
192.168.56.101	123	20.189.79.72 time.windows.com	123
192.168.56.101	50002	224.0.0.252	5355
192.168.56.101	50534	224.0.0.252	5355
192.168.56.101	51808	224.0.0.252	5355
192.168.56.101	53210	224.0.0.252	5355
192.168.56.101	56539	224.0.0.252	5355
192.168.56.101	56804	224.0.0.252	5355
192.168.56.101	57756	224.0.0.252	5355
192.168.56.101	57874	224.0.0.252	5355
192.168.56.101	60123	224.0.0.252	5355
192.168.56.101	60384	224.0.0.252	5355

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.

Sorry! No dropped buffers.