1.1
低危
DACN
0.12
FACILE
1.00
IMCLNet
0.80
MFGraph
0.00
反病毒引擎
| 查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
|---|---|---|---|
| Alibaba | None | 20190527 | 0.3.0.5 |
| Avast | Win32:Agent-APNJ [Trj] | 20200412 | 18.4.3895.0 |
| Baidu | Win32.Trojan.Agent.dc | 20190318 | 1.0.0.2 |
| CrowdStrike | win/malicious_confidence_80% (D) | 20190702 | 1.0 |
| Kingsoft | None | 20200413 | 2013.8.14.323 |
| McAfee | W32/Worm-FFR | 20200413 | 6.0.6.653 |
| Tencent | Worm.Win32.Juched.pgy | 20200413 | 1.0.0.1 |
静态指标
动态指标
在 PE 资源中识别到外语
(4 个事件)
| name | RT_ICON | language | LANG_TURKISH | filetype | None | sublanguage | SUBLANG_DEFAULT | offset | 0x0003f440 | size | 0x000008a8 | ||||||||||||||||||
| name | RT_ICON | language | LANG_TURKISH | filetype | None | sublanguage | SUBLANG_DEFAULT | offset | 0x0003f440 | size | 0x000008a8 | ||||||||||||||||||
| name | RT_GROUP_ICON | language | LANG_TURKISH | filetype | None | sublanguage | SUBLANG_DEFAULT | offset | 0x0003fce8 | size | 0x00000022 | ||||||||||||||||||
| name | RT_VERSION | language | LANG_TURKISH | filetype | None | sublanguage | SUBLANG_DEFAULT | offset | 0x0003e250 | size | 0x00000348 | ||||||||||||||||||
网络通信
与未执行 DNS 查询的主机进行通信
(1 个事件)
| host | 114.114.114.114 | |||
文件已被 VirusTotal 上 63 个反病毒引擎识别为恶意
(50 out of 63 个事件)
| ALYac | Gen:Variant.Ulise.49530 |
| APEX | Malicious |
| AVG | Win32:Agent-APNJ [Trj] |
| Acronis | suspicious |
| Ad-Aware | Gen:Variant.Ulise.49530 |
| AhnLab-V3 | Worm/Win32.Juched.R29984 |
| Antiy-AVL | Worm/Win32.Juched |
| Arcabit | Trojan.Ulise.DC17A |
| Avast | Win32:Agent-APNJ [Trj] |
| Avira | TR/Crypt.ZPACK.Gen7 |
| Baidu | Win32.Trojan.Agent.dc |
| BitDefender | Gen:Variant.Ulise.49530 |
| BitDefenderTheta | Gen:NN.ZexaF.34106.rz3@a83wK6lG |
| Bkav | W32.GenericGanelpA.Trojan |
| CMC | Trojan.Win32.Juched!O |
| ClamAV | Win.Trojan.BankerSpy-1 |
| Comodo | Worm.Win32.Juched.PGY@4yojo0 |
| CrowdStrike | win/malicious_confidence_80% (D) |
| Cybereason | malicious.93f68c |
| Cylance | Unsafe |
| Cyren | W32/Agent.KI.gen!Eldorado |
| DrWeb | Trojan.Siggen4.23869 |
| ESET-NOD32 | a variant of Win32/Agent.UDI |
| Emsisoft | Gen:Variant.Ulise.49530 (B) |
| Endgame | malicious (high confidence) |
| F-Prot | W32/Agent.KI.gen!Eldorado |
| F-Secure | Trojan.TR/Crypt.ZPACK.Gen7 |
| FireEye | Generic.mg.d36553f93f68c6e2 |
| Fortinet | W32/Agent.SRG!tr |
| GData | Gen:Variant.Ulise.49530 |
| Ikarus | Trojan.Win32.Webprefix |
| Invincea | heuristic |
| Jiangmin | Worm/Generic.abnf |
| K7AntiVirus | EmailWorm ( 005191521 ) |
| K7GW | EmailWorm ( 005191521 ) |
| Kaspersky | Worm.Win32.Juched.fgq |
| MAX | malware (ai score=88) |
| Malwarebytes | Trojan.Jusched |
| MaxSecure | Worm.Win32.Juched.FIH |
| McAfee | W32/Worm-FFR |
| McAfee-GW-Edition | GenericRXFC-NS!D36553F93F68 |
| MicroWorld-eScan | Gen:Variant.Ulise.49530 |
| Microsoft | Worm:Win32/Ganelp.E |
| NANO-Antivirus | Trojan.Win32.Juched.fiiwse |
| Panda | Trj/Genetic.gen |
| Qihoo-360 | HEUR/QVM02.0.8849.Malware.Gen |
| Rising | Trojan.Agent!1.C135 (RDMK:cmRtazrRw0izPeUz5hPM6KvN4QjX) |
| SUPERAntiSpyware | Trojan.Agent/Gen-Crypt |
| Sangfor | Malware |
| SentinelOne | DFI - Malicious PE |
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
2012-09-27 21:10:14
PE Imphash
1d8a9fa1df68905ca65ac0a36686d3a6
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .text | 0x00001000 | 0x00025ef0 | 0x00026000 | 3.9196522063750234 |
| .rdata | 0x00027000 | 0x00001c1f | 0x00002000 | 4.642737280815066 |
| .data | 0x00029000 | 0x00013218 | 0x00002000 | 0.8703873296451963 |
| .idata | 0x0003d000 | 0x00000a49 | 0x00001000 | 3.025413492030885 |
| .rsrc | 0x0003e000 | 0x00002369 | 0x00003000 | 3.076873438496094 |
| .reloc | 0x00041000 | 0x000013e3 | 0x00002000 | 4.248384209473437 |
Resources
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| RT_ICON | 0x0003f440 | 0x000008a8 | LANG_TURKISH | SUBLANG_DEFAULT | None |
| RT_ICON | 0x0003f440 | 0x000008a8 | LANG_TURKISH | SUBLANG_DEFAULT | None |
| RT_GROUP_ICON | 0x0003fce8 | 0x00000022 | LANG_TURKISH | SUBLANG_DEFAULT | None |
| RT_VERSION | 0x0003e250 | 0x00000348 | LANG_TURKISH | SUBLANG_DEFAULT | None |
Imports
Library KERNEL32.dll:
• 0x43d278 GetLastError
• 0x43d27c GetSystemTime
• 0x43d280 MultiByteToWideChar
• 0x43d284 GetLocaleInfoA
• 0x43d288 GetModuleHandleA
• 0x43d28c FindNextFileA
• 0x43d290 FindFirstFileA
• 0x43d294 FlushFileBuffers
• 0x43d298 SetEnvironmentVariableA
• 0x43d29c FindClose
• 0x43d2a0 Sleep
• 0x43d2a4 CompareStringW
• 0x43d2a8 CompareStringA
• 0x43d2ac SetStdHandle
• 0x43d2b0 SetFilePointer
• 0x43d2b4 GetTimeZoneInformation
• 0x43d2b8 GetLocalTime
• 0x43d2bc GetStartupInfoA
• 0x43d2c0 GetCommandLineA
• 0x43d2c4 GetVersion
• 0x43d2c8 ExitProcess
• 0x43d2cc DebugBreak
• 0x43d2d0 GetStdHandle
• 0x43d2d4 WriteFile
• 0x43d2d8 InterlockedDecrement
• 0x43d2dc OutputDebugStringA
• 0x43d2e0 GetProcAddress
• 0x43d2e4 LoadLibraryA
• 0x43d2e8 InterlockedIncrement
• 0x43d2ec GetModuleFileNameA
• 0x43d2f0 TerminateProcess
• 0x43d2f4 GetCurrentProcess
• 0x43d2f8 UnhandledExceptionFilter
• 0x43d2fc FreeEnvironmentStringsA
• 0x43d300 FreeEnvironmentStringsW
• 0x43d304 WideCharToMultiByte
• 0x43d308 GetEnvironmentStrings
• 0x43d30c GetEnvironmentStringsW
• 0x43d310 SetHandleCount
• 0x43d314 GetFileType
• 0x43d318 HeapDestroy
• 0x43d31c HeapCreate
• 0x43d320 HeapFree
• 0x43d324 VirtualFree
• 0x43d328 RtlUnwind
• 0x43d32c SetConsoleCtrlHandler
• 0x43d330 IsBadWritePtr
• 0x43d334 IsBadReadPtr
• 0x43d338 HeapValidate
• 0x43d33c GetCPInfo
• 0x43d340 GetACP
• 0x43d344 GetOEMCP
• 0x43d348 HeapAlloc
• 0x43d34c VirtualAlloc
• 0x43d350 HeapReAlloc
• 0x43d354 LCMapStringA
• 0x43d358 LCMapStringW
• 0x43d35c GetStringTypeA
• 0x43d360 GetStringTypeW
• 0x43d364 CloseHandle
Library USER32.dll:
• 0x43d3c4 MessageBoxA
Library ADVAPI32.dll:
• 0x43d248 GetUserNameW
L!This program cannot be run in DOS mode.
`.rdata
@.data
.idata
@.reloc
UDSVW}
E_^[]UPSVW}
y_^[P;
]UTSVW}
MU;U}cE
E}^}3M
]U@SVW}
_^[@;U
]UDSVW}
_^[]UPSVW}
_^[]UDSVW}
_^[]UlSVW}
u,U;Uu
t\U;Uu
E_^[l;M
]UDSVW}
_^[]UpSVW}
EMMU3f
Q<UE8PE
MQxUEH|MU
M;M}-U
_^[p;hK
]U`SVW}
EMMU3f
Q<UE8PE
3_MQxUEH|MU
ME_^[]UD
]U@SVW}
_^[@;x?
jPMQj#
MMUR(:
EMMUR9
jPMQj#
MMUR(6
EMMUR5
]U|SVW}
_^[|;.3
]UHSVW}
_^[H;z)
]UHSVW}
E_^[H;E(
]UHSVW}
MuR`|C
9Us)E3
_^[H;m&
3EEEfE
jdTQhDB
MQh`pB
URh@pB
EPR ;$
MQPp;5$
MQPx;#
fUfUfEfEfMfMfE
-oje`[VQLG_^[
PLR\Pw
;}}LQ_R"
wuWhuB
E}tEMQ
(~~j<j
j<Qj^i
tAt2t$
PRSVWh
_^[ZX]
DDDDDDDDDDDDDD
GIt%t)
Gt/KuD$
GKu[^D$
8t3^[_
^[_UjhxB
_^[]U=C
@v)UR#
RPQRPQRPQREPM
t } u%=
B8t6t8t't
B^_[U=C
]UQ=0C
E]UQ=C
Ujmh {B
=tGjyh {B
EMMUREPj
UREPMU
PMQUR#
jdh8{B
EPMQUREPj
3%MQUREP
MU;U}eE8tXM
E}tXMQ
E}@}2M<C
]USVWUj
t.;t$$t(4v
VC20XC00U
]_^[]UL$
_^[]UQE
]U0SVWEE
j]h(~B
j^h(~B
E_^[]U,SVWEE
jZhD~B
j[hD~B
E_^[]Q=
3lhd~B
M$k<U(
M$k<U(
$EMQnX
E _^[]Uj
;t!h4B
$PMQlT
M;Mt!h
E_^[]Uj
]UQSVW
uCE PMQ
uCE PMQ
;Mt!hB
;Mt!hhB
_^[]Uj
EE_^[]UQ$B
E]UQSVWE
_^[]UQHB
E]UQSVWE
E_^[]U
3uNh|B
u:U REH
QURh$B
u:E PMQ
u/M Qh
RE PMQh
E_^[]@
H0_^[]U
A,+B,M
J0+H0U
E_^[]U
PM QhB
PM QhB
u_^[]U\SVWE
UB E=XB
EPMQhdB
u_^[]U4SVWEP
3_^[]UQSVW}
3u_^[]Uj
s{Uk0EXB
Mk0UEfALB
Ar;Zw2C
Qar;zw2C
G]U=lC
UE;Es%MU
MU;Us$EM#
MU;UuIC
U#TDU}
E}?} MU
UE;Ew]MA
UUE+EE
M;t U;u
tn} }2
,3]SVD$
ddIdd.wld3@
``C``5
fEfMQRq"
U tHE@t
RPRPu0RPQR9~
ERM+MM
fZfZPxQ
QtRxP)
=u(MQU
U3]UQ`C
EE]U]U0SVWEE
j]h(~B
j^h(~B
E_^[]U
MQUREPj
SVWe=dC
REPMQU
EPMQUREPM
EPMQh
QUREPh
SVWe=hC
3CMQURE
PMQURE
_^[]UWVu
DDDDDDDDDDDDDD
QU+RQU
E+]UQSVW}
_^[]UE
@]UQ=C
hj=h B
UREPjM
Mf3]UQE
M}-s#UE
|jyh,B
~VUREH
;Eu!MQ
SVWe=pC
$weeMME
$veeMME
3FUREPM
3"MQUREPMQU
E_^[]UQE
EE]UQ=lC
3]UQVE
3^]USVW}
_^[]%C
%Uopqr34&^',-.CDcd<=OP !#$QRS>EF/6?@ABZ[]`_XYlmn89:;wxyz{|}~I2NVabGHefjk7()*+015WghiTJKL\Mstuv
n2ltcr#MlnAabyrireltuAeDcyedFNAtimVaAplGiwro#Vmfanr3leodstuaeoirFLaSitbsreerGoeeeevntieoi#WoitAtunmoeldGrdsedHlLLa#er#FAieCtro#MllmGnonrlCFAtdDcyelIri#ke.#PAeGoed#drAebytert#aitAtuia#Ereab#yeenserGoeotA
dslFNFAnoRvro#ei#DeeeglvrsrelpnhGunosPe2srsN#sn#ai#tleiGiiGalGaenri#dteil#oitAlFAtvpGoaitgCtolSs#Cers#c3rPe2toaeeFAiiRF#FS#bl#briiFAnxlFCemDcyeeeeiy#LcrSn#aoe2pttrPedosi#c3xlHlreerF#deteeoAcoF#FFteiei#dseeerDtlGrTAtiDeiAeTh3aoertcIrsFtoseCedCtlWeealelzllolle
i.#etnnnocFelIrCedntlteeIrCe#Gi#etsn#ielnnp#etnApFAteoaewndIrOAtentttennlHl
i.#etnnnocFulIrCedntlteeIrCe#Pi#etsn#ielnnp#etnApFAteoaewndIrOAtentttennlHl
leeexthEuSlcA
l.e2lh3lsld
*t*B0_`2lwwP%Y29%Yw9u*PY`*PwmAVPX`*@dwPaiVVPXX`edwdvPYPwX`1AwPrduue9uAV4`*Yd%adwaew9 AuP`ilY@9wA&Pai::uAVdYA9%X`]AXY
bd:ael*nE::
CegsyeoeRlK
SaEgVeetuARelx
OKxgnEeeyRpeA
a2lv3ldidap.
DtlgeaAelVeReeu
CtygaeAeeKxRreE
\Java\jre-
gFsomeralPri
info_a
*9 YrdwP`FFFFFFFFFFFFFFFFF`2lwwP%YcPwXA9%`)l%
e.gteeixrde
rrr5u9?5OPu:cPwI@u:{XYdYX5OPu:cPwI@u:{<dV#l:X5OPu:cPwI@u:{
Y:IduA&dvPYduIV9vIYw{duA&dvPYduIV9vIYw{@aWFF{ Y:IX9uAXAuPYAXAvIV9v{<PdYwAVPuPd{JP:&P:Iy/yW{ Y:I4PXAvV9:4IV9v{4PXAvV9:4F{UC/V4 {
/Downs/HelpVer.hlp
Help.hlp
/Downs/Help.hlp
/Private/
Pfile.hlp
Y:I$@9XYIV9v{?wA:Y9u9!A{x.D8]isk?wA:Y9IuPda@9XYPwIV9v{y/EU/${Wd/FCyV$k Y:I wPP<AwAIYF/I9w?{l$FWyFExyUIv4 Y:{$yFU/Ck
jusched.
ew9?wdv1AuPX
Fi386\chkesp.c
The value of ESP was not properly saved across a function call. This is usually a result of calling a function declared with one calling convention with a function pointer declared with a different calling convention.
Assertion Failed
Warning
%s(%d) : %s
Assertion failed!
Assertion failed:
_CrtDbgReport: String too long or IO Error
Second Chance Assertion Failed: File %s, Line %d
wsprintfA
user32.dll
Microsoft Visual C++ Debug Library
Debug %s!
Program: %s%s%s%s%s%s%s%s%s%s%s
(Press Retry to debug the application)
Module:
File:
Line:
Expression:
For information on how your program can cause an assertion
failure, see the Visual C++ documentation on asserts.
<program name unknown>
dbgrpt.c
szUserMessage != NULL
stdenvp.c
stdargv.c
a_env.c
ioinit.c
runtime error
TLOSS error
SING error
DOMAIN error
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
abnormal program termination
- not enough space for environment
- not enough space for arguments
- floating point not loaded
Microsoft Visual C++ Runtime Library
Runtime Error!
Program:
format != NULL
sprintf.c
string != NULL
vsprintf.c
GetLastActivePopup
GetActiveWindow
MessageBoxA
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
tzset.c
Client
Ignore
Normal
Error: memory allocation: bad memory block type.
Invalid allocation size: %u bytes.
Client hook allocation failure.
Client hook allocation failure at file %hs line %d.
dbgheap.c
_CrtCheckMemory()
_pFirstBlock == pOldBlock
_pLastBlock == pOldBlock
fRealloc || (!fRealloc && pNewBlock == pOldBlock)
_BLOCK_TYPE(pOldBlock->nBlockUse)==_BLOCK_TYPE(nBlockUse)
pOldBlock->nLine == IGNORE_LINE && pOldBlock->lRequest == IGNORE_REQ
_CrtIsValidHeapPointer(pUserData)
Allocation too large or negative: %u bytes.
Client hook re-allocation failure.
Client hook re-allocation failure at file %hs line %d.
_pFirstBlock == pHead
_pLastBlock == pHead
pHead->nBlockUse == nBlockUse
pHead->nLine == IGNORE_LINE && pHead->lRequest == IGNORE_REQ
DAMAGE: after %hs block (#%d) at 0x%08X.
DAMAGE: before %hs block (#%d) at 0x%08X.
_BLOCK_TYPE_IS_VALID(pHead->nBlockUse)
Client hook free failure.
memory check error at 0x%08X = 0x%02X, should be 0x%02X.
%hs located at 0x%08X is %u bytes long.
%hs allocated at file %hs(%d).
DAMAGE: on top of Free block at 0x%08X.
DAMAGED
_heapchk fails with unknown return value!
_heapchk fails with _HEAPBADPTR.
_heapchk fails with _HEAPBADEND.
_heapchk fails with _HEAPBADNODE.
_heapchk fails with _HEAPBADBEGIN.
Bad memory block found at 0x%08X.
_CrtMemCheckPoint: NULL state pointer.
_CrtMemDifference: NULL state pointer.
Object dump complete.
crt block at 0x%08X, subtype %x, %u bytes long.
normal block at 0x%08X, %u bytes long.
client block at 0x%08X, subtype %x, %u bytes long.
{%ld}
%hs(%d) :
#File Error#(%d) :
Dumping objects ->
Data: <%s> %s
Detected memory leaks!
Total allocations: %ld bytes.
Largest number used: %ld bytes.
%ld bytes in %ld %hs Blocks.
("inconsistent IOB fields", stream->_ptr - stream->_base >= 0)
_flsbuf.c
str != NULL
`h````
ppxxxx
(null)
output.c
ch != _T('\0')
_getbuf.c
_file.c
wtombenv.c
osfinfo.c
a_cmp.c
cchCount1==0 && cchCount2==1 || cchCount1==1 && cchCount2==0
setenv.c
fclose.c
_freebuf.c
stream != NULL
aa3vd2apeJUt
a3d2peUt
htdocs
GetModuleHandleA
GetLastError
GetSystemTime
MultiByteToWideChar
GetLocaleInfoA
FindClose
FindNextFileA
FindFirstFileA
KERNEL32.dll
MessageBoxA
USER32.dll
GetUserNameW
ADVAPI32.dll
CoUninitialize
CoCreateInstance
CoInitialize
ole32.dll
GetTimeZoneInformation
GetLocalTime
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
SetConsoleCtrlHandler
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers
CloseHandle
gKKDDDDD3
gNNNNNNNNNNI3
tQQQQQQQQQQQQXXN8%
vTTTTTTTTTTTTTTXXXYYB+
xXXXXXXXXXXXXXXYYYYYYYYYL1
x]]]]]]]]]]]]]]]]]]]]]]]]]]F>
~d]]]]]]]]]]]]]]]]]]]]]]]]]]0
_kcccccccccccccccccccccccccc0
WkiiiiiiiiiiiiiiiiiiiiiiiiiiD
WpllllllllllllllllllllllllllD
[zooooooooooooooooooooooooooD
C}ssssssssssssssssssssssssssD
6||||||||||||||||||||||||||D;
5GaDS
wsssfV4"
n $:Ga{r^
!-AHhuH
hhI@ONMD5.10345678hhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh
hhhhhhhhhhhhhhhhhhhhhhhhhh
hhhhhhhhhhhhhhhhhhhhhh
hhhhhhhhhhhhhhhhhh
-/0000)
hhhhhhhhhhhhhh
;0333333330'
hhhhhhhhhhh
E66666666666666+
hhhhhhhhhh
>666666666666666660
hhhhhhhhhh
F@@@@@@@@@@@@@@@@@0
hhhhhhhhhh
I@@@@@@@@@@@@@@@@@0
hhhhhhhhhh
NGGGGGGGGGGGGGGGGG3
hhhhhhhhh
WGGGGGGGGGGGGGGGGG6
hhhhhhhhh
IQQQQQQQQQQQQQQQQQ60
hhhhhhhhh
7VVVVVVVVVVVVVVVVV=*
hhhhhhhhh
5VVVVVVVVVVVVVVVVV:M
hhhhhhhhh
<SSSSSSSSSSSSSSSSS;I
hhhhhhhh
"$^[YW]]]]]]]]]]]]]BI
hhhhhhhh
%.9`^WWWWWWWWWWBN
hhhhhhhh
OGG=1#
!`[[[[[[[[[EK%
hhhhhhhh
SQQQQQQQ
$f``^^^^^^>R(
hhhhhhhh
SVVVVVVVP
$4?ggfJT?
hhhhhhhh
YVVVVVVV[[W]8A#
hhhhhhhh
UXVVVVV[.
hhhhhhhhhh
`^YY\YH
hhhhhhhhhhhhh
hhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh?
808>8H8\8l8~888888
9#9,929I9P9]9d9q9x999999999999::::::
;!;1;;;B;L;V;];j;q;{;;;;;;;;;;;;;
<<<=/>R>v>}>>>>>>>>
L12!3-3Y3h3v3333333&4-494g4n4z4444444*515=5k5r5~555555
7Q7X7d7777777
8'8U8\8h8888888
9 9+9Y9`9l9999999
:#:/:]:d:p::::::: ;';3;a;h;t;;;;)=>===
>e>>>(?>?U?????
161B1h1t11111111222
3'363I3344
565B5h5t55555555666
7 7/7B778888
959o995:S:x::::::::!;-;3;<;M;;;
<?<^<[=y======
>">G>S>Y>b>>>>>>>>
?)?;?Z?
10[00a1:2W2
22222222
3'3:3G3M3U3
474[4b4m44
505E5W5i5z555555
6G6L6U6g7~7777
838888599a:;
< <2<F<U<\<w<<<<<R=|====^>d>|>
0&0K00
11Q22X333
444L4^5j55555
6)6;6L6Q6`6i6x666666666
788888889
:;;;;;;{<<<
=#=/=C====
>#>M>j>v>>>>>>
?I????
G0p0000
2_22222
3^3r3333)4444444
5_5}555555
7Z7~7777777
8X8_8q8x88
<"<(<.<4<:<@<F<L<R<<<<=======
>;>U>\>`>d>h>l>p>t>x>>>>>>:?E?`?g?l?p?t???????
0Z0`0d0h0l0O2Y2j222222293B3K3S3\3V5[5x5}555555555555
6!6Y6666
7A7\7l77777777
8888888888
9$9)9/9j999999 :=:j::::::::
; ;;;;;;;;
<M<<<<<
=)=5=P=`=l=======7>=>Z>s>>T???
000000F1S1Z1`1m1y111111111
2z222222
3$3>3U3l3333333
4 4'444=4f4s4(5<5|55555;6J6]6x66666666677@778::;;;;;;;Y<i<<<<<<G=h====== >>>>>>>>s???
0$000000&1+111G1N1g11111111111
2I22223333
4M4`4y44444444
5Z5k5555
6$6<9E9f9o96:?:`:i:;;;;;;;;;;
<!<)<5<<<<<<<<<<
=======">+>;>D>T>h>n>
>>>>>>>>>>'?@?H?U?^????????????????
030E0N0[0c0
0000000000000
1&1,141<1F1X1`1j1q11111111111
2$2C2I2Z2o2}22
3 3f3n333333333
4&464C4L4V4`4k4u4
444444444
5$5.585W5`5j5t5}5555
6$626L6Z6o6}6666
7 77777
8/888E8i8o8z88888888888888 999
:*:K:e:::::;;@;;;;;;;
<#<4<=<
>,>8>T>`>>>>>>A?F?w????
80D00000000000
181T1111
232P2Z2f2222222X3m3y33333
4[4g4444440565u55555
6 6%6N6X6d6666666!7j7
8$8i8u888#9/9e9q99!:q:v:{:::::::
;F;;;;;
=Q=U=Y=]=u====
>,>>>>_?????
2q2v22273h333
4J4444`5555S6e6j666&7N78
929999*:}:::::::::
;>;I;O;;;;;;
<?<R<u<<<<<<<<< =$=(=,=0=t=}======>>>>>!?x???????
N0]0r0000000
141T1k1r1w1}111111111666
7&7-787@7I7Y7g7s77777777777777
8.848=8E8X8a8888.9_9k999X=c=k============
>5>S>Z>>>I?
6666666666
7 7+747@7H7T7[7`7i7q7|777777777
#0/000111
3*414445V667
838d=h=l=p=t=x=|=================
> >$>(>?
1011172@2V2o2
3$353d33*414444E555m6t6666 7'717<7F777778869;9X9f9s9}9999999
:7:::';;;
<<<<<<<<<<
= =<=G=Z==
>0>>>>>>>>>
?%?,?0?4?8?<?@?D?H??????
00070<0@0D0a00000000000*1014181<111111
2 2U2o222222*3
494i4s444444
5>5G5c5l5y5
6!666?6K6T6b6k6y6
66666666
767H7k777777
8o88888/9h9999999 :,:D:x::::::);B;N;w;;;;;;;;
<D<P<\<o<<<<<<<<N=]====
>->E>p>>?
0:0e0{000000
1!1+151z1111
242@2`333v44U5[5c5q5w55555555
6+67666
7W7p777O8_88899I:^:p:::::::A;;;;;Q<d<<<<R=X=^=d=j=p=v=|======================
>$>*>0>6><>B>H>N>T>Z>`>f>l>r>x>~>
3 6::::l;t;|;;;;;;;;;;;;;;;;<<,=0=4=8=<=@>D>H>L>P>
p0x02222
x:\xxxxxx\xxxx\xxxxx\xxxx\xxxx\xxxxx\xxxxx\xx.pdb
bd:9eilhjlBAmqtprtJIuy|xz|RQ}ZYbajirqzybd:9eilhjlBAmqtprtJIuy|xz|RQ}ZYbajirqzy99f385l;AAn;@=tCIIvCHE|KQQ~KPMSYYSXU[aa[`]ciichekq21848k6k:9@<@s>sBAHDH{F{JIPLPNRQXTXVZY`\`^bacd538=
kl=;@E
stECHM
{|MKPU
USX]&'][`e./echm67mkpu>?usx}FG}{NOVW^_
a5fe8h8@i=nm@p@HqEvuHxHPyM~}PPXUXX`]``hehhpmppxuxx}
394e<><j;A<mDFDrCIDuLNLzKQL}TVTSYT\^\[a\dfdcid394e<><j;A<mDFDrCIDuLNLzKQL}TVTSYT\^\[a\dfdcidcd538=
kl=;@E
stECHM
{|MKPU
USX]&'][`e./echm67mkpu>?usx}FG}{NOVW^_
cd538=
kl=;@E
stECHM
{|MKPU
USX]&'][`e./echm67mkpu>?usx}FG}{NOVW^_
4b2fe9h
<j:nmAp
DrBvuIx
LzJ~}Q TRY'\Za/dbcd538=
kl=;@E
stECHM
{|MKPU
USX]&'][`e./echm67mkpu>?usx}FG}{NOVW^_
c529::<lk=:ABBDtsEBIJJL|{MJQRRTURYZZ\]Zabbdebijjlmjqrrturyzz|}z
b5e<5=<:j=mD=EDBrEuLEMLJzM}TMUTRU\U]\Z]d]edbelemljmtmutru|u}|z}}
c529::<lk=:ABBDtsEBIJJL|{MJQRRTURYZZ\]Zabbdebijjlmjqrrturyzz|}z
c529::<lk=:ABBDtsEBIJJL|{MJQRRTURYZZ\]Zabbdebijjlmjqrrturyzz|}z
9d3<gj=jAl;DorErItCLwzMzQ|KT
UYS\]a[deiclmq2fgg95lh:nooA=tpBvwwIE|xJ~
QMRYUZa]b4436e7k@<<;>m?sHDDCFuG{PLLKN}OXTTSVW`\\[^_hddcf65c;e>gm>=kCmFouFEsKuNw}NM{S}V
VU[^^]cffekn87d<=:l<@?lDEBtDHGtLMJ|LPO|TURTXW\]Z\`_debdhglmjl9165=f?iA9>=EnGqIAFEMvOyQINMU~WYQVU]_aY^]egiafemoqfe3hj;ginm;prCoqvuCxzKwy~}KS
S[[cckkss{{
fg3hjhk8no;prps@vwCxzx{H~
KPSX[`chkpsx{
8544h79<@=<<p?ADHEDDxGILPMLLOQTXUTTWY\`]\\_adheddgilac:94jl@ikBA<rtHqsJIDz|Py{RQLXZYT`ba\hjidprqlxzyt|
e39g=79@m;AoE?AHuCIwMGIP}KQ
UOQXSY]WY`[ae_ahcimgipkquoqxsy}wy{
22g34j8=::o;<r@EBBwCDzHMJJ
KLPURRSTX]ZZ[\`ebb24hih<j9:<pqpDrABDxyxLzIJLTQRT\YZ\dabd3875496m;@?=<A>uCHGEDIF}KPOMLQNSXWUTYV[`_]\a^chg93df8h=<A;ln@pEDICtvHxMLQK|~PUTYSX]\a[`edichmlq96975g7mA>A?=o?uIFIGEwG}QNQOM
OYVYWUWa^a_]_ifigegqc17:87j@k9?B@?rHsAGJHGzP{IORPOXQWZXW`Y_b`_hagjhgpiorpoxqwzxwy
8cg7<;;@@ko?DCCHHswGLKKPP{
OTSSXXW\[[``_dcchhglkkpbc85jh9>jk@=rpAFrsHEzxINz{PMQVXUY^`]afheinpmqvxuy~}1g:g:<6<9oBoBD>DAwJwJLFLI
RTNTQZZ\V\Ybbd^dae12<g67km9:Do>?suABLwFG{}IJT
NOQR\VWYZd^_ablfgijtnoqr|vwyz~
926<=96kA:>DEA>sIBFLMIF{QJNTUQNYRV\]YVaZ^dea^ibflmifq2cd8g8:m:kl@o@BuBstHwHJ}J{|P
PRRXXZZ``bbd926=:?8lA:>EBG@tIBFMJOH|QJNURWPYRV]Z_XaZ^ebg`ibfmjohqjnurwpyrv}z
774:4k7@??<B<s?HGGDJD{GPOOLRLOXWWTZTW`__\b\_hggdjdga4g;6g?mi<oC>oGuqDwKFwO}yL
WT[V_\c^gdkfolsnwt{v
|~453d<hj@<=;lDprHDECtLxzPLMK|TXTUS\`\][dhdecf33fei=8n;;nmqE@vCCvuyMH~KK~}UPSS]X[[e`ccmhkkupss}x{{
7gegej7k?omomr?sGwuwuzG{O
}OWW__gg1:;3=;<@9BC;ECDHAJKCMKLPIRSKUSTXQZ[S][\`Ybc[ecdha6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffiknb:c3=hj=jBk;EprErJsCMxzMzR{KUUZS]]b[eejcmmrkuuzs}}{
447::9j:<<?BBArBDDGJJIzJLLORRQRTTWZZYZ\\_bbabddgj5e3;;98h=m;CCA@pEuCKKIHxM}KSSQPUS[[YX][cca`eckk1ed546g:9ml=<>oBAutEDFwJI}|MLN
RQUTVZY]\^baf1cgg87
n9koo@?
vAswwHG
PO QXW'Y`_/ahg7ipo?qxwGy
358hg9>=;=@poAFECEHxwINMKMP
QVUSUXY^][]`afeceh6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn2e8g76g::m@o?>oBBuHwGFwJJ}P
RRXWVZZ`_^bb845d<9g>@<=lDAoFHDEtLIwNPLM|TQ
VXTU\Y^`\]dafhdelinbbh3fg8@jjp;no@HrrxCvwHPzzK~
PXSX`[`hchpkpxsx{6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikncc677g6kkk>??o>sssFGGwF{{{NOO
NVWWV^__^fggfnoonvwwv~
2g;ie=lk:oCqmEtsBwKyuM|{J
S}UR[]Zceb5377<99@=;??DAAHECGGLIIPMKOOTQQXUSWW\YY`][__daahecggle4fdg>?>m<nloFGFuDvtwNON}L~|
VWVT^_^\fgfdnonlvwvt~
11f4ef<;99n<mnDCAAvDuvLKII~L}~TSQQT\[YY\dca7bhej<k<?jpmrDsDGrxuzL{LOz}TTW\\_ddgl33338fk@;;;;@nsHCCCCHv{PKKKKP~XSSSSX`[[[[`hccc168igil<9>@qoqtDAFHywy|LINP
TQVX\Y^`da5873i;??=@?;qCGGEHGCyKOOMPOKSWWUXWS[__]`_[cggehgc95f<hh<hA=nDppDpIEvLxxLxQM~TTYU\\a]ddiellqc8:i59j
k@Bq=Ar
sHJyEIz
{PRMQ XZUY'`b]a/hjei7prmq?xzuyG}OW_
c2496:?kk:<A>BGssBDIFJO{{JLQNRWRTYVZ_Z\a^bgbdifjojlqnrwrtyvz
2dc7ig7@:lk?qo?HBtsGywGPJ|{O
OXRWW`Z__hb68f:;97?>@nBCA?GFHvJKIGONP~RSQOWVXZ[YW_^`bca_gfhjki74539>=i?<=;AFEqGDECINMyOLMKQVUWTUSY^]_\][afegdecinm6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn2c4f;:>8:k<nCBF@BsDvKJNHJ{L~SRVPRT[Z^XZ\cbf`bb1e<;h:<j9mDCpBDrAuLKxJLzI}TSRTQ\[Z\Ydcbdalkjlitsrtq|{z|y
6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn8:d:i7hk@BlBq?psHJtJyGx{PR|ROXZZW`bb_hjjg224e<8j@::<mD@rHBBDuLHzPJJL}TPXRRT\X`ZZ\d`hbbb1h7j:?mj9p?rBGurAxGzJO}zIORWQWZ_Y_bgagjoiorwqwz
3d6h459>;l>p<=AFCtFxDEINK|NLMQVSVTUY^[^\]afcf73e:6;i@?;mB>CqHGCuJFKyPOK}RNSXWSZV[`_[b^chgcjfk83hh66:8@;pp>>B@HCxxFFJHPKNNRPXSVVZX`[^^b`hcffjhb4:3597>j<B;=A?FrDJCEIGNzLRKMQOVTZSUYW^\b[]a_fdjceignlrkmqovtzsuyw~|{}
6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffiknd5f46:;@l=n<>BCHtEvDFJKP|M~LNRSXUTVZ[`]\^bchedfjkpmlnrsxutvz{}|~
5ce<:5;>=kmDB=CFEsuLJEKNM{}TRMSVU\ZU[^]db]cfelj714dj>6m?9<lrF>uGADtzNF}OIL|VNWQT^V_Y\f^gadnf343566><;<;=>>FDCDCEFFNLKLKMNNVTSTSUVV^\[\[]^^fdcdc994g=5==AA<oE=EEIIDwMEMMQQL
UMUUYYT]U]]aa\e]eeiidmemmq3:hdj;i9;BplrCqACJxtzKyIKR|SQSZ[Y[bcacj6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn1e;;478k9mCC<?@sAuKKDGH{I}SSLOPQ[[TWXYcc\_`a2d;eh5g<:lCmp=oDBtKuxEwLJ|S}M
TR[U\Zc]db53e797hm=;m?A?puECuGIGx}MK}OQOUSWYW][_a_ecgi41ddg968<9lloA>@DAttwIFHLI||
QNPTQYVX\Ya^`da7:ee;7gm?BmmC?ouGJuuKGw}OR}}SO
WZ[W_bc_gjkgfe73e9>inm?;mAFqvuGCuINy~}OK}QVWSY^_[afgcinokqvwsy~
6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn1bh8fg:m9jp@noBuArxHvwJ}IzP~
RQXZY`ba412hf:;7<9:pnBC?DABxvJKGLIJ~RSOTQRZ[W\YZbc_dab6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn5f767<<@=n?>?DDHEvGFGLLPM~ONOTTXUWVW\\`]_^_ddhegfg8123<9i7@9:;DAq?HABCLIyGPIJKTQOXQRS\YW`YZ[da_habcligf7d5:9<9n?l=BADAvGtEJILI~O|MRQTQWUZY\Y_]badagejiliomrqtqwuzy|y
c37g85iik;?o@=qqsCGwHEyy{KO
PMSWXU[_`]cghekopmswxu{
215:;hk<:9=BCpsDBAEJKx{LJIMRSTRQUZ[\ZY]bcdba77g7=gj@??o?EorHGGwGMwzPOO
XWWW]`___ehgggma969<k>miA>ADsFuqIFIL{N}yQNQTVYVY\^a^adfifilnqnqtvyvy|~~
2gge4kjm:oom<sruBwwuD{z}J
}LRTZ\bd35de;k>l;=lmCsFtCEtuK{N|KM|}SVSU[^[]cfceknkmsvsu{~{}
753hj97k?=;prA?sGECxzIG{OMKQOWUSYW_][a_gecig6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6:g48hl@>Bo<@ptHFJwDHx|PNR
LPXVZTX`^b\`hfjdh1bd<i>h@9jlDqFpHArtLyNxPIz|TVXQ\^`Ydfha5c:6efg>=kB>mnoFEsJFuvwNM{RN}~
VUZV^]b^fejf36h8;i<;;>p@CqDCCFxHKyLKKNPSTSSVX[\[[^`cdccf6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn1f495=9;9n<A=EACAvDIEMIKI~LQMUQSQTYU]Y[Y\a]eaca1fhi9f>k9npqAnFsAvxyIvN{I~Q~VQY^Yafaa87d7<i>i@?l?DqFqHGtGLyNyPO|OTVXWW\^`__dfhgglnpootvxww|~
186e6j?m9@>m>rGuAHFuFzO}IPN}NWQXVV_Y`^^gaa1hh45g<i9pp<=oDqAxxDEwLyILM
TQTU\Y\]dadelilmtqtu|y|}9b4gf>8@Aj<onF@HIrDwvNHPQzL
~VPXYT^X`a\f`hidnhpq3:7eg=>m;B?moEFuCJGuwMN}KRO}
UVSZW]^[b_efcjg6885hki<>@@=psqDFHHEx{yLNPPMTVXXU\^``]dfhhe9e8h7khiAm@p?spqIuHxG{xyQ}POYXWa`_ihgq6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn3d648:<8;l><@BD@CtFDHJLHK|NLPRTPSVTXZ\X[^\`bd`cfc9;8=i=:kAC@EqEBsIKHMyMJ{QSPUURY[X]]Zac`eebikhmmjqspuury{x}}z
87695h?8@?>A=pG@HGFIExOHPONQMWPXWVYU_X`_^a]g`hgfieoh1c884<=i9k@@<DEqAsHHDLMyI{PPLTUQXXT\]Y``\dea3d6h459>;l>p<=AFCtFxDEINK|NLMQVSVTUY^[^\]afcf6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn72f5g==l?:n=oEEtGBvEwMM|OJ~M
UUWRU]]_Z]eegbemm6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffiknd53e<<;:l=;mDDCBtECuLLKJ|MK}TTSRUS\\[Z][ddcbecllkjmkttsrus||{z}{
d53e<<;:l=;mDDCBtECuLLKJ|MK}TTSRUS\\[Z][ddcbecllkjmkttsrus||{z}{
6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn72f5g==l?:n=oEEtGBvEwMM|OJ~M
UUWRU]]_Z]eegbemm6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn72f5g==l?:n=oEEtGBvEwMM|OJ~M
UUWRU]]_Z]eegbemm6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn72f5g==l?:n=oEEtGBvEwMM|OJ~M
UUWRU]]_Z]eegbemme3c85g<8m;k@=oD@uCsHEwLH}K{PM
TPSXU\X[`]d`chelhkpmtpsxu|x{}
72f5g==l?:n=oEEtGBvEwMM|OJ~M
UUWRU]]_Z]eegbemm6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn72f5g==l?:n=oEEtGBvEwMM|OJ~M
UUWRU]]_Z]eegbemm6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn72f5g==l?:n=oEEtGBvEwMM|OJ~M
UUWRU]]_Z]eegbemm6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn72f5g==l?:n=oEEtGBvEwMM|OJ~M
UUWRU]]_Z]eegbemm6d9;e>lh>lACmFtpFtIKuN|xN|QS}VVY[^^acffikn
( n u l l )
( ( ( ( ( H
V S _ V E R S I O N _ I N F O
S t r i n g F i l e I n f o
0 0 0 0 0 4 b 0
C o m m e n t s
C o m p a n y N a m e
F i l e D e s c r i p t i o n
F i l e V e r s i o n
6 . 0 . 1 5 0 . 3
I n t e r n a l N a m e
j u s c h e d
L e g a l C o p y r i g h t
C o p y r i g h t
L e g a l T r a d e m a r k s
O r i g i n a l F i l e n a m e
j u s c h e d
P r i v a t e B u i l d
S u n M i c r o s y s t e m s , I n c .
P r o d u c t N a m e
J a v a ( T M ) P l a t f o r m S E 6 U 1 5
P r o d u c t V e r s i o n
6 . 0 . 1 5 0 . 3
S p e c i a l B u i l d
V a r F i l e I n f o
T r a n s l a t i o n
! ) ) ) ! ) 1 9 B ) B J 1 1 J R 9 R 9 Z c R Z J B Z J B k k c R J { Z R k Z { c
c { k c c k
! ) ) ) ! ) 1 9 ) B 1 1 J 9 9 Z R B Z J B k c J { k { Z
Hosts
| IP |
|---|
| 114.114.114.114 |
DNS
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| dns.msftncsi.com | A 131.107.255.255 | 131.107.255.255 |
| dns.msftncsi.com | AAAA fd3e:4f5a:5b81::1 | 131.107.255.255 |
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 56933 | 114.114.114.114 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
Sorry! No dropped files.
Sorry! No dropped buffers.