分析类型 | 开始时间 | 结束时间 | 持续时间 | 分析引擎版本 |
---|---|---|---|---|
URL | 2018-05-21 16:36:23 | 2018-05-21 16:38:48 | 145 秒 | 1.4-Maldun |
虚拟机机器名 | 标签 | 虚拟机管理 | 开机时间 | 关机时间 |
---|---|---|---|---|
win7-sp1-x64-hpdapp03-1 | win7-sp1-x64-hpdapp03-1 | KVM | 2018-05-21 16:36:24 | 2018-05-21 16:38:45 |
魔盾分数 |
---|
0.05正常的 |
URL | http://www.hnkfjx.com/ |
---|---|
VirusTotal | VirusTotal无域名信息 |
直接访问 | IP地址 | 国家名 |
---|---|---|
否 | 117.23.56.212 | China |
域名 | 响应 |
---|---|
www.hnkfjx.com | A 117.23.56.212 |
IP地址 | 端口 |
---|---|
117.23.56.212 | 80 |
117.23.56.212 | 80 |
117.23.56.212 | 80 |
117.23.56.212 | 80 |
IP地址 | 端口 |
---|---|
192.168.122.1 | 53 |
192.168.122.1 | 53 |
URL | HTTP数据 |
---|---|
http://www.hnkfjx.com/ | GET / HTTP/1.1 Accept: */* Referer: http://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=18&ved=0CCEQfjSk5oSWlUZFpKdURjRVVC&url=http%3A%2F%2Fwww.hnkfjx.com%2F&ei=blB2dllJcG5jTU5h&usg=AFQjSUJkRW1hQ2xObUR2 Accept-Language: zh-cn User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.hnkfjx.com Connection: Keep-Alive |
http://www.hnkfjx.com/?vynufo=fkkft1 | GET /?vynufo=fkkft1 HTTP/1.1 Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */* Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.hnkfjx.com Connection: Keep-Alive |
http://www.hnkfjx.com/?vynufo=fkkft1 | GET /?vynufo=fkkft1 HTTP/1.1 Accept: */* Accept-Language: zh-CN User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: www.hnkfjx.com Connection: Keep-Alive Cookie: PHPSESSID=uik2einh6su1t7hevherfsqdl1; sec_defend=5undefined70undefined1undefinedundefined9undefined9003733undefined72064549undefined5626undefined3040undefined2undefined5undefinedundefined0undefined829558110undefinedundefined0undefined4undefinedundefined2undefined25; sec_defend_time=1 |
http://www.hnkfjx.com/favicon.ico | GET /favicon.ico HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: www.hnkfjx.com Connection: Keep-Alive Cookie: PHPSESSID=uik2einh6su1t7hevherfsqdl1; sec_defend=5undefined70undefined1undefinedundefined9undefined9003733undefined72064549undefined5626undefined3040undefined2undefined5undefinedundefined0undefined829558110undefinedundefined0undefined4undefinedundefined2undefined25; sec_defend_time=1 |
文件名 | index.dat |
---|---|
相关文件 |
|
文件大小 | 32768 bytes |
文件类型 | Internet Explorer cache file version Ver 5.2 |
MD5 | 6bd6d0668e432529de3baec1f338a611 |
SHA1 | c9b758cdac5971429cb960d3373e8adbd2e060dc |
SHA256 | 7dd55e3553450be73fc4b77634bb8369f613b283000ace9ff648ef83f0159851 |
SHA512 | e2a79a0992e7f82411859ba26cf37ed4566c8de4491c4aa14f2d613bd0581b4e590be014da517daa1dfc51033f7ddd9762ce48dec99f5100724d88292b0e94af |
Ssdeep | 6:qjyxXKi/R37ethFOllzGfUWlj48LNuO2ti3+anvFOllzGfUWln:qjRi3eTOMUifX3+udOMUi |
VirusTotal | 搜索相关分析 |
文件名 | index.dat |
---|---|
相关文件 |
|
文件大小 | 65536 bytes |
文件类型 | Internet Explorer cache file version Ver 5.2 |
MD5 | 0ee0d92f5ad9cd4d354a120734ae8e5e |
SHA1 | a3d2338356b933a1240f053b89efe7f1b5e63353 |
SHA256 | bd15c1573c53ac40e26c307c00be243ace57eb5fd0d2879349b24832d2e7a771 |
SHA512 | 126b0b6063509b59a2af9fe58d96ea741b3316af252b309000ab14b014dddde0b7bffbd9042bd2ce2194d3294677ae82c5470b8503470102b1b912f8ca309b9d |
Ssdeep | 384:wEEG/+oo0M7hPfdoW7QRyUEZeluUFyvp64PBhqNLguX3/5YSHYjitk9t7sub/2Iw:wEEG/+Rg |
VirusTotal | 搜索相关分析 |
文件名 | hnkfjx_com[1].htm |
---|---|
相关文件 |
|
文件大小 | 15 bytes |
文件类型 | UTF-8 Unicode text, with no line terminators |
MD5 | 6aa156d6db0bf5f906a4aa62d054fb92 |
SHA1 | 471fe7a44c7d06019fcca088ba20b4d193042059 |
SHA256 | 80f846baccebefe14040368079f96fe8989e196d1d55c6e66b0c7020880fcf29 |
SHA512 | ff7d827b4eb78c462773211bf17f1fef9f97dbdc4bf353f7f093b38c81f7acf8c223c82ece9931b22ec532e1f7c88b19383fc73fbad3fd4dcfe765a7008996a2 |
Ssdeep | 3:VHPFn:X |
Yara |
|
VirusTotal | 搜索相关分析 |
文件名 | RecoveryStore.{0B5DEAC3-5CD2-11E8-91CC-525400E1D82E}.dat |
---|---|
相关文件 |
|
文件大小 | 3584 bytes |
文件类型 | Composite Document File V2 Document, Cannot read section info |
MD5 | 9889afaaecd8739361909982f99a5dde |
SHA1 | 0857937ec7ec354e5b862c848bf35c2c16109718 |
SHA256 | 713a761fcd181ed5955043203e01a5064e8a92452c64fa2b01b75d6cb95dec6f |
SHA512 | cfd1df345bab067ec515ddf4b82c334a16f500e06c44b4dd82ba27808eb9561055129f815b61e01903085efad8485ec028936ac7df998237eb25c81eb6f9359e |
Ssdeep | 12:rl0YmGF2BQrEg5+IaCrI017+F+DrEgmf+IaCy8qgQNlTqofRlmRleRl:rIBQ5/dGv/TQNlWoaa |
VirusTotal | 搜索相关分析 |
文件名 | {0B5DEAC4-5CD2-11E8-91CC-525400E1D82E}.dat |
---|---|
相关文件 |
|
文件大小 | 4608 bytes |
文件类型 | Composite Document File V2 Document, Cannot read section info |
MD5 | b190543fe5cef2a50554e37c161fcb83 |
SHA1 | 80ef711054942bd9b3b745e9a45bc0397d4de5a6 |
SHA256 | 882f603d2d8f75174b3fa3ba8f50f486ff814ae90e532f768d03460da5c41bd8 |
SHA512 | da51e086e24f8deebd067b1c13e1005f7ae5956d700b04d5dd29d068d543d16f12a16e9273429e01c6aae76cf7905721df343a8df9b8d1762b00ccb07946e00a |
Ssdeep | 24:roJ6bAGcbmRNl1ogh0kIwbkVONl1oDh0kIwbkwj4:ri6bLcbIob7wbfom7wbE |
VirusTotal | 搜索相关分析 |
文件名 | index.dat |
---|---|
相关文件 |
|
文件大小 | 32768 bytes |
文件类型 | Internet Explorer cache file version Ver 5.2 |
MD5 | 0aee387ca0a52dcdd8f8a29ea76edb42 |
SHA1 | 5df81547dcadb2a7b8bc689da8e1383ba1a84cb9 |
SHA256 | c31bc37e102b70a472837d530ec80bdaea28b0fefda3e9aa8c8cda98c4200c4e |
SHA512 | 101bdb7178e031b1fbd78d595d778d06174749246cdcb70eb4b92af534910e30e0627147260ec319bccecf7a105c814b6b32c077a777fb5e90bd1459c78dcdf9 |
Ssdeep | 12:qjtSaFpbZli3zIoYDPO7em4GZj03W/cKYDPOCG5A30WUsOXQDG9YRm4GZ5:qj4avEIoYTCebGZ7ZYTlEJ0oQQ4bGZ |
VirusTotal | 搜索相关分析 |