魔盾安全分析报告

分析类型 开始时间 结束时间 持续时间 分析引擎版本
URL 2020-07-01 13:49:51 2020-07-01 13:52:20 149 秒 1.4-Maldun
虚拟机机器名 标签 虚拟机管理 开机时间 关机时间
win7-sp1-x64-hpdapp01-2 win7-sp1-x64-hpdapp01-2 KVM 2020-07-01 13:49:52 2020-07-01 13:52:21
魔盾分数

0.0

正常的

URL信息

URL http://www.qsdet.com/
VirusTotal VirusTotal无域名信息

特征

无特征匹配

运行截图

网络分析

域名解析

域名 响应
www.qsdet.com A 47.57.169.11

TCP连接

IP地址 端口
47.57.169.11 80
47.57.169.11 80
47.57.169.11 80
47.57.169.11 80
47.57.169.11 80
47.57.169.11 80
47.57.169.11 80
47.57.169.11 80

UDP连接

IP地址 端口
192.168.122.1 53

HTTP请求

URL HTTP数据
http://www.qsdet.com/ 
GET / HTTP/1.1
Accept: */*
Accept-Language: zh-cn
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/wp-content/cache/wpfc-minified/qury0mp2/8eobg.css 
GET /wp-content/cache/wpfc-minified/qury0mp2/8eobg.css HTTP/1.1
Accept: */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/wp-content/cache/wpfc-minified/epythj12/8eobh.js 
GET /wp-content/cache/wpfc-minified/epythj12/8eobh.js HTTP/1.1
Accept: */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/wp-content/themes/twentyseventeen/images/qsdlogo.png 
GET /wp-content/themes/twentyseventeen/images/qsdlogo.png HTTP/1.1
Accept: */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/wp-content/themes/twentyseventeen/images/linkedin.png 
GET /wp-content/themes/twentyseventeen/images/linkedin.png HTTP/1.1
Accept: */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/wp-content/themes/twentyseventeen/images/banner.jpg 
GET /wp-content/themes/twentyseventeen/images/banner.jpg HTTP/1.1
Accept: */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/wp-content/themes/twentyseventeen/images/facebook.png 
GET /wp-content/themes/twentyseventeen/images/facebook.png HTTP/1.1
Accept: */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/wp-content/themes/twentyseventeen/images/searchicon.png 
GET /wp-content/themes/twentyseventeen/images/searchicon.png HTTP/1.1
Accept: */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/wp-content/themes/twentyseventeen/images/productxt.png 
GET /wp-content/themes/twentyseventeen/images/productxt.png HTTP/1.1
Accept: */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/wp-content/uploads/2019/07/e-auto-1.jpg 
GET /wp-content/uploads/2019/07/e-auto-1.jpg HTTP/1.1
Accept: */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/wp-content/themes/twentyseventeen/images/youtube.png 
GET /wp-content/themes/twentyseventeen/images/youtube.png HTTP/1.1
Accept: */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/wp-content/uploads/2019/07/01-100.jpg 
GET /wp-content/uploads/2019/07/01-100.jpg HTTP/1.1
Accept: */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/wp-content/themes/twentyseventeen/images/cticon.png 
GET /wp-content/themes/twentyseventeen/images/cticon.png HTTP/1.1
Accept: */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/wp-content/uploads/2019/07/01-23.jpg 
GET /wp-content/uploads/2019/07/01-23.jpg HTTP/1.1
Accept: */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/wp-content/uploads/2018/03/01-2-1.jpg 
GET /wp-content/uploads/2018/03/01-2-1.jpg HTTP/1.1
Accept: */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/wp-content/themes/twentyseventeen/images/logo2.png 
GET /wp-content/themes/twentyseventeen/images/logo2.png HTTP/1.1
Accept: */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/wp-content/themes/twentyseventeen/images/send-inquiry.png 
GET /wp-content/themes/twentyseventeen/images/send-inquiry.png HTTP/1.1
Accept: */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/ 
GET / HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/wp-content/themes/twentyseventeen/images/banner.jpg 
GET /wp-content/themes/twentyseventeen/images/banner.jpg HTTP/1.1
Accept: */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Range: bytes=144891-
Unless-Modified-Since: Mon, 01 Jul 2019 07:39:04 GMT
If-Range: "5d19b898-3aa8a"
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/wp-content/uploads/2019/07/e-auto-1.jpg 
GET /wp-content/uploads/2019/07/e-auto-1.jpg HTTP/1.1
Accept: */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Range: bytes=105687-
Unless-Modified-Since: Mon, 01 Jul 2019 08:30:08 GMT
If-Range: "5d19c490-1a6bf"
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/wp-content/uploads/2019/07/01-23.jpg 
GET /wp-content/uploads/2019/07/01-23.jpg HTTP/1.1
Accept: */*
Referer: http://www.qsdet.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Range: bytes=5500-
Unless-Modified-Since: Mon, 01 Jul 2019 09:00:39 GMT
If-Range: "5d19cbb7-116d4"
Host: www.qsdet.com
Connection: Keep-Alive
http://www.qsdet.com/favicon.ico 
GET /favicon.ico HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: www.qsdet.com
Connection: Keep-Alive

投放文件

无信息

行为分析

互斥量(Mutexes) 无信息
执行的命令 无信息
创建的服务 无信息
启动的服务 无信息

进程

iexplore.exe PID: 2632, 上一级进程 PID: 2316

访问的文件 无信息
读取的文件 无信息
修改的文件 无信息
删除的文件 无信息
注册表键 无信息
读取的注册表键 无信息
修改的注册表键 无信息
删除的注册表键 无信息
API解析 无信息