分析任务

分析类型 虚拟机标签 开始时间 结束时间 持续时间
URL win7-sp1-x64-shaapp01-1 2019-09-11 16:07:19 2019-09-11 16:09:20 121 秒

魔盾分数

0.15

正常的

URL详细信息

URL
URL专业沙箱检测 -> http://update.microsoft.com.nsatc.net

登录查看威胁特征

运行截图


访问主机纪录 (可点击查询WPING实时安全评级)

直接 IP 安全评级 地理位置
20.45.1.107 美国
40.90.247.210 美国

域名解析 (可点击查询WPING实时安全评级)

域名 安全评级 响应
update.microsoft.com.nsatc.net A 40.90.247.210
A 20.45.1.107
CNAME www.update.microsoft.com.nsatc.net
www.update.microsoft.com
c.microsoft.com NXDOMAIN

摘要

登录查看详细行为信息

WHOIS 信息

Name: None
Country: US
State: CO
City: None
ZIP Code: None
Address: None

Orginization: Level 3 Communications, LLC
Domain Name(s):
    NSATC.NET
    nsatc.net
Creation Date:
    2001-09-27 00:25:53
    2001-09-26 17:25:53-0700
Updated Date:
    2019-08-26 09:53:07
    2019-08-26 02:53:07-0700
Expiration Date:
    2020-09-27 00:25:53
    2020-09-26 00:00:00-0700
Email(s):
    abusecomplaints@markmonitor.com
    whoisrequest@markmonitor.com

Registrar(s):
    MarkMonitor, Inc.
Name Server(s):
    APAC-A.PROD1.FOOTPRINT.NET
    EU-A.PROD1.FOOTPRINT.NET
    EU-B.PROD1.FOOTPRINT.NET
    LATAM-A.PROD1.FOOTPRINT.NET
    USA-A.PROD1.FOOTPRINT.NET
    USA-B.PROD1.FOOTPRINT.NET
    USA-C.PROD1.FOOTPRINT.NET
    USA-D.PROD1.FOOTPRINT.NET
    usa-b.prod1.footprint.net
    usa-c.prod1.footprint.net
    eu-b.prod1.footprint.net
    usa-d.prod1.footprint.net
    eu-a.prod1.footprint.net
    usa-a.prod1.footprint.net
    apac-a.prod1.footprint.net
    latam-a.prod1.footprint.net
Referral URL(s):
    None
没有防病毒引擎扫描信息!

进程树


iexplore.exe, PID: 2564, 上一级进程 PID: 2320

访问主机纪录 (可点击查询WPING实时安全评级)

直接 IP 安全评级 地理位置
20.45.1.107 美国
40.90.247.210 美国

TCP

源地址 源端口 目标地址 目标端口
192.168.122.201 49159 20.45.1.107 update.microsoft.com.nsatc.net 80
192.168.122.201 49160 20.45.1.107 update.microsoft.com.nsatc.net 80
192.168.122.201 49161 20.45.1.107 update.microsoft.com.nsatc.net 80
192.168.122.201 49162 20.45.1.107 update.microsoft.com.nsatc.net 80
192.168.122.201 49163 20.45.1.107 update.microsoft.com.nsatc.net 80
192.168.122.201 49164 20.45.1.107 update.microsoft.com.nsatc.net 80
192.168.122.201 49165 20.45.1.107 update.microsoft.com.nsatc.net 80
192.168.122.201 49166 20.45.1.107 update.microsoft.com.nsatc.net 80
192.168.122.201 49167 40.90.247.210 update.microsoft.com.nsatc.net 80
192.168.122.201 49168 40.90.247.210 update.microsoft.com.nsatc.net 80
192.168.122.201 49169 40.90.247.210 update.microsoft.com.nsatc.net 80
192.168.122.201 49170 40.90.247.210 update.microsoft.com.nsatc.net 80
192.168.122.201 49171 40.90.247.210 update.microsoft.com.nsatc.net 80
192.168.122.201 49172 40.90.247.210 update.microsoft.com.nsatc.net 80
192.168.122.201 49173 40.90.247.210 update.microsoft.com.nsatc.net 80

UDP

源地址 源端口 目标地址 目标端口
192.168.122.201 58646 192.168.122.1 53
192.168.122.201 59968 192.168.122.1 53
192.168.122.201 62882 192.168.122.1 53

域名解析 (可点击查询WPING实时安全评级)

域名 安全评级 响应
update.microsoft.com.nsatc.net A 40.90.247.210
A 20.45.1.107
CNAME www.update.microsoft.com.nsatc.net
www.update.microsoft.com
c.microsoft.com NXDOMAIN

TCP

源地址 源端口 目标地址 目标端口
192.168.122.201 49159 20.45.1.107 update.microsoft.com.nsatc.net 80
192.168.122.201 49160 20.45.1.107 update.microsoft.com.nsatc.net 80
192.168.122.201 49161 20.45.1.107 update.microsoft.com.nsatc.net 80
192.168.122.201 49162 20.45.1.107 update.microsoft.com.nsatc.net 80
192.168.122.201 49163 20.45.1.107 update.microsoft.com.nsatc.net 80
192.168.122.201 49164 20.45.1.107 update.microsoft.com.nsatc.net 80
192.168.122.201 49165 20.45.1.107 update.microsoft.com.nsatc.net 80
192.168.122.201 49166 20.45.1.107 update.microsoft.com.nsatc.net 80
192.168.122.201 49167 40.90.247.210 update.microsoft.com.nsatc.net 80
192.168.122.201 49168 40.90.247.210 update.microsoft.com.nsatc.net 80
192.168.122.201 49169 40.90.247.210 update.microsoft.com.nsatc.net 80
192.168.122.201 49170 40.90.247.210 update.microsoft.com.nsatc.net 80
192.168.122.201 49171 40.90.247.210 update.microsoft.com.nsatc.net 80
192.168.122.201 49172 40.90.247.210 update.microsoft.com.nsatc.net 80
192.168.122.201 49173 40.90.247.210 update.microsoft.com.nsatc.net 80

UDP

源地址 源端口 目标地址 目标端口
192.168.122.201 58646 192.168.122.1 53
192.168.122.201 59968 192.168.122.1 53
192.168.122.201 62882 192.168.122.1 53

HTTP 请求

URI HTTP数据
URL专业沙箱检测 -> http://update.microsoft.com.nsatc.net/
GET / HTTP/1.1
Accept: */*
Accept-Language: zh-cn
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: update.microsoft.com.nsatc.net
Connection: Keep-Alive

URL专业沙箱检测 -> http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx
GET /windowsupdate/v6/default.aspx HTTP/1.1
Accept: */*
Accept-Language: zh-cn
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: update.microsoft.com.nsatc.net
Connection: Keep-Alive
Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA

URL专业沙箱检测 -> http://update.microsoft.com.nsatc.net/favicon.ico
GET /favicon.ico HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: update.microsoft.com.nsatc.net
Connection: Keep-Alive
Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA

URL专业沙箱检测 -> http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx?ln=zh-cn
GET /windowsupdate/v6/default.aspx?ln=zh-cn HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: update.microsoft.com.nsatc.net
Connection: Keep-Alive
Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA

URL专业沙箱检测 -> http://update.microsoft.com.nsatc.net/windowsupdate/v6/shared/js/webcomtop.js?637037860364677758
GET /windowsupdate/v6/shared/js/webcomtop.js?637037860364677758 HTTP/1.1
Accept: */*
Referer: http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: update.microsoft.com.nsatc.net
Connection: Keep-Alive
Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA

URL专业沙箱检测 -> http://update.microsoft.com.nsatc.net/windowsupdate/v6/shared/js/tgar.js?637037860364677758
GET /windowsupdate/v6/shared/js/tgar.js?637037860364677758 HTTP/1.1
Accept: */*
Referer: http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: update.microsoft.com.nsatc.net
Connection: Keep-Alive
Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA

URL专业沙箱检测 -> http://update.microsoft.com.nsatc.net/windowsupdate/v6/shared/js/spupdateids.js?637037860364677758
GET /windowsupdate/v6/shared/js/spupdateids.js?637037860364677758 HTTP/1.1
Accept: */*
Referer: http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: update.microsoft.com.nsatc.net
Connection: Keep-Alive
Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA

URL专业沙箱检测 -> http://update.microsoft.com.nsatc.net/windowsupdate/v6/shared/js/commontop.js?637037860364677758
GET /windowsupdate/v6/shared/js/commontop.js?637037860364677758 HTTP/1.1
Accept: */*
Referer: http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: update.microsoft.com.nsatc.net
Connection: Keep-Alive
Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA

URL专业沙箱检测 -> http://update.microsoft.com.nsatc.net/windowsupdate/v6/shared/js/redirect.js?637037860364677758
GET /windowsupdate/v6/shared/js/redirect.js?637037860364677758 HTTP/1.1
Accept: */*
Referer: http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: update.microsoft.com.nsatc.net
Connection: Keep-Alive
Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA

URL专业沙箱检测 -> http://update.microsoft.com.nsatc.net/windowsupdate/v6/shared/js/resultslist.js?637037860364677758
GET /windowsupdate/v6/shared/js/resultslist.js?637037860364677758 HTTP/1.1
Accept: */*
Referer: http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: update.microsoft.com.nsatc.net
Connection: Keep-Alive
Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA

URL专业沙箱检测 -> http://update.microsoft.com.nsatc.net/windowsupdate/v6/redirect.asp?UA=true
POST /windowsupdate/v6/redirect.asp?UA=true HTTP/1.1
Accept: */*
Accept-Language: zh-cn
Referer: http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx?ln=zh-cn
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: update.microsoft.com.nsatc.net
Content-Length: 13
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA

URL专业沙箱检测 -> http://update.microsoft.com.nsatc.net/windowsupdate/v6/redirect.asp?OS=6.1&Processor=wow64&Lang=zh-cn&CurrentSite=6Live
POST /windowsupdate/v6/redirect.asp?OS=6.1&Processor=wow64&Lang=zh-cn&CurrentSite=6Live HTTP/1.1
Accept: */*
Accept-Language: zh-cn
Referer: http://update.microsoft.com.nsatc.net/windowsupdate/v6/default.aspx?ln=zh-cn
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: update.microsoft.com.nsatc.net
Content-Length: 24
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: ASPSESSIONIDQCRDSRRT=LJAMGACALKPDNCLIFPLEMGDA

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/vistadefault.aspx
GET /windowsupdate/v6/vistadefault.aspx HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/favicon.ico
GET /favicon.ico HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/vistadefault.aspx?ln=zh-cn
GET /windowsupdate/v6/vistadefault.aspx?ln=zh-cn HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/shared/js/tgar.js?637037860610414162
GET /windowsupdate/v6/shared/js/tgar.js?637037860610414162 HTTP/1.1
Accept: */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/vistadefault.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/shared/js/redirect.js?637037860610414162
GET /windowsupdate/v6/shared/js/redirect.js?637037860610414162 HTTP/1.1
Accept: */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/vistadefault.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/redirect.asp?UA=true
POST /windowsupdate/v6/redirect.asp?UA=true HTTP/1.1
Accept: */*
Accept-Language: zh-cn
Referer: http://www.update.microsoft.com/windowsupdate/v6/vistadefault.aspx?ln=zh-cn
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: www.update.microsoft.com
Content-Length: 13
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/redirect.asp?OS=6.1&Processor=wow64&Lang=zh-cn&CurrentSite=6Live&SP=1&control=7.5.7601.17514
POST /windowsupdate/v6/redirect.asp?OS=6.1&Processor=wow64&Lang=zh-cn&CurrentSite=6Live&SP=1&control=7.5.7601.17514 HTTP/1.1
Accept: */*
Accept-Language: zh-cn
Referer: http://www.update.microsoft.com/windowsupdate/v6/vistadefault.aspx?ln=zh-cn
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: www.update.microsoft.com
Content-Length: 24
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/VistaToolbar.aspx?ln=zh-cn
GET /windowsupdate/v6/VistaToolbar.aspx?ln=zh-cn HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/vistadefault.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn
GET /windowsupdate/v6/vistathanks.aspx?ln=zh-cn HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/vistadefault.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/VistaFooter.aspx?ln=zh-cn
GET /windowsupdate/v6/VistaFooter.aspx?ln=zh-cn HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/vistadefault.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/shared/js/tgar.js?637037860624116725
GET /windowsupdate/v6/shared/js/tgar.js?637037860624116725 HTTP/1.1
Accept: */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/shared/js/content.js?637037860624116725
GET /windowsupdate/v6/shared/js/content.js?637037860624116725 HTTP/1.1
Accept: */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/shared/css/content.css
GET /windowsupdate/v6/shared/css/content.css HTTP/1.1
Accept: */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/shared/css/hcp.css
GET /windowsupdate/v6/shared/css/hcp.css HTTP/1.1
Accept: */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/library/toolbar/3.0/css.aspx?c=/windowsupdate/v6/Config/zh-cn/WU/vista.config
GET /library/toolbar/3.0/css.aspx?c=/windowsupdate/v6/Config/zh-cn/WU/vista.config HTTP/1.1
Accept: */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/VistaToolbar.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/shared/js/VistaWin7Shared.js
GET /windowsupdate/v6/shared/js/VistaWin7Shared.js HTTP/1.1
Accept: */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/shared/images/vista/vistaarrow.jpg
GET /windowsupdate/v6/shared/images/vista/vistaarrow.jpg HTTP/1.1
Accept: */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/
GET /windowsupdate/v6/ HTTP/1.1
Accept: */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/blank.aspx
GET /windowsupdate/v6/blank.aspx HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/library/toolbar/3.0/text.aspx?t=TQ%3d%3d&f=FFFFFF&b=99B1D3&font=Microsoft+Logo+95%2c+13pt&w=105&h=29&a=0&l=0&v=0&c=TOce7uoORad40JSEsIoG7AAQU1Y%3d
GET /library/toolbar/3.0/text.aspx?t=TQ%3d%3d&f=FFFFFF&b=99B1D3&font=Microsoft+Logo+95%2c+13pt&w=105&h=29&a=0&l=0&v=0&c=TOce7uoORad40JSEsIoG7AAQU1Y%3d HTTP/1.1
Accept: */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/VistaFooter.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/library/toolbar/3.0/images/banners/WindVista_masthead_ltr.gif
GET /library/toolbar/3.0/images/banners/WindVista_masthead_ltr.gif HTTP/1.1
Accept: */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/VistaToolbar.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/shared/images/vista_wu_subbanner-part1_ltr.gif
GET /windowsupdate/v6/shared/images/vista_wu_subbanner-part1_ltr.gif HTTP/1.1
Accept: */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/VistaToolbar.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/shared/images/vista_subbanner-part2_ltr.gif
GET /windowsupdate/v6/shared/images/vista_subbanner-part2_ltr.gif HTTP/1.1
Accept: */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/VistaToolbar.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/shared/images/vista_subbanner-center.gif
GET /windowsupdate/v6/shared/images/vista_subbanner-center.gif HTTP/1.1
Accept: */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/VistaToolbar.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/shared/images/win7/zh-cn/select_all_programsWin7.gif
GET /windowsupdate/v6/shared/images/win7/zh-cn/select_all_programsWin7.gif HTTP/1.1
Accept: */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

URL专业沙箱检测 -> http://www.update.microsoft.com/windowsupdate/v6/shared/images/win7/zh-cn/select_wuWin7.gif
GET /windowsupdate/v6/shared/images/win7/zh-cn/select_wuWin7.gif HTTP/1.1
Accept: */*
Referer: http://www.update.microsoft.com/windowsupdate/v6/vistathanks.aspx?ln=zh-cn
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.update.microsoft.com
Connection: Keep-Alive
Cookie: WT_FPC=id=2ea84d10a1187b93d1f1504351520961:lv=1504351536858:ss=1504351520961

SMTP 流量

无SMTP流量.

IRC 流量

无IRC请求.

ICMP 流量

无ICMP流量.

CIF 报告

无 CIF 结果

网络警报

无警报

TLS

No TLS

Suricata HTTP

No Suricata HTTP

未发现网络提取文件
抱歉! 没有任何文件投放。
HTML 总结报告
(需15-60分钟同步)
下载

Processing ( 16.818 seconds )

  • 10.848 Suricata
  • 3.492 NetworkAnalysis
  • 2.453 Static
  • 0.02 AnalysisInfo
  • 0.003 BehaviorAnalysis
  • 0.002 Memory

Signatures ( 2.176 seconds )

  • 2.093 md_url_bl
  • 0.022 md_domain_bl
  • 0.011 antiav_detectreg
  • 0.005 anomaly_persistence_autorun
  • 0.005 infostealer_ftp
  • 0.004 antiav_detectfile
  • 0.004 geodo_banking_trojan
  • 0.004 ransomware_files
  • 0.003 infostealer_bitcoin
  • 0.003 infostealer_im
  • 0.003 ransomware_extensions
  • 0.002 tinba_behavior
  • 0.002 antianalysis_detectreg
  • 0.002 antivm_vbox_files
  • 0.002 disables_browser_warn
  • 0.002 infostealer_mail
  • 0.002 network_torgateway
  • 0.001 rat_nanocore
  • 0.001 cerber_behavior
  • 0.001 bot_drive
  • 0.001 bot_drive2
  • 0.001 browser_security
  • 0.001 ie_martian_children
  • 0.001 md_bad_drop

Reporting ( 0.39 seconds )

  • 0.39 ReportHTMLSummary
Task ID 371283
Mongo ID 5d78abc7bb7d574d069f4b79
Cuckoo release 1.4-Maldun