分析任务

分析类型 虚拟机标签 开始时间 结束时间 持续时间
URL win7-sp1-x64-shaapp01-1 2019-09-12 13:21:20 2019-09-12 13:23:21 121 秒

魔盾分数

0.75

正常的

URL详细信息

URL
URL专业沙箱检测 -> http://down.znshuru.com/soft/Helper.7z
登录查看威胁特征

运行截图

访问主机纪录 (可点击查询WPING实时安全评级)

直接 IP 安全评级 地理位置
否 101.227.97.174 未知 中国
否 101.89.96.49 未知 中国
否 106.120.159.126 中国
否 111.206.37.71 未知 中国
否 113.106.99.196 未知 中国
否 119.188.250.169 中国
否 219.142.142.168 中国
否 58.215.146.121 未知 中国

域名解析 (可点击查询WPING实时安全评级)

域名 安全评级 响应
down.znshuru.com A 101.227.97.174
CNAME down.znshuru.com.wsglb0.com
A 122.226.47.94
ad.winrar.com.cn CNAME winrar.com.cn.gaofangcache.com
A 119.188.250.169
apps.bdimg.com A 101.89.96.49
CNAME apps.bdimg.jomodns.com
cdn.staticfile.org CNAME iduwdjf.qiniudns.com
A 58.215.146.120
A 58.215.146.121
A 58.215.146.115
A 58.215.146.122
A 58.215.146.117
A 58.215.146.116
A 58.215.146.119
A 58.215.146.118
CNAME tiny026.china.line.qiniudns.com
CNAME importantglobalcdnweb.qiniu.com.w.cdngslb.com
hm.baidu.com CNAME hm.e.shifen.com
A 106.120.159.126
www.winrar.com.cn CNAME c06.i06.ctlsh.lv3.cloudglb.com
CNAME www.winrar.com.cn.cloudglb.com
CNAME www.winrar.com.cn.cloudcdn.net
A 113.106.99.196
A 220.168.190.132
www.beian.gov.cn A 219.142.142.168
lxbjs.baidu.com 未知 CNAME lxbjs.e.shifen.com
A 111.206.37.71

摘要

登录查看详细行为信息

WHOIS 信息

Name: c/o WHOIStrustee.com Limited
Country: GB
State: West Yorkshire
City: Wakefield
ZIP Code: WF2 7AN
Address: 6 Thornes Office Park Monckton Road

Orginization: Registrant of znshuru.com
Domain Name(s):
    ZNSHURU.COM
Creation Date:
    2016-06-24 09:38:53
Updated Date:
    2019-05-08 09:02:13
    2018-05-31 00:04:48
Expiration Date:
    2020-06-24 09:38:53
Email(s):
    abuse@1api.net
    9b4bce9b66@znshuru.com.whoistrustee.com

Registrar(s):
    1API GmbH
Name Server(s):
    F1G1NS1.DNSPOD.NET
    F1G1NS2.DNSPOD.NET
    f1g1ns1.dnspod.net
    f1g1ns2.dnspod.net
Referral URL(s):
    None
没有防病毒引擎扫描信息!

进程树

iexplore.exe, PID: 2572, 上一级进程 PID: 2320
下载PCAP包

访问主机纪录 (可点击查询WPING实时安全评级)

直接 IP 安全评级 地理位置
否 101.227.97.174 未知 中国
否 101.89.96.49 未知 中国
否 106.120.159.126 中国
否 111.206.37.71 未知 中国
否 113.106.99.196 未知 中国
否 119.188.250.169 中国
否 219.142.142.168 中国
否 58.215.146.121 未知 中国

TCP

源地址 源端口 目标地址 目标端口
192.168.122.201 49159 101.227.97.174 down.znshuru.com 80
192.168.122.201 49161 101.89.96.49 apps.bdimg.com 80
192.168.122.201 49162 101.89.96.49 apps.bdimg.com 80
192.168.122.201 49166 106.120.159.126 hm.baidu.com 80
192.168.122.201 49174 106.120.159.126 hm.baidu.com 80
192.168.122.201 49176 111.206.37.71 lxbjs.baidu.com 80
192.168.122.201 49177 111.206.37.71 lxbjs.baidu.com 80
192.168.122.201 49168 113.106.99.196 www.winrar.com.cn 80
192.168.122.201 49169 113.106.99.196 www.winrar.com.cn 80
192.168.122.201 49170 113.106.99.196 www.winrar.com.cn 80
192.168.122.201 49171 113.106.99.196 www.winrar.com.cn 80
192.168.122.201 49172 113.106.99.196 www.winrar.com.cn 80
192.168.122.201 49173 113.106.99.196 www.winrar.com.cn 80
192.168.122.201 49160 119.188.250.169 ad.winrar.com.cn 80
192.168.122.201 49165 119.188.250.169 ad.winrar.com.cn 80
192.168.122.201 49175 219.142.142.168 www.beian.gov.cn 80
192.168.122.201 49163 58.215.146.121 cdn.staticfile.org 443
192.168.122.201 49164 58.215.146.121 cdn.staticfile.org 443

UDP

源地址 源端口 目标地址 目标端口
192.168.122.201 49157 192.168.122.1 53
192.168.122.201 50112 192.168.122.1 53
192.168.122.201 51384 192.168.122.1 53
192.168.122.201 51466 192.168.122.1 53
192.168.122.201 51896 192.168.122.1 53
192.168.122.201 58646 192.168.122.1 53
192.168.122.201 59968 192.168.122.1 53
192.168.122.201 62882 192.168.122.1 53
192.168.122.201 63974 192.168.122.1 53

域名解析 (可点击查询WPING实时安全评级)

域名 安全评级 响应
down.znshuru.com A 101.227.97.174
CNAME down.znshuru.com.wsglb0.com
A 122.226.47.94
ad.winrar.com.cn CNAME winrar.com.cn.gaofangcache.com
A 119.188.250.169
apps.bdimg.com A 101.89.96.49
CNAME apps.bdimg.jomodns.com
cdn.staticfile.org CNAME iduwdjf.qiniudns.com
A 58.215.146.120
A 58.215.146.121
A 58.215.146.115
A 58.215.146.122
A 58.215.146.117
A 58.215.146.116
A 58.215.146.119
A 58.215.146.118
CNAME tiny026.china.line.qiniudns.com
CNAME importantglobalcdnweb.qiniu.com.w.cdngslb.com
hm.baidu.com CNAME hm.e.shifen.com
A 106.120.159.126
www.winrar.com.cn CNAME c06.i06.ctlsh.lv3.cloudglb.com
CNAME www.winrar.com.cn.cloudglb.com
CNAME www.winrar.com.cn.cloudcdn.net
A 113.106.99.196
A 220.168.190.132
www.beian.gov.cn A 219.142.142.168
lxbjs.baidu.com 未知 CNAME lxbjs.e.shifen.com
A 111.206.37.71

TCP

源地址 源端口 目标地址 目标端口
192.168.122.201 49159 101.227.97.174 down.znshuru.com 80
192.168.122.201 49161 101.89.96.49 apps.bdimg.com 80
192.168.122.201 49162 101.89.96.49 apps.bdimg.com 80
192.168.122.201 49166 106.120.159.126 hm.baidu.com 80
192.168.122.201 49174 106.120.159.126 hm.baidu.com 80
192.168.122.201 49176 111.206.37.71 lxbjs.baidu.com 80
192.168.122.201 49177 111.206.37.71 lxbjs.baidu.com 80
192.168.122.201 49168 113.106.99.196 www.winrar.com.cn 80
192.168.122.201 49169 113.106.99.196 www.winrar.com.cn 80
192.168.122.201 49170 113.106.99.196 www.winrar.com.cn 80
192.168.122.201 49171 113.106.99.196 www.winrar.com.cn 80
192.168.122.201 49172 113.106.99.196 www.winrar.com.cn 80
192.168.122.201 49173 113.106.99.196 www.winrar.com.cn 80
192.168.122.201 49160 119.188.250.169 ad.winrar.com.cn 80
192.168.122.201 49165 119.188.250.169 ad.winrar.com.cn 80
192.168.122.201 49175 219.142.142.168 www.beian.gov.cn 80
192.168.122.201 49163 58.215.146.121 cdn.staticfile.org 443
192.168.122.201 49164 58.215.146.121 cdn.staticfile.org 443

UDP

源地址 源端口 目标地址 目标端口
192.168.122.201 49157 192.168.122.1 53
192.168.122.201 50112 192.168.122.1 53
192.168.122.201 51384 192.168.122.1 53
192.168.122.201 51466 192.168.122.1 53
192.168.122.201 51896 192.168.122.1 53
192.168.122.201 58646 192.168.122.1 53
192.168.122.201 59968 192.168.122.1 53
192.168.122.201 62882 192.168.122.1 53
192.168.122.201 63974 192.168.122.1 53

HTTP 请求

URI HTTP数据
URL专业沙箱检测 -> http://down.znshuru.com/soft/Helper.7z 
GET /soft/Helper.7z HTTP/1.1
Accept: */*
Accept-Language: zh-cn
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: down.znshuru.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://ad.winrar.com.cn/show_40.html?L=7&bl=7&v=540&a=32&src=wrr 
GET /show_40.html?L=7&bl=7&v=540&a=32&src=wrr HTTP/1.1
Accept: */*
Accept-Language: zh-cn
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: ad.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://apps.bdimg.com/libs/jquery/1.8.3/jquery.min.js 
GET /libs/jquery/1.8.3/jquery.min.js HTTP/1.1
Accept: */*
Referer: http://ad.winrar.com.cn/show_40.html?L=7&bl=7&v=540&a=32&src=wrr
Accept-Language: zh-CN
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: apps.bdimg.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://apps.bdimg.com/libs/jquery.cookie/1.4.1/jquery.cookie.min.js 
GET /libs/jquery.cookie/1.4.1/jquery.cookie.min.js HTTP/1.1
Accept: */*
Referer: http://ad.winrar.com.cn/show_40.html?L=7&bl=7&v=540&a=32&src=wrr
Accept-Language: zh-CN
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: apps.bdimg.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://ad.winrar.com.cn/static/images/Advicetises/e1573da3cf8ef98c00bc3cbe332abbd0.jpg 
GET /static/images/Advicetises/e1573da3cf8ef98c00bc3cbe332abbd0.jpg HTTP/1.1
Accept: */*
Referer: http://ad.winrar.com.cn/show_40.html?L=7&bl=7&v=540&a=32&src=wrr
Accept-Language: zh-CN
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: ad.winrar.com.cn
Connection: Keep-Alive
Cookie: winrar_40_540=%7B%22Guid%22%3A%220b2bbaa53ddfb64dd2356c59a7f972c9%22%2C%22AppName%22%3A%22winrar_40_540%22%2C%22Favorite%22%3A%5B%5D%7D; r=%E4%B8%8A%E6%B5%B7%E5%B8%82
URL专业沙箱检测 -> http://ad.winrar.com.cn/viewadvertise?callback=jQuery183019159670231024878_1568265682057&AdvertiseID=1493&AdvertisesType=upgrade&appname=winrar_40_540&_=1568265682509 
GET /viewadvertise?callback=jQuery183019159670231024878_1568265682057&AdvertiseID=1493&AdvertisesType=upgrade&appname=winrar_40_540&_=1568265682509 HTTP/1.1
x-requested-with: XMLHttpRequest
Accept-Language: zh-cn
Referer: http://ad.winrar.com.cn/show_40.html?L=7&bl=7&v=540&a=32&src=wrr
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: ad.winrar.com.cn
Connection: Keep-Alive
Cookie: winrar_40_540=%7B%22Guid%22%3A%220b2bbaa53ddfb64dd2356c59a7f972c9%22%2C%22AppName%22%3A%22winrar_40_540%22%2C%22Favorite%22%3A%5B%5D%7D; r=%E4%B8%8A%E6%B5%B7%E5%B8%82
URL专业沙箱检测 -> http://hm.baidu.com/hm.js?67c3c1e371a2bc5fd6bbb401d602dbc8 
GET /hm.js?67c3c1e371a2bc5fd6bbb401d602dbc8 HTTP/1.1
Accept: */*
Referer: http://ad.winrar.com.cn/show_40.html?L=7&bl=7&v=540&a=32&src=wrr
Accept-Language: zh-CN
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: hm.baidu.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=800x600&vl=568&et=0&fl=24.0&ja=1&ln=zh-cn&lo=0&rnd=1739037002&si=67c3c1e371a2bc5fd6bbb401d602dbc8&v=1.2.61&lv=1&sn=13133&ct=!!&tt=WinRAR 
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=800x600&vl=568&et=0&fl=24.0&ja=1&ln=zh-cn&lo=0&rnd=1739037002&si=67c3c1e371a2bc5fd6bbb401d602dbc8&v=1.2.61&lv=1&sn=13133&ct=!!&tt=WinRAR HTTP/1.1
Accept: */*
Referer: http://ad.winrar.com.cn/show_40.html?L=7&bl=7&v=540&a=32&src=wrr
Accept-Language: zh-CN
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: hm.baidu.com
Connection: Keep-Alive
Cookie: HMACCOUNT=8607B1D7E2A5358E
URL专业沙箱检测 -> http://hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=800x600&vl=568&ep=winrar_40_540*view*40&et=4&fl=24.0&ja=1&ln=zh-cn&lo=0&rnd=1564335851&si=67c3c1e371a2bc5fd6bbb401d602dbc8&v=1.2.61&lv=1&api=8_0&sn=13133 
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=800x600&vl=568&ep=winrar_40_540*view*40&et=4&fl=24.0&ja=1&ln=zh-cn&lo=0&rnd=1564335851&si=67c3c1e371a2bc5fd6bbb401d602dbc8&v=1.2.61&lv=1&api=8_0&sn=13133 HTTP/1.1
Accept: */*
Referer: http://ad.winrar.com.cn/show_40.html?L=7&bl=7&v=540&a=32&src=wrr
Accept-Language: zh-CN
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: hm.baidu.com
Connection: Keep-Alive
Cookie: HMACCOUNT=8607B1D7E2A5358E
URL专业沙箱检测 -> http://hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=800x600&vl=568&ep=%E5%8D%87%E7%BA%A7%2040540*click*winrar_40_540&et=4&fl=24.0&ja=1&ln=zh-cn&lo=0&rnd=280663363&si=67c3c1e371a2bc5fd6bbb401d602dbc8&v=1.2.61&lv=1&api=8_0&sn=13133 
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=800x600&vl=568&ep=%E5%8D%87%E7%BA%A7%2040540*click*winrar_40_540&et=4&fl=24.0&ja=1&ln=zh-cn&lo=0&rnd=280663363&si=67c3c1e371a2bc5fd6bbb401d602dbc8&v=1.2.61&lv=1&api=8_0&sn=13133 HTTP/1.1
Accept: */*
Referer: http://ad.winrar.com.cn/show_40.html?L=7&bl=7&v=540&a=32&src=wrr
Accept-Language: zh-CN
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: hm.baidu.com
Connection: Keep-Alive
Cookie: HMACCOUNT=8607B1D7E2A5358E
URL专业沙箱检测 -> http://ad.winrar.com.cn/clickadvertise?callback=jQuery183019159670231024878_1568265682057&AdvertiseID=1493&AdvertisesType=upgrade&appname=winrar_40_540&_=1568265691183 
GET /clickadvertise?callback=jQuery183019159670231024878_1568265682057&AdvertiseID=1493&AdvertisesType=upgrade&appname=winrar_40_540&_=1568265691183 HTTP/1.1
x-requested-with: XMLHttpRequest
Accept-Language: zh-cn
Referer: http://ad.winrar.com.cn/show_40.html?L=7&bl=7&v=540&a=32&src=wrr
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: ad.winrar.com.cn
Connection: Keep-Alive
Cookie: winrar_40_540=%7B%22Guid%22%3A%220b2bbaa53ddfb64dd2356c59a7f972c9%22%2C%22AppName%22%3A%22winrar_40_540%22%2C%22Favorite%22%3A%5B%5D%7D; r=%E4%B8%8A%E6%B5%B7%E5%B8%82; Hm_lvt_67c3c1e371a2bc5fd6bbb401d602dbc8=1568265683; Hm_lpvt_67c3c1e371a2bc5fd6bbb401d602dbc8=1568265683
URL专业沙箱检测 -> http://www.winrar.com.cn/ 
GET / HTTP/1.1
Accept: */*
Accept-Language: zh-cn
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/css.css 
GET /css.css HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/js/jquery.js 
GET /js/jquery.js HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/js/focus.js 
GET /js/focus.js HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/js/jquery.caroufredsel-6.0.4-packed.js 
GET /js/jquery.caroufredsel-6.0.4-packed.js HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/top_bjnew.jpg 
GET /images/top_bjnew.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/winrarlogo.png 
GET /images/winrarlogo.png HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/newsbanner571.jpg 
GET /images/newsbanner571.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/btn32.jpg 
GET /images/btn32.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/newsbanner1.jpg 
GET /images/newsbanner1.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/sm.jpg 
GET /images/sm.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://hm.baidu.com/h.js?84d83be2d222c849b5f6945470e02e77 
GET /h.js?84d83be2d222c849b5f6945470e02e77 HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: hm.baidu.com
Connection: Keep-Alive
Cookie: HMACCOUNT=8607B1D7E2A5358E
URL专业沙箱检测 -> http://www.winrar.com.cn/images/tb1.jpg 
GET /images/tb1.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/btn64.jpg 
GET /images/btn64.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.beian.gov.cn/img/ghs.png 
GET /img/ghs.png HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.beian.gov.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/s.jpg 
GET /images/s.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/3d.jpg 
GET /images/3d.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/t.jpg 
GET /images/t.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/tb3.jpg 
GET /images/tb3.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/tb2.jpg 
GET /images/tb2.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/hh.jpg 
GET /images/hh.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/zc.jpg 
GET /images/zc.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/mm.jpg 
GET /images/mm.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/faq.jpg 
GET /images/faq.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/dx.jpg 
GET /images/dx.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/copyright.htm 
GET /copyright.htm HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/new.jpg 
GET /images/new.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/kh1.jpg 
GET /images/kh1.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/kh2.jpg 
GET /images/kh2.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/2.jpg 
GET /images/2.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/gg.png 
GET /images/gg.png HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/home_bj.jpg 
GET /images/home_bj.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/images/jx.jpg 
GET /images/jx.jpg HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.winrar.com.cn
Connection: Keep-Alive
URL专业沙箱检测 -> http://hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=800x600&vl=365&et=0&fl=24.0&ja=1&ln=zh-cn&lo=0&rnd=1154166995&si=84d83be2d222c849b5f6945470e02e77&v=1.2.61&lv=1&sn=13143&ct=!!&tt=WinRAR%20-%20%E5%8E%8B%E7%BC%A9%E8%BD%AF%E4%BB%B6%20%E8%80%81%E7%89%8C%E5%8E%8B%E7%BC%A9%E8%BD%AF%E4%BB%B6%E7%9F%A5%E5%90%8D%E4%BA%A7%E5%93%81%20%E7%BB%8F%E5%85%B8%E8%A3%85%E6%9C%BA%E8%BD%AF%E4%BB%B6%E4%B9%8B%E4%B8%80 
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=800x600&vl=365&et=0&fl=24.0&ja=1&ln=zh-cn&lo=0&rnd=1154166995&si=84d83be2d222c849b5f6945470e02e77&v=1.2.61&lv=1&sn=13143&ct=!!&tt=WinRAR%20-%20%E5%8E%8B%E7%BC%A9%E8%BD%AF%E4%BB%B6%20%E8%80%81%E7%89%8C%E5%8E%8B%E7%BC%A9%E8%BD%AF%E4%BB%B6%E7%9F%A5%E5%90%8D%E4%BA%A7%E5%93%81%20%E7%BB%8F%E5%85%B8%E8%A3%85%E6%9C%BA%E8%BD%AF%E4%BB%B6%E4%B9%8B%E4%B8%80 HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: hm.baidu.com
Connection: Keep-Alive
Cookie: HMACCOUNT=8607B1D7E2A5358E
URL专业沙箱检测 -> http://lxbjs.baidu.com/lxb.js?sid=3647883 
GET /lxb.js?sid=3647883 HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: lxbjs.baidu.com
Connection: Keep-Alive
URL专业沙箱检测 -> http://www.winrar.com.cn/favicon.ico 
GET /favicon.ico HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: www.winrar.com.cn
Connection: Keep-Alive
Cookie: Hm_lvt_84d83be2d222c849b5f6945470e02e77=1568265693; Hm_lpvt_84d83be2d222c849b5f6945470e02e77=1568265693
URL专业沙箱检测 -> http://lxbjs.baidu.com/float/log.gif?fType=3&name=lxb&t=1568265693320&uuid=9b3d450f-7406-4f46-a67f-c3773b325663 
GET /float/log.gif?fType=3&name=lxb&t=1568265693320&uuid=9b3d450f-7406-4f46-a67f-c3773b325663 HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: lxbjs.baidu.com
Connection: Keep-Alive
Cookie: BDCBID=b448fa58-a551-431c-9410-07248f2ea4da
URL专业沙箱检测 -> http://lxbjs.baidu.com/float/_l.js?siteid=3647883&bdclickid=&bdcbid=f17cfbc6-8e46-47c1-92c3-fc797f4ca796&refer_domain=&ishttp=1&t=1568265693320&callback=_lxb_jsonp_k0g8whhk_ 
GET /float/_l.js?siteid=3647883&bdclickid=&bdcbid=f17cfbc6-8e46-47c1-92c3-fc797f4ca796&refer_domain=&ishttp=1&t=1568265693320&callback=_lxb_jsonp_k0g8whhk_ HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: lxbjs.baidu.com
Connection: Keep-Alive
Cookie: BDCBID=b448fa58-a551-431c-9410-07248f2ea4da
URL专业沙箱检测 -> http://lxbjs.baidu.com/float/log.gif?fType=3&name=_l&t=1568265693694&uuid=9b3d450f-7406-4f46-a67f-c3773b325663 
GET /float/log.gif?fType=3&name=_l&t=1568265693694&uuid=9b3d450f-7406-4f46-a67f-c3773b325663 HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: lxbjs.baidu.com
Connection: Keep-Alive
Cookie: BDCBID=b448fa58-a551-431c-9410-07248f2ea4da
URL专业沙箱检测 -> http://lxbjs.baidu.com/float/log.gif?fType=3&name=finishRender&t=1568265693694&uuid=9b3d450f-7406-4f46-a67f-c3773b325663 
GET /float/log.gif?fType=3&name=finishRender&t=1568265693694&uuid=9b3d450f-7406-4f46-a67f-c3773b325663 HTTP/1.1
Accept: */*
Referer: http://www.winrar.com.cn/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: lxbjs.baidu.com
Connection: Keep-Alive
Cookie: BDCBID=b448fa58-a551-431c-9410-07248f2ea4da

SMTP 流量

无SMTP流量.

IRC 流量

无IRC请求.

ICMP 流量

无ICMP流量.

CIF 报告

无 CIF 结果

网络警报

无警报

TLS

Timestamp Source IP Source Port Destination IP Destination Port Version Issuer Subject Fingerprint
2019-09-12 13:21:44.452326+0800 192.168.122.201 49164 58.215.146.121 443 TLS 1.2 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust RSA CA 2018 C=CN, L=上海, O=上海七牛信息技术有限公司, OU=技术部, CN=*.staticfile.org 0b:a6:26:84:2b:0d:9e:63:91:07:c0:4b:25:6f:b1:2e:35:45:c8:8b
2019-09-12 13:21:44.445592+0800 192.168.122.201 49163 58.215.146.121 443 TLS 1.2 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust RSA CA 2018 C=CN, L=上海, O=上海七牛信息技术有限公司, OU=技术部, CN=*.staticfile.org 0b:a6:26:84:2b:0d:9e:63:91:07:c0:4b:25:6f:b1:2e:35:45:c8:8b

Suricata HTTP

No Suricata HTTP

未发现网络提取文件
抱歉! 没有任何文件投放。
HTML 总结报告
(需15-60分钟同步)		 下载

Processing ( 33.525 seconds )

  • 21.837 NetworkAnalysis
  • 10.082 Suricata
  • 1.581 Static
  • 0.016 AnalysisInfo
  • 0.005 BehaviorAnalysis
  • 0.004 Memory

Signatures ( 2.565 seconds )

  • 2.427 md_url_bl
  • 0.053 md_domain_bl
  • 0.014 antiav_detectreg
  • 0.009 anomaly_persistence_autorun
  • 0.007 antiav_detectfile
  • 0.006 geodo_banking_trojan
  • 0.006 infostealer_ftp
  • 0.003 tinba_behavior
  • 0.003 antianalysis_detectreg
  • 0.003 infostealer_bitcoin
  • 0.003 infostealer_im
  • 0.003 ransomware_extensions
  • 0.003 ransomware_files
  • 0.002 rat_nanocore
  • 0.002 cerber_behavior
  • 0.002 antivm_vbox_files
  • 0.002 disables_browser_warn
  • 0.002 infostealer_mail
  • 0.002 network_torgateway
  • 0.001 network_tor
  • 0.001 betabot_behavior
  • 0.001 ursnif_behavior
  • 0.001 kibex_behavior
  • 0.001 shifu_behavior
  • 0.001 antivm_parallels_keys
  • 0.001 banker_zeus_mutex
  • 0.001 bot_drive
  • 0.001 bot_drive2
  • 0.001 browser_addon
  • 0.001 browser_security
  • 0.001 ie_martian_children
  • 0.001 md_bad_drop

Reporting ( 0.584 seconds )

  • 0.584 ReportHTMLSummary
Task ID 372088
Mongo ID 5d79d671bb7d5770d7a14799
Cuckoo release 1.4-Maldun