1.4
低危

21deef7b9972767ca9524a2e3b31d979c36f6834dbaf2316267fe78273426624

21deef7b9972767ca9524a2e3b31d979c36f6834dbaf2316267fe78273426624.exe

分析耗时

195s

最近分析

363天前

文件大小

153.9KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN WORM
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.71
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:WormX-gen [Wrm] 20200708 18.4.3895.0
Baidu None 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20200708 2013.8.14.323
McAfee GenericRXKN-BX!E06B6AC52DA8 20200708 6.0.6.653
Tencent Malware.Win32.Gencirc.10ba42cd 20200708 1.0.0.1
行为判定
动态指标
该二进制文件可能包含加密或压缩数据,表明使用了打包工具 (2 个事件)
section {'name': 'UPX1', 'virtual_address': '0x00012000', 'virtual_size': '0x00009000', 'size_of_data': '0x00009200', 'entropy': 7.72403245865094} entropy 7.72403245865094 description 发现高熵的节
entropy 0.33181818181818185 description 此PE文件的整体熵值较高
可执行文件使用UPX压缩 (1 个事件)
section UPX1 description 节名称指示UPX
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
文件已被 VirusTotal 上 56 个反病毒引擎识别为恶意 (50 out of 56 个事件)
ALYac Generic.Malware.SP!V!Pk!prn.796542BA
APEX Malicious
AVG Win32:WormX-gen [Wrm]
Acronis suspicious
Ad-Aware Generic.Malware.SP!V!Pk!prn.796542BA
AhnLab-V3 Worm/Win32.Agent.R336849
Antiy-AVL Worm/Win32.Agent.cp
Arcabit Generic.Malware.SP!V!Pk!prn.DC277EBA
Avast Win32:WormX-gen [Wrm]
Avira TR/Dropper.Gen
BitDefender Generic.Malware.SP!V!Pk!prn.796542BA
BitDefenderTheta AI:Packer.FE964C2B1E
Bkav W32.HfsAutoB.
ClamAV Win.Worm.SillyWNSE-7784290-0
Comodo Worm.Win32.Agent.CP@42tt
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.52da81
Cylance Unsafe
Cynet Malicious (score: 100)
Cyren W32/Agent.BTR.gen!Eldorado
DrWeb Win32.HLLW.Siggen.1607
ESET-NOD32 a variant of Win32/Agent.CP
Emsisoft Generic.Malware.SP!V!Pk!prn.796542BA (B)
Endgame malicious (high confidence)
F-Prot W32/Agent.BTR.gen!Eldorado
F-Secure Trojan.TR/Dropper.Gen
FireEye Generic.mg.e06b6ac52da81fe4
Fortinet W32/Agent.CP!worm
GData Generic.Malware.SP!V!Pk!prn.796542BA
Ikarus Worm.Win32.Agent
Invincea heuristic
Jiangmin Worm.Agent.ws
K7AntiVirus Trojan ( 0051918e1 )
K7GW Trojan ( 0051918e1 )
Kaspersky Worm.Win32.Agent.cp
MAX malware (ai score=80)
Malwarebytes Trojan.MalPack.PES
McAfee GenericRXKN-BX!E06B6AC52DA8
MicroWorld-eScan Generic.Malware.SP!V!Pk!prn.796542BA
Microsoft Worm:Win32/Sfone
NANO-Antivirus Trojan.Win32.Agent.hakuu
Panda Generic Suspicious
Qihoo-360 HEUR/QVM18.1.6BCA.Malware.Gen
Rising Worm.Agent!1.BDD2 (TFE:dGZlOgEJ8UxTxnpG/w)
Sangfor Malware
SentinelOne DFI - Malicious PE
Sophos Troj/Agent-AGQR
Symantec W32.SillyWNSE
Tencent Malware.Win32.Gencirc.10ba42cd
Trapmine malicious.high.ml.score
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2006-03-03 01:50:37

PE Imphash

bc5994e55cbe4fadd0cc6ce15d753e0a

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.jxmnr 0x00001000 0x00011000 0x00011200 4.895677616276734
UPX1 0x00012000 0x00009000 0x00009200 7.72403245865094
.exjvk 0x0001b000 0x00001000 0x00001200 0.729007578086693
.lpkez 0x0001c000 0x00001000 0x00000200 3.9638687291035044

Imports

Library ADVAPI32.dll:
0x41b08c RegCloseKey
Library KERNEL32.DLL:
0x41b094 LoadLibraryA
0x41b098 ExitProcess
0x41b09c GetProcAddress
0x41b0a0 VirtualProtect
Library MPR.dll:
0x41b0a8 WNetOpenEnumA
Library SHELL32.dll:
0x41b0b0 ShellExecuteA
Library USER32.dll:
0x41b0b8 EnumWindows
Library WS2_32.dll:
0x41b0c0 gethostbyaddr

tK+|&u@
g@lCk(j?%`)
.jxmnr
.exjvk
.lpkez
MnwPGuK@A}
7{E^`N
jP}YoH3?
.3D wL
-@H]X?
Ur`qe!
m[FSR`$#y
a\e5co
=LKOtR
]Z R0Ge0
ggBR!'$(%duD'b
*i+h [h]
Qt@\ZDDGK
]I#[f!BTZ)=P1ZLM]\U\v+&+
;l?Y7cRf
^pS&_h4!&A9r
jXZGD;HT{
M)N^WMVh>d
XGwpM>;}H
!j.([xQ
%`]!*'W1
T.m1QGNm'
[X/>Y!
govNZ81
s)tIKt
`82p3Wi#\:
?t>Yoe2[R-I-(\
'MRr/ES
2fuv|r!l
> YV #
YN 5%vf+
@`>=j:<$f
|jW3?S]
^nTEJs
[RPk|.=}Qi$cyYL
.W\rz!(N.Ab!x<]
^'~?(#P
ou80y\\=
IT:b"L
o3RjC+MS
bpFhMV
mdxjSkVk
O!DH!w
a6wv)M1
BMT@y83tV,L
xUD;OvtW?
qw|0*aM
5;-bvI`
./ksF6x
}J@}Ylc`Y
DV4WEfH
["RN,vS>^6} N
)@>2La&->U
IYbI).A[o
)%cBp"
f1Y7RH
U!2[7|f
vNtc{y3\
W>qshVU
7d"5Vwq'A
oaG,*
L1XGq6r6lZPc
T7YNI].-yB
p:AY8M
COtZq1
Aq#|EA
Inh[7P
";hTz7L
WF"!lO
A0Nc,c
CE}y`5VVQ
o:Y[J}:&gb
4^fd;y
XtnpiwP:g
:4n-G<
Z 1lOJ
fYYzFIcH z.
z=Z$7P
zBCAfP
%JPb"I/ww(
mt@=u#M'JTI
&X^IL=v"y
[7]ra,}5U
X\534V
,GrR>8g%C8
,BD4q#x
Yi\)~U
hwqE".
n-1#2 k
_Iw3N$
5J?c] ||3VzQKe]
^uKkSd)Y/g
Wdt'h;
x~L`MOG)A)B
336P^\1~s\G
;M'pO3
tS3%2/z~e=HW\}
O-Wg9aK
3*+&)Um
wj)WU?0
6gWjq<".
Gz1LGtx
0`t]lb\
-%V"wz}zg|D
r\lwGF2$n
,P<`.9
/(`_s4&&4Gecs
~aw%"VO2x<#*R/t1
B|qWre(4>'
!_nY1Jg0
fa>j!?
cI6a/p
V\f-1rJA
ZZrzM_AeI8y`
Z&BR@'
OCQ%oPRmGizKTG;mt0
BrauYlP
?:kRz'R'
j#??6Zp
),)HUl
:z"[r&B$
Q\8Gwm[v2djdyB
^b*)C?K^
F1ZW_-x
KembR+
:W,Y2E_
i1!2&z
e95/W@>
00L!=W0
?Q~BUQ7ZQ
^>9]nr
[V<m`~
=_U,h`>
'HBIY$6+28)5##1OXW
l/{Fku
pioJ%JS--J
;]N%+%
i>lyS
R:'9g g
AAI<[QNDGR
C0*::}<(VKS
#n1^PT
D?9sU)
~{m5-apB\J@l
*"'p5Z[_
^}b#w[
2}F#WIa
`ua8j-
yH=1qgzl
h3YE/8
AbJk6]
pJS?9:#f/
hhrolyfRoL#R6l7~O"
FGt3pYYs
qT;UA6
t&#~HgJt(}
g~G.gY
]+R$8"{
GQqp+4sCq
))Oq([iP
`$|.w;
i^Rr~q0?
&_r70#
1 Yf`@jANqF
^&yV4uSs
;Z.23)Jy)3%]FX
m8GktKuF))d
LQe1S*|
_+p Rsd
WXU:3by
Y5{=hWtBr
;X7@ZE<(w/A
G[h#>X
i7#Ozu
pEC"\)j<9jEz
_-hRB5
>MJ#z_0>z
'MdtE5
s1\%F}-YkH}y
yX9r/z
mt?[)m
.&Mw3O
uG32f]
7z5s).
.Uh;Q]
/Tpab1
!e^D"HyR
T&'`G
3mtWpS
1A`9"2
+ZqoP*
ED`#bJ<
^;<];y
4Y =@p[&7Y
_~sw6w)~
)WTo!~
KX/fn()6P[\
spTW|y
M1)ADB_uf`=zi
/{v.>mN
.EyY(PP
s>9yaY7eV1
5maiy/
B2yAiZ
!Z1'_:
274bY}D2
5M}g$O
|wu47}Y
6n+xbJ
?~|2f+#fP\`M*YE
1gN0DN
k~82E#1
f~2`HrE5-
Z YhZu>u+\2o33&H
p]HY*An
|{R_8+
qM?yk:^3:Vsw4
Y'P `L>
np49unH,
GXjqo=\E
!sT)L uP8
!@m<|@Pu9S
-bBBFU
v[ncH3
Ok#)o),|
)O2=5Y_
_~8KNWN
9Mf;H5HYTH96
"[n3xQ(*z
6@TM26Uy
D+'^w}
LlTe[k(Q@|LLk
V/V>LR
21PA;63|
Is'(Ga
+E]at
mJSjCn
Wq5qPj!
M>$n1Q
Dm\[Kqq=
={ [),-
b9nbkejx"KQ2R&Z
[W"EosjM
8bfzyT
Kb'~c#aM
Fe]:CQ
8Z!Q7c
5NTl@P3
{:AV[L\k@7
Q(gFs#j
<'r(Uh/):|^o^
'{@K G
ELwt+t%
}40%yO
iow>M|c@d
aH_uI!
?UR1f~
WlhH4#l
;eS_*c9`%
Z#A"[yU]8&
>hJ(kk
[glE_YM<[
bfE5b5
k^}ExJHM
G|H,4>H=[C2xONI
6FA3;e
`:F2=.f~
Atc5/[n
|0~PCYAq
":hDF `=Mfl_B
vg^V7vg
vzg}&+_$%m/riv6
*B~%mt2#XU(
QK/*cF
/d:1N(mi*
`G{a|$pvs6C]
kMClJ)B
dFWu%eDVd0!Oug
ES[Lmy
Fw{AUSqu,OG
-M7@;)&F
D*[g9<)NSO
uw6&/3O
VO*E'|9>
E5_(Dy
-}#K5g
.l\9XX7
"g@|(QURTEL
(hXJUPEy#[
c"$alu
TT>z&;WUl
]Sn_sm(~dcYawm
f7`7%q)Os
UEqP&|*yDQ?fu|
RplX]P
Ab4uzHnL)D
ygJF6u
GgYJ|mP
$yERJ@k
7W@_)s
B>Qf6oeP!
5,KwA`K
nJ_[zTz,B.W s&
='G$/V3:
d:R?6<q;
|t-WOO
H_*a6d
K d{ 5wqaq/
~Aa)}]Mp|Vl
7j6~"C
'P&{w2r4
<?-?1]
%!*>(E
A# uzUG
QLm,dn~Q
S^T*Br}6O4MTP
DP?%H6m#
cf8uT>-=`
CD]] 0
BUrX6QFK6
:=jyn[X
>qFD=IL3dA
%iYr;i`U
Bh.v<cssU
R hw'U
9(P&4)v
!XNOx!M7
2QBqm]]
w3Qp*]
&sqL/R
S4W2J{;%?[9
bykTb.
2A0dY.gMmj
`H?[Zw
/tl~|x
Cq*%0Zo 8F
an CnMUY
LgP)a:
ZEGd@L#
h!U)-9
L?LY#WMZ
mr+fr~
D1:|six*
\t~M22bPGq^T
S/:s}PB7~z_
K_vPa"
x\S%+\
Z>2l&O_
[&nA7|'I
&)/ GYwKYlw
L00JU;
dA1UvY
YHa.eKnd1O9
:K|sIAo
lO=qnS
VtxhZE
>7[Y:`7
ztd>;_
RU9~:T
/w-/Cu]O2Q
YH#K=81
l:.%J*
DsjpM!.:tw6N
;\LnM>f\
8u1| ['AAG^ lG
hE-rWc%
g'CuHB
4M# ?~XC
U'x`rTH^5
q6+iiNj
pu_FoO_)Z
!2Po8C\Bz"F!\O
(yTk,9Wb\R
`W *S>
/q&!dj6
1=g|Nr
9Vm"z^Ky
p:/e)M
,@.&#aZM
"3/"t,D
/2n@"x
sVr! N
:y8j/KM}
M9+v1U%
JkZ4JmN|Ue
lM00]T2#V
LmE]_OB
2i:~x0
yDS+Kr
";!)R}N
9_/G h$ |_jU%;r
V;9=W+Ng{
/l'RoXA~js8
qgQmt HAY*)I{$xN~
H`b8UvA9
9|~6^ZMR$y
]Q| ajP
U6/]$i
%ujTBG/`P
-T2?2=ZK; GE
>8<(6ag/ImQs
j}v@h'
Lkx:X1@\
,o'd]X
Org8Ap3
/8#nQ[
j.%eDk$o
?!5@2E
C+02cd
y0Go*=&aZ0m#
q&%C0z:
Lf#A`Pw
0HmLtm
)yOS3d-<
X`SP$^
&H&#l@t7.dl0>
.O=I:"c
562:Qq
9F<(d<
s%249XA5`;
V2^'~c
5Wq Y'
5bcl8:z
~3-[8K\$c
@[H~0 }s
R2'X]J
$53Wws
D1e*xsE1;$5BP
Y_w{!
Tg<p>T)k
gX~@3Ne
wRIJNZ
F03EtToso2{p,GHa
1wCq%iz I|
P]he{Z
*sH)c#;e>=
Z8Es0/
,zMrV!?u
k#8"="
|S'hUe4> :
KnR%1z+Qy|_g
=d"I6* r"PJ}TI
$<"@>a
ae7\nVi
_o:Z4?
VPGF%Kg`QO
VtkV!*
+}-8h,A>Q
>M'q^c_0;m
Gd9{5j
+}p=P~@
;SOjkz
iI%&eXFshLr"
F=TE%/
.5M~uU^MU$c}k
syZ_7S+eDRtz
Urq-yzffhI/
:kOn[e)
p./mj&;y
crHy<o.
6/1ba>K
I\z^4tD`"aE9L
4Smlu+B+
J%G^>/7
yu`Rv!l9;
`'q%gCZf|
?FcMq.>a.7Ob/YkA
.sP)"BwL
&s$-`N
Ay>49T
4<>kW|_Q^F>
tZ[6`L}53_
Wq Ft~
Ai(r&)!=
u%trVjc1
3E,6Q\$7
tT}"<r
=9TW +qA
'(6FB6
N#MT"z4U
U> 6IK
%leb.W
IgXuQ$OiYq
m.'UM;oKnrP]
m%=,_/0:0C
yE~& .
Dj<@DZ#
:J]Rlg{Z
T=]14!@
VkkFT
Hw>95ve
('J%<s
Sk`LbpI./i
IWWUR34~-
M4KHJH
8Hxdtne%
~srH="=g
,+%>Y ^)YS-yz+
IL#s\x k
PDYC3\
T<c-6>L"}g}
8}!9Ea
5)R&+D
&O^8A_
,^_w\+#7I7
j@y%zLI4
iT,qlK
h~53FcX/ZQycp
~|(=z|
6Y-.qW
w4w3dw
(RI{a"j,Wa
*Nrp2#rQ~U
~ZI. ?x
"?RgLFrrMtBk2u
PPSBu%q
"AfT3S
cu=c.7[n
$M?vMe
+d!Y)B
6T7Ig(
jC7;I\
oIV!Zd
<@D5\o/
6bg9Q1z
eZC}_%
Sy5jPAww+
k8^<z4R|PQ
8,AKO,
bhnt7i(}ENj
FON}t j.Vr]
]uZ'{gJ
+X_)xUf
e'9S]xwm:
LU`]i:'
6d:Z`
050ad+
./^0VKAI
cJlc^S:
Oh,>4!
Pg[@[Y7
-A&'\6xG&
P(}%Pw
rY,Pou:)7D9;OS
{E0yLKA^7+
I,}CE|y
>2w79.}8n{/q.
2I/|n
d':%T%m%
r2!AMg
i^Q-KB#
+&0/"7dj
a,I&e7
V)q8h9
<rlJxL
uW^,75"lQcr@u
<$L"_*
,bRl<r]xP6hu#w
3djFy\
j"r9Q)]R5g}*]
<gN"I>]g
2dH!Xt,
zd'3CIeKg
f4oR&E^
f!"M.e0!2lq_%#0/"WE%$A'h.
I>cF?,
QNH/yJF3I
[@W*%6":}
qv;8X)-1gJ(
Zv$Lq$
5P7=CQG}
n6)v -
gj/.]VV'T;G
P>P!*z
&/"21J
1a#0:e:
W6u_G*
iH kjw
2)zjMeei
?hV*Z*
:sNmW
KC`ND^jo
(BA~U/Y/
4;9fLM"KlJ
.C(X-q
.xb``|-
C)KkoG
KA?a-v
|Jza|YP.%aS
LYA8nPOmK1<=
m>x2Bei
#iRi0*
C- 47h8;
$)w:A-^
F]/Up1
\J!_*hn,+cdt!'n
-IgX,~y^
WR{=loU
1>\C7C
eN!'0"n
q|>q+6
L3I#\FI
lK;e>ls]@w9mXe>~QF
i2:IB,:
^ynh*b
?!?P7}
H*'td"V
-_IpV;
QA-WXql
$-E!Q@
awoBr\
Vl<5@@
VJv%$(h&L-7Lc
rS<bx,U
b3DlUF yT~
|L_web`Z
|=Kmxd
srVDoRi5y%X>1p-<x7~>feH
Ni$&IdB/n:
c&"!nOk
"jEmC!
x6DIYK%+
2E"8/"K"d=hx
)X"sD:cY?
FlP-HYJ
 5%Mzb0o
TF!!HKzN'
\.EGRO
IuwJXQ
7g39|v.~G
$1P9uFFSh1w
UWVS|$
t$dD$\
T$L1;\$L
t$t#t$lD$`T$x
D$t#D$hl$x
D$t+D$\$
D$@d$@L$@
9s#D$H
t".)D$H)
T$8L$PL$xf
D$\l$TD$X1|$`
D$`L$D
9s`)L$4|$4
t$4D$H|$t
D$`D$t+D$\D
*BT$t1
l$8f))
D$T&))
T$TD$PT$PL$XL$Tl$\D$\l$X1|$`
9s/D$H
9s;D$H
t$(Nt$(uL$0
T$,|$`
l$$Ml$$uP
)D$H)
$L$ d$
p4$Ft$\tYL$
9l$\w_$
BD$tIt
GPGWHU
XPTPSWXaD$j
U%z?@e`@
ADVAPI32.dll
KERNEL32.DLL
MPR.dll
SHELL32.dll
USER32.dll
WS2_32.dll
RegCloseKey
ExitProcess
GetProcAddress
LoadLibraryA
VirtualProtect
WNetOpenEnumA
ShellExecuteA
EnumWindows
Y<9O_V4#
,:@>" :I
7&)"DG5D
E+4,=CJ2:$@/">?<$D
@%0?&6
]]*-0S&
!0O h|
|(/.c;yT9'
(p&=y,\?
8\2H##
Y'K .O
%;._f*;_<
:[!>@'T
di07N?
w30{&eY<
"B0.r/
6#=x;$t*
5i%f2i
0 1h.!WNY<O
8T2@/
*nf#H\
1!;Ni'};
`!?,U8
M}G7Ty
zCm8*$6E4
?Lu01>19&#<
;21&B[
/$1$3(
as2P?'u
1A~{2B0
Zp?2C
}a;A)c=g
'%4B>r
C/$.,#y6I
39>' U&{
1E=)0nC0$Ww
"gu=++
w50>Q0{
/eR?;c",<W2
jI,5"'
r!)/1'U&3|5X
N>UE8~0/&X
5@.4623
.{Z=l"=
/N1\l>
3'8Y5LJe
o$^'%-T~X
5&[U(*p<
,E.G2B3)E&a\
D5m1(@N
J,K,S$
$aK%0E?/N+
L/i*4d(\582?
L9{%f@5WY%S
c0n (=k
&8kH96(>Gn
eK:/T+
~."+1vEQL4p>.
|1v&=)N^2
]~L,q,qK4
%%qAX;4G
F/*#w"
~)Xz+}!.
7Z'f!%
!c"VL<7O'
8$).;*)
2@;)Q/
B%'w4th
Sq$n#4[?.
.[4:B5c?
kkr'*=#s8
6V0Em!j
x8Y.gw
Wf,^<Tf
6!i3};>
0'* cZ."NF?
q<+A::
/R;]W97p
L=TH-=
q!%/w*
#!{,U7
zj_-uz
!>Uc_Vz)5Pq
A?o1KA
OH"3*YI2l=
D-?&+.
r/.$7&.
C+${(Cj 5@,A
9a.8<
)ZF7$Q
>d=P?WRj
>)y8"o
8g)1;o(
2:>VFm.
aD?#/PV
;tX/=x
$5L{:j
.m|K:fR
B4Be"iG
|,'1sG
^\;M68(e
@,L%E_
s<0t(
k!7**<T
C[eC"c
s1a2Gq
w#8)t+
bPv<06&(j*
"~&Q0Og
9"?Jw8lv<+
#DN.9*
NrW3q6bs,9P
y:&d99:
s \#Mz
y,'I4'
Hj 73.}
<@e+@y
U+"Uz5-)@
4:QhC8
v7?:.q
|T#3v9'
F#n3/=
~C.-9o),7%
Yh?4$q
w$p4b
)-tw+2u/
>'p-<13$+
$/&Sv,V@n0-
Z1KE!
4?5t<M
EQ<2*q`
[xT?rP
B7+'#.Z
GsR90><n
.g{(A/
(n@'{6
wQ6fa)=
x-5&,'iWM!],X>5|
_?)R7=p7
6y?:*]T
!j /=(
5x/zO)T
4T6OK/N,
R=4k8t
S)'ZK2o
8P$7V5&J
w+$`8GtH;B
.7N \/(
#I'+c,l
.Q1i`{=
3WV2:z
`: `2+
Ez7|!x+>VV
h3D~"}(
Q$%o+R
].92v317
7[/F=`Ip
(q7#F!O#
-#1!4F$]*")
Z:_1#+!U
"+ME8J&
Em%1$#o/
N3(q<3
L-C5Z[
V:?=a $
m28<@>fk3
+'*1EC]0>%4#!
xVL:=M9(
,+.2g}a n+>{
%QcV=T7/r?K
#=w'{
=]m$,(
v0D66t-uh&3+$
A$+x(
1?^'&6l!=oq
fI62<l4&`+0
g'4U1-SI
oZt3$$5Mh
(-%"2)+
H6[kP98Z
>h#?"
6H#{]
|y7I9v
<21/l,
u.J5-,ir/n
c6(;:=3
+V>(=@
Y!D8$6 G$q
$NCY&
b!=_}0ll*x
w;;#m 0
c2.E=sI!f)
6<)2=:)n$w1(=
]X8x`=
i{]%Q=1H
,?:4K:~
/Q:&/+i
x;'/h!Q
2DI(#
9=mv,v*
55\8*~
al.?"!W
L3`x?
\.-#o0
?$?j:;t
&^+~4Hu
*L,SC*
)Xx%7Z;+E08d=dw
wjw/n=1q6
m+g%o2v
b>'Y;:|.Q^
RU>}9,
q5=-|
A>xs3{
uY$m4
3p0V!/?&
59J'5f?
,:Z%l!
#'f,o=
Oq,=>_
=N3Jb0
V.Q7u{
"+j-#M=M
\\*M<XV-
44,&\$1%
6*'*vk0,
!,|'R1Pl
W`8v8q8Fh#>
Dj$/+$\
Ni"YE*zc:N)
Up?b2+2-
J%Tz/t
@w1C7/*
(:[2y/o-
9{(8qJ1!
0D4RH(,
W/^,d%-
2X2P =nc>U?9j
D P?rf8
W$`fL/
4VQ<_*
&^,U;(
%HL#M!
jS=C(;.f}(N+
I,+*#t
<E9;8RP
=l 3cN1td
)7p$|6w
Wp3>>w&(56e!%x0
7$"veg9t
%i48|QI
N&")M$gB
E?Qd0n@;W;
_K;sS2.
`*q* ~
b.?G=h
(o!z}!Oa
923yaO
*0+G=I
X6)9;o|
^B-u)y3
{!25V=,9Z
3? c8I
D53?S*
f$@?(71%)i
^&(z>;%
-#1U4f
{F3@T(W
/5:',wAe:>
#/U7+6W*t
4lh'B#
YZ&;0
QC;"0Oe
B1?(F'~
b9%-]R
> *'Q-
"8!')L
:a]:rq&a3Z7:L-@f')
&$r=%-
: 26+M9i
(u"iN8mx
f0@+kx.,
/\+;T$
{oN)=
;8%|{7w
xx-Q&:4
~) 's3
*/$/M74
_Mj;J
uC0xN:
og4Pv;
>a/%*7K8g
r} G+5 U
c!7^|/
.k9CG7)
791w>n
&o3 W!
GD<jU
>Q;xbc
Q_$$>'8R
]T=f9'hu
):AF(p<:b
jJ'/X&4;Y{2$
9J ;aE3F
v\)PFp _.z
<0!y<>
I3~FI'
V A+7u
97?\';
m5*+Z0+7^
h&&-#M
.4'8,63
>#?=**
,>8f~#[
^#TQ*c
(IT={7~5
6p%FP7,
FC8]-&:N
+5x!.2q
Q,=o~&
9;25:
%#!/w&~c<l8D#_
=qH;C8YDt
+%?uB
`y2-Z6*
\j)P@?)/X
?d6&*+,0OK
%6$O-9
Ac<^T>M
@UV5K):Z,Vh0K
r%;+8[9a-
H3{ t\
Z2Sb&8e
+<0c4: W'
xl{7/rp)j-
pW,p'p
YP1S8.-[
UT2Q25:[
3; [S6
7>wF5(
~77ql;
$O=uFA5P%?
JA2ML!%V
%ar -=5Y$6%
7K9Zk`
2>)[6s
:K&,{[
h2<u>I
(/S?*^4*
sMO3,`5
.>v6pT6x
1",#4{
.r+nnV
2?)p1=&>L9
.*/:R>!u
6P,D=
;(w9`i=
DP"oY4
&Q?Z`)]
4;%2o3<+
SPe!*+7[S
C;7&$ 5
#Bc!Ev2+|
ceW#<B
W7<0(*
T[%=zS
5&=<?7(
o=j~%g
S) Z46)
7%59&
)+q=i79nS-
6m<DB'
V.!lL2
P:5UYM
us$VI<!?
U+:27;:J`?
AI/&o-<
BM1&a?_
R>R7t3<"
M'D3045&'dn
?g-.'s96
?J<jK"K/{
lJ+*(]
<8xc9=7
4>:( a
4)pV?*
(,;.l?
Yhc0zs
;q)12hd:u
?Om5-"'&
+\9o,O4b
4sS/y7
765C"A8!@
1a-e:t0
m+0^*
1[\=pc
H/?Sw>L2M
*q%c4&v
I4z;9aM+Ib)F4E'<-z*G
%0:8?L
E+=ga
%W(6Z/cG2xF
J1vJ8]?"<
2,k},Ft9
*s;Nu,Y1
A1yO.u*6.&3
H+:;.(
[+md0?8+`q>L$a
7d8[;BU
#*>0'=
1v"nW9,!:
@7'k$u,8
W'j] , >
|#7|#j
8;vG>]67,
Qd/::+
I*Tl0{
+};3|(55X9*
<Y2z/M
ja<_U7
MIT8K'#'
'Y"+A'x
o *R@;8
^d<7m#$
-&0It"&D
H;/kF)
=O$`<<s<s9
v=m&0;{p2Z,
W1i-q-
g}8$1^U>:c)'
,x*/a:m&9z
&:<M*D
>Q"Tr:Q4
\)-j >
5n/"0w
U=1bb%Y0
`"=qy*l>
?0.~6p<r&}.5k
9m&E[",?]o
~.#Sn(
%\x3y?X$f
-W/NzJ
#^,9]c-
-?t7[9.
H<SE9.
Lf;39*,=%y:
4mB#hP2c
rL;CtF(<
BD.7|j!<
;889;mL
- Z<G8
'E'f<6G
E@=-$0do
8H2e_%
*i6w3 ^)8
g#\c*(.<#
*k)\v=h%1
F+|]N
2|$!w^
o5,~K"
3`Gj!U
$-pK7Z
9205H6
"=bE9b
.^)9Ce
6/&j'M{1
VH;w1)?b2
x)'#n8Bq
2&%r/H
a7ZF*m
7=3@}C
k1:$Wi
q8g#s%\
6YQ#;<
,4>R9b
4>]#!=
%/$i?a'
Y11 Fh
t-E-3u
9:d+)h'h
d$5:$DS
,4W8]^
bU;OtO
0AE28=$
#]!+%V6-
m&gM82!
<>a0Hi"
o,M%m/.
/Z3&0o0;
Z7>.?M
7rk?84I
0 ty*'+2^;.
o>&m68j
?>N2>^
dE"$r7:%8
#e2e^
{;aE);
m/]a)F,:Y
0}$R59m\
z4,J!D56
`n6>T]
y_-414K+&
oag"\!
^<CGz
Z`'a&$a/>
(5"*-[B.*#D
=0?s<H?!
:86E0:i
?9{&0Pc
E8~7(@
QK[/F#5R[#v81yP
/z.4%!2
~&B1_q,<$(
n"9X8
y/:LO9
'>19ma
L-3y%rT
"tcj'K-.4a*S
N8[{.f0*
c^z+*`
8)xd*H3?I!9
{288=n3*F
$@l$;g?<\>
6%]]8n
iZw6dC5`>6,
=k?Hn-{s'~
L :v5w#w
?,x#7/
o]2|B%
w-zM%9b
,{3ot4
$*H&+3
3!H*K"yT"k9/F6
L?+Wy:*-
6S;L60
M-nb*k
f6)s#73
@.33P3n
K=jD%=n
m#QF)(a&: 4/
K+%@>=
o5TL%+
$W-?6>
#9c-]
l<^5!<6">#.
-D'"F\>_
p9zZN
_0U#4)%O6N,y:1
=1AG7j
J:+e-O
):".f
oD08$7
<x:%O 0#
R*[5"2.
)J)NJ7
<4/Sk&S;1YG
`+RZ%)
7 <(v/x-
+D8&>'(
TG,jM.*ilO
pM:,\82
N)<9)h
Pp36/<
%"L+x71
y\&H,!31V6I7-
7; #uS*
S4$5`$
@[}2aG%H
XG/)^L
"B;')[
V-Y(T";$f
/T-*U'/9`O4K,
6cx9<M
2/.81G!13
k=c8fg
<#0'-;
WC1j3=g=
; a3(iu"R"'
g A"di
|`.s}&T6
92-v,d5]93,
7udr-XL
m[$}!S#L
HGM%64)3!s05A*
BI!C=.m%p(rU=C_
|9)<3e_!n^
7W5(0I
*s1X6n3gL$0m
(;5;1*1nN+
V(6 >T++=
=6x7*;
.| 9A&'
/5pB'v1
u8=.g|
>`o[%?0Ds9
&U`3l;6*
"-9# 1
.;V0 tH
o'3&Rj5
o9#W$"%a"u>D
>6;#>t$T
*':74)L!
@0>3`.
-AZ;![/
eX*na79
<E-{t?f%g+W4
>)?I+w
QA1n%4
06hOJ:u/T
D( P7l
=2RC5o;
H"A,Y#/#R
b`5r-x-S
$(f(*.0
>[y%b=a
y,j-s]j
=x%30#Y7(#7
5 m*Dr
&:{/j]
:8~ (n>"0
#v#117
"=H Ht
)Z9w&5z
G560|
3#~m&t+X[L
#oi 2?
PZq/34
;Zn.xV(D
+@&1'"G
Mu?J2cu
)'(,}'
{d5Z,t)
9-~#*` eJ
{<!9[
&<Ix x
'-;S5:E-K'
3A5:pq@9PG>|Y
A4mC>R{
+9r}8
&t7E'I._
9/$ O;v19-
3Y/"Jc
zn:uHG
?~'/_w.
eq<$>$
<+"f$3s
?B`=c9p.E
K(~44G&
m\ N|4<
/?"Z-2T1
+u:E(
/#!)]55
DG6u=N3
3&F)5oI
pr=M9,
L7M3+M:$s
0B&a5r'<bh/
4G'&8O
*BA4K9g)
'I&>${#,f {5
Bq/m;ex6W,5
s=,1/
5m=5-6&
3&t.48=N9_
%T,bqj
-?@/J<
{0\+!L
`(19!o
)U[?zn
|#0#46P
*#aK/^
u8eS-9]3p
-("[\)L
v!I{q#`:.5;C
f{0%5dUd
#(;<j(
`%7O"<.I;c
j?k4n+>]8W
aL)_r.,
>>A$_?&w9
](d-BJ98"4:l
}e2;5[
w59F_)q
4-/e\8
!5:h!;p =!U
$/a7&)05
#-@*!C
'1w%tj
EW"J'k
8Y77&c
0dS/)j.t=:e.
6"5Z09n
WK<R/.,IJ)
N+Q7O2:y
q!F-"x
g9^*;D?
Y=`r%H
>/<(';9"5!
*~<q&-
'0l? O
DfU/5;
O24"5*)
u,\13.>#n=+
C3L >.U
@$ax*Y>F
6B,)85t;#
-d'cK%:6%0"^
x_n8^
JQ7("*t4
; K1|2
34.pj
'#57$/R;>
>d "%F3jo
%*&%/J$
P#_'8'Xy4
2?2ue7
45^3 &:(04"%
8/Al}(V
;N5(|=XH
)i>.2K(3x
'0e >=Q
,g3;4*r
?(y1`d
Wc$9c<6!k!
&/O:b)
F8,9 H%
8N0#kx;T
8!%+)0;
<3;c&4b0
,409Ry
Im<{2#sw
{36l,(p
f3#[< %.
2|0,X/
=U"xi'$1E5+
KZ"](Fu
p4-}/H
~Ug:9P"}N
h%).lo
qp*|P+q
CF?n`&
Oi?b`1
-2Q>m&Y
m&8oq0$
_|0R>%
a3'@2\l
)w.t>2
M/O$?Y
E;'c-CW2
-sF0I(5
^9'5!lg
c)Os:45
?;82WOf
(l"i!509
I5><d^
H:T7g5%A
T7xA;
(w0u!|\
2*8Z<:-
~r@,s!
8e%pS6
5E?l9q4:r
Pgh7_J
'J/>>;
>u4Q@
VU.y8j
264"+=
l#AK/\
;T>>86CHY
KIn*%4m&$+cn
B;~-<*0
C!_{7i0d
&%8G.?
%26fl8WH4<9sG
'&p6=+*@^
;T9=]>$
//+n<4
N'7^'?gz
\{8Q)1
0K6O)l74>
)g"7Uj
@e35w(
#PLD%Mo
3++g";
%c-@a#)
'72ZJ^
E-S a#5
-B*>E9n0K?1
SJ4<";
[14<Au
k+=)j,e
0j<W$(
>w5<n9!%e
79;+O@<;D$
xP 1+7
*/t'U#
,,$4C'
y.u3;<K
F4'y*4L?
U8H:=C*3
8'&`+S{#Q
;fz20*
7I!Fi;P4
2qSq#h#
`u4o.z7
n7f8_m6
@$*5.$9m<1.`
G1)L1:N
'c%ET'BO-?'9:d2
&\"nwg
!5]1Q06
2QY|D
Q $w2v352
(:V0]/
Vj 45#m&T
":q|M#,)
p-<Y+&}
Z&c/_-N20a,h
L<8y%>5"B0
b3>}9
OJ*x #
AK"V8uE
%L5@PG97
;3<fZ(a
/L^:bf0^7
9!.X"i
1<dg<Z?t
6i)=I+6Z\!
EJ(=+zD
t,Q(p>
;$%5/[)(
Wy;,|E
hZ?4.N',D
.`=,T#
c*)?jL J]
JL/O=1#4<2\
j1"_/*N;"
B-C/$4z
,^V7x":;P.l=L
7UB:8L*';9B%S
#g:Z~l
3p^5<>I^1
<H\$c#=6[
dw).(*1 2,#
q#4[8o;
8+'Ti%
:g;%*M
"C: /s
RqDwe
/P F
i;;)\+
2"3[u3l
P-!8s%
E?o%%
y[8V} .
b:-=-tq
;,^L:?`
+<)7*;[
fn,%|
$$7E!7A
{,O,==
<*.m9=k
#;S?7n+
&-w$]z0J3
8,TeG)T@
97>g-3
c9< &8D3V
w&S3x+4e1Q`
$e-p\<]T
/(5q~0V
"o</F]
?#L//H
%O.XL3n
v"|?2J
!!60b:)
0;A8$Y
4)9:@d
6a)C!
*t!#7%#IL9 K'7.
'6Aa#B
2)GP:6
;x"^% s
[-6QrZ71
H!K4RK
+^&Q#- E(Z(,UJ
&]-k"{
!~ZY67/`(
>Y.`.b"/C
30X3}P
2bA$_R
#Pw7h*zx/
VwY.)h;
Hc7Uyd
j$?E!TK
)&Y!3V
@M0my>s:
;IK$"
S486C
[+k&8
^-29c\9
'&Q7d
=&^~(t[M2
g4<Tu>U}
5M3i4v
TQ./:"M*1s<lx,@)D((
(%?o)>
}%hnm#T
'!6\-O6
=m3zu5S#9k<h92*
!j4<`S
85/J#U2
,:(qIv
b<yXt
bI:U/~w
o#55.5
I7AX*tP
@a'M7Z)1)Y.0$
!>X?'?
T%0G'G7
2u2c45
=e=6KZ,+-B]
x >%3
,!sl4R%>1
,"-1>m
Y>t(]`+"v/
p30K5j?>Q
/v=:T#
/6Ks*%h#961
J&'!:3
PY&uJ&!!!
&64?X!U2H5#
Mn/[}
KZE'@#)b)xv
I?>D=80
@.;m!Z?p/$.
tE,;-L\w=S
S En:l
c+S2r)
<~r"$6H3I
,.kA.eL-
9kDg.^!,
*X>:<;
q4H+'T9
q?,T o
FQ#;=7*F=zE
#f"qB5l7+*J(
&139:*
/uv8/$
-V2u4:BO
=-)Hh&A*
/;i$-;
;Mi9BV=3&<
>8L1(+
)3:3=4
*X2S4@
cI{4/(C
f0+WM %=3Kkv
2,n_>&7
0\:=&A
>W[%Dx&7,T.
^5,`*Q
>V&}"h=@
/q>(`*!/
D`,9i>[
4r!:#8Jgw
/:5x,P#_
'u/4&M
7A+M3a
[<$#~-
<;f$[7d
3G ZY7
)t)+.%
B'S;PF-
K.?#,(6
FsiVx
{<G:_*)b
w?"6G~
j)p*|3ij?
NwN>a7X
bH$<n8l3F
JD7?`*gm
2N#u$z(
o?(8._7
?*9@+,47-
+3A.q5%!
3C?$79
^>}&)}
?=c`46?
kg$0&}
;07i9`/ #"
%+B2x4
e31f<Q
5{#7(sD
]C:"*&{2Pv}8.8| (
B:b;4Yu=^
c4h#?%w<2
_^7z1}f84,?o
&\-} X
:\B_":
'4\!!z
&-m>L7#`])x:$
^9Ve/-N#
ER':#;.
G< K-5)
g1#'.I/
<L)D>|
rk3\c>T
<\'N""X/
RFc!J1
dS9;n
59<`13
b>s0N1[
M1{B #o
rR"#3Z0^x:
BkK'E
.A&S.x<--
P369#c
!O??I~=
-75*3&G=
/%&.>s&6H&e
+E$ms;k
_(<gI5]
>&iqb5pJ7
{>W_j.>
=b:}+j
:py/VS
5r1l2r-/p
&3UA*(bO/
%(_Z;N/
z0\l6
1'1o" 3
4F'4a
]3+b"&A/;24
IA'?/CX3r?
c~*fd%Di
d?{m1.
10U3f;
:S)=\`3ED
F;R f(
))J5566,
I;>89sW>;5.<k:pN=^4TH
?=X9 &
|A5'wj
}q4,`{
$_'4%<;c,((
;^*# <88h
C\1n:!-A;2Q
=K9$)?SZ
'Gl7@?%v$
8F7s#E.k;
'<6W>m-
gGU" 5,wq
g?//*'
j >+j."8
|3`c=5$
(R&_0hA!
%*J5?}%-z
),`/+}
/9NHt/,7
;M#5 c"':
#\k'?t
`c"@V>od*r
%^O3Nk
83ts.)+
%ol&fJM>,>
bK=1
3^50b&
dMa s4.S
1%Y"kc1
28Lh.9
,"`':>rk
^F* (.#D
O5](""k
bV<Ul)l1R)
>="s*h (
_}#Q;O9
}#;5`+%
>;0.Ar
"ye+Pf -&:
V)H".+
u<&x5w0
.%h)v&
2C+57\`*
^$ M1| B
2$@1+k]>
*wU,0%
_)9GA$8]
1<?W?
^"e5Z45
+1o&,QF5E+RgP)(
a">-f
|+he>k'`{>J?"8
5a:OZ/bX43;
!2--?%
PK.Y+(
8M&54/
^??%g!);r3s (L=aP5
cB'ff*GB_>
nr9nc
$&(93
>+{#Y?s
e. &':]26,",>
%?g31n$
o:N_a'sJ#
<X1AD_
!0:s #
3_?$P0Z
HN;y59By-
,r,+1Q
kS:1>K
&a.E5*
I=0, 47e>
@5[HZN%3
.W?sp28
"L;1?E:c
5j):,?
<x#,jT
;/Y8x\
0',6=x
F!l0-q^
7-q_"Nm>+`4
")][,AJ8
31842%m
d:@< +L
.g/'&?LM;
'a"60c$I?
1s; f>P%7&
"8eq=6$$
S,=C;x33T2O?3
x?ZR8d!
96RN8w6
"?>V"B16
->6.J?D}
5!$q.F-&v,
%`Yd&/
4"96u/C
L-j';K7&l;>b=K7
t65.'M
i?8{2-
w4Q(dV5.%L
=<3$l
G*Wg$R
gMH }g
~*1=m0
f-VGa5
H,4J4aH%
6&)#*y
)\#1,^=
$;Y8$t
.M.S'yg1
GF"*h_
79ra!ec$f
_58#[;`;
l=0}%Se'R&<<
/8> 1
*2l0j&
TP:=hnU
>pv<AP
'|14K!
K#UQ-g
&p>Ds-q
E"%>zUv
?JP<-T
OX7~Gx5
A4-q2P
*5c86;
!'l/.+
N0}9;z?yY
>Q?PQ<z24c _E=
:l90=7
/E~5*56
;*)(?I
@;-'OH
r#GGA+0;
S*[Q!<9'
u,w!4v/k
#7i5Q/
1.X<KY
0gO-!|7?Ub %"t>N
`@(F*"F~
0D2=!l4
51?O =
i!-G5Jm
m{y0@~
Kj6<^7/
&%v,.;
%7L.HO
kT`58tD5c r
/W*=~3{
<&0BZ(
jUF8F@4BeU"6=5
_!Z?Rb>ho&"P
,)L#p@~F
$r<hH*
J:+9;pm&5b
zo^!81
!OAe/N
~<q+#\S
J!-)]w
4:: (o
bY$o-;
5HJe,Y<A1
6ZR2C\5L5
y[+!3=:*=
{0%0>}=
{!;;4_
+xz`2z38,
5?d*z.=-
9GI+j"D
T~],_$&
/QW" )
)R["qT!=h.
k?-|6;
b&#7z|a&-
!>o+4<":;
^q.m0$0
E(H1;@.
j `>+Q0
!#Su(xv5
<h8 9f.GJ_
:cy*Z)0#
]5eG6r~(2?7.7"
kv*XW
$qs==a
h8|!<z]!
F@*8:^
j)7|=4W
:&*15W+
f(Ca"J=[6y&!'4b
Y<H"2m]
>oOh6U*
- 9\}?
3B;=m<*
;-%"R$&
@m#+C5t8;n
0$r8c-8
<m=7m9
'S3~J
_00fi'0c;-qi$k
+sT^:k
i2t991<
GK*xq!8d
i3{B90v-e@]!R&)
/Ei/:3
$8**i(L
>+~%7q:Eo%V+
I=z[7J
`\6-9p*
75*E<356b
>s-(N0U_,
/8O=H?]c
=8/_'!.M
#pd bL23=?V
[=IP"vH
!7./<"'[!D&*6@1)
P%1eZ3
e9!RJ4=6
w>9(y-s
"#+i0?d?&
Y/^)pW)l
f&7QR
%|g7+
'4>$=H
$>dE>a z
;~(:@8=N
X#?Y7!:5{'/
7)3t+
m@:r"
.z;mr
qCE[q
GMa)B;
D&[rM2<
IH&';!Cw
"=jV:f
h5"q1"T:
;m,U3.Q
&"O) ~%
X(W$!2
[//}9/
u0X.H#>
9'V/e<
""Lr)9@\8)(67tS0
0!(%m(f
*'Z8^P
#R"S <
5"Chw(<L*
$*9> 81577Bh
GN? 6=k
85/[Z'*
s"sg"P{$e+"e
c?00,I7 9
#=K-TGX
;96]^X
48z)5;l!$
Lt0A00(4
>C#A"+t
._.M5a%?
o0P*;M
=68+&<
g237q)$i
/m*9-t
+Ce9U/6
:^q<1?
$.<G$E
dh92f<
j:<kK6x
="Sj1>%e
^6qJ"j'5
D7{=l,>
9R],4=-X.
H"UC2m}?
`Q:ot-s<
%O5A3V
.4#4:6a
|78 1mCR
p<;;T'LT
72:^8M(
*j;"I<@
%+k9[e
z(0o)S
8hp,'k$
V2phq8
%?c)b&
J-=zH #(/&
*7\"km
&H37:e
t8{(l2`Z7ac|P
#64Ild
~!(D-e
=V&j-t
8qR(FF
R/"!6=
9K/-d:2
36Zl4MZ
%+/mu'
">-$Zh>EY
+j)cRE
49I1n9i
aS;,W!GR_98_
(s+`!x'C
R2*] h
(0>|y4
' 5$2%4/

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.