魔盾安全分析报告

分析类型 开始时间 结束时间 持续时间 分析引擎版本
URL 2020-11-27 12:12:10 2020-11-27 12:14:13 123 秒 1.4-Maldun
虚拟机机器名 标签 虚拟机管理 开机时间 关机时间
win7-sp1-x64-shaapp03-1 win7-sp1-x64-shaapp03-1 KVM 2020-11-27 12:12:10 2020-11-27 12:14:14
魔盾分数

0.0

正常的

URL信息

URL http://www.windows93.net
VirusTotal VirusTotal查询失败

特征

无特征匹配

运行截图

网络分析

域名解析

域名 响应
www.windows93.net A 79.137.123.162
CNAME windows93.net
acroipm.adobe.com A 23.198.99.183
CNAME acroipm.adobe.com.edgesuite.net
CNAME a1983.dscd.akamai.net
A 23.198.99.160

TCP连接

IP地址 端口
23.198.99.183 80
79.137.123.162 80
79.137.123.162 80
79.137.123.162 80
79.137.123.162 80
79.137.123.162 80
79.137.123.162 80
79.137.123.162 80
79.137.123.162 80
79.137.123.162 80
79.137.123.162 80

UDP连接

IP地址 端口
192.168.122.1 53
192.168.122.1 53

HTTP请求

URL HTTP数据
http://www.windows93.net/ 
GET / HTTP/1.1
Accept: */*
Accept-Language: zh-cn
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/c/sys42.css?v=2.4.0 
GET /c/sys42.css?v=2.4.0 HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/error.js?v=2.4.0 
GET /error.js?v=2.4.0 HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/c/sys/skins/w93.css?v=2.4.0 
GET /c/sys/skins/w93.css?v=2.4.0 HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/sys/upgrade.js?v=2.4.0 
GET /sys/upgrade.js?v=2.4.0 HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/sys/apps/clippy.js?v=2.4.0 
GET /sys/apps/clippy.js?v=2.4.0 HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/sys/apps/code.js?v=2.4.0 
GET /sys/apps/code.js?v=2.4.0 HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/sys/hotfix.css?v=2.4.0 
GET /sys/hotfix.css?v=2.4.0 HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/sys/start.js?v=2.4.0 
GET /sys/start.js?v=2.4.0 HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/sys/apps/crazy.js?v=2.4.0 
GET /sys/apps/crazy.js?v=2.4.0 HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/sys/apps/pony.js?v=2.4.0 
GET /sys/apps/pony.js?v=2.4.0 HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/c/sys42.js?v=2.4.0 
GET /c/sys42.js?v=2.4.0 HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/sys/apps.js?v=2.4.0 
GET /sys/apps.js?v=2.4.0 HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/sys/apps/sp3.js?v=2.4.0 
GET /sys/apps/sp3.js?v=2.4.0 HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/sys/apps/g80.m3u.js?v=2.4.0 
GET /sys/apps/g80.m3u.js?v=2.4.0 HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/sys/apps/layer.js?v=2.4.0 
GET /sys/apps/layer.js?v=2.4.0 HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/sys/desktop.js?v=2.4.0 
GET /sys/desktop.js?v=2.4.0 HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/c/sys/fonts/px_sans_nouveaux/px_sans_nouveaux.eot? 
GET /c/sys/fonts/px_sans_nouveaux/px_sans_nouveaux.eot? HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/c/sys/fonts/px_icons/px_icons.eot? 
GET /c/sys/fonts/px_icons/px_icons.eot? HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/c/sys/fonts/tomo/tomo.woff2)%20format(%22woff2%22 
GET /c/sys/fonts/tomo/tomo.woff2)%20format(%22woff2%22 HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/c/sys/skins/w93/16/start.png 
GET /c/sys/skins/w93/16/start.png HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/c/sys/skins/w93/16/rss.png 
GET /c/sys/skins/w93/16/rss.png HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://www.windows93.net/c/sys/cursors/pointer.cur 
GET /c/sys/cursors/pointer.cur HTTP/1.1
Accept: */*
Referer: http://www.windows93.net/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: www.windows93.net
Connection: Keep-Alive
http://acroipm.adobe.com/11/rdr/CHS/win/nooem/none/message.zip 
GET /11/rdr/CHS/win/nooem/none/message.zip HTTP/1.1
Accept: */*
If-Modified-Since: Mon, 08 Nov 2017 08:44:36 GMT
User-Agent: IPM
Host: acroipm.adobe.com
Connection: Keep-Alive
Cache-Control: no-cache
http://www.windows93.net/favicon.ico?v=2.4.0 
GET /favicon.ico?v=2.4.0 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: www.windows93.net
Connection: Keep-Alive

投放文件

无信息

行为分析

互斥量(Mutexes) 无信息
执行的命令 无信息
创建的服务 无信息
启动的服务 无信息

进程

iexplore.exe PID: 2384, 上一级进程 PID: 2148

访问的文件 无信息
读取的文件 无信息
修改的文件 无信息
删除的文件 无信息
注册表键 无信息
读取的注册表键 无信息
修改的注册表键 无信息
删除的注册表键 无信息
API解析 无信息